This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft File: 9ssMjyCEMwIDT2NlbqKevW0RY6o.mft (raw, json) Hash identifier: Hn2WRDeQ0DQUEIe8lXRt0K8eUOtsDTks8f4ua6C3v4I= Subject key identifier: 84:5F:CE:6A:4C:5D:8F:33:6C:8B:CA:58:DD:D6:E4:FD:CE:B9:A6:95 Authority key identifier: F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA Certificate issuer: /CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa Certificate serial: 019AF65317E5715E0EB065D1886955E53B97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft Manifest number: 104B Signing time: Sun 07 Dec 2025 01:00:32 +0000 Manifest this update: Sun 07 Dec 2025 01:00:32 +0000 Manifest next update: Mon 08 Dec 2025 01:00:32 +0000 Files and hashes: 1: 9ssMjyCEMwIDT2NlbqKevW0RY6o.crl (hash: jgLawLRThA8HqyJ3DocFbxkCSSMzcIxaAbq4HGi+0dw=) 2: OpJ_uz4hg9WS1uTnKXn75qGvb3w.roa (hash: zJt7hWD6hoBRKS4g5AHeuYKclEqIASb0N8YkICHekl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:17:e5:71:5e:0e:b0:65:d1:88:69:55:e5:3b:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa Validity Not Before: Dec 7 01:00:32 2025 GMT Not After : Dec 8 01:00:32 2025 GMT Subject: CN=845fce6a4c5d8f336c8bca58ddd6e4fdceb9a695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9a:99:26:e7:a2:6f:6a:84:9a:35:b5:d3:33: a4:0c:25:65:67:a6:6f:d8:a1:55:60:9d:d2:2a:3c: 0b:9c:94:8f:19:62:95:ff:eb:30:98:9a:d5:86:f1: 81:49:de:eb:a6:86:77:1f:23:dc:b3:b7:fd:af:75: b9:69:fe:bc:41:75:e1:fc:49:fd:17:be:43:bc:6f: cf:0d:5b:01:25:12:58:72:41:b6:7e:9e:ec:46:5a: a2:ca:da:73:ce:64:7b:c5:f4:e2:77:9e:c0:2d:69: 02:33:19:a1:cc:0d:54:02:c6:68:d2:b0:27:12:0e: e6:01:47:3c:6e:79:cb:90:2b:e0:59:f3:c4:a9:c5: 87:93:89:4d:59:c8:78:eb:1c:57:5b:cc:e8:a7:a2: be:3f:0f:e0:87:cc:78:58:3d:7b:38:00:ea:79:a1: d3:8b:5d:ac:8a:9e:63:cd:74:7a:67:d8:c1:ce:29: af:66:eb:da:a7:ad:9d:c4:c0:1d:97:7a:1b:36:8e: e6:c8:62:e7:2b:86:05:71:d5:68:9d:31:34:e4:7f: 8a:9b:1f:d4:c8:5d:12:c9:16:fd:13:4a:19:24:30: d8:80:a2:9d:6b:06:56:46:27:ec:77:fb:17:ef:e9: c8:9a:ec:b8:bd:f3:6d:f2:e2:bb:3e:f4:22:ce:a2: 2a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5F:CE:6A:4C:5D:8F:33:6C:8B:CA:58:DD:D6:E4:FD:CE:B9:A6:95 X509v3 Authority Key Identifier: keyid:F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:41:2a:48:60:04:43:3c:63:f0:38:65:47:84:c9:a1:3e:cf: 67:ba:a7:ef:25:50:ea:e4:3f:c7:50:f8:6e:24:99:34:18:95: be:2d:21:ab:aa:9f:60:f0:79:e6:50:0e:3c:3d:f9:4b:f6:81: 6a:08:b6:eb:7b:c4:55:fe:0a:b6:64:78:4a:e4:e0:73:b9:9b: f3:a4:b5:9b:ca:7d:97:a4:74:10:f9:39:5b:1d:56:a4:e8:c8: b5:59:ae:ee:27:ab:04:e2:a6:9d:4f:13:13:ce:16:86:eb:08: 23:a8:6c:31:22:98:dd:72:f0:8e:0b:45:d6:95:c7:65:53:45: 76:12:eb:df:23:62:da:10:bc:e8:00:9a:b9:c3:15:35:c2:7c: 5b:23:8d:84:9d:88:17:33:4c:3c:64:db:f9:3b:e6:1d:38:1e: 4c:c9:14:b5:c7:9d:ac:be:42:5e:fb:5d:a2:f4:60:7f:8e:54: 2b:72:49:af:ea:cf:cf:1a:d5:a7:f8:71:ae:14:7b:3f:5f:d7: 64:3b:69:0d:a7:64:26:8d:cf:a9:2e:54:c2:90:6b:e3:93:0a: 71:79:c0:f2:94:78:0a:35:99:b2:15:3f:bb:95:37:35:bb:69: 93:64:6b:a2:44:35:e3:bb:9c:b0:ab:c2:12:aa:9c:ce:35:73: d7:88:ad:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2UxflcV4OsGXRiGlV5TuXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2Y2IwYzhmMjA4NDMzMDIwMzRmNjM2NTZlYTI5ZWJkNmQx MTYzYWEwHhcNMjUxMjA3MDEwMDMyWhcNMjUxMjA4MDEwMDMyWjAzMTEwLwYDVQQD Eyg4NDVmY2U2YTRjNWQ4ZjMzNmM4YmNhNThkZGQ2ZTRmZGNlYjlhNjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5qZJueib2qEmjW10zOkDCVlZ6Zv 2KFVYJ3SKjwLnJSPGWKV/+swmJrVhvGBSd7rpoZ3HyPcs7f9r3W5af68QXXh/En9 F75DvG/PDVsBJRJYckG2fp7sRlqiytpzzmR7xfTid57ALWkCMxmhzA1UAsZo0rAn Eg7mAUc8bnnLkCvgWfPEqcWHk4lNWch46xxXW8zop6K+Pw/gh8x4WD17OADqeaHT i12sip5jzXR6Z9jBzimvZuvap62dxMAdl3obNo7myGLnK4YFcdVonTE05H+Kmx/U yF0SyRb9E0oZJDDYgKKdawZWRifsd/sX7+nImuy4vfNt8uK7PvQizqIqbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRfzmpMXY8zbIvKWN3W5P3OuaaVMB8GA1UdIwQY MBaAFPbLDI8ghDMCA09jZW6inr1tEWOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85ODQ4NDQtM2ViNC00MjMyLTkzODUt MmFmM2Q2MmJlN2YyLzEvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS85ODQ4NDQtM2ViNC00MjMyLTkzODUtMmFmM2Q2MmJlN2Yy LzEvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0EqSGAE Qzxj8DhlR4TJoT7PZ7qn7yVQ6uQ/x1D4biSZNBiVvi0hq6qfYPB55lAOPD35S/aB agi263vEVf4KtmR4SuTgc7mb86S1m8p9l6R0EPk5Wx1WpOjItVmu7ierBOKmnU8T E84WhusII6hsMSKY3XLwjgtF1pXHZVNFdhLr3yNi2hC86ACaucMVNcJ8WyONhJ2I FzNMPGTb+TvmHTgeTMkUtcedrL5CXvtdovRgf45UK3JJr+rPzxrVp/hxrhR7P1/X ZDtpDadkJo3PqS5UwpBr45MKcXnA8pR4CjWZshU/u5U3Nbtpk2RrokQ147ucsKvC EqqczjVz14itTQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:50:25 2025 by rpki-client