This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft File: 9lFtfyjNvos_VddTcqrU07EL4J8.mft (raw, json) Hash identifier: 1qavonGHW3eiSkCmDXhQtF+i1EMmaDyDz807NIpcjSQ= Subject key identifier: 3A:0B:B8:7E:B0:06:58:0C:73:32:32:DD:E0:B4:2D:77:12:FA:89:D6 Authority key identifier: F6:51:6D:7F:28:CD:BE:8B:3F:55:D7:53:72:AA:D4:D3:B1:0B:E0:9F Certificate issuer: /CN=f6516d7f28cdbe8b3f55d75372aad4d3b10be09f Certificate serial: 019AF12D36B5094699DFBD6852BC59B3ADFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft Manifest number: 0A5B Signing time: Sat 06 Dec 2025 01:01:03 +0000 Manifest this update: Sat 06 Dec 2025 01:01:03 +0000 Manifest next update: Sun 07 Dec 2025 01:01:03 +0000 Files and hashes: 1: 9lFtfyjNvos_VddTcqrU07EL4J8.crl (hash: ygnr7TVYVcthzt8Jnj8atEuGY8F2zfGK2IfoVcEwEHE=) 2: RFRyemMh5cFgw6G_Hs8rXpd2Ve4.roa (hash: Q/GgNiv43TfFu8lH2/Qowfw2+WyW8sNGbwKNhf/jdeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.crl rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:36:b5:09:46:99:df:bd:68:52:bc:59:b3:ad:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6516d7f28cdbe8b3f55d75372aad4d3b10be09f Validity Not Before: Dec 6 01:01:03 2025 GMT Not After : Dec 7 01:01:03 2025 GMT Subject: CN=3a0bb87eb006580c733232dde0b42d7712fa89d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0f:d2:02:b7:5f:bf:40:82:18:a7:3a:d8:37: de:f7:0a:36:39:9c:c4:b7:d3:71:1b:3e:96:74:1d: 68:b7:95:a4:6b:8c:9e:32:38:a2:da:67:69:6a:10: 3b:a8:1b:0d:41:cc:18:01:79:70:1d:51:37:ee:92: 5b:65:3a:16:21:d9:d3:3d:89:b5:46:87:41:ba:70: ba:16:b2:09:51:0b:d1:15:67:ed:ff:40:ba:ce:b0: f8:d2:fc:d8:ce:40:2d:9c:98:e3:e9:c5:e0:b3:ef: ae:e2:52:e4:af:a2:57:25:84:ce:81:39:e5:e1:39: fe:c7:ad:f3:c3:a4:ff:2f:ad:6d:30:42:10:1c:d3: 02:8c:51:dc:31:c1:15:f2:d5:2c:dd:55:84:ec:43: 46:e7:84:1a:18:21:5a:76:e8:56:d7:fb:19:f6:8a: 71:a7:c0:bc:63:61:1b:a7:01:c7:f9:88:30:aa:58: 48:35:8b:ae:4f:96:bb:97:d2:c8:ca:12:a8:4c:19: 35:31:cf:47:2d:e9:4f:fc:81:43:25:03:0d:b7:8c: 55:33:d9:56:70:e9:0f:01:ae:da:0f:4d:ee:6b:21: 01:ec:6d:22:96:81:0a:89:20:2e:b3:74:d2:07:e7: 3f:ce:e6:50:12:03:da:31:5f:bc:30:06:89:ca:d3: 60:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0B:B8:7E:B0:06:58:0C:73:32:32:DD:E0:B4:2D:77:12:FA:89:D6 X509v3 Authority Key Identifier: keyid:F6:51:6D:7F:28:CD:BE:8B:3F:55:D7:53:72:AA:D4:D3:B1:0B:E0:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:76:e0:b5:4d:28:b3:9f:24:b8:78:1b:75:bf:8a:79:e7:5a: 