This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft File: 9bMQ6dROhHDWzYAJWQZssA8pHvo.mft (raw, json) Hash identifier: 2k90w1lEov0cJBwMUgOp8VIBxE77KXKU3e3iiBN3VIo= Subject key identifier: 1F:96:3E:CC:79:9A:2C:D7:ED:45:69:1D:4D:83:59:B0:AC:6C:5F:3F Authority key identifier: F5:B3:10:E9:D4:4E:84:70:D6:CD:80:09:59:06:6C:B0:0F:29:1E:FA Certificate issuer: /CN=f5b310e9d44e8470d6cd800959066cb00f291efa Certificate serial: 019B2174CFD4AEBC7AC406F85ECFDEFDDCFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft Manifest number: 11DE Signing time: Mon 15 Dec 2025 10:01:01 +0000 Manifest this update: Mon 15 Dec 2025 10:01:01 +0000 Manifest next update: Tue 16 Dec 2025 10:01:01 +0000 Files and hashes: 1: 9bMQ6dROhHDWzYAJWQZssA8pHvo.crl (hash: tbCCZwaaN32FyFYVZGwrwb5p8VvcpLhs6dZbj9sSKGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.crl rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:74:cf:d4:ae:bc:7a:c4:06:f8:5e:cf:de:fd:dc:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5b310e9d44e8470d6cd800959066cb00f291efa Validity Not Before: Dec 15 10:01:01 2025 GMT Not After : Dec 16 10:01:01 2025 GMT Subject: CN=1f963ecc799a2cd7ed45691d4d8359b0ac6c5f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e1:02:d9:7c:9c:2f:6d:df:82:89:62:22:0f: a7:71:51:77:43:60:d7:92:2a:50:2b:3e:d8:ec:2b: bc:3c:80:89:7e:d6:b4:f1:d7:b8:39:64:c6:01:07: 7c:a2:08:1e:89:5c:f2:32:63:01:24:00:eb:db:d1: c3:48:2f:24:79:60:f7:62:24:a2:42:c8:29:60:c1: 91:9c:ac:86:4d:18:06:6d:38:12:6b:e9:4c:74:f9: c5:dd:53:f9:d2:a2:92:1a:ab:68:4b:64:c1:3c:a2: 3e:02:bc:45:b5:c2:2d:57:70:ce:0b:b9:ce:be:00: e0:91:c7:0e:ca:0e:6c:f0:7c:b2:b8:8a:61:d7:38: ee:31:82:ab:d5:6e:e4:9c:57:27:8c:35:d2:60:1a: 16:b0:a5:b7:4a:52:48:44:7b:5c:b1:54:6a:05:28: b3:ee:51:a1:4f:b0:e4:9f:4d:0a:84:94:93:35:13: 41:44:e8:f0:25:1b:58:ed:a1:3d:6e:b7:38:7d:ff: 1f:27:6c:c4:ef:9e:54:61:d2:22:bf:9a:e4:3f:ed: d9:51:af:f2:ee:57:37:26:82:e4:f4:70:ee:6c:04: 6a:28:40:e1:76:2c:59:2b:94:2a:cf:ae:97:33:1c: 5f:ae:11:c0:52:7c:bb:ce:e1:ae:9c:da:79:df:f4: 31:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:96:3E:CC:79:9A:2C:D7:ED:45:69:1D:4D:83:59:B0:AC:6C:5F:3F X509v3 Authority Key Identifier: keyid:F5:B3:10:E9:D4:4E:84:70:D6:CD:80:09:59:06:6C:B0:0F:29:1E:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:4b:89:ef:47:e2:da:82:50:36:0e:9a:61:7d:c9:86:f5:06: 8b:5c:52:5d:aa:17:03:c4:39:c0:2f:75:c9:3e:8b:27:ac:14: 