This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft File: 9yQQnyF3AuaYDbkFOo9HEPwKCno.mft (raw, json) Hash identifier: ddxNKD7hPrcqDKQaLmEEQlP1ezfxMSLJPqPw8L2nUac= Subject key identifier: CC:AE:D5:76:4E:DD:73:D2:6C:41:94:45:0A:3E:EB:CA:E4:31:87:6E Authority key identifier: F7:24:10:9F:21:77:02:E6:98:0D:B9:05:3A:8F:47:10:FC:0A:0A:7A Certificate issuer: /CN=f724109f217702e6980db9053a8f4710fc0a0a7a Certificate serial: 019AF42E4882E7A672B0F0CCCF374BC6C297 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yQQnyF3AuaYDbkFOo9HEPwKCno.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft Manifest number: 0272 Signing time: Sat 06 Dec 2025 15:01:05 +0000 Manifest this update: Sat 06 Dec 2025 15:01:05 +0000 Manifest next update: Sun 07 Dec 2025 15:01:05 +0000 Files and hashes: 1: 9yQQnyF3AuaYDbkFOo9HEPwKCno.crl (hash: nwL/DiDEThXNt6ad1E+57KI85LHhylYWrc9Z/nM85LQ=) 2: nFar_UOXP4QzN4-h1MF9qknQEIw.roa (hash: tJ5LZZ8cOfCs7MBCUeqrXfhErlPn41y+8yI8NHVM7o0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft rsync://rpki.ripe.net/repository/DEFAULT/9yQQnyF3AuaYDbkFOo9HEPwKCno.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:48:82:e7:a6:72:b0:f0:cc:cf:37:4b:c6:c2:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f724109f217702e6980db9053a8f4710fc0a0a7a Validity Not Before: Dec 6 15:01:05 2025 GMT Not After : Dec 7 15:01:05 2025 GMT Subject: CN=ccaed5764edd73d26c4194450a3eebcae431876e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0c:ad:28:2f:6f:48:7a:6d:ae:6b:4c:2b:a7: 24:c8:c6:ca:21:5a:c2:d1:5d:bb:9b:e4:a5:9c:20: 57:d5:a6:a7:1d:05:93:fe:c9:c0:cd:66:f3:bd:2d: b4:6e:78:f9:d1:6e:af:eb:60:9b:38:74:27:5e:bd: 9d:86:48:be:bf:ba:67:6e:59:95:c1:7a:0f:e9:81: 5d:65:61:07:e2:90:4d:16:1b:26:c5:79:8c:09:5b: c5:31:32:69:6b:a0:4d:f7:54:00:b0:d5:8c:8d:ac: 94:97:e4:60:62:af:d0:2a:ac:5f:50:58:e8:1d:07: e2:ed:72:39:4b:01:13:67:df:5f:32:fb:c5:0c:f9: 3a:0b:c1:53:75:6c:5c:3e:18:04:a4:04:95:c9:66: 69:12:4a:6d:fc:a4:7c:74:31:7a:ba:4c:e1:0e:68: eb:0b:92:01:35:3a:b3:af:c6:c0:43:df:37:e5:a1: 41:84:77:f5:4b:4b:11:17:50:78:a3:10:c3:05:eb: 96:44:07:83:57:f1:3b:2c:44:8e:00:36:38:85:25: 27:a9:48:54:96:5f:9b:a2:5b:45:1d:87:60:e2:3f: e2:c2:89:c3:c5:51:45:df:5f:33:1f:9d:d5:59:05: 02:4d:40:09:bd:4d:63:8d:54:db:80:58:62:23:a5: 07:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:AE:D5:76:4E:DD:73:D2:6C:41:94:45:0A:3E:EB:CA:E4:31:87:6E X509v3 Authority Key Identifier: keyid:F7:24:10:9F:21:77:02:E6:98:0D:B9:05:3A:8F:47:10:FC:0A:0A:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yQQnyF3AuaYDbkFOo9HEPwKCno.