This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft File: 9bMQ6dROhHDWzYAJWQZssA8pHvo.mft (raw, json) Hash identifier: 27hcRhmUQKP/B5V4lEdhcoW9ERsUkh7voVyg8IZf4GU= Subject key identifier: 56:C5:B1:69:8F:0F:BC:3F:F8:14:A4:DE:9C:5B:05:E6:5B:45:55:C4 Authority key identifier: F5:B3:10:E9:D4:4E:84:70:D6:CD:80:09:59:06:6C:B0:0F:29:1E:FA Certificate issuer: /CN=f5b310e9d44e8470d6cd800959066cb00f291efa Certificate serial: 019AF12D01DF7DDB91D4C3C6AC4EDEEB3AE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft Manifest number: 11C5 Signing time: Sat 06 Dec 2025 01:00:49 +0000 Manifest this update: Sat 06 Dec 2025 01:00:49 +0000 Manifest next update: Sun 07 Dec 2025 01:00:49 +0000 Files and hashes: 1: 9bMQ6dROhHDWzYAJWQZssA8pHvo.crl (hash: O7ak6I5dnIrjqd7R1LVw5/N7FUqHjzDHYYJSYMqWGuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.crl rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:01:df:7d:db:91:d4:c3:c6:ac:4e:de:eb:3a:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5b310e9d44e8470d6cd800959066cb00f291efa Validity Not Before: Dec 6 01:00:49 2025 GMT Not After : Dec 7 01:00:49 2025 GMT Subject: CN=56c5b1698f0fbc3ff814a4de9c5b05e65b4555c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:54:66:40:0f:51:1f:8f:50:bb:73:3a:38:e2: 36:83:10:6e:43:f2:6a:ac:a7:47:94:01:10:5f:ca: 51:d5:cc:88:4a:01:09:bc:6c:e6:d1:9e:6c:57:23: 97:0e:00:1c:dc:af:7f:7f:f2:4b:ee:96:dc:fa:e7: 86:e6:96:8e:3c:48:67:d4:d9:b3:b9:2c:18:be:11: ab:e4:fd:f6:7e:9f:06:ca:20:70:ef:74:fe:62:cb: 8e:7e:fe:b2:4e:8b:7d:b0:ea:8f:2f:22:6b:69:70: f5:78:32:e1:0d:80:fa:f6:7b:ba:43:e2:02:9b:44: 10:ee:fb:0f:75:f8:27:2d:c3:7f:3d:aa:30:87:97: 05:4b:44:00:31:d9:c9:ec:10:47:19:6c:0e:c6:2b: 29:b8:19:fa:2c:fb:2e:9e:78:2e:5f:79:55:2a:b8: 54:94:ca:a1:38:b1:fa:28:4c:82:56:8e:a9:7f:95: 4e:aa:45:00:b4:06:0d:cc:11:b7:fe:a3:62:97:38: e6:3e:eb:60:9e:53:fa:9c:56:4f:98:10:64:84:e8: 70:06:1d:f3:69:b9:c2:e0:7d:21:80:e2:5f:4a:50: 1b:5a:71:31:5e:41:b8:e4:d9:93:01:33:12:e1:49: c7:31:b3:39:26:95:34:b4:95:b0:b8:c3:fe:04:6c: 49:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C5:B1:69:8F:0F:BC:3F:F8:14:A4:DE:9C:5B:05:E6:5B:45:55:C4 X509v3 Authority Key Identifier: keyid:F5:B3:10:E9:D4:4E:84:70:D6:CD:80:09:59:06:6C:B0:0F:29:1E:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bMQ6dROhHDWzYAJWQZssA8pHvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f48de1-9f33-4f0a-8676-e836eb3d2f1f/1/9bMQ6dROhHDWzYAJWQZssA8pHvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:d3:5c:22:1b:83:44:02:b8:c8:55:55:b0:cb:2f:26:03:6f: 