This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft File: 9bulXh8L-GE-qbu-KXooGzyDgYA.mft (raw, json) Hash identifier: bpGfaYM3Z4Bj+cI8TVhYDvDua8TpjgSBf8E804V6Avg= Subject key identifier: AB:F7:C7:91:DD:2A:DF:BD:69:DA:77:18:08:22:32:45:D6:3A:A4:3C Authority key identifier: F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80 Certificate issuer: /CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180 Certificate serial: 019AF31C3E1F2ED25DDABC90F6D1CBC9064D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:01:45 +0000 Manifest this update: Sat 06 Dec 2025 10:01:45 +0000 Manifest next update: Sun 07 Dec 2025 10:01:45 +0000 Files and hashes: 1: 9bulXh8L-GE-qbu-KXooGzyDgYA.crl (hash: zxSV6o20vRef17A5//czy/42iJeWlSaublpI4rBqtEA=) 2: UKsojMJQKjwqEBjlQ0hvZzPL5fM.roa (hash: JwS6NOp3JTf4Gv4MdW3hpkLuh9j4F7ahSArR1W30tPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:3e:1f:2e:d2:5d:da:bc:90:f6:d1:cb:c9:06:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180 Validity Not Before: Dec 6 10:01:45 2025 GMT Not After : Dec 7 10:01:45 2025 GMT Subject: CN=abf7c791dd2adfbd69da771808223245d63aa43c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c9:c3:4a:c0:69:67:de:6a:98:08:f7:92:e4: 25:9c:e3:33:04:8e:f6:8c:20:0c:1f:39:c8:df:17: 1d:fd:80:94:00:62:12:84:2c:6c:19:29:aa:d3:05: 1e:90:fa:0c:eb:22:37:c1:38:53:94:2d:8c:dd:49: 1f:6b:22:44:c5:95:8e:8e:e4:6f:4f:07:50:d6:7d: 15:1d:4a:0f:a7:6c:1d:aa:55:5c:39:bd:7e:2d:46: a3:40:05:43:55:e5:db:61:f9:e6:19:07:d3:44:70: f8:34:71:d6:9f:50:46:be:b5:f8:6e:8b:9e:e9:3f: 54:b0:52:8e:25:ac:50:5a:28:8e:10:54:a0:96:6f: 03:36:fd:21:59:e7:ff:3c:a7:38:2e:97:32:29:68: 95:c2:ac:da:87:1f:7b:68:d8:51:aa:a3:6d:7c:f8: 5d:fe:6a:df:6b:71:a1:4d:5a:f7:05:f9:bf:b2:7f: 2c:53:27:6b:58:9b:be:05:38:5d:39:f8:26:80:65: cf:2f:a0:2e:6e:93:41:7e:c2:4c:06:6f:c4:06:a1: 45:eb:d0:24:93:6b:eb:96:ae:18:35:27:8e:1a:c5: 9e:3d:34:79:70:97:bf:42:46:fa:4f:53:f8:a7:21: 9f:25:5f:c3:9b:b3:70:06:d0:2c:c0:70:05:33:93: 82:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F7:C7:91:DD:2A:DF:BD:69:DA:77:18:08:22:32:45:D6:3A:A4:3C X509v3 Authority Key Identifier: keyid:F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:20:e2:a8:e4:cb:fe:54:94:2c:fa:09:08:fa:a5:ae:f3:eb: 6a:17:06:77:7c:54:01:f9:ae:7b:0a:ea:31:76:5e:c2:6d:56: a9:62:9d:05:04:f6:60:2a:6c:86:ae:8e:14:dc:5d:cd:b9:e9: 