This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft File: 9Fe8GTpZWUint6CWtxC7UmKDD0E.mft (raw, json) Hash identifier: 5vLu0vAC987jX47ldhVY6UCtJhPcQNFYRDw9ZacfZpM= Subject key identifier: AC:E7:C6:FC:A3:2A:CA:88:EC:49:B2:2A:F7:6F:B8:EC:22:49:B7:DA Authority key identifier: F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41 Certificate issuer: /CN=f457bc193a595948a7b7a096b710bb5262830f41 Certificate serial: 019AF2096FA649ACE2D79442974B790DB4DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft Manifest number: 0630 Signing time: Sat 06 Dec 2025 05:01:35 +0000 Manifest this update: Sat 06 Dec 2025 05:01:35 +0000 Manifest next update: Sun 07 Dec 2025 05:01:35 +0000 Files and hashes: 1: 9Fe8GTpZWUint6CWtxC7UmKDD0E.crl (hash: WHeTn8zgsqrx0vDt7rPXhxl+EjympbLqC5vUwWA1oJg=) 2: 9JJ19zbpfgmK5cWw4_TivjNeu1c.roa (hash: nwELuyNPxarY0R8dzJoxHRf1m9BsPwpa7s4U5L6T37U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:6f:a6:49:ac:e2:d7:94:42:97:4b:79:0d:b4:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f457bc193a595948a7b7a096b710bb5262830f41 Validity Not Before: Dec 6 05:01:35 2025 GMT Not After : Dec 7 05:01:35 2025 GMT Subject: CN=ace7c6fca32aca88ec49b22af76fb8ec2249b7da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:46:9e:ba:76:6d:2b:04:04:8c:62:74:cb:8f: 7e:90:cd:7a:1e:7d:b9:a0:cf:ad:92:39:1d:83:45: 96:e6:aa:ee:e8:ee:7b:9d:66:d7:80:c2:14:2a:0c: 89:cb:7d:51:04:05:86:81:4a:81:3c:a3:c8:fb:ae: 4b:a2:b4:87:73:9f:48:62:7e:b0:15:12:38:06:01: 3c:0c:26:46:bf:82:ec:d9:0b:0c:3b:ab:da:e5:6c: d1:34:12:59:49:3e:70:7f:a8:c0:d2:45:21:26:1b: b5:14:5c:09:df:6a:10:b6:a0:88:c5:2a:84:43:c5: e3:e3:2a:51:f5:d7:a7:d7:7f:62:3c:b6:3b:40:5d: 3e:5b:1e:81:a2:7e:ac:91:85:d6:cb:df:3e:a7:6c: 67:ea:27:1b:98:68:ff:7b:4b:c9:4c:15:25:da:31: b7:a4:7b:2a:8d:9e:ca:92:2e:74:59:eb:7c:d5:4f: 2e:39:4c:2b:ae:9d:9a:58:90:ee:04:7d:f2:38:23: ca:a0:b0:0a:e0:6b:17:ba:33:b2:62:de:fb:cb:d5: e4:f8:e4:29:be:1e:66:83:fc:60:d0:ca:9a:14:bf: 22:bf:cf:49:25:4a:b3:ca:60:a8:9e:68:50:f5:02: 4c:f2:2d:2c:54:24:f2:cf:72:96:59:5e:19:8c:03: 10:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:E7:C6:FC:A3:2A:CA:88:EC:49:B2:2A:F7:6F:B8:EC:22:49:B7:DA X509v3 Authority Key Identifier: keyid:F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:18:c3:ab:d6:a5:b6:c1:a4:ae:2a:6a:0c:0f:9d:f2:48:a9: 07:f4:b5:3d:a2:21:e6:ab:9d:ce:76:86:18:ef:ee:6f:7e:2c: 