This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.mft File: s9nxe5jDqWQThWY7jNW3X-HwpJg.mft (raw, json) Hash identifier: JeXFiEnEorqEC9zIaa1iW1kvIGAbvSE6rLKibu32Irk= Subject key identifier: E8:3B:52:51:ED:C0:28:CC:B7:BA:E5:70:E3:9E:8C:1B:65:D0:7C:34 Authority key identifier: B3:D9:F1:7B:98:C3:A9:64:13:85:66:3B:8C:D5:B7:5F:E1:F0:A4:98 Certificate issuer: /CN=b3d9f17b98c3a9641385663b8cd5b75fe1f0a498 Certificate serial: 019AF0F5E3508D0047C447A61379002CE133 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9nxe5jDqWQThWY7jNW3X-HwpJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.mft Manifest number: 175C Signing time: Sat 06 Dec 2025 00:00:37 +0000 Manifest this update: Sat 06 Dec 2025 00:00:37 +0000 Manifest next update: Sun 07 Dec 2025 00:00:37 +0000 Files and hashes: 1: s9nxe5jDqWQThWY7jNW3X-HwpJg.crl (hash: qsqG8Y8Q74qmjVz5iaNqh+pMV2hE6A4aXJdnLQrD4yE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.crl rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.mft rsync://rpki.ripe.net/repository/DEFAULT/s9nxe5jDqWQThWY7jNW3X-HwpJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:e3:50:8d:00:47:c4:47:a6:13:79:00:2c:e1:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d9f17b98c3a9641385663b8cd5b75fe1f0a498 Validity Not Before: Dec 6 00:00:37 2025 GMT Not After : Dec 7 00:00:37 2025 GMT Subject: CN=e83b5251edc028ccb7bae570e39e8c1b65d07c34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:26:37:b8:cf:be:0c:1c:dd:d8:65:42:44:29: 84:6a:b1:f7:fc:4b:7c:46:e5:cd:a3:ae:41:d8:f0: 0e:57:c6:66:dd:f6:ae:00:8f:03:2b:1e:c5:38:8c: cf:b6:b6:2d:ad:fa:f4:cd:03:97:eb:74:1f:d0:4d: 0f:82:17:84:38:6e:e0:4b:2e:ce:54:5e:4e:3c:3b: bc:57:96:d6:18:eb:39:43:3f:bf:7d:94:71:fa:d8: bf:65:5e:bc:0e:bc:07:36:41:88:5d:fb:d1:51:ee: 9d:9e:ba:e4:7e:d5:66:2b:92:55:c3:02:8f:3a:54: 36:00:35:4b:c1:57:0c:de:e6:65:cd:36:80:c2:b7: fd:59:3e:88:78:0a:3e:e3:23:bd:60:39:c7:6d:cb: ea:0e:23:a1:08:bb:d1:40:55:34:6c:89:40:57:64: 73:da:52:63:b6:70:7b:f8:0a:b0:1d:a5:f0:88:fd: a7:af:64:0e:50:6e:92:b4:af:d3:9f:71:82:71:d5: 73:9e:b5:61:c4:ed:68:06:ad:f7:4e:c0:40:77:35: f7:0d:a5:ea:30:ad:4c:ca:53:f8:0d:ef:8a:85:25: 87:03:d0:45:60:79:aa:84:c0:0f:27:26:c0:19:ff: 46:cb:8b:13:c7:02:e1:a6:6f:96:70:85:c3:03:f8: 2b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3B:52:51:ED:C0:28:CC:B7:BA:E5:70:E3:9E:8C:1B:65:D0:7C:34 X509v3 Authority Key Identifier: keyid:B3:D9:F1:7B:98:C3:A9:64:13:85:66:3B:8C:D5:B7:5F:E1:F0:A4:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9nxe5jDqWQThWY7jNW3X-HwpJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/5fe5e6-1a6f-46f1-a999-18ec6a008c56/1/s9nxe5jDqWQThWY7jNW3X-HwpJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:63:fc:66:4f:0b:1c:37:eb:f1:42:b9:00:ba:58:11:3a:46: