This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft File: 9lO0wxURtUguuEJaORN51D_W1FU.mft (raw, json) Hash identifier: W3cVlUo/NOYRST3qx9gT/bn2lYjQxtEys/DogZC78u8= Subject key identifier: 93:7C:D6:A8:51:5E:68:4A:24:05:B3:D2:69:ED:E6:C4:35:24:68:41 Authority key identifier: F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55 Certificate issuer: /CN=f653b4c31511b5482eb8425a391379d43fd6d455 Certificate serial: 019AF578079642EABA8A882CD8FAAEC34874 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 21:01:15 +0000 Manifest this update: Sat 06 Dec 2025 21:01:15 +0000 Manifest next update: Sun 07 Dec 2025 21:01:15 +0000 Files and hashes: 1: 9lO0wxURtUguuEJaORN51D_W1FU.crl (hash: MQtKxOxj4Mc8BOeV3yt5LsKjUV26xC+laZeCpOuCCuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:07:96:42:ea:ba:8a:88:2c:d8:fa:ae:c3:48:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f653b4c31511b5482eb8425a391379d43fd6d455 Validity Not Before: Dec 6 21:01:15 2025 GMT Not After : Dec 7 21:01:15 2025 GMT Subject: CN=937cd6a8515e684a2405b3d269ede6c435246841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:55:c5:37:c3:31:fb:ab:72:a1:77:ad:08:6b: 21:8c:7c:ba:51:45:44:2f:02:7c:5d:d2:8f:5a:8c: c2:40:74:6f:c7:a5:02:42:0a:14:e0:da:86:69:88: 3b:83:0b:2e:34:ae:30:c5:1a:92:40:d7:60:1d:28: 16:98:79:2c:66:53:92:a3:53:9a:c0:18:ae:8e:94: d0:1f:7a:bd:e0:b1:83:a3:1a:10:50:56:3b:ba:07: 52:ce:a6:51:de:fe:ed:05:17:0a:27:92:98:ed:4e: ce:e6:ac:fe:0b:5a:e6:27:65:f5:3c:7a:a4:e1:8e: 95:69:51:1c:fe:b4:3f:63:c9:a7:58:ed:06:e2:e5: 9a:3c:f9:3e:24:1a:d0:44:e9:be:12:1b:9e:82:9b: 38:a5:5e:08:aa:14:32:29:3c:15:50:4b:00:ff:fc: 2d:21:64:e9:bc:89:b6:3a:90:2a:26:0b:1f:8b:76: 1f:5e:25:82:c5:2d:e5:b3:fd:b7:2e:e6:ff:66:34: 92:61:81:20:31:c5:11:23:a1:7b:0e:6f:73:fc:65: ea:80:a8:08:08:b1:66:33:5e:00:f3:62:e3:1f:fb: 26:62:43:1e:78:e1:28:d2:a5:a4:37:a7:25:06:92: 62:be:e4:4e:b6:a2:a0:6b:32:49:0c:51:5f:b6:83: df:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7C:D6:A8:51:5E:68:4A:24:05:B3:D2:69:ED:E6:C4:35:24:68:41 X509v3 Authority Key Identifier: keyid:F6:53:B4:C3:15:11:B5:48:2E:B8:42:5A:39:13:79:D4:3F:D6:D4:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lO0wxURtUguuEJaORN51D_W1FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6f6285-129d-41f6-b830-319368d91fc3/1/9lO0wxURtUguuEJaORN51D_W1FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:97:0c:f2:90:64:4d:e6:9f:09:0d:e0:f6:4a:d9:52:d9:34: 