5c:4f:08:10:05:19:23:46:3a:c7:9e:11:bd:83:31:f9:bb:b9: e1:8a:11:e7:c6:76:32:e5:a8:5c:34:43:4f:c6:f8:aa:34:4c: 0d:c0:58:00:93:ad:76:1f:93:23:27:3c:47:c4:c3:b6:69:4a: 69:ec:9d:0d:38:1d:dd:07:ef:0e:95:b1:f7:ac:04:8d:7b:89: 1e:64:f8:94:d5:6e:84:c4:9b:07:37:c7:7a:a7:13:ed:17:4e: 0b:d7:d5:6d:49:f8:22:28:08:6c:fa:af:e1:c8:53:45:f0:36: 29:4f:a4:c6:63:82:4f:54:59:48:7a:17:c6:f0:c1:e8:b9:b9: 07:64:a2:ff:aa:6d:9e:0e:8e:39:22:ee:ba:ec:f8:43:3f:73: 7c:f8:f0:6a:a6:9e:05:b5:b9:b4:97:ef:fa:3f:b2:2a:d6:ae: 7f:35:0d:27:14:57:de:fc:ae:e7:ef:ed:1c:3c:ca:e7:96:6b: 73:e6:af:f5:3f:54:b3:b4:05:12:a8:72:a3:02:64:ba:6b:9c: 73:14:55:3b:7e:15:a7:eb:39:69:0c:3d:4a:86:32:10:77:fb: f4:e9:f3:2b:55:06:13:c1:d6:a9:8c:31:04:a4:3d:eb:04:5e: 4b:c9:5c:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTa1CUaZ371oUrxZs63/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NTE2ZDdmMjhjZGJlOGIzZjU1ZDc1MzcyYWFkNGQzYjEw YmUwOWYwHhcNMjUxMjA2MDEwMTAzWhcNMjUxMjA3MDEwMTAzWjAzMTEwLwYDVQQD EygzYTBiYjg3ZWIwMDY1ODBjNzMzMjMyZGRlMGI0MmQ3NzEyZmE4OWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA/SArdfv0CCGKc62Dfe9wo2OZzE t9NxGz6WdB1ot5Wka4yeMjii2mdpahA7qBsNQcwYAXlwHVE37pJbZToWIdnTPYm1 RodBunC6FrIJUQvRFWft/0C6zrD40vzYzkAtnJjj6cXgs++u4lLkr6JXJYTOgTnl 4Tn+x63zw6T/L61tMEIQHNMCjFHcMcEV8tUs3VWE7ENG54QaGCFaduhW1/sZ9opx p8C8Y2EbpwHH+YgwqlhINYuuT5a7l9LIyhKoTBk1Mc9HLelP/IFDJQMNt4xVM9lW cOkPAa7aD03uayEB7G0iloEKiSAus3TSB+c/zuZQEgPaMV+8MAaJytNgBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDoLuH6wBlgMczIy3eC0LXcS+onWMB8GA1UdIwQY MBaAFPZRbX8ozb6LP1XXU3Kq1NOxC+CfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWxGdGZ5ak52b3NfVmRkVGNxclUwN0VMNEo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9hOGMzMTgtMzM4ZC00OTMyLThhY2It ZTk3YWU1YzYwNTY4LzEvOWxGdGZ5ak52b3NfVmRkVGNxclUwN0VMNEo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9hOGMzMTgtMzM4ZC00OTMyLThhY2ItZTk3YWU1YzYwNTY4 LzEvOWxGdGZ5ak52b3NfVmRkVGNxclUwN0VMNEo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHbgtU0o s58kuHgbdb+KeedaXE8IEAUZI0Y6x54RvYMx+bu54YoR58Z2MuWoXDRDT8b4qjRM DcBYAJOtdh+TIyc8R8TDtmlKaeydDTgd3QfvDpWx96wEjXuJHmT4lNVuhMSbBzfH eqcT7RdOC9fVbUn4IigIbPqv4chTRfA2KU+kxmOCT1RZSHoXxvDB6Lm5B2Si/6pt ng6OOSLuuuz4Qz9zfPjwaqaeBbW5tJfv+j+yKtaufzUNJxRX3vyu5+/tHDzK55Zr c+av9T9Us7QFEqhyowJkumuccxRVO34Vp+s5aQw9SoYyEHf79OnzK1UGE8HWqYwx BKQ96wReS8lc/A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:05 2025 by rpki-client