26:50:b8:07:93:02:78:a5:9d:3c:aa:0b:9b:19:77:aa:6b:ad: 59:83:a8:0d:7a:07:8e:2a:63:ab:60:f0:5f:30:50:7b:77:f9: 36:a8:4a:2a:4b:db:4e:ba:a2:15:b7:c8:61:fd:cd:77:45:29: c1:35:5f:70:d1:c7:2b:9b:44:7b:00:a0:f1:19:91:91:cb:89: a6:ea:6f:bb:e1:22:9e:0f:17:83:5f:40:f8:93:8c:7d:b2:89: 30:1a:d4:2c:6a:2d:78:2e:3d:1a:b9:52:c4:a9:43:be:98:38: e1:27:af:de:40:a1:32:7f:0e:a6:68:2d:0b:52:e7:e2:82:0b: 52:c5:03:42:cc:9b:7c:f1:bf:86:9b:e2:11:77:45:1a:19:b9: b7:5f:4e:53:1c:75:28:fd:82:ea:a5:bf:49:2d:17:82:48:8f: 6d:7d:da:04:51:a9:2b:06:87:24:41:de:67:7a:33:0e:47:1a: fc:2e:4b:ba:dc:29:6b:91:80:ac:a4:c0:ef:ad:f2:a0:c5:b1: e0:7b:35:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHD4fLtJd2ryQ9tHLyQZNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1YmJhNTVlMWYwYmY4NjEzZWE5YmJiZTI5N2EyODFiM2M4 MzgxODAwHhcNMjUxMjA2MTAwMTQ1WhcNMjUxMjA3MTAwMTQ1WjAzMTEwLwYDVQQD EyhhYmY3Yzc5MWRkMmFkZmJkNjlkYTc3MTgwODIyMzI0NWQ2M2FhNDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MnDSsBpZ95qmAj3kuQlnOMzBI72 jCAMHznI3xcd/YCUAGIShCxsGSmq0wUekPoM6yI3wThTlC2M3UkfayJExZWOjuRv TwdQ1n0VHUoPp2wdqlVcOb1+LUajQAVDVeXbYfnmGQfTRHD4NHHWn1BGvrX4boue 6T9UsFKOJaxQWiiOEFSglm8DNv0hWef/PKc4LpcyKWiVwqzahx97aNhRqqNtfPhd /mrfa3GhTVr3Bfm/sn8sUydrWJu+BThdOfgmgGXPL6AubpNBfsJMBm/EBqFF69Ak k2vrlq4YNSeOGsWePTR5cJe/Qkb6T1P4pyGfJV/Dm7NwBtAswHAFM5OCdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKv3x5HdKt+9adp3GAgiMkXWOqQ8MB8GA1UdIwQY MBaAFPW7pV4fC/hhPqm7vil6KBs8g4GAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWJ1bFhoOEwtR0UtcWJ1LUtYb29HenlEZ1lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xN2NjNGEtMjkyYy00ZDUwLThkM2Ut ZjViOTdjMGYwZjI0LzEvOWJ1bFhoOEwtR0UtcWJ1LUtYb29HenlEZ1lBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8xN2NjNGEtMjkyYy00ZDUwLThkM2UtZjViOTdjMGYwZjI0 LzEvOWJ1bFhoOEwtR0UtcWJ1LUtYb29HenlEZ1lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjSDiqOTL /lSULPoJCPqlrvPrahcGd3xUAfmuewrqMXZewm1WqWKdBQT2YCpshq6OFNxdzbnp JlC4B5MCeKWdPKoLmxl3qmutWYOoDXoHjipjq2DwXzBQe3f5NqhKKkvbTrqiFbfI Yf3Nd0UpwTVfcNHHK5tEewCg8RmRkcuJpupvu+Eing8Xg19A+JOMfbKJMBrULGot eC49GrlSxKlDvpg44Sev3kChMn8OpmgtC1Ln4oILUsUDQsybfPG/hpviEXdFGhm5 t19OUxx1KP2C6qW/SS0XgkiPbX3aBFGpKwaHJEHeZ3ozDkca/C5Lutwpa5GArKTA 763yoMWx4Hs1gA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:31 2025 by rpki-client