This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft File: 9ZrbAgii0qcY0wZLRhP9xDINKPk.mft (raw, json) Hash identifier: 5FuZctzgWLwXaTcRXo9j0R61Q+p8RlNjCVs12hxCYU4= Subject key identifier: D9:D5:5A:51:08:E9:49:15:75:07:9B:4C:B6:25:10:82:81:F2:CB:C2 Authority key identifier: F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9 Certificate issuer: /CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9 Certificate serial: 019AF3F7361F81456264AE92AA083FA9BC5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft Manifest number: 0E70 Signing time: Sat 06 Dec 2025 14:00:55 +0000 Manifest this update: Sat 06 Dec 2025 14:00:55 +0000 Manifest next update: Sun 07 Dec 2025 14:00:55 +0000 Files and hashes: 1: 9ZrbAgii0qcY0wZLRhP9xDINKPk.crl (hash: jqH2vg0wNce736rqrSvSS3qdlC80EwSgcLW1ic3N/Qc=) 2: B8bTTGpK1L-pMyO-WGFk_7H-LC8.roa (hash: r0JNxuBgg4on067YK5COQPlyCkk+tp458uDvr2IE4z8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:36:1f:81:45:62:64:ae:92:aa:08:3f:a9:bc:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f59adb0208a2d2a718d3064b4613fdc4320d28f9 Validity Not Before: Dec 6 14:00:55 2025 GMT Not After : Dec 7 14:00:55 2025 GMT Subject: CN=d9d55a5108e9491575079b4cb625108281f2cbc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4a:f0:b6:c0:b9:38:cb:49:5f:74:0d:ef:bd: 12:8e:58:b5:3e:32:58:66:fe:7d:a4:11:be:7f:bf: 5d:33:29:af:42:8d:ba:8d:50:44:00:3c:e2:94:cb: 09:06:e9:e9:32:20:49:0b:85:1e:aa:1c:94:83:58: db:fe:eb:56:d8:13:be:b1:4a:9a:82:01:78:c5:8d: 6f:1b:87:6e:12:a1:16:e6:21:6b:9f:3f:6d:a3:f3: f0:de:40:a6:60:5d:34:a8:58:26:21:b7:12:08:7e: 57:fa:eb:32:70:5e:e4:2a:44:a0:29:cb:4e:7a:de: 52:f3:35:67:9b:77:2c:9b:53:c2:c1:e1:a6:17:73: b6:dc:8f:2f:ac:ba:a0:f4:46:49:93:dc:3e:de:f7: 85:58:f3:56:36:82:6c:ca:1c:d6:96:96:36:12:61: 20:0d:2d:11:d6:b8:d1:af:de:b5:f3:0c:fd:78:1d: f2:11:bd:e7:2e:5d:b8:c6:ba:5c:ed:53:01:79:5e: e4:9a:92:43:54:ca:42:70:43:69:70:06:4f:29:27: ed:88:45:c6:58:3c:6b:35:b3:93:b9:7a:ab:02:82: e5:54:ae:d3:86:4b:05:f0:a5:95:ff:e3:60:1d:53: d9:c7:7d:14:5b:4c:b4:87:94:b9:7c:c2:cb:3e:7d: 03:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D5:5A:51:08:E9:49:15:75:07:9B:4C:B6:25:10:82:81:F2:CB:C2 X509v3 Authority Key Identifier: keyid:F5:9A:DB:02:08:A2:D2:A7:18:D3:06:4B:46:13:FD:C4:32:0D:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ZrbAgii0qcY0wZLRhP9xDINKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c0fef9-afff-49de-808a-e4478c55308a/1/9ZrbAgii0qcY0wZLRhP9xDINKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:62:bd:b3:20:29:ac:bf:96:c0:a7:cf:48:48:76:b9:72:fc: 