This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft File: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft (raw, json) Hash identifier: ab2WrDvXGH050zN5ce2qeSL0+LwelLq1d8jwm3Feb1A= Subject key identifier: 74:D1:3A:51:C0:A4:63:D5:4B:EC:B2:F6:C0:CC:4C:3D:E8:12:4C:0E Authority key identifier: F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95 Certificate issuer: /CN=f42d0cad0eaed1a61f478fb0919c7a4322724695 Certificate serial: 019AF164399F58624FBAD00C9122F46B713F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft Manifest number: 0C95 Signing time: Sat 06 Dec 2025 02:01:08 +0000 Manifest this update: Sat 06 Dec 2025 02:01:08 +0000 Manifest next update: Sun 07 Dec 2025 02:01:08 +0000 Files and hashes: 1: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl (hash: A8Sp/TJBEmkhjDzdepRf83j9uTP/4b/Wi9fTOc1HG/0=) 2: BfiNOagjub-Q5UhmAEUO1BegvlM.roa (hash: z7UGbr4hGM96gAGkSVL5gy0uNjYzSjUeofOhu3xqo/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:39:9f:58:62:4f:ba:d0:0c:91:22:f4:6b:71:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f42d0cad0eaed1a61f478fb0919c7a4322724695 Validity Not Before: Dec 6 02:01:08 2025 GMT Not After : Dec 7 02:01:08 2025 GMT Subject: CN=74d13a51c0a463d54becb2f6c0cc4c3de8124c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e9:06:63:0e:f0:f3:51:d8:45:24:07:9f:2f: bc:ef:c4:77:36:28:41:8a:a9:2a:58:a4:d7:ce:69: d9:85:f7:03:be:b6:05:90:cc:55:05:ba:d8:25:72: 3f:2e:93:68:5b:68:c8:0e:c6:ec:20:ab:b7:7e:06: 2b:d8:75:d4:f7:cf:3a:5b:e0:06:b0:2c:41:7a:12: d9:5e:6a:b0:a3:08:bd:68:5b:96:9a:54:12:d7:ea: dd:c4:5f:9f:aa:09:21:1b:2c:80:34:c8:f7:3f:0b: e9:e4:9c:b2:26:11:15:2d:a0:8d:bf:5b:e4:f7:ea: bd:6c:d0:cc:9e:b7:fc:c8:75:16:aa:98:b6:5e:bc: 28:e3:fc:13:ce:89:66:5d:c2:23:13:1e:0e:b2:cf: 90:52:33:7a:90:7a:46:a2:e6:ef:ee:9e:67:8a:a0: 65:a8:d8:3b:6e:72:ed:e6:0e:71:28:6f:93:cb:b0: 83:a7:54:24:6a:00:b3:9e:b8:7a:c3:37:7b:64:7e: 27:80:1b:d5:cb:27:01:11:01:b1:5b:b4:61:da:14: fb:a0:d4:17:fb:b8:5b:ea:23:76:f6:1c:77:97:79: fa:93:72:f2:c0:59:19:a4:2e:40:89:d3:5c:eb:73: df:ae:06:4a:e7:8d:ab:b5:4f:dd:e0:a4:3e:1c:52: c7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:D1:3A:51:C0:A4:63:D5:4B:EC:B2:F6:C0:CC:4C:3D:E8:12:4C:0E X509v3 Authority Key Identifier: keyid:F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:66:f6:d6:1b:e4:ed:54:4b:43:86:67:60:ef:7c:5f:7f:06: fb:cc:b6:9e:a8:53:dc:6f:6b:f5:c1:4e:5f:e0:bf:52:ab:57: f0:fe:68:83:9b:89:eb:04:1e:02:80:1f:1a:f3:83:86:ef:8f: 87:2a:3a:26:8b:33:e7:3d:23:19:e5:69:3c:92:09:e2:e9:d6: 4b:0b:68:61:1a:71:d3:d5:af:de:2e:39:1f:95:df:a0:d4:bb: 55:20:bb:fa:2e:c4:fd:a5:b7:88:b3:41:80:99:f5:e1:52:7e: 89:5b:0a:00:3f:6e:65:b5:f1:06:f3:53:05:a9:de:ef:31:e3: 06:9d:21:75:ec:81:46:03:3f:6d:6d:14:8b:9b:93:0b:69:3a: e8:25:8a:fc:27:e1:2a:a3:fb:3e:5f:2f:7d:a7:35:22:1f:47: 9e:94:32:c3:24:c2:3c:8a:3d:63:e6:a1:ed:3b:8f:4c:9c:71: 60:a2:e0:d3:b4:dc:29:12:55:2d:36:a1:32:4f:b0:64:8c:a9: 39:e4:ab:62:df:23:32:e9:ad:4e:52:70:75:d2:bd:c5:85:e9: 81:98:54:a7:18:3b:ee:61:9a:3b:d7:ab:37:07:fa:9d:1e:5b: 7e:8d:09:38:60:e3:38:08:63:ef:58:1a:be:31:51:e5:df:a2: 1f:7a:a7:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDmfWGJPutAMkSL0a3E/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0MmQwY2FkMGVhZWQxYTYxZjQ3OGZiMDkxOWM3YTQzMjI3 MjQ2OTUwHhcNMjUxMjA2MDIwMTA4WhcNMjUxMjA3MDIwMTA4WjAzMTEwLwYDVQQD Eyg3NGQxM2E1MWMwYTQ2M2Q1NGJlY2IyZjZjMGNjNGMzZGU4MTI0YzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwukGYw7w81HYRSQHny+878R3NihB iqkqWKTXzmnZhfcDvrYFkMxVBbrYJXI/LpNoW2jIDsbsIKu3fgYr2HXU9886W+AG sCxBehLZXmqwowi9aFuWmlQS1+rdxF+fqgkhGyyANMj3Pwvp5JyyJhEVLaCNv1vk 9+q9bNDMnrf8yHUWqpi2Xrwo4/wTzolmXcIjEx4Oss+QUjN6kHpGoubv7p5niqBl qNg7bnLt5g5xKG+Ty7CDp1QkagCznrh6wzd7ZH4ngBvVyycBEQGxW7Rh2hT7oNQX +7hb6iN29hx3l3n6k3LywFkZpC5AidNc63PfrgZK542rtU/d4KQ+HFLHpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTROlHApGPVS+yy9sDMTD3oEkwOMB8GA1UdIwQY MBaAFPQtDK0OrtGmH0ePsJGcekMickaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUMwTXJRNnUwYVlmUjQtd2taeDZReUp5UnBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kZmY0ZDAtMWQwYS00OTUxLThiMjct N2Y3Mzk0YmU4Y2U0LzEvOUMwTXJRNnUwYVlmUjQtd2taeDZReUp5UnBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9kZmY0ZDAtMWQwYS00OTUxLThiMjctN2Y3Mzk0YmU4Y2U0 LzEvOUMwTXJRNnUwYVlmUjQtd2taeDZReUp5UnBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGb21hvk 7VRLQ4ZnYO98X38G+8y2nqhT3G9r9cFOX+C/UqtX8P5og5uJ6wQeAoAfGvODhu+P hyo6Josz5z0jGeVpPJIJ4unWSwtoYRpx09Wv3i45H5XfoNS7VSC7+i7E/aW3iLNB gJn14VJ+iVsKAD9uZbXxBvNTBane7zHjBp0hdeyBRgM/bW0Ui5uTC2k66CWK/Cfh KqP7Pl8vfac1Ih9HnpQywyTCPIo9Y+ah7TuPTJxxYKLg07TcKRJVLTahMk+wZIyp OeSrYt8jMumtTlJwddK9xYXpgZhUpxg77mGaO9erNwf6nR5bfo0JOGDjOAhj71ga vjFR5d+iH3qnJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:09 2025 by rpki-client