This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft File: 9q7W1c5BV5fBKF9-9v0EPGRm594.mft (raw, json) Hash identifier: nKpb/rtnJ+veX9lg2exR+qa/3lTM3ESH8Ykm6jMM5d4= Subject key identifier: 05:3B:7E:DE:B9:36:DD:FD:A2:2F:22:DF:2A:A6:90:C5:F5:4A:22:DC Authority key identifier: F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE Certificate issuer: /CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de Certificate serial: 019AF12EF16234419BD1D9F84D319A430B91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft Manifest number: 0C55 Signing time: Sat 06 Dec 2025 01:02:56 +0000 Manifest this update: Sat 06 Dec 2025 01:02:56 +0000 Manifest next update: Sun 07 Dec 2025 01:02:56 +0000 Files and hashes: 1: 9q7W1c5BV5fBKF9-9v0EPGRm594.crl (hash: SwS4SYrGzzDNOmIjaphHz7JGfGCJ2L0GC1yzKwg088o=) 2: ziQt4Au1b87EcX3IQE4F3MWkDm8.roa (hash: KUoOZI3FZormf07wPCHQ5jctubRO3hNmnfHFtLKB4fQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:f1:62:34:41:9b:d1:d9:f8:4d:31:9a:43:0b:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de Validity Not Before: Dec 6 01:02:56 2025 GMT Not After : Dec 7 01:02:56 2025 GMT Subject: CN=053b7edeb936ddfda22f22df2aa690c5f54a22dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:28:ac:a6:6c:8c:71:46:87:e2:59:1a:1c:46: a7:a6:e2:05:a6:1c:9d:68:11:b7:4d:3f:48:bf:ca: e5:81:0e:9c:3a:65:0c:59:83:18:c9:a8:55:b6:28: 01:7b:9e:21:1b:d3:a0:ff:8a:35:67:41:12:04:d7: 49:0b:f8:33:e9:99:40:c3:b3:9e:f6:1e:bd:b7:68: 0f:17:de:ba:41:fb:40:55:87:8a:3f:4a:96:24:7f: 35:80:40:b7:f2:73:08:9b:b8:ba:42:d4:da:5f:4b: 5a:c9:52:84:08:3f:31:ab:dd:22:59:c6:27:9c:db: 86:31:79:db:fd:d1:48:08:8f:fd:06:31:9d:5c:0d: 5a:fa:9f:af:56:73:87:57:80:49:74:93:36:d3:4b: 5d:bb:66:91:10:4b:6e:fa:7b:18:8e:b5:7b:85:9b: 92:d4:06:25:61:c0:8e:b0:e1:48:a3:64:60:f6:87: 64:97:6f:33:cc:c5:40:90:1b:e4:1a:17:fb:56:eb: 41:8b:37:db:c5:bd:b2:1d:1e:c7:e8:65:47:ef:7e: 70:ef:4d:6f:e0:91:cd:b8:e9:75:c3:0e:5b:a3:9c: 5e:19:6c:e5:e5:af:e1:21:49:31:67:6d:a5:92:e4: 09:bf:d4:18:5e:b3:58:80:04:dc:3d:fe:20:68:59: 25:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3B:7E:DE:B9:36:DD:FD:A2:2F:22:DF:2A:A6:90:C5:F5:4A:22:DC X509v3 Authority Key Identifier: keyid:F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:9c:4c:a3:7f:65:47:4e:9d:10:30:78:cb:24:3c:ba:3b:5f: 8f:46:d1:1e:fd:99:5c:2d:14:a0:77:1a:37:d8:c1:47:c5:8e: