This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft File: 9LXIjF7ZSvHJnVAboClfQENyUcQ.mft (raw, json) Hash identifier: H5JW64PvQz8XgaFtSYqLv5/WE6r5OEu82R1h6UhByos= Subject key identifier: 4C:F5:18:2E:73:C1:45:42:61:92:8B:49:D4:F1:30:B1:F0:1D:F4:6D Authority key identifier: F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4 Certificate issuer: /CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4 Certificate serial: 019AF19AEC34BFFADEA1805395BA9500DE74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft Manifest number: 1677 Signing time: Sat 06 Dec 2025 03:00:53 +0000 Manifest this update: Sat 06 Dec 2025 03:00:53 +0000 Manifest next update: Sun 07 Dec 2025 03:00:53 +0000 Files and hashes: 1: 9LXIjF7ZSvHJnVAboClfQENyUcQ.crl (hash: HFA0R7nj7MQoYUZx69gao/Bq6BJeBxlQUBlgKLA3t94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ec:34:bf:fa:de:a1:80:53:95:ba:95:00:de:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b5c88c5ed94af1c99d501ba0295f40437251c4 Validity Not Before: Dec 6 03:00:53 2025 GMT Not After : Dec 7 03:00:53 2025 GMT Subject: CN=4cf5182e73c1454261928b49d4f130b1f01df46d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fa:39:f3:be:4e:16:32:c8:44:5e:40:53:19: 7f:48:ed:6a:51:e4:8f:6b:9a:1b:d0:c1:9c:02:08: 36:e5:35:39:05:bb:8a:26:79:1e:c7:9e:41:2a:f6: 59:04:ef:c6:ad:5a:e5:ef:b1:5c:03:07:fa:de:f3: 61:f6:3d:97:c7:cb:87:f3:e5:9b:77:6b:bf:f4:0e: b7:53:8e:7c:0d:dc:c1:e2:33:f6:4a:64:d4:38:41: df:dd:4c:10:39:09:39:79:08:a3:ef:1f:f9:c5:ae: 46:ba:8a:e7:a4:a2:bb:4a:b3:22:d7:d2:1b:47:3b: c9:3a:64:b4:d8:26:2b:9a:ec:e1:22:62:88:c7:0c: 11:ba:a8:13:c3:44:ea:b5:71:b5:09:a1:e2:2d:9e: 1e:bd:b9:bb:99:dc:7e:8c:f1:2b:49:3f:7d:8e:ea: af:98:32:d4:c1:43:ce:5b:a8:be:7a:d7:da:79:57: 15:79:18:8f:01:91:43:40:c7:01:36:2f:f3:c4:94: 54:3a:cf:c7:7c:0c:dd:6c:3c:8d:99:6c:bb:22:ab: 47:1e:0c:64:72:de:c7:18:49:bd:ce:7e:2d:88:55: 36:a1:59:34:9e:d7:0f:8f:fd:0a:60:98:9b:76:ac: a1:49:ee:15:22:18:88:23:8b:64:89:2a:f5:44:88: f3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F5:18:2E:73:C1:45:42:61:92:8B:49:D4:F1:30:B1:F0:1D:F4:6D X509v3 Authority Key Identifier: keyid:F4:B5:C8:8C:5E:D9:4A:F1:C9:9D:50:1B:A0:29:5F:40:43:72:51:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LXIjF7ZSvHJnVAboClfQENyUcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/97ff09-f4dd-4ec8-9542-c57adad1bfa3/1/9LXIjF7ZSvHJnVAboClfQENyUcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:57:3b:36:37:07:87:b1:3f:5d:e8:53:3b:ea:cc:63:e7:af: 