This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft File: 9rES1L7bpvNYUoqDcUG3SwkphZM.mft (raw, json) Hash identifier: gp0H1SJTqvkEXRAllkkWfNebouDDlFcGSNW22PQq8tE= Subject key identifier: 0C:E9:70:05:5A:B5:16:95:8E:C7:A6:2E:FA:8C:26:0C:B1:D4:80:17 Authority key identifier: F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93 Certificate issuer: /CN=f6b112d4bedba6f358528a837141b74b09298593 Certificate serial: 019AF465A99B1057C02C63FFE68B5847DC06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft Manifest number: 16B2 Signing time: Sat 06 Dec 2025 16:01:34 +0000 Manifest this update: Sat 06 Dec 2025 16:01:34 +0000 Manifest next update: Sun 07 Dec 2025 16:01:34 +0000 Files and hashes: 1: 9rES1L7bpvNYUoqDcUG3SwkphZM.crl (hash: ut96gxMPkkN2pE+nzj91p7FeQU83p06eoz5sDCGF6+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:a9:9b:10:57:c0:2c:63:ff:e6:8b:58:47:dc:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6b112d4bedba6f358528a837141b74b09298593 Validity Not Before: Dec 6 16:01:34 2025 GMT Not After : Dec 7 16:01:34 2025 GMT Subject: CN=0ce970055ab516958ec7a62efa8c260cb1d48017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:08:ca:c1:4e:d1:b8:4c:2c:25:64:d3:15:44: 3a:70:a6:26:e3:1d:4b:ab:d4:96:fa:e9:27:8e:6e: b8:a2:a5:d4:0b:78:fa:9b:19:94:5d:d6:ae:06:2f: 44:e5:a6:dc:65:1a:c9:a1:06:6b:39:3c:08:9d:24: 64:e1:b6:67:10:cc:0c:f3:d4:28:d4:c8:3c:d3:c6: ff:77:d9:3b:5e:18:f6:09:22:7d:db:b0:67:5d:5e: 80:1d:9b:f5:1d:a2:16:cb:e9:f8:36:ee:55:ea:8f: cc:7a:c7:f7:f1:0e:00:9b:48:0f:62:25:93:72:a9: 56:62:34:99:89:70:44:92:cc:63:a2:52:51:f5:92: bf:f2:ec:e8:c1:47:33:2b:76:7e:67:27:8f:15:dd: 88:e9:06:78:e6:c4:03:99:28:47:40:a4:a7:57:43: 63:ef:f6:c7:a3:0d:96:b3:71:b0:c3:2d:cc:4d:39: f7:c9:5e:de:97:35:a6:f3:7a:7b:b4:c9:11:4c:bc: ad:f7:2d:a5:b2:6d:ed:2c:48:18:76:64:5b:ba:3a: 77:73:3d:4f:89:9f:b9:36:a4:ce:20:ed:64:2d:8c: b6:4e:83:3f:5b:05:09:a9:1a:e5:d2:00:bc:c7:25: 11:10:6d:d6:e4:92:1c:76:8b:45:66:f9:e4:ba:47: 30:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E9:70:05:5A:B5:16:95:8E:C7:A6:2E:FA:8C:26:0C:B1:D4:80:17 X509v3 Authority Key Identifier: keyid:F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:96:38:47:55:0e:a6:34:eb:e1:0a:72:0d:4f:22:2b:f3:91: cc:93:9c:df:02:0a:5e:d0:f4:2d:9a:e8:e4:1b:e9:02:68:c5: d2:7d:85:89:6e:17:cf:bb:9e:8a:b3:46:3d:25:5e:90:34:d2: fa:a4:93:68:ff:6e:db:3a:3a:e3:0b:5e:2a:d0:f1:e6:9f:26: 48:43:50:c7:15:84:7c:47:a3:61:e8:13:3a:ac:c7:e3:77:de: 0c:a3:72:c8:6f:65:06:56:d2:a0:d9:b1:3a:a0:76:c9:2d:23: 61:ca:c7:aa:13:c5:d2:97:a3:ec:f6:5d:f9:ac:ce:66:9d:50: f1:9f:f7:4c:f3:9b:85:9a:78:67:90:2a:6c:67:db:60:7c:ba: 7f:c2:b7:62:6d:48:03:ff:93:dd:82:fd:bd:0b:49:24:71:45: 2e:8f:31:61:e1:26:73:d0:90:d3:6a:c1:de:22:8d:bd:b9:44: a7:b5:99:64:e1:9e:b2:92:b4:f5:cb:07:ea:9b:f9:6f:79:0c: 39:ce:5e:4e:f5:9d:09:d5:e1:1e:4d:ca:b5:16:de:46:5b:bf: 67:8b:6e:6c:ad:7a:88:8b:36:68:42:82:9c:49:56:97:81:38: db:9f:f8:79:97:81:d6:8a:a0:f7:9b:2a:4e:a0:63:ac:70:2b: 95:83:0a:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZambEFfALGP/5otYR9wGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YjExMmQ0YmVkYmE2ZjM1ODUyOGE4MzcxNDFiNzRiMDky OTg1OTMwHhcNMjUxMjA2MTYwMTM0WhcNMjUxMjA3MTYwMTM0WjAzMTEwLwYDVQQD EygwY2U5NzAwNTVhYjUxNjk1OGVjN2E2MmVmYThjMjYwY2IxZDQ4MDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQjKwU7RuEwsJWTTFUQ6cKYm4x1L q9SW+uknjm64oqXUC3j6mxmUXdauBi9E5abcZRrJoQZrOTwInSRk4bZnEMwM89Qo 1Mg808b/d9k7Xhj2CSJ927BnXV6AHZv1HaIWy+n4Nu5V6o/Mesf38Q4Am0gPYiWT cqlWYjSZiXBEksxjolJR9ZK/8uzowUczK3Z+ZyePFd2I6QZ45sQDmShHQKSnV0Nj 7/bHow2Ws3Gwwy3MTTn3yV7elzWm83p7tMkRTLyt9y2lsm3tLEgYdmRbujp3cz1P iZ+5NqTOIO1kLYy2ToM/WwUJqRrl0gC8xyUREG3W5JIcdotFZvnkukcwVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzpcAVatRaVjsemLvqMJgyx1IAXMB8GA1UdIwQY MBaAFPaxEtS+26bzWFKKg3FBt0sJKYWTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXJFUzFMN2Jwdk5ZVW9xRGNVRzNTd2twaFpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjkxNjctNjZlZS00NTNiLTllYTAt NGMzZWY0MWFlZDdmLzEvOXJFUzFMN2Jwdk5ZVW9xRGNVRzNTd2twaFpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8zZjkxNjctNjZlZS00NTNiLTllYTAtNGMzZWY0MWFlZDdm LzEvOXJFUzFMN2Jwdk5ZVW9xRGNVRzNTd2twaFpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE5Y4R1UO pjTr4QpyDU8iK/ORzJOc3wIKXtD0LZro5BvpAmjF0n2FiW4Xz7ueirNGPSVekDTS +qSTaP9u2zo64wteKtDx5p8mSENQxxWEfEejYegTOqzH43feDKNyyG9lBlbSoNmx OqB2yS0jYcrHqhPF0pej7PZd+azOZp1Q8Z/3TPObhZp4Z5AqbGfbYHy6f8K3Ym1I A/+T3YL9vQtJJHFFLo8xYeEmc9CQ02rB3iKNvblEp7WZZOGespK09csH6pv5b3kM Oc5eTvWdCdXhHk3KtRbeRlu/Z4tubK16iIs2aEKCnElWl4E425/4eZeB1oqg95sq TqBjrHArlYMK3g== -----END CERTIFICATE-----Generated at Sat Dec 6 20:58:57 2025 by rpki-client