61:71:49:39:eb:14:d2:51:95:9f:1f:7f:c1:89:83:d1:88:ef: d6:2d:35:aa:c1:2d:2b:3c:7a:d0:8e:d8:bf:da:8a:2d:3b:10: d5:76:73:75:15:c5:06:e5:cc:4f:40:3e:59:40:05:c4:43:46: 0c:45:84:31:2f:27:7b:8e:05:00:fd:a0:eb:6c:05:e5:2e:64: 51:cb:3e:2d:f4:47:20:cd:5d:e4:76:67:70:89:23:d9:3b:30: 71:bc:8c:c9:e3:7a:a6:04:68:5d:a8:a9:c1:7d:52:3f:80:f0: f5:31:3f:d9:82:74:7f:05:52:5f:d6:c9:37:82:b9:54:3a:35: 42:7d:f9:8d:84:cd:10:e0:a2:69:08:cd:d0:a7:ee:5e:1f:d8: b7:35:f8:bc:b0:5f:2d:d9:33:8b:c9:35:cc:98:e8:0e:dc:ef: 18:77:1b:ce:3c:d8:b8:3d:c2:37:c7:fa:c4:7d:aa:4f:e9:0a: 12:36:d1:62:21:e9:5c:37:23:04:9c:36:eb:b5:e1:9b:35:7d: f8:47:83:91:37:4f:83:c0:96:f3:6d:64:d2:16:d3:70:4c:e9: e2:d4:31:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdM/Urrx6xAb4Xs/e/dz7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1YjMxMGU5ZDQ0ZTg0NzBkNmNkODAwOTU5MDY2Y2IwMGYy OTFlZmEwHhcNMjUxMjE1MTAwMTAxWhcNMjUxMjE2MTAwMTAxWjAzMTEwLwYDVQQD EygxZjk2M2VjYzc5OWEyY2Q3ZWQ0NTY5MWQ0ZDgzNTliMGFjNmM1ZjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+EC2XycL23fgoliIg+ncVF3Q2DX kipQKz7Y7Cu8PICJfta08de4OWTGAQd8oggeiVzyMmMBJADr29HDSC8keWD3YiSi QsgpYMGRnKyGTRgGbTgSa+lMdPnF3VP50qKSGqtoS2TBPKI+ArxFtcItV3DOC7nO vgDgkccOyg5s8HyyuIph1zjuMYKr1W7knFcnjDXSYBoWsKW3SlJIRHtcsVRqBSiz 7lGhT7Dkn00KhJSTNRNBROjwJRtY7aE9brc4ff8fJ2zE755UYdIiv5rkP+3ZUa/y 7lc3JoLk9HDubARqKEDhdixZK5Qqz66XMxxfrhHAUny7zuGunNp53/Qx3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+WPsx5mizX7UVpHU2DWbCsbF8/MB8GA1UdIwQY MBaAFPWzEOnUToRw1s2ACVkGbLAPKR76MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWJNUTZkUk9oSERXellBSldRWnNzQThwSHZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9mNDhkZTEtOWYzMy00ZjBhLTg2NzYt ZTgzNmViM2QyZjFmLzEvOWJNUTZkUk9oSERXellBSldRWnNzQThwSHZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9mNDhkZTEtOWYzMy00ZjBhLTg2NzYtZTgzNmViM2QyZjFm LzEvOWJNUTZkUk9oSERXellBSldRWnNzQThwSHZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADUuJ70fi 2oJQNg6aYX3JhvUGi1xSXaoXA8Q5wC91yT6LJ6wUYXFJOesU0lGVnx9/wYmD0Yjv 1i01qsEtKzx60I7Yv9qKLTsQ1XZzdRXFBuXMT0A+WUAFxENGDEWEMS8ne44FAP2g 62wF5S5kUcs+LfRHIM1d5HZncIkj2TswcbyMyeN6pgRoXaipwX1SP4Dw9TE/2YJ0 fwVSX9bJN4K5VDo1Qn35jYTNEOCiaQjN0KfuXh/YtzX4vLBfLdkzi8k1zJjoDtzv GHcbzjzYuD3CN8f6xH2qT+kKEjbRYiHpXDcjBJw267XhmzV9+EeDkTdPg8CW821k 0hbTcEzp4tQxtg== -----END CERTIFICATE-----Generated at Mon Dec 15 20:14:44 2025 by rpki-client