d6:20:ec:e9:93:4f:f4:c9:d7:d6:d2:00:9c:38:87:2d:ef:e7: 2c:b6:d5:44:8e:37:39:66:ff:dc:1c:ca:b5:35:89:e1:4e:65: a8:ca:bf:4a:ed:0a:cd:e5:8d:bb:17:34:eb:56:53:e3:d6:26: cc:51:6a:80:40:80:61:f6:bd:b4:a9:15:02:d3:c2:15:ca:34: 61:4a:43:36:bb:eb:06:3a:79:68:09:8a:da:0c:f7:37:ab:51: 01:16:44:b5:1e:0b:f1:ce:84:7d:b1:6c:ff:1d:1c:07:3c:cc: d4:5c:84:58:cf:96:e8:d5:8b:b5:3f:11:eb:25:fa:86:f4:18: 2d:b2:6b:c4:47:5d:6d:19:10:2d:34:41:c2:11:5b:74:ea:7f: 09:c1:67:e5:84:7a:bc:98:34:a2:75:ac:6c:a0:75:68:5c:9b: f6:ea:d2:39:4e:d0:d4:25:e9:f7:75:f3:8e:6f:69:09:0f:e7: 27:4d:26:5a:77:ff:72:05:7d:4f:7e:74:44:36:73:bf:d9:3d: ba:77:6b:30:8c:d6:88:41:6b:f1:25:55:7c:be:a5:8a:2a:97: 51:58:ef:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLvFiNEGb0dn4TTGaQwuRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YWVkNmQ1Y2U0MTU3OTdjMTI4NWY3ZWY2ZmQwNDNjNjQ2 NmU3ZGUwHhcNMjUxMjA2MDEwMjU2WhcNMjUxMjA3MDEwMjU2WjAzMTEwLwYDVQQD EygwNTNiN2VkZWI5MzZkZGZkYTIyZjIyZGYyYWE2OTBjNWY1NGEyMmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSispmyMcUaH4lkaHEanpuIFphyd aBG3TT9Iv8rlgQ6cOmUMWYMYyahVtigBe54hG9Og/4o1Z0ESBNdJC/gz6ZlAw7Oe 9h69t2gPF966QftAVYeKP0qWJH81gEC38nMIm7i6QtTaX0tayVKECD8xq90iWcYn nNuGMXnb/dFICI/9BjGdXA1a+p+vVnOHV4BJdJM200tdu2aREEtu+nsYjrV7hZuS 1AYlYcCOsOFIo2Rg9odkl28zzMVAkBvkGhf7VutBizfbxb2yHR7H6GVH735w701v 4JHNuOl1ww5bo5xeGWzl5a/hIUkxZ22lkuQJv9QYXrNYgATcPf4gaFkloQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAU7ft65Nt39oi8i3yqmkMX1SiLcMB8GA1UdIwQY MBaAFPau1tXOQVeXwShffvb9BDxkZufeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXE3VzFjNUJWNWZCS0Y5LTl2MEVQR1JtNTk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83ZmE5ZWQtYjA4Ny00MGNkLWEwMTYt ZDk1N2I4YzU0Yzk0LzEvOXE3VzFjNUJWNWZCS0Y5LTl2MEVQR1JtNTk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83ZmE5ZWQtYjA4Ny00MGNkLWEwMTYtZDk1N2I4YzU0Yzk0 LzEvOXE3VzFjNUJWNWZCS0Y5LTl2MEVQR1JtNTk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5xMo39l R06dEDB4yyQ8ujtfj0bRHv2ZXC0UoHcaN9jBR8WO1iDs6ZNP9MnX1tIAnDiHLe/n LLbVRI43OWb/3BzKtTWJ4U5lqMq/Su0KzeWNuxc061ZT49YmzFFqgECAYfa9tKkV AtPCFco0YUpDNrvrBjp5aAmK2gz3N6tRARZEtR4L8c6EfbFs/x0cBzzM1FyEWM+W 6NWLtT8R6yX6hvQYLbJrxEddbRkQLTRBwhFbdOp/CcFn5YR6vJg0onWsbKB1aFyb 9urSOU7Q1CXp93Xzjm9pCQ/nJ00mWnf/cgV9T350RDZzv9k9undrMIzWiEFr8SVV fL6liiqXUVjv+g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:47 2025 by rpki-client