This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft File: 9keQtSf6QLqj8ts_oqFL-UzSgv8.mft (raw, json) Hash identifier: 4H8JGrZso2QdjRvScWm5Ydi/h89P3S+A23XBVoIt4HA= Subject key identifier: F2:66:CC:ED:FC:41:1F:47:44:BC:09:B9:5B:C3:BA:E3:D3:D9:75:DA Authority key identifier: F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF Certificate issuer: /CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff Certificate serial: 019AF2094044E495FC028118198B52616CC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft Manifest number: 048A Signing time: Sat 06 Dec 2025 05:01:23 +0000 Manifest this update: Sat 06 Dec 2025 05:01:23 +0000 Manifest next update: Sun 07 Dec 2025 05:01:23 +0000 Files and hashes: 1: 9keQtSf6QLqj8ts_oqFL-UzSgv8.crl (hash: 9bCQICnwsDb/sQN6AJW1xowDHbpB+NehRoYZJKOzR9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:40:44:e4:95:fc:02:81:18:19:8b:52:61:6c:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff Validity Not Before: Dec 6 05:01:23 2025 GMT Not After : Dec 7 05:01:23 2025 GMT Subject: CN=f266ccedfc411f4744bc09b95bc3bae3d3d975da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8a:c0:9d:b5:69:04:67:7b:5c:47:ca:20:4a: ac:c7:37:b0:83:e4:c8:33:40:8f:0c:9a:96:43:f8: ce:58:f3:15:fc:92:de:8c:db:c4:8f:9d:7f:a6:1f: 49:9c:22:ce:d9:3e:66:f2:51:32:05:91:f3:71:52: 46:76:98:6d:a7:f1:df:97:78:55:71:5c:f3:9e:75: 8d:72:21:ab:60:64:86:8e:46:03:df:1c:e6:55:c4: d9:fe:c8:da:d6:a5:04:40:7a:57:26:09:1c:ad:29: 0b:b2:89:40:76:1d:a5:51:d9:50:1f:af:ae:ed:88: 1c:d1:ce:c9:d6:3c:96:46:40:0d:f5:60:a0:dc:4e: 57:48:da:11:a3:d3:7b:44:4b:92:1b:cf:60:67:e3: 59:1d:68:13:a5:61:dc:aa:78:41:fe:18:09:d6:6c: a9:c5:d1:e3:8b:3c:12:e2:af:88:8a:9c:90:9b:e0: 90:1a:0a:c0:55:db:0c:8a:18:bd:0d:7a:f4:c9:4f: 3a:e0:b7:e6:01:2e:68:e0:d1:06:15:f2:a9:53:1d: c4:aa:f4:7a:92:f6:ee:d8:eb:f8:1c:65:7d:62:95: d5:8e:28:98:2f:a2:4d:ab:b0:8b:da:e5:96:9f:72: af:3f:94:9f:9f:ee:66:d1:8d:99:b7:8f:7c:c8:37: 4d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:66:CC:ED:FC:41:1F:47:44:BC:09:B9:5B:C3:BA:E3:D3:D9:75:DA X509v3 Authority Key Identifier: keyid:F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:87:ac:67:1c:31:77:5a:a8:2b:f4:7c:54:a2:de:a0:4f:d0: 58:d2:9f:98:17:81:3a:73:bb:1f:84:a1:a3:c4:a8:03:74:71: f0:c5:23:28:8d:93:65:ba:06:fa:61:bc:2f:68:d8:14:db:84: b7:c7:d4:a0:5a:2b:a4:67:09:6d:ac:c9:01:b7:1a:55:1a:06: 03:c7:41:33:fd:a3:f1:7f:98:5d:90:94:b3:29:5a:d6:d4:fe: a0:93:dd:6e:8b:27:76:f7:42:da:48:5d:7d:0a:7b:b5:8b:32: 08:12:b6:5f:ff:b1:4e:11:ff:d3:84:9c:10:47:a8:a5:66:0b: 97:ac:59:9d:4b:28:99:d9:83:6c:a1:c6:a2:4c:ee:36:08:a5: 8d:f0:e9:76:21:5a:19:f3:17:45:31:c8:de:f1:9c:f1:13:01: e3:9c:2f:25:8e:dd:dd:9a:3f:b8:38:81:84:db:83:13:51:b2: a3:0c:85:55:89:cb:d8:21:82:eb:6e:8e:f9:55:4f:b4:28:62: 6b:7c:34:5b:8e:7c:21:b3:31:9c:53:0b:2c:d8:0d:f5:3a:cf: 0f:c0:53:d8:6c:d9:1d:75:66:51:79:8e:6e:c3:8b:6d:13:6f: 2d:de:b1:ee:a8:5a:6e:98:4f:34:f8:c0:73:c7:de:dc:e3:4c: 7f:1b:f4:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUBE5JX8AoEYGYtSYWzDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NDc5MGI1MjdmYTQwYmFhM2YyZGIzZmEyYTE0YmY5NGNk MjgyZmYwHhcNMjUxMjA2MDUwMTIzWhcNMjUxMjA3MDUwMTIzWjAzMTEwLwYDVQQD EyhmMjY2Y2NlZGZjNDExZjQ3NDRiYzA5Yjk1YmMzYmFlM2QzZDk3NWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYrAnbVpBGd7XEfKIEqsxzewg+TI M0CPDJqWQ/jOWPMV/JLejNvEj51/ph9JnCLO2T5m8lEyBZHzcVJGdphtp/Hfl3hV cVzznnWNciGrYGSGjkYD3xzmVcTZ/sja1qUEQHpXJgkcrSkLsolAdh2lUdlQH6+u 7Ygc0c7J1jyWRkAN9WCg3E5XSNoRo9N7REuSG89gZ+NZHWgTpWHcqnhB/hgJ1myp xdHjizwS4q+IipyQm+CQGgrAVdsMihi9DXr0yU864LfmAS5o4NEGFfKpUx3EqvR6 kvbu2Ov4HGV9YpXVjiiYL6JNq7CL2uWWn3KvP5Sfn+5m0Y2Zt498yDdNGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJmzO38QR9HRLwJuVvDuuPT2XXaMB8GA1UdIwQY MBaAFPZHkLUn+kC6o/LbP6KhS/lM0oL/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWtlUXRTZjZRTHFqOHRzX29xRkwtVXpTZ3Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85OWRiNTEtNjhiZC00YjViLWEyZTIt MjhkNzMzN2MwNjk0LzEvOWtlUXRTZjZRTHFqOHRzX29xRkwtVXpTZ3Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy85OWRiNTEtNjhiZC00YjViLWEyZTItMjhkNzMzN2MwNjk0 LzEvOWtlUXRTZjZRTHFqOHRzX29xRkwtVXpTZ3Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADoesZxwx d1qoK/R8VKLeoE/QWNKfmBeBOnO7H4Sho8SoA3Rx8MUjKI2TZboG+mG8L2jYFNuE t8fUoForpGcJbazJAbcaVRoGA8dBM/2j8X+YXZCUsyla1tT+oJPdbosndvdC2khd fQp7tYsyCBK2X/+xThH/04ScEEeopWYLl6xZnUsomdmDbKHGokzuNgiljfDpdiFa GfMXRTHI3vGc8RMB45wvJY7d3Zo/uDiBhNuDE1GyowyFVYnL2CGC626O+VVPtChi a3w0W458IbMxnFMLLNgN9TrPD8BT2GzZHXVmUXmObsOLbRNvLd6x7qhabphPNPjA c8fe3ONMfxv0+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:00 2025 by rpki-client