cf:9d:a4:d3:b7:c7:aa:56:ac:b3:55:2a:97:d5:be:fa:d2:d5: 48:6b:6b:10:cb:30:5e:09:96:57:a4:df:33:b1:1e:ea:65:87: d7:7e:94:51:4b:f1:ca:35:ce:ce:24:74:aa:ce:17:68:c7:f3: d9:91:8e:06:60:85:3f:f7:fe:64:e2:5c:af:a6:41:e9:30:4b: 50:ac:af:ff:46:d7:08:b2:8f:3d:c3:bd:21:ff:e1:3d:08:ca: 8f:72:41:6b:cf:26:b4:ce:b6:dc:91:5c:30:36:19:49:3c:6c: e7:28:da:04:84:60:88:88:df:79:ba:a6:36:54:0f:1d:92:a9: db:06:e3:8c:31:8d:04:53:09:69:3a:19:a3:b3:3e:95:78:3a: 71:9d:b4:cc:f3:54:73:83:6c:9f:18:f6:64:d8:45:3e:87:8b: 87:3e:af:d6:e9:bc:40:03:4e:59:bf:18:f8:ba:87:ad:47:b3: a6:6a:fa:c0:be:09:f8:ea:8b:fa:fe:27:dc:2a:e7:a3:84:18: 5d:09:b9:25:49:79:08:77:6d:b9:38:e2:eb:1a:bd:7b:d3:ac: 86:b2:d6:04:13:0c:de:68:8c:93:fd:6e:52:58:76:37:96:ce: 17:94:ac:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9eNQjQBHxEemE3kALOEzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZDlmMTdiOThjM2E5NjQxMzg1NjYzYjhjZDViNzVmZTFm MGE0OTgwHhcNMjUxMjA2MDAwMDM3WhcNMjUxMjA3MDAwMDM3WjAzMTEwLwYDVQQD EyhlODNiNTI1MWVkYzAyOGNjYjdiYWU1NzBlMzllOGMxYjY1ZDA3YzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyY3uM++DBzd2GVCRCmEarH3/Et8 RuXNo65B2PAOV8Zm3fauAI8DKx7FOIzPtrYtrfr0zQOX63Qf0E0PgheEOG7gSy7O VF5OPDu8V5bWGOs5Qz+/fZRx+ti/ZV68DrwHNkGIXfvRUe6dnrrkftVmK5JVwwKP OlQ2ADVLwVcM3uZlzTaAwrf9WT6IeAo+4yO9YDnHbcvqDiOhCLvRQFU0bIlAV2Rz 2lJjtnB7+AqwHaXwiP2nr2QOUG6StK/Tn3GCcdVznrVhxO1oBq33TsBAdzX3DaXq MK1MylP4De+KhSWHA9BFYHmqhMAPJybAGf9Gy4sTxwLhpm+WcIXDA/griQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOg7UlHtwCjMt7rlcOOejBtl0Hw0MB8GA1UdIwQY MBaAFLPZ8XuYw6lkE4VmO4zVt1/h8KSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczlueGU1akRxV1FUaFdZN2pOVzNYLUh3cEpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi81ZmU1ZTYtMWE2Zi00NmYxLWE5OTkt MThlYzZhMDA4YzU2LzEvczlueGU1akRxV1FUaFdZN2pOVzNYLUh3cEpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi81ZmU1ZTYtMWE2Zi00NmYxLWE5OTktMThlYzZhMDA4YzU2 LzEvczlueGU1akRxV1FUaFdZN2pOVzNYLUh3cEpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2P8Zk8L HDfr8UK5ALpYETpGz52k07fHqlass1Uql9W++tLVSGtrEMswXgmWV6TfM7Ee6mWH 136UUUvxyjXOziR0qs4XaMfz2ZGOBmCFP/f+ZOJcr6ZB6TBLUKyv/0bXCLKPPcO9 If/hPQjKj3JBa88mtM623JFcMDYZSTxs5yjaBIRgiIjfebqmNlQPHZKp2wbjjDGN BFMJaToZo7M+lXg6cZ20zPNUc4Nsnxj2ZNhFPoeLhz6v1um8QANOWb8Y+LqHrUez pmr6wL4J+OqL+v4n3Crno4QYXQm5JUl5CHdtuTji6xq9e9OshrLWBBMM3miMk/1u Ulh2N5bOF5SsmA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:24:30 2025 by rpki-client