This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft File: 9xPX34BXC8z7JzeT8ApdRshT5Jo.mft (raw, json) Hash identifier: jBIfbek7iEM0gPh8bvvt9j/3K/aBwCyhp6NsCY1NR+Y= Subject key identifier: AB:E7:F9:F2:5D:BE:EF:AA:15:81:32:30:F4:3E:DE:F6:39:D8:09:8D Authority key identifier: F7:13:D7:DF:80:57:0B:CC:FB:27:37:93:F0:0A:5D:46:C8:53:E4:9A Certificate issuer: /CN=f713d7df80570bccfb273793f00a5d46c853e49a Certificate serial: 019B31C393BF7A8E2F65DD103E39301B5DC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xPX34BXC8z7JzeT8ApdRshT5Jo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft Manifest number: 06A5 Signing time: Thu 18 Dec 2025 14:00:59 +0000 Manifest this update: Thu 18 Dec 2025 14:00:59 +0000 Manifest next update: Fri 19 Dec 2025 14:00:59 +0000 Files and hashes: 1: 9xPX34BXC8z7JzeT8ApdRshT5Jo.crl (hash: z7/VhfKWq2v5SwuDTNf1jwPjGxWp29CIDDpyIRcAsQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft rsync://rpki.ripe.net/repository/DEFAULT/9xPX34BXC8z7JzeT8ApdRshT5Jo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:93:bf:7a:8e:2f:65:dd:10:3e:39:30:1b:5d:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f713d7df80570bccfb273793f00a5d46c853e49a Validity Not Before: Dec 18 14:00:59 2025 GMT Not After : Dec 19 14:00:59 2025 GMT Subject: CN=abe7f9f25dbeefaa15813230f43edef639d8098d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e4:d4:09:73:68:49:8f:1f:d4:c5:e5:ec:ec: ae:35:ab:c9:6f:e1:fb:e6:b8:d4:f5:c8:c2:2b:e5: ce:98:9f:d6:f0:51:a1:81:ec:54:d4:b5:e7:9c:24: 29:d9:c0:c3:78:95:e0:2d:c6:bc:59:59:cf:f0:06: 0e:f0:be:74:7b:96:0c:61:47:7b:6b:b6:ac:41:2e: 8c:fb:10:9c:76:94:28:1e:8e:a1:d3:d7:6d:41:2d: 82:00:c4:c6:fc:66:d2:34:7c:36:30:e4:94:66:2a: 76:d1:99:81:54:00:a7:b0:b1:c8:a5:1c:c4:4a:b6: 43:b4:02:4e:05:d3:fb:eb:ca:a0:dc:90:7c:f9:46: fd:a6:83:51:91:61:af:7a:a8:f1:9a:8c:2c:cc:6c: ac:5e:75:cc:c8:8a:63:5e:55:f4:8d:63:cb:19:48: 18:93:92:b6:e5:18:ba:b3:9b:91:78:43:61:21:d0: cf:c0:0f:44:82:70:08:64:ba:3d:47:9b:ba:ee:28: 1c:30:ea:9b:b1:45:6a:d3:93:78:d9:88:65:88:3b: e1:11:18:5a:29:73:da:e3:63:c8:0e:1a:23:15:e2: 00:93:47:e7:73:38:7c:bd:d2:35:f2:12:5d:40:04: c7:3f:41:53:39:da:27:98:02:14:1a:b1:69:0f:2e: 99:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E7:F9:F2:5D:BE:EF:AA:15:81:32:30:F4:3E:DE:F6:39:D8:09:8D X509v3 Authority Key Identifier: keyid:F7:13:D7:DF:80:57:0B:CC:FB:27:37:93:F0:0A:5D:46:C8:53:E4:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xPX34BXC8z7JzeT8ApdRshT5Jo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:38:1f:9c:e9:ea:b4:91:27:f6:1c:eb:ec:48:a5:f1:42:1a: 