This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft File: 9us1U0TzVfLF8cawuowwnBFDxsc.mft (raw, json) Hash identifier: tW+gi4bKJwcgCV1vTJCDBvKsNmJyIPPgOLEjW6iVkQ4= Subject key identifier: 49:82:93:15:60:7E:F6:54:AA:3D:7C:0C:1A:13:1A:33:87:8C:1B:85 Authority key identifier: F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7 Certificate issuer: /CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7 Certificate serial: 019AF653A2A89DBCF11214857D546FDEC3EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft Manifest number: 123B Signing time: Sun 07 Dec 2025 01:01:07 +0000 Manifest this update: Sun 07 Dec 2025 01:01:07 +0000 Manifest next update: Mon 08 Dec 2025 01:01:07 +0000 Files and hashes: 1: 9us1U0TzVfLF8cawuowwnBFDxsc.crl (hash: OpK86SS4mCGNZBRYIUV2BfyKVmvslEBBRwZeau4JYaY=) 2: xm2GnCrITkLspXymDcS4A7YJbbI.roa (hash: +DAgDZIg9Wj4wTdH4O9JnrjTmjk3rUCiBhMUo5eAXI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:a2:a8:9d:bc:f1:12:14:85:7d:54:6f:de:c3:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7 Validity Not Before: Dec 7 01:01:07 2025 GMT Not After : Dec 8 01:01:07 2025 GMT Subject: CN=49829315607ef654aa3d7c0c1a131a33878c1b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8d:8a:d1:81:58:c7:28:c6:63:8a:00:88:d6: 82:45:ba:45:b8:41:b7:e3:be:85:f8:cb:43:85:ec: 0e:f1:8a:7c:69:0d:af:fd:bb:6d:67:81:86:4c:9d: c4:7c:e6:ad:08:01:8d:a0:6c:a8:26:38:40:b3:be: d3:d6:4c:6c:65:f7:8f:90:b1:e3:c7:55:d0:90:e4: 6a:48:1e:93:51:0c:ab:1d:8b:92:49:98:74:dc:b4: 77:d9:d9:75:a7:34:43:e7:f3:ed:53:7f:5b:62:3e: ae:28:0d:db:d3:35:64:3b:97:26:94:d1:84:54:ce: f7:dd:63:61:02:d3:91:3d:49:83:ab:3e:88:f2:2c: f3:47:fc:bf:b0:11:21:05:00:08:5a:ac:ad:48:eb: f5:af:fe:5b:07:2f:b4:f0:8f:cb:d2:90:7f:af:df: f2:96:1d:bb:03:aa:a5:31:59:ac:17:05:8a:ff:af: 37:62:f6:84:5f:1f:de:72:bd:25:b8:08:43:61:ab: 14:58:fd:00:b7:ec:da:1d:65:42:e0:b2:1a:c5:72: 27:f4:55:26:a8:1f:ea:4b:89:82:a8:fe:a1:db:3a: e0:80:84:d8:26:8a:4b:ec:63:18:3a:9c:bf:57:d7: 04:60:71:d7:ca:93:33:ac:1c:6c:b7:df:a5:19:ce: 90:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:82:93:15:60:7E:F6:54:AA:3D:7C:0C:1A:13:1A:33:87:8C:1B:85 X509v3 Authority Key Identifier: keyid:F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:92:4b:ac:90:2b:9a:c6:63:a4:40:31:46:9b:ba:4f:fa:2a: 3d:0d:e3:4a:c0:fd:c0:a1:ce:45:3c:e1:11:cf:53:a7:28:95: 