This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft File: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft (raw, json) Hash identifier: duqB1IOs67Q2bopD72KSwxQViE55TcuHVpxMW35wT1o= Subject key identifier: 5F:3E:08:D6:FE:A1:E6:83:5E:A2:F7:5B:30:A2:9F:CB:50:6A:48:B2 Authority key identifier: F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24 Certificate issuer: /CN=f57331288d908dd762e4b56f003b448f01881d24 Certificate serial: 019AF50A4FF117021D03525A4C708BCAC760 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft Manifest number: 0B9B Signing time: Sat 06 Dec 2025 19:01:24 +0000 Manifest this update: Sat 06 Dec 2025 19:01:24 +0000 Manifest next update: Sun 07 Dec 2025 19:01:24 +0000 Files and hashes: 1: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl (hash: qz89pOsfUAO1uuvEt5XbBVUYA8c+S1nRe7Mszde6Qfw=) 2: g7lGHV-1_6YLUG-EIHcKuVMeEvA.roa (hash: vuw6Cb62Uo/aOsqmXFznBzd1y3zPSLM1hJbb48SnJE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:4f:f1:17:02:1d:03:52:5a:4c:70:8b:ca:c7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f57331288d908dd762e4b56f003b448f01881d24 Validity Not Before: Dec 6 19:01:24 2025 GMT Not After : Dec 7 19:01:24 2025 GMT Subject: CN=5f3e08d6fea1e6835ea2f75b30a29fcb506a48b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:56:ef:1b:25:07:47:d1:9c:6e:a2:cf:8c:20: 84:10:f1:48:80:91:9f:d7:d2:a2:c6:b0:2a:0e:0b: db:d5:af:6f:72:65:ba:ec:53:31:5f:e6:c1:da:0d: 8c:9a:ae:a5:74:72:9e:ff:26:11:6d:98:c6:ab:f5: 63:f0:78:84:92:bb:6d:ca:1c:e8:c3:25:a1:06:31: 4e:82:61:8f:e6:3c:48:98:7b:cb:6c:e7:20:d9:ce: cf:d2:b4:73:1b:33:73:51:0a:74:ac:f1:05:36:52: 3a:7c:f0:15:20:0c:8c:39:c7:38:30:d1:1f:7e:0e: 24:3a:46:b0:19:29:b8:2f:fc:16:c0:d4:47:49:a2: ca:af:95:69:c9:75:94:2d:70:67:6d:4f:55:9c:97: 67:f5:82:47:35:ad:75:73:b7:83:aa:ed:ef:35:5c: 69:3d:7f:a9:15:fb:d4:7a:3f:0f:7c:ac:52:7e:ad: 27:95:bb:f8:cc:04:53:21:74:bb:f9:59:66:e3:d6: f8:af:6c:a5:37:08:2a:d1:8e:1c:c6:04:71:86:19: 84:da:c7:77:74:c4:30:44:11:d8:21:9c:12:81:41: 8e:d5:a1:1c:9c:42:d9:63:b3:03:fd:0a:22:06:f7: 96:a0:83:37:2a:f9:cd:90:89:f6:12:f7:3d:07:71: f6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:3E:08:D6:FE:A1:E6:83:5E:A2:F7:5B:30:A2:9F:CB:50:6A:48:B2 X509v3 Authority Key Identifier: keyid:F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:03:53:96:cb:d7:64:23:af:a0:60:b2:5f:21:aa:bf:bf:74: f6:ad:9a:b0:38:6e:6c:0e:ae:d2:3a:c4:b2:05:8e:01:24:82: 73:47:f3:46:1c:06:90:0a:da:48:07:5f:36:65:89:20:38:b1: 3b:ef:29:f7:d7:fa:88:87:ef:44:27:a2:ff:52:71:e5:9d:c0: d7:f6:d4:5d:b0:51:5e:4f:33:35:b1:ec:5a:fd:ea:5e:e6:c5: de:c9:31:ab:9f:d8:8d:0e:5e:f1:f5:2a:eb:ed:dc:98:d7:77: 96:33:80:1b:79:c2:3c:59:a6:71:45:75:6e:45:c6:c5:0d:1f: f7:e6:62:f9:01:dc:ce:ae:ec:dd:8e:e4:4d:3f:ac:5c:11:a7: 47:5c:f1:71:fc:9f:94:1b:3f:73:10:09:7a:82:b9:1a:0f:cb: f7:29:cc:41:e3:29:07:5f:81:3a:0d:ee:4e:85:29:9d:4b:02: b7:f7:e4:0d:aa:7f:12:5f:0c:d7:78:ef:7e:07:9a:79:4d:b6: 51:75:94:2b:d2:07:da:c2:40:01:ca:cb:36:d5:df:cd:e1:f4: a6:69:47:c8:fa:48:e8:d8:2d:71:08:2b:7d:e0:01:1a:96:87: a7:56:4a:53:f3:37:30:5a:35:4f:58:4e:58:a6:92:5d:e5:a9: 38:d4:a8:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Ck/xFwIdA1JaTHCLysdgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NzMzMTI4OGQ5MDhkZDc2MmU0YjU2ZjAwM2I0NDhmMDE4 ODFkMjQwHhcNMjUxMjA2MTkwMTI0WhcNMjUxMjA3MTkwMTI0WjAzMTEwLwYDVQQD Eyg1ZjNlMDhkNmZlYTFlNjgzNWVhMmY3NWIzMGEyOWZjYjUwNmE0OGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1bvGyUHR9GcbqLPjCCEEPFIgJGf 19KixrAqDgvb1a9vcmW67FMxX+bB2g2Mmq6ldHKe/yYRbZjGq/Vj8HiEkrttyhzo wyWhBjFOgmGP5jxImHvLbOcg2c7P0rRzGzNzUQp0rPEFNlI6fPAVIAyMOcc4MNEf fg4kOkawGSm4L/wWwNRHSaLKr5VpyXWULXBnbU9VnJdn9YJHNa11c7eDqu3vNVxp PX+pFfvUej8PfKxSfq0nlbv4zARTIXS7+Vlm49b4r2ylNwgq0Y4cxgRxhhmE2sd3 dMQwRBHYIZwSgUGO1aEcnELZY7MD/QoiBveWoIM3KvnNkIn2Evc9B3H2iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8+CNb+oeaDXqL3WzCin8tQakiyMB8GA1UdIwQY MBaAFPVzMSiNkI3XYuS1bwA7RI8BiB0kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81YWJiM2EtYjFiNi00ZDcwLWIwOTgt OGFlYTFmNjhiNzliLzEvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy81YWJiM2EtYjFiNi00ZDcwLWIwOTgtOGFlYTFmNjhiNzli LzEvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYANTlsvX ZCOvoGCyXyGqv7909q2asDhubA6u0jrEsgWOASSCc0fzRhwGkAraSAdfNmWJIDix O+8p99f6iIfvRCei/1Jx5Z3A1/bUXbBRXk8zNbHsWv3qXubF3skxq5/YjQ5e8fUq 6+3cmNd3ljOAG3nCPFmmcUV1bkXGxQ0f9+Zi+QHczq7s3Y7kTT+sXBGnR1zxcfyf lBs/cxAJeoK5Gg/L9ynMQeMpB1+BOg3uToUpnUsCt/fkDap/El8M13jvfgeaeU22 UXWUK9IH2sJAAcrLNtXfzeH0pmlHyPpI6NgtcQgrfeABGpaHp1ZKU/M3MFo1T1hO WKaSXeWpONSo8g== -----END CERTIFICATE-----Generated at Sat Dec 6 22:35:24 2025 by rpki-client