This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft File: 9WQDvByHTu8JuKE0QVWrw_BXWxU.mft (raw, json) Hash identifier: Mrknq8/auSpDTi8tHJgMUXbZUNO60Hq8FmN32hfYrMU= Subject key identifier: F3:CB:B7:5A:D3:C5:90:96:B1:6A:D9:AE:44:F7:61:DB:57:61:D1:C9 Authority key identifier: F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15 Certificate issuer: /CN=f56403bc1c874eef09b8a1344155abc3f0575b15 Certificate serial: 019AF276E8451FBE4ED233A90ECC06ECB55A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft Manifest number: 10D6 Signing time: Sat 06 Dec 2025 07:01:10 +0000 Manifest this update: Sat 06 Dec 2025 07:01:10 +0000 Manifest next update: Sun 07 Dec 2025 07:01:10 +0000 Files and hashes: 1: 9WQDvByHTu8JuKE0QVWrw_BXWxU.crl (hash: 2UqKjcK4ykyDc+Yy1KYWvublWsG46O3B82Z4eHWt7dA=) 2: UpxBSWugieKNTh9apeAkjKNDuVI.roa (hash: bk8A6HGGurxjqbD4+xEVgCvr+MLGdlWXb+9IzJcqkAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:e8:45:1f:be:4e:d2:33:a9:0e:cc:06:ec:b5:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f56403bc1c874eef09b8a1344155abc3f0575b15 Validity Not Before: Dec 6 07:01:10 2025 GMT Not After : Dec 7 07:01:10 2025 GMT Subject: CN=f3cbb75ad3c59096b16ad9ae44f761db5761d1c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0a:4f:cb:8a:8d:e8:ea:e8:96:7c:c7:fa:5b: cb:1d:5d:f9:a7:dc:65:9f:64:be:85:5d:0c:af:ab: 28:e3:1b:9c:bc:98:cc:2c:06:ae:eb:e1:77:44:d0: c2:15:af:0a:7f:35:68:c6:7c:65:e7:42:20:8d:e0: c3:8d:7f:61:d8:57:3a:ad:39:ed:bb:87:d6:09:93: 22:43:0f:45:3b:61:57:d6:44:37:bb:8b:5e:f3:2d: 1f:ed:0a:de:00:a6:a1:92:d7:62:73:3b:3f:87:53: 93:9a:ca:8b:9b:a9:22:de:cd:16:fe:5b:3b:14:61: 4b:18:68:b3:ba:2e:fb:de:af:b3:57:f6:37:c9:09: 45:f9:c0:1e:1b:24:d7:7a:db:ac:ed:e2:81:b6:06: 40:e6:59:1e:3b:96:92:a7:f8:ad:20:73:59:5e:74: a1:82:53:75:5b:01:05:8a:56:25:cc:b4:93:f8:ba: 4c:20:ec:30:23:d2:82:93:68:5d:b6:60:82:97:06: 66:cc:7f:23:99:df:34:db:95:23:9e:b1:bf:24:c1: 17:39:8f:ef:0e:8b:e0:8e:0a:f3:9e:d9:cf:67:5e: 88:28:c9:a7:6e:83:a9:2e:87:fa:5c:25:cf:47:87: 8f:54:92:a4:9f:e3:11:9d:0c:7c:20:36:10:8f:d8: d4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CB:B7:5A:D3:C5:90:96:B1:6A:D9:AE:44:F7:61:DB:57:61:D1:C9 X509v3 Authority Key Identifier: keyid:F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:d6:08:4c:46:f3:ea:84:27:98:7c:50:ad:3d:dd:50:c9:a6: 78:fe:fb:a5:27:3a:9a:98:2b:c3:a1:a1:89:a0:e7:7f:3c:42: a4:e9:56:a3:c4:a9:4a:06:35:53:2d:59:18:be:93:ac:c1:89: e4:a4:75:15:3d:c2:d1:18:16:a6:6b:e1:28:9d:64:31:b8:27: 2c:d7:f0:8e:a9:95:43:84:9e:ee:4e:90:01:0f:2b:91:63:15: 1d:d2:59:b9:b4:86:c4:31:05:f0:e6:c6:4e:a3:6c:88:4e:e0: 00:b9:b4:45:b4:44:ef:a8:6b:6c:b7:74:2e:9c:ed:50:13:71: d6:d6:cf:a9:50:30:00:dc:d6:6d:72:b6:6d:4a:cb:67:1f:4c: 3f:00:88:d5:3e:70:8f:8f:7b:35:68:82:1e:bf:6a:36:90:32: 28:39:f7:94:b2:e8:30:ad:f5:73:28:f2:07:49:a1:05:36:42: de:29:79:d8:6d:7f:8f:b2:75:86:aa:3f:c5:f3:da:82:f0:33: ce:b6:e6:a2:f4:74:85:bb:32:79:53:ca:41:b2:27:44:fa:72: 3e:48:40:33:a0:31:47:c7:b4:44:56:ab:89:90:68:11:13:8e: 95:ec:e4:68:43:9e:c9:dc:e1:80:f9:11:0a:a3:bc:6e:39:af: 26:4b:82:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryduhFH75O0jOpDswG7LVaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NjQwM2JjMWM4NzRlZWYwOWI4YTEzNDQxNTVhYmMzZjA1 NzViMTUwHhcNMjUxMjA2MDcwMTEwWhcNMjUxMjA3MDcwMTEwWjAzMTEwLwYDVQQD EyhmM2NiYjc1YWQzYzU5MDk2YjE2YWQ5YWU0NGY3NjFkYjU3NjFkMWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wpPy4qN6OrolnzH+lvLHV35p9xl n2S+hV0Mr6so4xucvJjMLAau6+F3RNDCFa8KfzVoxnxl50IgjeDDjX9h2Fc6rTnt u4fWCZMiQw9FO2FX1kQ3u4te8y0f7QreAKahktdiczs/h1OTmsqLm6ki3s0W/ls7 FGFLGGizui773q+zV/Y3yQlF+cAeGyTXetus7eKBtgZA5lkeO5aSp/itIHNZXnSh glN1WwEFilYlzLST+LpMIOwwI9KCk2hdtmCClwZmzH8jmd8025UjnrG/JMEXOY/v DovgjgrzntnPZ16IKMmnboOpLof6XCXPR4ePVJKkn+MRnQx8IDYQj9jUSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPLt1rTxZCWsWrZrkT3YdtXYdHJMB8GA1UdIwQY MBaAFPVkA7wch07vCbihNEFVq8PwV1sVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVdRRHZCeUhUdThKdUtFMFFWV3J3X0JYV3hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xNzQ4NjAtMGM1YS00NGYwLTk3ZTct ZmFiODVlZTU3MDJhLzEvOVdRRHZCeUhUdThKdUtFMFFWV3J3X0JYV3hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8xNzQ4NjAtMGM1YS00NGYwLTk3ZTctZmFiODVlZTU3MDJh LzEvOVdRRHZCeUhUdThKdUtFMFFWV3J3X0JYV3hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs9YITEbz 6oQnmHxQrT3dUMmmeP77pSc6mpgrw6GhiaDnfzxCpOlWo8SpSgY1Uy1ZGL6TrMGJ 5KR1FT3C0RgWpmvhKJ1kMbgnLNfwjqmVQ4Se7k6QAQ8rkWMVHdJZubSGxDEF8ObG TqNsiE7gALm0RbRE76hrbLd0LpztUBNx1tbPqVAwANzWbXK2bUrLZx9MPwCI1T5w j497NWiCHr9qNpAyKDn3lLLoMK31cyjyB0mhBTZC3il52G1/j7J1hqo/xfPagvAz zrbmovR0hbsyeVPKQbInRPpyPkhAM6AxR8e0RFariZBoEROOlezkaEOeydzhgPkR CqO8bjmvJkuC9A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:24:23 2025 by rpki-client