This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft File: t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft (raw, json) Hash identifier: x0MjfC1naKqn/fcq/ZpNVnKYW6HC9NlyMANNxaXH5p0= Subject key identifier: A1:92:B7:C7:A3:E5:BD:C5:BA:E2:26:FF:1D:B7:98:48:2E:9D:F0:EC Authority key identifier: B7:D2:96:D6:90:59:45:7B:E3:9C:3C:82:46:6A:CE:ED:02:76:68:36 Certificate issuer: /CN=b7d296d69059457be39c3c82466aceed02766836 Certificate serial: 019AF19AF6F575741DA97BB502B876EB3ABB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft Manifest number: 0853 Signing time: Sat 06 Dec 2025 03:00:55 +0000 Manifest this update: Sat 06 Dec 2025 03:00:55 +0000 Manifest next update: Sun 07 Dec 2025 03:00:55 +0000 Files and hashes: 1: t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl (hash: mWZWF56YlyMwZO5Kf5NXXdAU/RcnprZoICGx9ixT9O4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:f6:f5:75:74:1d:a9:7b:b5:02:b8:76:eb:3a:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7d296d69059457be39c3c82466aceed02766836 Validity Not Before: Dec 6 03:00:55 2025 GMT Not After : Dec 7 03:00:55 2025 GMT Subject: CN=a192b7c7a3e5bdc5bae226ff1db798482e9df0ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:69:e7:b8:bb:eb:d8:bf:f2:ba:b1:7c:b5:39: dc:0a:7f:42:6f:07:90:c5:a6:ca:f3:a6:f0:f8:a3: d1:bb:29:8d:cc:40:83:d0:a7:1c:ae:90:de:40:53: af:12:fe:33:32:1d:a4:bc:35:2e:dc:94:58:b2:25: 38:e8:3c:e8:f9:a6:bf:65:bb:3b:5b:89:11:ef:18: 00:60:c9:1d:c8:6b:08:1b:60:4b:04:e4:68:cc:e1: 39:41:86:c7:05:80:d2:e4:7e:bb:41:ae:5b:c2:a8: 82:d8:32:fe:23:18:d2:63:c7:99:1f:f9:54:70:55: 69:83:87:39:5f:81:7f:5e:f2:3a:44:ae:76:1b:df: 05:e5:0a:be:98:72:b9:91:55:8e:be:64:13:f6:76: 10:7a:18:bd:61:85:1b:2e:ad:9e:93:42:9b:e0:3d: 74:b3:03:30:2b:f1:7d:59:66:98:c0:2c:75:88:59: b2:fe:fd:af:6d:2b:eb:57:87:be:82:97:58:df:f5: eb:d4:86:74:7a:d1:3d:0b:4b:ae:49:37:75:7d:a6: 2b:bc:43:28:b1:9b:72:6f:e9:bc:0e:d6:60:b2:e5: e1:9d:b1:09:67:67:ed:2b:97:97:7a:c2:90:23:08: ea:57:95:14:53:7e:23:14:a5:56:ea:e3:ab:b7:2a: d5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:92:B7:C7:A3:E5:BD:C5:BA:E2:26:FF:1D:B7:98:48:2E:9D:F0:EC X509v3 Authority Key Identifier: keyid:B7:D2:96:D6:90:59:45:7B:E3:9C:3C:82:46:6A:CE:ED:02:76:68:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/374947-3e2c-4026-8324-15929d02fd0c/1/t9KW1pBZRXvjnDyCRmrO7QJ2aDY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e1:55:9e:3c:8b:7d:b5:9d:d3:f7:8a:40:eb:14:ff:d5:b2: a7:cb:79:15:49:fb:ea:55:bf:51:07:6f:62:ac:ca:19:c4:bb: 08:86:8c:c7:fb:29:e3:c5:ee:18:51:49:0e:aa:0f:32:d7:dc: 1c:23:95:47:3e:c9:81:ef:21:9d:2d:56:f2:de:20:bf:40:0a: 0b:f7:df:89:aa:0d:a8:04:24:19:b7:af:69:b5:bb:ef:af:be: 07:59:27:c6:97:2b:9b:c9:37:c5:18:13:fc:64:7e:a3:b4:58: 09:7d:8d:38:2a:da:a8:45:d0:22:b0:46:72:cf:d1:5f:f5:9f: c7:01:56:d9:9c:ae:4d:ed:5e:da:97:cf:3a:e5:a7:6a:13:b5: 9a:2d:2e:b1:01:08:fe:8a:6d:6d:e6:88:93:34:2c:2b:c8:af: c9:8f:15:12:89:41:19:92:f1:78:a8:dd:65:ba:81:b6:b1:86: 3a:86:11:ac:cb:39:34:7c:8b:f0:95:5b:d1:74:cc:a6:d7:7a: 4c:a7:2e:94:23:6a:7c:c0:c5:df:bd:7d:03:d4:f3:09:91:39: bb:0b:ba:25:2c:a0:b4:0c:03:3a:46:b6:da:06:c6:f3:22:62: 79:ca:b1:0d:80:04:91:99:1e:ed:12:16:8c:e4:af:b3:e6:e6: 0d:29:e4:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvb1dXQdqXu1Arh26zq7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ZDI5NmQ2OTA1OTQ1N2JlMzljM2M4MjQ2NmFjZWVkMDI3 NjY4MzYwHhcNMjUxMjA2MDMwMDU1WhcNMjUxMjA3MDMwMDU1WjAzMTEwLwYDVQQD EyhhMTkyYjdjN2EzZTViZGM1YmFlMjI2ZmYxZGI3OTg0ODJlOWRmMGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WnnuLvr2L/yurF8tTncCn9CbweQ xabK86bw+KPRuymNzECD0KccrpDeQFOvEv4zMh2kvDUu3JRYsiU46Dzo+aa/Zbs7 W4kR7xgAYMkdyGsIG2BLBORozOE5QYbHBYDS5H67Qa5bwqiC2DL+IxjSY8eZH/lU cFVpg4c5X4F/XvI6RK52G98F5Qq+mHK5kVWOvmQT9nYQehi9YYUbLq2ek0Kb4D10 swMwK/F9WWaYwCx1iFmy/v2vbSvrV4e+gpdY3/Xr1IZ0etE9C0uuSTd1faYrvEMo sZtyb+m8DtZgsuXhnbEJZ2ftK5eXesKQIwjqV5UUU34jFKVW6uOrtyrVOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGSt8ej5b3FuuIm/x23mEgunfDsMB8GA1UdIwQY MBaAFLfSltaQWUV745w8gkZqzu0Cdmg2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDlLVzFwQlpSWHZqbkR5Q1Jtck83UUoyYURZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zNzQ5NDctM2UyYy00MDI2LTgzMjQt MTU5MjlkMDJmZDBjLzEvdDlLVzFwQlpSWHZqbkR5Q1Jtck83UUoyYURZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8zNzQ5NDctM2UyYy00MDI2LTgzMjQtMTU5MjlkMDJmZDBj LzEvdDlLVzFwQlpSWHZqbkR5Q1Jtck83UUoyYURZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXeFVnjyL fbWd0/eKQOsU/9Wyp8t5FUn76lW/UQdvYqzKGcS7CIaMx/sp48XuGFFJDqoPMtfc HCOVRz7Jge8hnS1W8t4gv0AKC/ffiaoNqAQkGbevabW776++B1knxpcrm8k3xRgT /GR+o7RYCX2NOCraqEXQIrBGcs/RX/WfxwFW2ZyuTe1e2pfPOuWnahO1mi0usQEI /optbeaIkzQsK8ivyY8VEolBGZLxeKjdZbqBtrGGOoYRrMs5NHyL8JVb0XTMptd6 TKculCNqfMDF3719A9TzCZE5uwu6JSygtAwDOka22gbG8yJiecqxDYAEkZke7RIW jOSvs+bmDSnkwg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:25:43 2025 by rpki-client