90:e6:7e:7a:0c:64:aa:f5:1c:49:6c:01:16:8f:f7:c3:59:c3: 70:f5:6e:9d:bd:e4:b2:10:9c:01:ed:b9:d4:27:e1:44:f3:07: af:56:7b:d2:7a:ce:91:84:8c:e9:8b:5f:10:34:54:ab:96:d0: 8a:6d:29:9d:27:91:8e:cf:9f:b4:e3:20:a0:75:05:b0:52:80: f5:4a:e5:2c:27:cf:cb:3e:44:e7:c5:a5:78:63:45:a3:8c:e8: 74:01:13:04:70:1d:38:4c:4d:86:88:fd:3a:35:b0:c2:f4:48: 22:91:3b:4f:19:64:b3:0a:9d:f1:9f:13:4e:a0:b5:e0:00:4b: d4:54:a9:d9:0e:95:55:61:09:c3:6c:fb:dd:18:e9:25:ef:69: 70:8e:e2:b1:57:f3:52:47:de:1e:81:a7:33:39:55:f2:36:f3: 19:10:45:16:bd:60:df:04:87:58:98:c5:76:7f:69:45:55:bc: 29:cb:3b:57:66:07:1b:bd:ea:53:9e:27:04:f8:3d:1e:58:38: c0:04:5f:9c:62:7c:54:48:bb:df:0c:03:db:aa:70:fd:57:10: ad:d6:73:a5:dc:8e:f7:e4:3e:77:bd:8c:51:65:0a:ad:62:2c: 33:c3:f3:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw5O/eo4vZd0QPjkwG13FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MTNkN2RmODA1NzBiY2NmYjI3Mzc5M2YwMGE1ZDQ2Yzg1 M2U0OWEwHhcNMjUxMjE4MTQwMDU5WhcNMjUxMjE5MTQwMDU5WjAzMTEwLwYDVQQD EyhhYmU3ZjlmMjVkYmVlZmFhMTU4MTMyMzBmNDNlZGVmNjM5ZDgwOThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+TUCXNoSY8f1MXl7OyuNavJb+H7 5rjU9cjCK+XOmJ/W8FGhgexU1LXnnCQp2cDDeJXgLca8WVnP8AYO8L50e5YMYUd7 a7asQS6M+xCcdpQoHo6h09dtQS2CAMTG/GbSNHw2MOSUZip20ZmBVACnsLHIpRzE SrZDtAJOBdP768qg3JB8+Ub9poNRkWGveqjxmowszGysXnXMyIpjXlX0jWPLGUgY k5K25Ri6s5uReENhIdDPwA9EgnAIZLo9R5u67igcMOqbsUVq05N42YhliDvhERha KXPa42PIDhojFeIAk0fnczh8vdI18hJdQATHP0FTOdonmAIUGrFpDy6Z1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvn+fJdvu+qFYEyMPQ+3vY52AmNMB8GA1UdIwQY MBaAFPcT19+AVwvM+yc3k/AKXUbIU+SaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXhQWDM0QlhDOHo3SnplVDhBcGRSc2hUNUpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yM2ExOWEtMzBkYi00ODcyLWFiNzMt NTI4N2FmYzEwZTY4LzEvOXhQWDM0QlhDOHo3SnplVDhBcGRSc2hUNUpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8yM2ExOWEtMzBkYi00ODcyLWFiNzMtNTI4N2FmYzEwZTY4 LzEvOXhQWDM0QlhDOHo3SnplVDhBcGRSc2hUNUpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUTgfnOnq tJEn9hzr7Eil8UIakOZ+egxkqvUcSWwBFo/3w1nDcPVunb3kshCcAe251CfhRPMH r1Z70nrOkYSM6YtfEDRUq5bQim0pnSeRjs+ftOMgoHUFsFKA9UrlLCfPyz5E58Wl eGNFo4zodAETBHAdOExNhoj9OjWwwvRIIpE7Txlkswqd8Z8TTqC14ABL1FSp2Q6V VWEJw2z73RjpJe9pcI7isVfzUkfeHoGnMzlV8jbzGRBFFr1g3wSHWJjFdn9pRVW8 Kcs7V2YHG73qU54nBPg9Hlg4wARfnGJ8VEi73wwD26pw/VcQrdZzpdyO9+Q+d72M UWUKrWIsM8Pzkg== -----END CERTIFICATE-----Generated at Thu Dec 18 17:50:36 2025 by rpki-client