2d:93:3c:e9:9d:9d:c1:07:85:78:da:51:3d:17:f7:f1:22:9d: 06:a4:47:95:41:46:4e:c1:15:f1:97:0a:1b:32:25:b1:1f:53: 09:27:7c:52:ec:33:00:a8:62:4b:cd:31:6a:ec:25:38:d7:c9: 36:a9:ae:2f:8e:c9:33:1e:62:d7:8b:7e:98:37:1e:ba:03:cb: 37:f5:ed:04:e3:ed:85:43:97:24:7c:ae:90:65:62:53:05:c9: a2:9d:20:6c:3c:27:05:23:7a:d4:d7:0e:bb:63:3d:54:fb:67: 78:7f:4c:6a:64:b6:eb:87:64:00:c4:58:10:bd:cc:4c:58:43: 79:c5:e8:74:da:9b:fc:c1:df:65:16:60:fc:d1:1a:89:65:fb: bd:f3:20:cb:48:3d:b7:a8:f2:b2:14:99:c5:5d:77:41:c8:41: 10:be:a7:2c:b3:47:79:bf:d2:53:20:14:0c:c8:78:f1:7b:9f: b9:7b:6a:aa:09:29:8b:37:e9:69:5d:bb:21:0d:45:3f:f5:75: 87:ee:59:7d:0c:32:97:7c:19:eb:7f:9e:7d:4f:6a:bd:5d:3d: d7:0f:80:f7:9c:dd:49:a6:61:8a:0a:5a:4f:ea:b3:38:07:e1: c7:aa:74:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQHffduR1MPGrE7e6zrjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1YjMxMGU5ZDQ0ZTg0NzBkNmNkODAwOTU5MDY2Y2IwMGYy OTFlZmEwHhcNMjUxMjA2MDEwMDQ5WhcNMjUxMjA3MDEwMDQ5WjAzMTEwLwYDVQQD Eyg1NmM1YjE2OThmMGZiYzNmZjgxNGE0ZGU5YzViMDVlNjViNDU1NWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVRmQA9RH49Qu3M6OOI2gxBuQ/Jq rKdHlAEQX8pR1cyISgEJvGzm0Z5sVyOXDgAc3K9/f/JL7pbc+ueG5paOPEhn1Nmz uSwYvhGr5P32fp8GyiBw73T+YsuOfv6yTot9sOqPLyJraXD1eDLhDYD69nu6Q+IC m0QQ7vsPdfgnLcN/Paowh5cFS0QAMdnJ7BBHGWwOxispuBn6LPsunnguX3lVKrhU lMqhOLH6KEyCVo6pf5VOqkUAtAYNzBG3/qNilzjmPutgnlP6nFZPmBBkhOhwBh3z abnC4H0hgOJfSlAbWnExXkG45NmTATMS4UnHMbM5JpU0tJWwuMP+BGxJEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFbFsWmPD7w/+BSk3pxbBeZbRVXEMB8GA1UdIwQY MBaAFPWzEOnUToRw1s2ACVkGbLAPKR76MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWJNUTZkUk9oSERXellBSldRWnNzQThwSHZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9mNDhkZTEtOWYzMy00ZjBhLTg2NzYt ZTgzNmViM2QyZjFmLzEvOWJNUTZkUk9oSERXellBSldRWnNzQThwSHZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9mNDhkZTEtOWYzMy00ZjBhLTg2NzYtZTgzNmViM2QyZjFm LzEvOWJNUTZkUk9oSERXellBSldRWnNzQThwSHZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO9NcIhuD RAK4yFVVsMsvJgNvLZM86Z2dwQeFeNpRPRf38SKdBqRHlUFGTsEV8ZcKGzIlsR9T CSd8UuwzAKhiS80xauwlONfJNqmuL47JMx5i14t+mDceugPLN/XtBOPthUOXJHyu kGViUwXJop0gbDwnBSN61NcOu2M9VPtneH9MamS264dkAMRYEL3MTFhDecXodNqb /MHfZRZg/NEaiWX7vfMgy0g9t6jyshSZxV13QchBEL6nLLNHeb/SUyAUDMh48Xuf uXtqqgkpizfpaV27IQ1FP/V1h+5ZfQwyl3wZ63+efU9qvV091w+A95zdSaZhigpa T+qzOAfhx6p04A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:19:43 2025 by rpki-client