This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft File: 9JupkRTr2r1uTL029s1HWzPPE4Y.mft (raw, json) Hash identifier: 5y6tyRIZfvg1FC/0Z/wlSl5mtSEf7xDHFBvapyZcJUU= Subject key identifier: FC:C6:91:F5:FA:6C:A1:DD:E1:64:D2:F0:68:E4:1A:5E:92:67:2E:7D Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86 Certificate issuer: /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386 Certificate serial: 019AF1D1A19286F83F2E1DF4F7B45F9FE5E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft Manifest number: 0A58 Signing time: Sat 06 Dec 2025 04:00:38 +0000 Manifest this update: Sat 06 Dec 2025 04:00:38 +0000 Manifest next update: Sun 07 Dec 2025 04:00:38 +0000 Files and hashes: 1: 84Ad1KJPc9jhr8WAEOEs6s8tmPc.roa (hash: UeaLHRP7oFc/d7B28fPSHAmNwBiXwzZTNmEOfITVZrU=) 2: 9JupkRTr2r1uTL029s1HWzPPE4Y.crl (hash: SN9U/pDayvO3MkZCfe7ePOEqoai9TFusf/Ikz3ii7I8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a1:92:86:f8:3f:2e:1d:f4:f7:b4:5f:9f:e5:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386 Validity Not Before: Dec 6 04:00:38 2025 GMT Not After : Dec 7 04:00:38 2025 GMT Subject: CN=fcc691f5fa6ca1dde164d2f068e41a5e92672e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:72:fc:38:f8:50:b0:c2:e0:f9:0c:7d:a9:d7: 5b:b4:71:98:8b:6b:78:99:3b:7a:5c:ae:9d:50:e2: c2:c5:ac:96:1c:21:5b:51:9a:f0:15:98:b8:f9:2a: 8b:09:0a:61:b7:ce:40:04:c0:13:c4:04:14:a9:4b: ba:06:50:05:81:c4:a6:df:70:b7:19:2f:a8:e6:dc: 85:99:20:06:60:50:07:4b:dc:b9:27:b9:51:52:b5: 29:55:d2:22:b3:d8:00:d2:dd:34:c3:b9:3e:c0:ba: f0:2b:c1:d1:e7:28:28:32:34:12:b5:23:1f:ff:62: d2:23:fe:5a:b5:93:b5:d3:56:d6:e0:ac:50:5c:23: 1e:89:c9:47:55:92:ee:7e:11:c9:e1:d1:8c:3e:a2: 4a:92:a8:d1:34:71:7c:b6:d2:96:b5:37:16:7e:8f: 1c:05:75:15:d8:d7:61:56:c8:e6:d0:4b:59:10:61: af:e7:61:c0:f1:59:4e:25:5b:a3:c7:2c:50:35:f6: d8:8a:c8:7b:6e:87:8f:fa:4f:34:07:0f:13:d0:17: e7:11:33:03:47:34:f8:d5:41:07:d9:aa:04:db:14: f7:55:ca:7b:59:75:c6:c3:69:bf:02:3e:af:81:5b: 96:cb:61:f2:01:e5:f6:27:3b:6b:3d:74:a1:d6:3c: 1e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C6:91:F5:FA:6C:A1:DD:E1:64:D2:F0:68:E4:1A:5E:92:67:2E:7D X509v3 Authority Key Identifier: keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:4f:10:6f:0c:1e:69:93:69:7b:d0:be:b8:75:1d:03:af:7f: cd:bb:36:df:a5:71:77:29:80:05:74:02:ba:cc:c4:bd:2d:b6: 