14:4c:fe:16:06:7e:56:8a:60:1a:93:39:b8:2b:12:15:b4:c6: 56:41:96:ac:d2:ef:2c:84:93:df:7f:16:56:7d:c0:c3:9d:7d: 1c:53:98:37:0e:53:cd:52:1b:4e:00:b3:9e:68:44:1a:2c:9b: 29:ef:cb:16:a1:81:da:6f:ec:1a:76:f5:56:65:3d:62:dd:4b: b8:e0:29:a1:86:0b:d8:42:ef:d8:8f:e2:6c:96:20:27:52:22: 0e:d0:8f:f0:5f:68:c8:0b:95:fb:53:1d:d8:72:ce:0c:9c:8b: f0:db:5b:2a:b6:70:50:a5:1a:8e:00:50:85:17:e4:b1:25:84: 0d:d4:e2:fc:68:a4:47:60:7f:88:8b:79:f3:56:39:e8:f3:fa: f2:85:cb:0b:96:77:ba:dd:73:f0:fb:26:77:50:ec:c8:46:f6: 61:57:98:2b:f5:11:04:0e:d4:67:c2:fd:e3:9a:e8:07:ba:e3: bc:8c:2a:29:37:e5:56:91:35:fc:00:df:72:b1:e6:25:18:f5: d8:75:63:c7:22:69:8b:b5:e4:78:2f:49:61:2f:79:d2:ba:39: 4d:e2:8f:90:b8:3f:65:ed:24:ab:4d:36:fb:72:5a:c2:b2:a1: 98:37:b8:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eAeWQuq6iogs2Pquw0h0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NTNiNGMzMTUxMWI1NDgyZWI4NDI1YTM5MTM3OWQ0M2Zk NmQ0NTUwHhcNMjUxMjA2MjEwMTE1WhcNMjUxMjA3MjEwMTE1WjAzMTEwLwYDVQQD Eyg5MzdjZDZhODUxNWU2ODRhMjQwNWIzZDI2OWVkZTZjNDM1MjQ2ODQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVXFN8Mx+6tyoXetCGshjHy6UUVE LwJ8XdKPWozCQHRvx6UCQgoU4NqGaYg7gwsuNK4wxRqSQNdgHSgWmHksZlOSo1Oa wBiujpTQH3q94LGDoxoQUFY7ugdSzqZR3v7tBRcKJ5KY7U7O5qz+C1rmJ2X1PHqk 4Y6VaVEc/rQ/Y8mnWO0G4uWaPPk+JBrQROm+Ehuegps4pV4IqhQyKTwVUEsA//wt IWTpvIm2OpAqJgsfi3YfXiWCxS3ls/23Lub/ZjSSYYEgMcURI6F7Dm9z/GXqgKgI CLFmM14A82LjH/smYkMeeOEo0qWkN6clBpJivuROtqKgazJJDFFftoPfYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJN81qhRXmhKJAWz0mnt5sQ1JGhBMB8GA1UdIwQY MBaAFPZTtMMVEbVILrhCWjkTedQ/1tRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWxPMHd4VVJ0VWd1dUVKYU9STjUxRF9XMUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82ZjYyODUtMTI5ZC00MWY2LWI4MzAt MzE5MzY4ZDkxZmMzLzEvOWxPMHd4VVJ0VWd1dUVKYU9STjUxRF9XMUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy82ZjYyODUtMTI5ZC00MWY2LWI4MzAtMzE5MzY4ZDkxZmMz LzEvOWxPMHd4VVJ0VWd1dUVKYU9STjUxRF9XMUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmZcM8pBk TeafCQ3g9krZUtk0FEz+FgZ+VopgGpM5uCsSFbTGVkGWrNLvLIST338WVn3Aw519 HFOYNw5TzVIbTgCznmhEGiybKe/LFqGB2m/sGnb1VmU9Yt1LuOApoYYL2ELv2I/i bJYgJ1IiDtCP8F9oyAuV+1Md2HLODJyL8NtbKrZwUKUajgBQhRfksSWEDdTi/Gik R2B/iIt581Y56PP68oXLC5Z3ut1z8Psmd1DsyEb2YVeYK/URBA7UZ8L945roB7rj vIwqKTflVpE1/ADfcrHmJRj12HVjxyJpi7XkeC9JYS950ro5TeKPkLg/Ze0kq002 +3JawrKhmDe4YA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:33:16 2025 by rpki-client