This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft File: 9X2cj_wgS2294BIFMDvfi1BjiqY.mft (raw, json) Hash identifier: irgD3cmko2VeoQ4rLJabRc/m9YBe+8EOmyMu863JM6s= Subject key identifier: E9:5B:6A:8B:57:D8:9F:68:97:8F:5B:1F:6A:5A:DC:13:AD:BA:78:A5 Authority key identifier: F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6 Certificate issuer: /CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6 Certificate serial: 019AF0BFA48F17420DAD5DC010AD9AA7D577 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft Manifest number: 0266 Signing time: Fri 05 Dec 2025 23:01:22 +0000 Manifest this update: Fri 05 Dec 2025 23:01:22 +0000 Manifest next update: Sat 06 Dec 2025 23:01:22 +0000 Files and hashes: 1: 9X2cj_wgS2294BIFMDvfi1BjiqY.crl (hash: wb/bITWCEuj+rK5SYe0DzNLyDtY0LScqL0q7uXQl/XQ=) 2: blFPI1QT3vGyXWS1-axkqAT7T1o.roa (hash: 9ZF4v61ldXuDLq/JdKEO0mrKJOTY13vVthxskJAXAEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:a4:8f:17:42:0d:ad:5d:c0:10:ad:9a:a7:d5:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6 Validity Not Before: Dec 5 23:01:22 2025 GMT Not After : Dec 6 23:01:22 2025 GMT Subject: CN=e95b6a8b57d89f68978f5b1f6a5adc13adba78a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:79:57:14:b4:bc:e1:8d:2a:ac:98:c4:88:78: 6a:a1:4b:9a:8c:65:84:f4:17:7a:66:7a:62:0e:d4: 43:98:c1:f5:c9:64:b4:58:53:65:bd:07:06:2a:18: be:66:11:8a:18:27:f1:f6:dd:74:c1:26:4a:22:dd: 6a:01:9d:58:11:72:c9:5e:9d:56:6e:84:8f:5f:30: 70:0e:db:e8:1f:29:56:88:32:ba:ca:f6:51:e7:93: 72:4d:91:1f:53:6c:7c:ea:f6:1d:30:3c:5f:9b:12: e7:d2:17:a4:aa:8d:2d:56:b1:cd:80:26:5e:87:4e: 3d:1b:2b:f0:0b:60:c5:94:81:f6:fe:28:26:e3:4d: 26:22:59:6c:fc:f2:61:19:4e:dd:d1:f5:1f:2a:2b: 90:17:ff:07:e9:a1:54:e1:4e:c0:80:65:73:45:bc: 88:78:0d:24:84:27:41:1e:bf:91:be:47:fb:c5:77: 5f:87:89:ee:c0:ba:d7:e8:3e:ea:4b:f2:bc:ff:0a: d8:19:c1:a9:0f:2b:ff:99:a8:cc:82:3c:f1:bd:5c: 75:6d:7c:11:8b:01:50:02:e7:19:ad:1a:0d:8e:fd: 13:98:5e:07:aa:bd:18:9a:f1:80:ef:aa:75:2f:e0: 41:02:65:9e:7f:b7:a2:da:a1:57:b7:62:c0:60:0a: 5b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5B:6A:8B:57:D8:9F:68:97:8F:5B:1F:6A:5A:DC:13:AD:BA:78:A5 X509v3 Authority Key Identifier: keyid:F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:8c:7a:68:e5:0e:62:15:31:20:25:de:32:8d:02:c2:8c:43: b9:51:6f:96:9b:d3:ac:f2:0e:38:31:fe:44:b3:42:10:21:b8: 