0d:82:16:71:52:d4:8b:a6:a7:96:ed:20:29:4c:4c:90:92:bb: 0b:43:01:74:c2:ec:bd:8a:72:4e:31:97:b3:11:7e:67:b7:57: ac:75:2e:78:2e:52:9a:15:41:91:37:d8:07:fd:99:d0:94:37: 42:be:da:4e:3f:3b:88:92:de:d6:8b:e4:04:cb:6d:4b:27:34: be:5e:1f:a4:23:21:ee:7e:e6:be:d9:4d:1c:1b:0f:6f:f8:c7: fe:c1:0b:85:9d:f7:2c:c9:00:dd:7f:7a:b4:ce:fa:c2:6e:3d: 94:d9:0a:e7:20:9d:f1:62:d1:d5:ae:1e:19:85:59:b6:e8:3a: b3:a9:b8:b4:8c:ca:b6:df:31:4e:2c:13:1f:7e:8d:c0:a3:b2: 23:15:41:7e:82:46:65:16:e1:1e:d6:bf:e7:e4:81:31:4f:41: e6:ba:b7:fd:c8:46:69:73:bb:f4:87:cd:2a:0c:94:83:83:1e: 1d:1f:cf:98:12:c8:90:32:67:d4:e6:74:2e:07:ce:7f:5e:01: ca:bf:7c:1e:9b:ee:29:eb:3a:f8:dc:c2:77:07:4c:ee:4b:3a: 26:ed:57:8e:40:21:eb:f7:fe:91:b7:a9:42:03:41:a0:41:f2: c2:cf:74:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuw0v/reoYBTlbqVAN50MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YjVjODhjNWVkOTRhZjFjOTlkNTAxYmEwMjk1ZjQwNDM3 MjUxYzQwHhcNMjUxMjA2MDMwMDUzWhcNMjUxMjA3MDMwMDUzWjAzMTEwLwYDVQQD Eyg0Y2Y1MTgyZTczYzE0NTQyNjE5MjhiNDlkNGYxMzBiMWYwMWRmNDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fo5875OFjLIRF5AUxl/SO1qUeSP a5ob0MGcAgg25TU5BbuKJnkex55BKvZZBO/GrVrl77FcAwf63vNh9j2Xx8uH8+Wb d2u/9A63U458DdzB4jP2SmTUOEHf3UwQOQk5eQij7x/5xa5GuornpKK7SrMi19Ib RzvJOmS02CYrmuzhImKIxwwRuqgTw0TqtXG1CaHiLZ4evbm7mdx+jPErST99juqv mDLUwUPOW6i+etfaeVcVeRiPAZFDQMcBNi/zxJRUOs/HfAzdbDyNmWy7IqtHHgxk ct7HGEm9zn4tiFU2oVk0ntcPj/0KYJibdqyhSe4VIhiII4tkiSr1RIjzXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEz1GC5zwUVCYZKLSdTxMLHwHfRtMB8GA1UdIwQY MBaAFPS1yIxe2UrxyZ1QG6ApX0BDclHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxYSWpGN1pTdkhKblZBYm9DbGZRRU55VWNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS85N2ZmMDktZjRkZC00ZWM4LTk1NDIt YzU3YWRhZDFiZmEzLzEvOUxYSWpGN1pTdkhKblZBYm9DbGZRRU55VWNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS85N2ZmMDktZjRkZC00ZWM4LTk1NDItYzU3YWRhZDFiZmEz LzEvOUxYSWpGN1pTdkhKblZBYm9DbGZRRU55VWNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlc7NjcH h7E/XehTO+rMY+evDYIWcVLUi6anlu0gKUxMkJK7C0MBdMLsvYpyTjGXsxF+Z7dX rHUueC5SmhVBkTfYB/2Z0JQ3Qr7aTj87iJLe1ovkBMttSyc0vl4fpCMh7n7mvtlN HBsPb/jH/sELhZ33LMkA3X96tM76wm49lNkK5yCd8WLR1a4eGYVZtug6s6m4tIzK tt8xTiwTH36NwKOyIxVBfoJGZRbhHta/5+SBMU9B5rq3/chGaXO79IfNKgyUg4Me HR/PmBLIkDJn1OZ0LgfOf14Byr98HpvuKes6+NzCdwdM7ks6Ju1XjkAh6/f+kbep QgNBoEHyws90iQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:15:51 2025 by rpki-client