34:0d:29:a1:01:a8:4a:06:3b:fa:39:ce:07:42:95:c5:80:fa: 64:3b:3c:18:88:ee:59:0e:5a:c3:e5:8b:66:89:11:09:dd:00: f0:ed:31:f3:d8:78:50:79:54:50:5a:ca:f8:79:7e:2c:c8:84: 37:8a:87:08:30:44:7c:82:d4:fc:4f:1e:4f:2a:4f:5a:12:81: 26:2f:8e:1c:de:53:10:ed:c2:0c:e2:24:28:38:68:e3:b5:a4: 69:57:ca:50:fe:f1:4e:30:fc:55:fd:e7:62:94:b4:91:7d:7d: 44:cc:32:8b:fe:94:20:3f:6d:58:46:e9:c6:a3:38:d6:e1:41: e1:b0:f6:83:50:f4:7c:60:f6:65:05:13:e4:0e:07:49:00:34: 20:0a:ba:51:6d:36:a4:6e:41:ff:80:81:44:13:1b:fa:00:30: f4:ee:c9:31:11:51:01:9c:c7:94:55:d3:ce:d0:d2:0f:b4:df: 21:a9:63:c8:84:31:e4:fa:83:38:d3:7c:09:03:1a:26:1f:56: d3:99:d6:2d:cf:49:15:08:e2:a4:83:e3:a9:02:2b:4e:41:6c: 5e:5f:79:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0aGShvg/Lh3097Rfn+XkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0OWJhOTkxMTRlYmRhYmQ2ZTRjYmQzNmY2Y2Q0NzViMzNj ZjEzODYwHhcNMjUxMjA2MDQwMDM4WhcNMjUxMjA3MDQwMDM4WjAzMTEwLwYDVQQD EyhmY2M2OTFmNWZhNmNhMWRkZTE2NGQyZjA2OGU0MWE1ZTkyNjcyZTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3L8OPhQsMLg+Qx9qddbtHGYi2t4 mTt6XK6dUOLCxayWHCFbUZrwFZi4+SqLCQpht85ABMATxAQUqUu6BlAFgcSm33C3 GS+o5tyFmSAGYFAHS9y5J7lRUrUpVdIis9gA0t00w7k+wLrwK8HR5ygoMjQStSMf /2LSI/5atZO101bW4KxQXCMeiclHVZLufhHJ4dGMPqJKkqjRNHF8ttKWtTcWfo8c BXUV2NdhVsjm0EtZEGGv52HA8VlOJVujxyxQNfbYish7boeP+k80Bw8T0BfnETMD RzT41UEH2aoE2xT3Vcp7WXXGw2m/Aj6vgVuWy2HyAeX2JztrPXSh1jwecQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzGkfX6bKHd4WTS8GjkGl6SZy59MB8GA1UdIwQY MBaAFPSbqZEU69q9bky9NvbNR1szzxOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUp1cGtSVHIycjF1VEwwMjlzMUhXelBQRTRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82ZTRkYjctNDVhOC00OTkzLWIzODQt OWE2ZWU0ODZlZmY3LzEvOUp1cGtSVHIycjF1VEwwMjlzMUhXelBQRTRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS82ZTRkYjctNDVhOC00OTkzLWIzODQtOWE2ZWU0ODZlZmY3 LzEvOUp1cGtSVHIycjF1VEwwMjlzMUhXelBQRTRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQU8Qbwwe aZNpe9C+uHUdA69/zbs236VxdymABXQCuszEvS22NA0poQGoSgY7+jnOB0KVxYD6 ZDs8GIjuWQ5aw+WLZokRCd0A8O0x89h4UHlUUFrK+Hl+LMiEN4qHCDBEfILU/E8e TypPWhKBJi+OHN5TEO3CDOIkKDho47WkaVfKUP7xTjD8Vf3nYpS0kX19RMwyi/6U ID9tWEbpxqM41uFB4bD2g1D0fGD2ZQUT5A4HSQA0IAq6UW02pG5B/4CBRBMb+gAw 9O7JMRFRAZzHlFXTztDSD7TfIaljyIQx5PqDONN8CQMaJh9W05nWLc9JFQjipIPj qQIrTkFsXl95QQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:20:48 2025 by rpki-client