This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft File: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft (raw, json) Hash identifier: oSrzpyp+jOPcuqxJlS7IshZjU2egU6aOafvWtcmRDPs= Subject key identifier: AC:C4:3C:A4:66:6D:B1:03:09:EA:7D:86:F9:4A:EC:4D:77:39:8E:5A Authority key identifier: 73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9 Certificate issuer: /CN=73d85f8438d73b5668e89cc692646f9487965fa9 Certificate serial: 019AF50B41D1701732693B142A281C944448 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft Manifest number: 0326 Signing time: Sat 06 Dec 2025 19:02:26 +0000 Manifest this update: Sat 06 Dec 2025 19:02:26 +0000 Manifest next update: Sun 07 Dec 2025 19:02:26 +0000 Files and hashes: 1: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl (hash: 0MH9t4jaS9cKpX8ynH19S9OxE8phTAjkl3I3x8vqJVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:41:d1:70:17:32:69:3b:14:2a:28:1c:94:44:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73d85f8438d73b5668e89cc692646f9487965fa9 Validity Not Before: Dec 6 19:02:26 2025 GMT Not After : Dec 7 19:02:26 2025 GMT Subject: CN=acc43ca4666db10309ea7d86f94aec4d77398e5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f5:95:28:5a:bb:b0:cb:20:76:d5:71:20:9e: 39:71:26:10:d2:85:75:14:5a:8f:1d:03:98:0b:e4: 9a:0c:18:45:78:9e:0a:b0:73:c5:44:c6:a3:90:64: e5:47:0a:69:4b:ad:15:26:ac:24:df:94:f8:b2:ed: e3:c1:0e:f5:5e:37:19:6e:43:fc:6c:32:8b:0e:06: d5:60:8e:cb:7c:38:59:4f:06:81:3e:2c:3f:3c:8b: 87:83:1f:09:f2:cd:9c:96:8b:d2:f9:f4:c1:25:5c: e8:19:fd:20:59:59:15:cb:99:ff:b4:38:8d:96:de: aa:83:c2:b2:82:10:6a:26:84:55:de:34:11:87:10: 3a:8e:d6:70:27:e2:e1:13:ff:eb:7f:ef:1c:8c:86: d4:7e:a1:83:60:ce:0c:74:d9:03:e6:dd:66:8b:f7: bf:5b:88:e1:45:ce:20:e1:1d:1c:0c:2d:c8:74:db: 48:a7:fd:00:b3:c8:bf:e7:f3:29:b9:7d:0a:0d:06: ba:97:66:04:d2:1f:8f:da:26:30:93:62:75:e2:85: 35:2b:c4:d6:c8:da:f3:f7:9b:0f:45:50:85:f7:81: 74:7f:39:9f:d1:a3:51:02:f2:a0:e3:a0:ff:6a:88: db:cb:7e:8d:4b:5c:be:04:49:2f:11:45:29:12:2d: 36:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C4:3C:A4:66:6D:B1:03:09:EA:7D:86:F9:4A:EC:4D:77:39:8E:5A X509v3 Authority Key Identifier: keyid:73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:37:a2:3e:5b:1a:56:a9:f6:e8:94:fc:2c:bf:e9:88:c0:a3: 31:84:54:a2:57:45:36:e5:96:0b:5e:57:c7:a3:bb:64:5c:53: ea:64:d5:b4:4d:9b:81:5f:ba:62:c2:11:ba:52:e8:7f:d3:b0: 6a:a8:27:b4:31:46:b2:73:f9:fc:11:a9:cd:79:e3:e1:e3:fb: 68:8c:92:4f:86:c5:cf:f9:34:72:ac:93:c6:f1:c5:40:e1:4d: d3:68:12:58:5f:c8:71:af:ca:49:a0:2a:40:d2:4f:d9:5b:25: 12:f7:35:41:12:8d:00:6a:b6:c8:2b:87:5d:14:11:1e:f5:a8: 4e:86:e2:a7:5b:b0:c6:ed:26:46:07:e4:6c:70:25:c1:cb:2d: f5:96:7a:b0:ac:84:ed:14:c9:75:d5:7e:7a:d8:8c:c7:44:06: 6e:3a:ff:bb:4e:6a:0e:0d:5e:1d:2d:2a:fb:b0:4e:90:7c:97: 87:e0:b3:7a:86:a4:2d:a4:3b:0d:28:b1:ed:b6:c2:7b:2f:ff: a4:a2:53:ea:d1:7a:ee:61:9a:45:6c:89:c9:c3:df:ef:55:9e: 1a:1e:7a:fe:5a:65:80:63:5c:72:70:21:78:05:9b:16:c3:e8: 6a:02:3e:da:e7:54:38:39:fa:98:bd:5a:5a:3b:89:e4:ab:4b: 47:81:b8:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C0HRcBcyaTsUKigclERIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZDg1Zjg0MzhkNzNiNTY2OGU4OWNjNjkyNjQ2Zjk0ODc5 NjVmYTkwHhcNMjUxMjA2MTkwMjI2WhcNMjUxMjA3MTkwMjI2WjAzMTEwLwYDVQQD EyhhY2M0M2NhNDY2NmRiMTAzMDllYTdkODZmOTRhZWM0ZDc3Mzk4ZTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfWVKFq7sMsgdtVxIJ45cSYQ0oV1 FFqPHQOYC+SaDBhFeJ4KsHPFRMajkGTlRwppS60VJqwk35T4su3jwQ71XjcZbkP8 bDKLDgbVYI7LfDhZTwaBPiw/PIuHgx8J8s2clovS+fTBJVzoGf0gWVkVy5n/tDiN lt6qg8KyghBqJoRV3jQRhxA6jtZwJ+LhE//rf+8cjIbUfqGDYM4MdNkD5t1mi/e/ W4jhRc4g4R0cDC3IdNtIp/0As8i/5/MpuX0KDQa6l2YE0h+P2iYwk2J14oU1K8TW yNrz95sPRVCF94F0fzmf0aNRAvKg46D/aojby36NS1y+BEkvEUUpEi02kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKzEPKRmbbEDCep9hvlK7E13OY5aMB8GA1UdIwQY MBaAFHPYX4Q41ztWaOicxpJkb5SHll+pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzloZmhEalhPMVpvNkp6R2ttUnZsSWVXWDZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9mNmQ0NzYtNWVjMS00MjdhLTgyZTAt YWVlMGM4MjQwOTllLzEvYzloZmhEalhPMVpvNkp6R2ttUnZsSWVXWDZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9mNmQ0NzYtNWVjMS00MjdhLTgyZTAtYWVlMGM4MjQwOTll LzEvYzloZmhEalhPMVpvNkp6R2ttUnZsSWVXWDZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhTeiPlsa Vqn26JT8LL/piMCjMYRUoldFNuWWC15Xx6O7ZFxT6mTVtE2bgV+6YsIRulLof9Ow aqgntDFGsnP5/BGpzXnj4eP7aIyST4bFz/k0cqyTxvHFQOFN02gSWF/Ica/KSaAq QNJP2VslEvc1QRKNAGq2yCuHXRQRHvWoTobip1uwxu0mRgfkbHAlwcst9ZZ6sKyE 7RTJddV+etiMx0QGbjr/u05qDg1eHS0q+7BOkHyXh+CzeoakLaQ7DSix7bbCey// pKJT6tF67mGaRWyJycPf71WeGh56/lplgGNccnAheAWbFsPoagI+2udUODn6mL1a WjuJ5KtLR4G4fw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:13:13 2025 by rpki-client