85:d1:f1:00:59:7e:08:2c:46:f6:5c:69:80:71:5b:17:d4:c7: 9f:4e:3d:f4:1e:87:da:09:ad:1c:2c:d8:a1:7e:28:9f:29:c0: da:d3:fc:f0:ca:7d:3e:a2:ef:28:7c:4b:76:7b:05:e9:a4:8a: ab:f5:13:d5:7a:30:3a:d6:26:1a:f3:2f:b8:ca:0b:22:b4:81: 06:17:a8:db:a7:26:cf:d6:5b:67:b9:60:b9:de:a8:d1:99:1b: 82:89:70:44:dd:53:cf:c1:97:b3:51:a1:c8:53:80:c1:9a:f1: 44:7a:77:9b:fe:e8:01:98:6f:08:d2:c5:86:e9:07:79:b6:47: 6a:15:f2:52:bd:a3:7d:33:14:0c:5f:30:0c:3a:9d:81:dd:e3: f4:f5:81:66:30:29:6a:c8:fd:31:08:31:8b:b1:f8:46:72:6c: 44:fb:f8:3d:81:02:95:4e:16:8b:4b:3d:6f:c5:3e:9b:d9:9f: 16:9f:a6:5f:ce:56:20:f5:bd:6a:59:b7:13:2c:1e:bf:4e:42: e9:e2:bb:bb:25:51:62:56:5b:dd:44:17:5d:77:65:30:7d:e9: 3b:fe:47:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U6KonbzxEhSFfVRv3sPrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ZWIzNTUzNDRmMzU1ZjJjNWYxYzZiMGJhOGMzMDljMTE0 M2M2YzcwHhcNMjUxMjA3MDEwMTA3WhcNMjUxMjA4MDEwMTA3WjAzMTEwLwYDVQQD Eyg0OTgyOTMxNTYwN2VmNjU0YWEzZDdjMGMxYTEzMWEzMzg3OGMxYjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0I2K0YFYxyjGY4oAiNaCRbpFuEG3 476F+MtDhewO8Yp8aQ2v/bttZ4GGTJ3EfOatCAGNoGyoJjhAs77T1kxsZfePkLHj x1XQkORqSB6TUQyrHYuSSZh03LR32dl1pzRD5/PtU39bYj6uKA3b0zVkO5cmlNGE VM733WNhAtORPUmDqz6I8izzR/y/sBEhBQAIWqytSOv1r/5bBy+08I/L0pB/r9/y lh27A6qlMVmsFwWK/683YvaEXx/ecr0luAhDYasUWP0At+zaHWVC4LIaxXIn9FUm qB/qS4mCqP6h2zrggITYJopL7GMYOpy/V9cEYHHXypMzrBxst9+lGc6Q8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmCkxVgfvZUqj18DBoTGjOHjBuFMB8GA1UdIwQY MBaAFPbrNVNE81XyxfHGsLqMMJwRQ8bHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXVzMVUwVHpWZkxGOGNhd3Vvd3duQkZEeHNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84MTBjZjEtY2Y0MS00Y2JiLWE1M2Et NDkzZGE5Y2M0YzBjLzEvOXVzMVUwVHpWZkxGOGNhd3Vvd3duQkZEeHNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84MTBjZjEtY2Y0MS00Y2JiLWE1M2EtNDkzZGE5Y2M0YzBj LzEvOXVzMVUwVHpWZkxGOGNhd3Vvd3duQkZEeHNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ5JLrJAr msZjpEAxRpu6T/oqPQ3jSsD9wKHORTzhEc9TpyiVhdHxAFl+CCxG9lxpgHFbF9TH n0499B6H2gmtHCzYoX4onynA2tP88Mp9PqLvKHxLdnsF6aSKq/UT1XowOtYmGvMv uMoLIrSBBheo26cmz9ZbZ7lgud6o0ZkbgolwRN1Tz8GXs1GhyFOAwZrxRHp3m/7o AZhvCNLFhukHebZHahXyUr2jfTMUDF8wDDqdgd3j9PWBZjApasj9MQgxi7H4RnJs RPv4PYEClU4Wi0s9b8U+m9mfFp+mX85WIPW9alm3Eywev05C6eK7uyVRYlZb3UQX XXdlMH3pO/5HAw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:42 2025 by rpki-client