This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft File: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft (raw, json) Hash identifier: Nw8h5zpMSH0QBx6IhZLIhjB8t3mMjAjWBek+B0RXcTY= Subject key identifier: 9B:98:45:8F:D9:BE:9C:43:9E:4D:03:AF:E8:56:49:EC:BC:7A:D1:E2 Authority key identifier: F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54 Certificate issuer: /CN=f709528b8828b4d826355e2c52237d642071cd54 Certificate serial: 019AF2770F8402D7A0C69F0D78B02D6FD793 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft Manifest number: 0746 Signing time: Sat 06 Dec 2025 07:01:20 +0000 Manifest this update: Sat 06 Dec 2025 07:01:20 +0000 Manifest next update: Sun 07 Dec 2025 07:01:20 +0000 Files and hashes: 1: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl (hash: ry8xBwXiU74w/rfnd/cuMmTIfsOe7iPXiqAP3fLN5nk=) 2: iKhGCzGlkdUH-YeR40es_shy-iQ.roa (hash: UctZx1wGvAAr9xLOczqP8p1as4JR/y4gz7WSAX7sYrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:0f:84:02:d7:a0:c6:9f:0d:78:b0:2d:6f:d7:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f709528b8828b4d826355e2c52237d642071cd54 Validity Not Before: Dec 6 07:01:20 2025 GMT Not After : Dec 7 07:01:20 2025 GMT Subject: CN=9b98458fd9be9c439e4d03afe85649ecbc7ad1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:47:9b:d7:a8:e8:bd:15:08:61:ff:26:8c:93: e7:c0:7a:6a:66:1f:a2:b1:34:cc:5e:87:51:1d:7d: ce:9d:34:42:0f:d5:dd:5e:9a:74:2b:34:b8:a6:84: 3f:d6:e9:1a:46:54:7c:03:19:1a:84:0e:80:93:72: 9a:d9:3c:98:5b:2c:bd:8b:91:fa:19:bc:b7:de:52: 8f:61:98:88:3e:1c:d0:5b:c0:8d:f0:59:4d:5e:e0: 4f:f4:bc:b4:39:41:02:06:c6:a3:92:5b:d7:3a:7a: 09:fb:b6:d3:4f:18:8a:11:c8:40:d3:15:f9:3c:34: 63:ea:78:9a:ef:cb:41:08:76:d9:d6:01:44:6b:30: 00:27:5b:1a:c4:0a:22:b0:ad:33:66:13:84:ce:0a: 40:b2:77:9f:56:5a:4d:d1:58:b9:1f:ec:aa:8b:0b: 82:de:71:a6:79:66:fb:98:a3:92:30:c0:a7:5e:d7: 2a:92:28:b8:59:70:95:46:b7:04:6e:c6:c0:06:91: 09:39:06:97:48:b8:a9:34:1d:62:f4:a8:97:85:8a: 82:31:de:3d:c1:5c:5e:bc:96:ee:99:78:02:2e:d9: 1e:14:16:f8:4a:11:33:84:4a:a8:18:ce:7e:28:ea: 53:c9:05:35:04:94:f6:1f:36:85:e6:96:6c:d8:79: 57:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:98:45:8F:D9:BE:9C:43:9E:4D:03:AF:E8:56:49:EC:BC:7A:D1:E2 X509v3 Authority Key Identifier: keyid:F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:15:1d:fe:d8:ff:6c:40:fc:4b:6a:b4:1e:c8:38:a9:6c:bd: e8:d6:f9:30:e3:d5:5b:6a:ff:6e:73:f2:7b:97:15:23:3e:35: 1c:91:96:95:4c:f7:98:2f:f4:03:4b:11:e4:8b:9c:a4:e6:18: 00:c5:ea:be:b4:39:d5:eb:a8:29:2f:2f:c8:25:44:5e:12:d5: 8e:1f:2b:ae:7a:af:ef:d8:c5:bd:bc:0f:95:f8:03:e1:32:93: ae:39:ca:3f:1c:b2:48:33:2c:93:ae:11:4a:03:cd:91:59:7e: 30:8a:ab:c2:fd:37:c2:09:19:7b:8b:20:84:f7:d9:35:48:d0: c3:97:82:d9:d6:5f:60:93:b6:91:83:b4:6f:44:ee:4c:be:af: 38:07:2f:20:34:67:f3:9f:e7:68:39:82:61:db:51:78:2c:4a: d1:3a:56:2f:d5:6c:91:aa:14:4e:f3:05:4c:07:7b:11:bb:e5: bd:70:13:f9:a1:8a:79:aa:d4:70:b7:3e:5a:26:de:03:8f:68: 65:77:72:20:13:48:55:80:9d:42:98:42:21:25:b8:3d:a4:37: e1:e9:37:51:1e:6d:ce:14:a6:f5:b5:da:5d:32:2f:d0:a1:51: ac:b1:16:44:4b:21:7a:de:a8:70:56:26:b9:12:45:7a:98:a3: 78:c4:9f:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydw+EAtegxp8NeLAtb9eTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MDk1MjhiODgyOGI0ZDgyNjM1NWUyYzUyMjM3ZDY0MjA3 MWNkNTQwHhcNMjUxMjA2MDcwMTIwWhcNMjUxMjA3MDcwMTIwWjAzMTEwLwYDVQQD Eyg5Yjk4NDU4ZmQ5YmU5YzQzOWU0ZDAzYWZlODU2NDllY2JjN2FkMWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkeb16jovRUIYf8mjJPnwHpqZh+i sTTMXodRHX3OnTRCD9XdXpp0KzS4poQ/1ukaRlR8AxkahA6Ak3Ka2TyYWyy9i5H6 Gby33lKPYZiIPhzQW8CN8FlNXuBP9Ly0OUECBsajklvXOnoJ+7bTTxiKEchA0xX5 PDRj6nia78tBCHbZ1gFEazAAJ1saxAoisK0zZhOEzgpAsnefVlpN0Vi5H+yqiwuC 3nGmeWb7mKOSMMCnXtcqkii4WXCVRrcEbsbABpEJOQaXSLipNB1i9KiXhYqCMd49 wVxevJbumXgCLtkeFBb4ShEzhEqoGM5+KOpTyQU1BJT2HzaF5pZs2HlXkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuYRY/ZvpxDnk0Dr+hWSey8etHiMB8GA1UdIwQY MBaAFPcJUouIKLTYJjVeLFIjfWQgcc1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXdsU2k0Z290TmdtTlY0c1VpTjlaQ0J4elZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yZDlkODAtYjhiZi00NjVhLWEyOTEt OWY3NGZhY2FlOGYxLzEvOXdsU2k0Z290TmdtTlY0c1VpTjlaQ0J4elZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8yZDlkODAtYjhiZi00NjVhLWEyOTEtOWY3NGZhY2FlOGYx LzEvOXdsU2k0Z290TmdtTlY0c1VpTjlaQ0J4elZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkBUd/tj/ bED8S2q0Hsg4qWy96Nb5MOPVW2r/bnPye5cVIz41HJGWlUz3mC/0A0sR5IucpOYY AMXqvrQ51euoKS8vyCVEXhLVjh8rrnqv79jFvbwPlfgD4TKTrjnKPxyySDMsk64R SgPNkVl+MIqrwv03wgkZe4sghPfZNUjQw5eC2dZfYJO2kYO0b0TuTL6vOAcvIDRn 85/naDmCYdtReCxK0TpWL9VskaoUTvMFTAd7EbvlvXAT+aGKearUcLc+WibeA49o ZXdyIBNIVYCdQphCISW4PaQ34ek3UR5tzhSm9bXaXTIv0KFRrLEWREshet6ocFYm uRJFepijeMSfTg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:53 2025 by rpki-client