This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft File: P9WU69efjdhbR5LpUzvkaBaohgY.mft (raw, json) Hash identifier: qQzyUm/6ca6IBm1L/4i283GcS7D55yOYai9fEmWllyM= Subject key identifier: 6E:C6:14:25:C8:31:0C:2A:84:C4:AC:4E:21:02:BB:AB:DE:C0:7A:80 Authority key identifier: 3F:D5:94:EB:D7:9F:8D:D8:5B:47:92:E9:53:3B:E4:68:16:A8:86:06 Certificate issuer: /CN=3fd594ebd79f8dd85b4792e9533be46816a88606 Certificate serial: 019AF088DC2F9EF43450E890E07C2250BF80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9WU69efjdhbR5LpUzvkaBaohgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft Manifest number: 12DF Signing time: Fri 05 Dec 2025 22:01:32 +0000 Manifest this update: Fri 05 Dec 2025 22:01:32 +0000 Manifest next update: Sat 06 Dec 2025 22:01:32 +0000 Files and hashes: 1: P9WU69efjdhbR5LpUzvkaBaohgY.crl (hash: VvWKXcrzTaG6J9XYex5y5nqOU+nU83AOXSVvyV66IUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.crl rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft rsync://rpki.ripe.net/repository/DEFAULT/P9WU69efjdhbR5LpUzvkaBaohgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:dc:2f:9e:f4:34:50:e8:90:e0:7c:22:50:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd594ebd79f8dd85b4792e9533be46816a88606 Validity Not Before: Dec 5 22:01:32 2025 GMT Not After : Dec 6 22:01:32 2025 GMT Subject: CN=6ec61425c8310c2a84c4ac4e2102bbabdec07a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c7:64:5b:19:a3:10:b6:b2:c0:ff:8a:d1:b8: f9:9b:23:d7:b5:f5:8b:46:5f:65:9d:88:e3:cb:b3: b4:c7:2b:bd:8a:a0:8f:b7:f8:f2:82:e2:5e:3a:2c: 7c:5d:50:b2:2a:55:da:94:0c:ac:23:06:f6:ed:66: e6:02:3a:d2:b6:f9:cc:fb:5a:3a:39:80:06:74:d8: c1:41:96:8f:51:f3:0a:a9:e0:60:04:be:cf:da:26: 37:fd:49:16:b5:89:06:5c:7e:28:16:55:19:b5:5d: 9a:b4:c2:97:2e:46:a8:4f:c2:c1:7c:24:29:52:68: a5:cc:19:3a:36:7a:c3:ee:ef:7f:8e:8d:52:6f:a7: 69:b2:2d:5f:00:35:6c:67:69:2a:6c:1c:74:19:0f: 60:03:cd:35:7c:c7:86:e1:61:86:77:4c:71:d9:30: 06:00:e6:ac:a5:18:ca:d8:3b:1c:af:16:5a:65:5a: 3a:49:dc:0a:03:ef:9c:d5:eb:83:5d:bf:d3:7a:41: 66:6d:47:d7:15:83:50:b0:eb:5e:a5:0d:46:ca:06: 39:09:0c:03:41:db:22:f4:8e:10:ee:36:18:f4:2d: da:b6:5f:05:e7:76:55:a0:7d:f3:27:bd:3a:c2:3d: 37:3e:da:02:8a:15:cb:06:25:02:13:3e:73:36:4e: 8c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C6:14:25:C8:31:0C:2A:84:C4:AC:4E:21:02:BB:AB:DE:C0:7A:80 X509v3 Authority Key Identifier: keyid:3F:D5:94:EB:D7:9F:8D:D8:5B:47:92:E9:53:3B:E4:68:16:A8:86:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9WU69efjdhbR5LpUzvkaBaohgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/30a86d-b972-415e-b8fa-6624691f6f13/1/P9WU69efjdhbR5LpUzvkaBaohgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:65:36:c8:88:e1:d4:e9:37:d3:78:cf:ea:bd:40:aa:2d:01: bb:a5:79:12:82:f9:84:03:b9:cc:70:21:a1:26:87:55:20:1d: 79:d7:2c:7b:62:20:6e:69:36:10:a4:d9:dd:40:ab:94:b0:f2: 17:fc:45:66:72:04:a9:cb:ca:82:69:3c:7a:71:b6:f1:51:52: 7f:9b:82:9f:6f:cc:c1:15:f6:dc:f3:8c:36:23:4e:f0:0d:72: 8a:be:46:fe:2b:a0:85:6c:f5:50:be:77:41:79:4f:b2:19:1d: f7:ea:e3:34:49:b6:b4:ce:80:fc:eb:13:80:8c:b5:cc:fd:bc: 70:f6:93:05:28:b9:e2:c7:d0:6c:b3:8e:b4:a5:32:ec:2b:71: 11:31:71:25:06:52:d5:3b:58:35:69:a3:cb:3b:69:ce:2a:42: 2a:48:78:0d:cc:92:27:67:b8:be:bd:59:65:2b:d8:02:cf:8a: 0a:62:13:4e:2a:a8:1f:6d:ca:3f:81:1c:90:69:ba:16:20:9e: bc:1d:89:27:18:91:89:67:ae:02:fc:f7:88:75:13:ec:c7:02: 65:26:1a:c7:51:32:b8:dd:68:89:e9:02:02:cf:16:83:7b:04: 7d:8b:13:57:99:b8:28:ad:d2:ae:de:14:a4:18:2a:9c:fd:a4: 66:ba:22:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiNwvnvQ0UOiQ4HwiUL+AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDU5NGViZDc5ZjhkZDg1YjQ3OTJlOTUzM2JlNDY4MTZh ODg2MDYwHhcNMjUxMjA1MjIwMTMyWhcNMjUxMjA2MjIwMTMyWjAzMTEwLwYDVQQD Eyg2ZWM2MTQyNWM4MzEwYzJhODRjNGFjNGUyMTAyYmJhYmRlYzA3YTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMdkWxmjELaywP+K0bj5myPXtfWL Rl9lnYjjy7O0xyu9iqCPt/jyguJeOix8XVCyKlXalAysIwb27WbmAjrStvnM+1o6 OYAGdNjBQZaPUfMKqeBgBL7P2iY3/UkWtYkGXH4oFlUZtV2atMKXLkaoT8LBfCQp UmilzBk6NnrD7u9/jo1Sb6dpsi1fADVsZ2kqbBx0GQ9gA801fMeG4WGGd0xx2TAG AOaspRjK2DscrxZaZVo6SdwKA++c1euDXb/TekFmbUfXFYNQsOtepQ1GygY5CQwD Qdsi9I4Q7jYY9C3atl8F53ZVoH3zJ706wj03PtoCihXLBiUCEz5zNk6MdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG7GFCXIMQwqhMSsTiECu6vewHqAMB8GA1UdIwQY MBaAFD/VlOvXn43YW0eS6VM75GgWqIYGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlXVTY5ZWZqZGhiUjVMcFV6dmthQmFvaGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zMGE4NmQtYjk3Mi00MTVlLWI4ZmEt NjYyNDY5MWY2ZjEzLzEvUDlXVTY5ZWZqZGhiUjVMcFV6dmthQmFvaGdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zMGE4NmQtYjk3Mi00MTVlLWI4ZmEtNjYyNDY5MWY2ZjEz LzEvUDlXVTY5ZWZqZGhiUjVMcFV6dmthQmFvaGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe2U2yIjh 1Ok303jP6r1Aqi0Bu6V5EoL5hAO5zHAhoSaHVSAdedcse2Igbmk2EKTZ3UCrlLDy F/xFZnIEqcvKgmk8enG28VFSf5uCn2/MwRX23POMNiNO8A1yir5G/iughWz1UL53 QXlPshkd9+rjNEm2tM6A/OsTgIy1zP28cPaTBSi54sfQbLOOtKUy7CtxETFxJQZS 1TtYNWmjyztpzipCKkh4DcySJ2e4vr1ZZSvYAs+KCmITTiqoH23KP4EckGm6FiCe vB2JJxiRiWeuAvz3iHUT7McCZSYax1EyuN1oiekCAs8Wg3sEfYsTV5m4KK3Srt4U pBgqnP2kZroiSg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:36 2025 by rpki-client