84:25:97:b9:2a:27:48:f6:24:88:6b:21:3a:b3:46:48:63:66: 27:43:82:00:cb:22:a0:29:ae:9c:e6:5b:72:04:4b:d1:3d:c7: 4f:46:8a:f9:4e:70:34:46:ad:b5:4b:fd:91:61:7a:fe:b4:ac: 5d:63:8a:3a:14:4f:2f:3b:2a:96:4f:57:45:ba:9f:7b:2e:bb: fd:f2:48:b7:37:e4:8f:43:22:3a:ba:f1:43:49:39:f5:72:ef: 18:99:26:5e:11:26:6a:3d:a7:db:e3:49:97:7b:d3:21:31:42: c0:fc:d3:f8:6c:16:7a:06:de:6b:6b:a3:2b:ad:56:89:19:ab: 0a:09:b2:4f:ab:91:e7:8a:b2:f5:42:be:3d:a2:c9:36:d3:0d: 3e:20:a9:e0:31:fe:d1:32:65:68:4c:86:3f:a6:55:24:2f:8a: 5d:9d:05:d9:7f:68:11:f4:c8:17:2f:08:04:b3:62:16:9f:94: 21:00:1c:e3:61:6d:bc:2b:79:2d:22:e3:00:cc:e8:17:1b:f0: 3a:c5:f3:cc:a4:4a:7f:21:a7:30:be:fe:96:f3:30:02:81:8c: e1:78:26:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCW+mSazi15RCl0t5DbTbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NTdiYzE5M2E1OTU5NDhhN2I3YTA5NmI3MTBiYjUyNjI4 MzBmNDEwHhcNMjUxMjA2MDUwMTM1WhcNMjUxMjA3MDUwMTM1WjAzMTEwLwYDVQQD EyhhY2U3YzZmY2EzMmFjYTg4ZWM0OWIyMmFmNzZmYjhlYzIyNDliN2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEaeunZtKwQEjGJ0y49+kM16Hn25 oM+tkjkdg0WW5qru6O57nWbXgMIUKgyJy31RBAWGgUqBPKPI+65LorSHc59IYn6w FRI4BgE8DCZGv4Ls2QsMO6va5WzRNBJZST5wf6jA0kUhJhu1FFwJ32oQtqCIxSqE Q8Xj4ypR9den139iPLY7QF0+Wx6Bon6skYXWy98+p2xn6icbmGj/e0vJTBUl2jG3 pHsqjZ7Kki50Wet81U8uOUwrrp2aWJDuBH3yOCPKoLAK4GsXujOyYt77y9Xk+OQp vh5mg/xg0MqaFL8iv89JJUqzymConmhQ9QJM8i0sVCTyz3KWWV4ZjAMQQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKznxvyjKsqI7EmyKvdvuOwiSbfaMB8GA1UdIwQY MBaAFPRXvBk6WVlIp7eglrcQu1Jigw9BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUZlOEdUcFpXVWludDZDV3R4QzdVbUtERDBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC80NTNjZmQtNTM1Yy00ZDJhLWJiMjct NDM2YjNlZTdlZDM1LzEvOUZlOEdUcFpXVWludDZDV3R4QzdVbUtERDBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC80NTNjZmQtNTM1Yy00ZDJhLWJiMjctNDM2YjNlZTdlZDM1 LzEvOUZlOEdUcFpXVWludDZDV3R4QzdVbUtERDBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThjDq9al tsGkripqDA+d8kipB/S1PaIh5qudznaGGO/ub34shCWXuSonSPYkiGshOrNGSGNm J0OCAMsioCmunOZbcgRL0T3HT0aK+U5wNEattUv9kWF6/rSsXWOKOhRPLzsqlk9X Rbqfey67/fJItzfkj0MiOrrxQ0k59XLvGJkmXhEmaj2n2+NJl3vTITFCwPzT+GwW egbea2ujK61WiRmrCgmyT6uR54qy9UK+PaLJNtMNPiCp4DH+0TJlaEyGP6ZVJC+K XZ0F2X9oEfTIFy8IBLNiFp+UIQAc42FtvCt5LSLjAMzoFxvwOsXzzKRKfyGnML7+ lvMwAoGM4Xgm+A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:13 2025 by rpki-client