This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft File: 9yR1sGTeionxUD6u_H1yrczzihY.mft (raw, json) Hash identifier: RTzJpDSbn12Fo+M3CqIzRNU+v5JPbh5CGgRG46eRCOc= Subject key identifier: 50:ED:C9:E7:BA:6E:10:97:39:2B:F5:61:BF:DD:5E:55:85:12:5F:CF Authority key identifier: F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16 Certificate issuer: /CN=f72475b064de8a89f1503eaefc7d72adccf38a16 Certificate serial: 019AF4656075F0A523DBA51C750040777261 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 16:01:15 +0000 Manifest this update: Sat 06 Dec 2025 16:01:15 +0000 Manifest next update: Sun 07 Dec 2025 16:01:15 +0000 Files and hashes: 1: 9yR1sGTeionxUD6u_H1yrczzihY.crl (hash: AmOFxRmaFyow+ml10nVVjAOXv29OXPziUGokLsrVOWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:60:75:f0:a5:23:db:a5:1c:75:00:40:77:72:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f72475b064de8a89f1503eaefc7d72adccf38a16 Validity Not Before: Dec 6 16:01:15 2025 GMT Not After : Dec 7 16:01:15 2025 GMT Subject: CN=50edc9e7ba6e1097392bf561bfdd5e5585125fcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bc:08:4e:17:be:59:cc:e2:6b:c4:9d:9b:c9: 09:a2:4d:8e:e6:ce:9a:ea:f4:c9:ae:0b:fd:a5:37: 98:61:3e:21:22:33:6e:d6:14:5b:56:c4:b2:b3:77: ab:ba:5f:78:c3:26:60:e5:f1:a5:f5:ea:ae:75:f0: 0e:31:0f:78:8e:cf:78:8b:db:3a:03:ad:86:72:e1: 04:77:e0:d2:f9:86:0b:c1:89:a4:f7:a1:05:db:79: b7:b8:7b:df:0b:44:88:74:2d:bb:da:38:c0:80:61: c9:44:9e:67:7d:6e:19:3a:68:af:44:c6:cb:e4:05: 75:60:7d:52:8f:5c:7f:94:0a:d3:e1:9c:d2:9b:46: 71:7b:c7:37:38:8a:3c:68:30:8d:80:e6:96:25:26: c4:c5:d9:62:bc:d3:20:c5:0f:98:06:0d:16:d1:37: 28:1f:a6:92:b1:9e:08:d2:fc:fa:71:d2:ee:01:cd: 52:ef:24:e3:1a:1f:dd:28:b2:a0:78:4f:d6:b6:00: 4b:8e:e1:1d:e9:2f:3d:f9:66:33:f0:a0:dc:ce:58: 64:83:2b:de:f1:6b:6b:99:a6:d0:98:d7:4f:e8:0e: 26:65:3c:d5:d6:0f:63:59:29:24:2c:72:fe:70:12: 0c:c0:24:16:fa:a5:54:05:1e:c4:b3:46:cc:14:cc: d0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:ED:C9:E7:BA:6E:10:97:39:2B:F5:61:BF:DD:5E:55:85:12:5F:CF X509v3 Authority Key Identifier: keyid:F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f8:a3:e1:a0:38:d9:a4:ad:b3:7f:53:72:d9:39:16:8b:14: ec:ef:08:cb:97:44:df:4e:c9:a7:b4:34:99:25:c5:e3:e9:ba: 87:ee:f0:5a:f5:89:6e:ca:c7:fb:cb:42:b7:65:d9:02:8b:9e: ab:b3:94:e6:b0:2c:13:87:28:4a:b4:b1:2e:45:a3:78:24:61: 83:79:6e:95:c5:1e:d2:4c:6e:fe:32:95:c2:94:fd:c4:56:08: 14:4b:3a:e8:5d:29:10:30:99:fa:b7:8b:8c:69:0d:c2:b7:f3: 5c:0a:3b:03:73:6c:cc:70:e8:f9:63:4b:e6:3e:7b:fe:53:84: e9:27:59:54:e3:51:b8:54:70:7b:ac:c6:ab:d0:bb:5d:c5:bd: 94:81:2f:74:35:de:44:68:81:9e:e7:7c:0d:14:a7:59:24:32: 15:54:54:20:2e:e5:be:65:0a:88:c4:17:a5:ba:08:7e:17:6c: 79:b3:9b:1c:2f:2d:87:5f:ea:5a:a7:c6:26:23:75:2a:63:7a: b5:97:00:3d:74:b7:bc:65:ee:9a:e0:cf:71:8d:02:d4:18:06: 4e:f9:23:36:09:ca:b9:5f:77:1d:de:7d:d9:c0:68:b9:78:a6: 66:2e:f2:e4:17:e1:bc:17:4c:7a:2f:85:ab:3e:e5:b7:df:c8: 74:e3:e0:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZWB18KUj26UcdQBAd3JhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MjQ3NWIwNjRkZThhODlmMTUwM2VhZWZjN2Q3MmFkY2Nm MzhhMTYwHhcNMjUxMjA2MTYwMTE1WhcNMjUxMjA3MTYwMTE1WjAzMTEwLwYDVQQD Eyg1MGVkYzllN2JhNmUxMDk3MzkyYmY1NjFiZmRkNWU1NTg1MTI1ZmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLwIThe+Wczia8Sdm8kJok2O5s6a 6vTJrgv9pTeYYT4hIjNu1hRbVsSys3erul94wyZg5fGl9equdfAOMQ94js94i9s6 A62GcuEEd+DS+YYLwYmk96EF23m3uHvfC0SIdC272jjAgGHJRJ5nfW4ZOmivRMbL 5AV1YH1Sj1x/lArT4ZzSm0Zxe8c3OIo8aDCNgOaWJSbExdlivNMgxQ+YBg0W0Tco H6aSsZ4I0vz6cdLuAc1S7yTjGh/dKLKgeE/WtgBLjuEd6S89+WYz8KDczlhkgyve 8WtrmabQmNdP6A4mZTzV1g9jWSkkLHL+cBIMwCQW+qVUBR7Es0bMFMzQpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDtyee6bhCXOSv1Yb/dXlWFEl/PMB8GA1UdIwQY MBaAFPckdbBk3oqJ8VA+rvx9cq3M84oWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXlSMXNHVGVpb254VUQ2dV9IMXlyY3p6aWhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy85MGYzNmUtZDM4Zi00ZWU5LWFjZWIt MjgzMjBhNWMwNzdiLzEvOXlSMXNHVGVpb254VUQ2dV9IMXlyY3p6aWhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy85MGYzNmUtZDM4Zi00ZWU5LWFjZWItMjgzMjBhNWMwNzdi LzEvOXlSMXNHVGVpb254VUQ2dV9IMXlyY3p6aWhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfij4aA4 2aSts39Tctk5FosU7O8Iy5dE307Jp7Q0mSXF4+m6h+7wWvWJbsrH+8tCt2XZAoue q7OU5rAsE4coSrSxLkWjeCRhg3lulcUe0kxu/jKVwpT9xFYIFEs66F0pEDCZ+reL jGkNwrfzXAo7A3NszHDo+WNL5j57/lOE6SdZVONRuFRwe6zGq9C7XcW9lIEvdDXe RGiBnud8DRSnWSQyFVRUIC7lvmUKiMQXpboIfhdsebObHC8th1/qWqfGJiN1KmN6 tZcAPXS3vGXumuDPcY0C1BgGTvkjNgnKuV93Hd592cBouXimZi7y5BfhvBdMei+F qz7lt9/IdOPg5A== -----END CERTIFICATE-----Generated at Sat Dec 6 22:20:49 2025 by rpki-client