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:a8:7a:be:6e:1b:2b:9e:77:95:6d:51:6a:b7:6e:dc:9c:5b: 33:0d:3e:b0:f1:49:9f:cd:4e:89:c0:85:8c:7c:d7:8b:4e:99: 8b:7e:81:17:e6:79:e1:86:28:8d:e9:55:b0:8b:11:a4:4e:21: cc:0f:11:93:68:ef:8b:fb:a8:7c:c4:63:be:c7:21:ae:07:24: 27:ce:03:9e:79:b1:3f:01:a6:e6:4f:6d:69:3f:b5:57:3b:7e: 23:72:df:97:17:b4:70:b0:45:25:eb:d0:4e:45:90:b3:a6:1a: 14:f9:c1:61:a4:52:c3:84:87:0c:33:c7:73:2f:ac:8b:6a:3b: 52:55:38:90:d1:07:d6:d1:bc:50:dc:55:4c:8e:87:6f:11:25: 2b:89:b0:79:47:59:5e:8f:5e:81:7d:7b:42:9f:be:2c:56:5e: 1e:64:1f:13:b6:b6:c0:04:3c:5e:c5:62:c8:b9:8b:43:b6:2b: 3e:2e:0f:e3:ed:e7:cd:bb:82:ad:4c:44:98:4a:45:33:df:eb: 29:7b:7c:d0:39:6a:d1:d5:d3:3e:0c:58:8d:7a:53:2d:97:1d: 92:a5:fd:05:25:d8:61:4c:ef:ca:c4:90:ff:24:d8:86:9b:3f: 28:a4:8c:70:8c:88:28:56:b9:13:3d:9f:72:bd:74:22:98:38: 55:08:c1:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LkiC56ZysPDMzzdLxsKXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MjQxMDlmMjE3NzAyZTY5ODBkYjkwNTNhOGY0NzEwZmMw YTBhN2EwHhcNMjUxMjA2MTUwMTA1WhcNMjUxMjA3MTUwMTA1WjAzMTEwLwYDVQQD EyhjY2FlZDU3NjRlZGQ3M2QyNmM0MTk0NDUwYTNlZWJjYWU0MzE4NzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQytKC9vSHptrmtMK6ckyMbKIVrC 0V27m+SlnCBX1aanHQWT/snAzWbzvS20bnj50W6v62CbOHQnXr2dhki+v7pnblmV wXoP6YFdZWEH4pBNFhsmxXmMCVvFMTJpa6BN91QAsNWMjayUl+RgYq/QKqxfUFjo HQfi7XI5SwETZ99fMvvFDPk6C8FTdWxcPhgEpASVyWZpEkpt/KR8dDF6ukzhDmjr C5IBNTqzr8bAQ9835aFBhHf1S0sRF1B4oxDDBeuWRAeDV/E7LESOADY4hSUnqUhU ll+boltFHYdg4j/iwonDxVFF318zH53VWQUCTUAJvU1jjVTbgFhiI6UH9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyu1XZO3XPSbEGURQo+68rkMYduMB8GA1UdIwQY MBaAFPckEJ8hdwLmmA25BTqPRxD8Cgp6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXlRUW55RjNBdWFZRGJrRk9vOUhFUHdLQ25vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZDY3NjgtMDJlOS00M2RjLTgyZDgt YjJmNmJjM2UwYjM1LzEvOXlRUW55RjNBdWFZRGJrRk9vOUhFUHdLQ25vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8wZDY3NjgtMDJlOS00M2RjLTgyZDgtYjJmNmJjM2UwYjM1 LzEvOXlRUW55RjNBdWFZRGJrRk9vOUhFUHdLQ25vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGqh6vm4b K553lW1Rardu3JxbMw0+sPFJn81OicCFjHzXi06Zi36BF+Z54YYojelVsIsRpE4h zA8Rk2jvi/uofMRjvschrgckJ84DnnmxPwGm5k9taT+1Vzt+I3Lflxe0cLBFJevQ TkWQs6YaFPnBYaRSw4SHDDPHcy+si2o7UlU4kNEH1tG8UNxVTI6HbxElK4mweUdZ Xo9egX17Qp++LFZeHmQfE7a2wAQ8XsViyLmLQ7YrPi4P4+3nzbuCrUxEmEpFM9/r KXt80Dlq0dXTPgxYjXpTLZcdkqX9BSXYYUzvysSQ/yTYhps/KKSMcIyIKFa5Ez2f cr10Ipg4VQjB1w== -----END CERTIFICATE-----Generated at Sat Dec 6 20:00:58 2025 by rpki-client