48:57:67:7b:2b:9a:ca:e8:da:be:1d:95:19:b1:67:8e:72:8f: 68:cd:37:b0:33:4d:de:d4:e1:22:83:0b:64:30:f4:39:cb:98: a0:6a:7f:e1:f6:6d:3e:4c:f4:bf:b1:97:d3:af:0e:b6:e4:d1: 1a:8b:3c:0c:a9:e0:6d:2b:b1:6b:45:86:ee:c1:48:41:0a:9c: 60:23:9b:b3:97:99:db:46:32:a8:cc:4e:a2:9c:56:e8:69:9c: 10:a3:e1:9b:bf:23:a3:7c:2f:d1:d9:ae:8a:d0:af:6f:57:8a: ca:7b:f2:07:12:95:09:d6:29:d2:01:d3:29:5e:c2:b9:ae:40: e1:34:94:5f:6d:48:36:71:5a:a1:2a:f2:58:00:ef:13:5e:11: 59:09:b3:da:a6:a1:04:2a:7b:f9:bf:f8:fe:53:52:31:54:0e: 86:2f:1a:ac:99:86:fa:e3:a4:09:6d:ea:00:28:9e:ab:2c:98: 4d:a5:ae:96:9f:15:89:ee:a0:95:89:94:02:97:eb:c3:e6:56: ee:8a:e5:79:95:09:5b:35:d1:96:8d:57:e4:3c:a4:54:5d:7d: b7:6d:d1:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv6SPF0INrV3AEK2ap9V3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1N2Q5YzhmZmMyMDRiNmRiZGUwMTIwNTMwM2JkZjhiNTA2 MzhhYTYwHhcNMjUxMjA1MjMwMTIyWhcNMjUxMjA2MjMwMTIyWjAzMTEwLwYDVQQD EyhlOTViNmE4YjU3ZDg5ZjY4OTc4ZjViMWY2YTVhZGMxM2FkYmE3OGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3lXFLS84Y0qrJjEiHhqoUuajGWE 9Bd6ZnpiDtRDmMH1yWS0WFNlvQcGKhi+ZhGKGCfx9t10wSZKIt1qAZ1YEXLJXp1W boSPXzBwDtvoHylWiDK6yvZR55NyTZEfU2x86vYdMDxfmxLn0hekqo0tVrHNgCZe h049GyvwC2DFlIH2/igm400mIlls/PJhGU7d0fUfKiuQF/8H6aFU4U7AgGVzRbyI eA0khCdBHr+Rvkf7xXdfh4nuwLrX6D7qS/K8/wrYGcGpDyv/majMgjzxvVx1bXwR iwFQAucZrRoNjv0TmF4Hqr0YmvGA76p1L+BBAmWef7ei2qFXt2LAYApb2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOlbaotX2J9ol49bH2pa3BOtunilMB8GA1UdIwQY MBaAFPV9nI/8IEttveASBTA734tQY4qmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVgyY2pfd2dTMjI5NEJJRk1EdmZpMUJqaXFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lNTBiODMtYjI5Mi00MTE3LTg5OTEt YjY3ZDMyMDk5MGM2LzEvOVgyY2pfd2dTMjI5NEJJRk1EdmZpMUJqaXFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9lNTBiODMtYjI5Mi00MTE3LTg5OTEtYjY3ZDMyMDk5MGM2 LzEvOVgyY2pfd2dTMjI5NEJJRk1EdmZpMUJqaXFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1ox6aOUO YhUxICXeMo0CwoxDuVFvlpvTrPIOODH+RLNCECG4SFdneyuayujavh2VGbFnjnKP aM03sDNN3tThIoMLZDD0OcuYoGp/4fZtPkz0v7GX068OtuTRGos8DKngbSuxa0WG 7sFIQQqcYCObs5eZ20YyqMxOopxW6GmcEKPhm78jo3wv0dmuitCvb1eKynvyBxKV CdYp0gHTKV7Cua5A4TSUX21INnFaoSryWADvE14RWQmz2qahBCp7+b/4/lNSMVQO hi8arJmG+uOkCW3qACieqyyYTaWulp8Vie6glYmUApfrw+ZW7orleZUJWzXRlo1X 5DykVF19t23RkA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:54:02 2025 by rpki-client