12:f7:03:b9:91:4c:bf:4a:20:44:69:1e:38:95:0d:9f:0c:c5: ba:6f:88:9f:71:da:0b:57:0a:31:b9:6b:77:9a:02:d6:7b:07: 85:a1:a0:b1:e0:6e:b2:28:75:20:dc:42:89:b4:0e:33:4d:8a: 8c:20:e9:a8:48:2c:22:45:81:cc:2f:da:85:66:10:e4:9b:5d: 03:e9:75:47:e4:c3:4e:70:03:48:47:ff:e6:8a:fa:fc:50:96: 7a:c7:a9:7a:1c:7d:dc:9c:c5:33:e2:2c:df:ce:03:68:cd:51: 55:b6:6f:6f:3e:76:a9:13:b6:d7:31:b9:c4:ba:81:9f:20:9d: b5:fd:d3:fb:8a:c0:f5:40:91:69:1a:5d:b1:c1:2c:f7:de:d4: a3:4f:2c:0c:27:3f:30:87:a4:e5:a9:7c:39:e9:6a:0f:bc:cb: 73:94:17:62:06:d6:f1:7d:69:ef:29:31:54:17:5b:84:cd:05: 28:00:98:14:4a:54:d7:ce:18:be:a9:1e:04:07:54:f6:fb:44: 37:ea:a6:bd:b2:4b:7c:ec:af:f6:5d:23:19:53:c9:58:49:43: e5:de:2e:e3:d0:34:b4:56:bd:fc:b8:6f:b4:d7:ef:6d:88:fc: 2d:29:42:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9zYfgUViZK6Sqgg/qbxaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1OWFkYjAyMDhhMmQyYTcxOGQzMDY0YjQ2MTNmZGM0MzIw ZDI4ZjkwHhcNMjUxMjA2MTQwMDU1WhcNMjUxMjA3MTQwMDU1WjAzMTEwLwYDVQQD EyhkOWQ1NWE1MTA4ZTk0OTE1NzUwNzliNGNiNjI1MTA4MjgxZjJjYmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUrwtsC5OMtJX3QN770Sjli1PjJY Zv59pBG+f79dMymvQo26jVBEADzilMsJBunpMiBJC4UeqhyUg1jb/utW2BO+sUqa ggF4xY1vG4duEqEW5iFrnz9to/Pw3kCmYF00qFgmIbcSCH5X+usycF7kKkSgKctO et5S8zVnm3csm1PCweGmF3O23I8vrLqg9EZJk9w+3veFWPNWNoJsyhzWlpY2EmEg DS0R1rjRr9618wz9eB3yEb3nLl24xrpc7VMBeV7kmpJDVMpCcENpcAZPKSftiEXG WDxrNbOTuXqrAoLlVK7ThksF8KWV/+NgHVPZx30UW0y0h5S5fMLLPn0DVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNnVWlEI6UkVdQebTLYlEIKB8svCMB8GA1UdIwQY MBaAFPWa2wIIotKnGNMGS0YT/cQyDSj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVpyYkFnaWkwcWNZMHdaTFJoUDl4RElOS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jMGZlZjktYWZmZi00OWRlLTgwOGEt ZTQ0NzhjNTUzMDhhLzEvOVpyYkFnaWkwcWNZMHdaTFJoUDl4RElOS1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9jMGZlZjktYWZmZi00OWRlLTgwOGEtZTQ0NzhjNTUzMDhh LzEvOVpyYkFnaWkwcWNZMHdaTFJoUDl4RElOS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq2K9syAp rL+WwKfPSEh2uXL8EvcDuZFMv0ogRGkeOJUNnwzFum+In3HaC1cKMblrd5oC1nsH haGgseBusih1INxCibQOM02KjCDpqEgsIkWBzC/ahWYQ5JtdA+l1R+TDTnADSEf/ 5or6/FCWesepehx93JzFM+Is384DaM1RVbZvbz52qRO21zG5xLqBnyCdtf3T+4rA 9UCRaRpdscEs997Uo08sDCc/MIek5al8OelqD7zLc5QXYgbW8X1p7ykxVBdbhM0F KACYFEpU184YvqkeBAdU9vtEN+qmvbJLfOyv9l0jGVPJWElD5d4u49A0tFa9/Lhv tNfvbYj8LSlC3w== -----END CERTIFICATE-----Generated at Sat Dec 6 20:41:59 2025 by rpki-client