This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft File: 9LXIjF7ZSvHJnVAboClfQENyUcQ.mft (raw, json) Hash identifier: Y7Rxda5A3Zatqmfu/D87LUqgIby6lA71lOhK6OjhK30= Subject key identifier: D8:21:83:2F:98:88:2B:C4:48:72:FB:20:5D:AE:BF:BB:95:27:35:8B Authority key identifier: F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4 Certificate issuer: /CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4 Certificate serial: 019B3CEC17C82AE3BC6E9E08D83819C500F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft Manifest number: 169E Signing time: Sat 20 Dec 2025 18:01:04 +0000 Manifest this update: Sat 20 Dec 2025 18:01:04 +0000 Manifest next update: Sun 21 Dec 2025 18:01:04 +0000 Files and hashes: 1: 9LXIjF7ZSvHJnVAboClfQENyUcQ.crl (hash: CDVwSZbCWj0WNQJb2nSKgTubnraFJGt/+FC3VnYCqiY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:17:c8:2a:e3:bc:6e:9e:08:d8:38:19:c5:00:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4 Validity Not Before: Dec 20 18:01:04 2025 GMT Not After : Dec 21 18:01:04 2025 GMT Subject: CN=d821832f98882bc44872fb205daebfbb9527358b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:04:3c:85:a3:0e:52:39:39:90:24:aa:34:e5: 47:bb:27:d4:63:bd:70:29:80:59:37:9f:e6:06:0c: 8e:43:40:e7:f0:e4:74:47:66:74:60:18:cb:e7:97: 30:87:24:ce:03:71:4e:c9:cb:b9:0f:7e:f5:5f:3f: c3:1e:b4:04:5b:c0:2d:5e:35:a4:b3:9a:b6:e0:9e: 13:f0:10:c8:46:cf:4c:cb:f3:72:07:61:81:ab:99: 1b:d0:c1:2f:33:89:ca:64:aa:c6:a7:15:f5:6d:0c: e6:16:97:cc:7e:be:19:fe:a2:aa:1a:67:ee:0f:1e: a2:ff:40:4c:41:d8:7b:69:85:2f:8e:28:c7:a5:b0: 05:da:a5:32:13:18:8d:ce:6c:33:cf:a2:86:d6:f0: 74:aa:73:67:64:5c:f8:f9:72:f9:70:39:5b:26:5b: f0:f0:99:ac:91:c8:f9:20:fd:17:f8:99:3c:3c:af: 00:28:d8:86:5a:b6:af:38:37:cb:8f:75:92:3f:c8: cf:e8:69:de:36:c6:91:cd:ec:f7:3c:9f:e3:1d:97: 4a:7f:ed:64:32:95:28:3f:88:6c:5f:b3:1a:29:a9: 5d:1e:2f:47:8c:af:7a:7e:8a:37:a2:72:35:39:d9: 29:96:3c:cd:f1:e4:5a:61:7a:0e:67:7f:e4:7a:1a: 8c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:21:83:2F:98:88:2B:C4:48:72:FB:20:5D:AE:BF:BB:95:27:35:8B X509v3 Authority Key Identifier: keyid:F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:39:73:25:16:0a:57:93:9e:9c:be:7d:e4:f3:98:a8:9e:94: 91:6b:15:27:f9:08:47:29:39:9c:73:34:c2:03:30:df:b5:1b: b0:f0:80:aa:55:73:d0:39:6a:01:2d:ac:9b:71:2d:fa:76:c2: 3c:f8:0d:12:a4:2e:b7:7f:7a:b1:a0:f3:33:37:1c:e5:69:3f: 2f:aa:2a:6c:f2:f1:b1:f9:df:db:a6:d6:51:d5:02:0b:c2:0d: 9f:f2:a8:8a:9f:2c:be:4e:ba:a7:28:d6:4a:1c:31:b7:d0:fc: 1f:34:66:8f:60:26:f5:69:2e:0b:99:ab:c3:ca:76:25:25:8b: 8f:c5:9c:c6:e5:27:ff:32:90:c8:c9:41:9a:b0:63:63:58:1d: 6e:57:0a:43:b4:a2:8e:02:c3:63:13:3c:22:c6:5c:eb:ee:19: 52:76:7e:d7:77:00:88:ed:87:60:4e:f2:db:52:50:70:d9:36: f8:cd:68:80:f9:7f:a0:63:da:0c:8f:95:07:82:c5:d0:be:4c: ca:ae:b4:96:cc:bc:7f:d4:95:09:41:9a:7f:6c:50:71:1c:96: b7:52:8b:6e:73:3e:28:ca:47:d6:b1:8d:c5:f0:9d:2b:cc:95: e3:2c:40:5c:fd:13:79:4b:cb:09:06:4f:ec:d4:b5:db:c6:18: 81:8a:b7:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87BfIKuO8bp4I2DgZxQDwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YjVjODhjNWVkOTRhZjFjOTlkNTAxYmEwMjk1ZjQwNDM3 MjUxYzQwHhcNMjUxMjIwMTgwMTA0WhcNMjUxMjIxMTgwMTA0WjAzMTEwLwYDVQQD EyhkODIxODMyZjk4ODgyYmM0NDg3MmZiMjA1ZGFlYmZiYjk1MjczNThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwQ8haMOUjk5kCSqNOVHuyfUY71w KYBZN5/mBgyOQ0Dn8OR0R2Z0YBjL55cwhyTOA3FOycu5D371Xz/DHrQEW8AtXjWk s5q24J4T8BDIRs9My/NyB2GBq5kb0MEvM4nKZKrGpxX1bQzmFpfMfr4Z/qKqGmfu Dx6i/0BMQdh7aYUvjijHpbAF2qUyExiNzmwzz6KG1vB0qnNnZFz4+XL5cDlbJlvw 8Jmskcj5IP0X+Jk8PK8AKNiGWravODfLj3WSP8jP6GneNsaRzez3PJ/jHZdKf+1k MpUoP4hsX7MaKaldHi9HjK96foo3onI1OdkpljzN8eRaYXoOZ3/kehqM2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNghgy+YiCvESHL7IF2uv7uVJzWLMB8GA1UdIwQY MBaAFPS1yIxe2UrxyZ1QG6ApX0BDclHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxYSWpGN1pTdkhKblZBYm9DbGZRRU55VWNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS85N2ZmMDktZjRkZC00ZWM4LTk1NDIt YzU3YWRhZDFiZmEzLzEvOUxYSWpGN1pTdkhKblZBYm9DbGZRRU55VWNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS85N2ZmMDktZjRkZC00ZWM4LTk1NDItYzU3YWRhZDFiZmEz LzEvOUxYSWpGN1pTdkhKblZBYm9DbGZRRU55VWNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATDlzJRYK V5OenL595POYqJ6UkWsVJ/kIRyk5nHM0wgMw37UbsPCAqlVz0DlqAS2sm3Et+nbC PPgNEqQut396saDzMzcc5Wk/L6oqbPLxsfnf26bWUdUCC8INn/Koip8svk66pyjW Shwxt9D8HzRmj2Am9WkuC5mrw8p2JSWLj8WcxuUn/zKQyMlBmrBjY1gdblcKQ7Si jgLDYxM8IsZc6+4ZUnZ+13cAiO2HYE7y21JQcNk2+M1ogPl/oGPaDI+VB4LF0L5M yq60lsy8f9SVCUGaf2xQcRyWt1KLbnM+KMpH1rGNxfCdK8yV4yxAXP0TeUvLCQZP 7NS128YYgYq3tA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:25:53 2025 by rpki-client