This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft File: 9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft (raw, json) Hash identifier: cdIPpb8iqltMo9STa+sNaHlW60vvgjYRhr0R4+R4xn4= Subject key identifier: 0D:01:1C:59:B5:9F:7A:1D:8A:E9:DE:E3:42:18:30:FD:8C:FD:67:2E Authority key identifier: F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4 Certificate issuer: /CN=f6413486886b56231dec573fad4f8ab32cbf92a4 Certificate serial: 019AF12E54592EC657E7848DD610F83BD322 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft Manifest number: 12B6 Signing time: Sat 06 Dec 2025 01:02:16 +0000 Manifest this update: Sat 06 Dec 2025 01:02:16 +0000 Manifest next update: Sun 07 Dec 2025 01:02:16 +0000 Files and hashes: 1: 9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl (hash: Sgk+iNVGtt569lzqH7ByJ3nF16fVN/6FbqEs533B9p4=) 2: ftXv30Hlz-_EICPh46zy3bfImAc.roa (hash: 3S31teaHx8GBvsqpB7SE49UNoJHeSlzxpM1K7KnfX/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:54:59:2e:c6:57:e7:84:8d:d6:10:f8:3b:d3:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6413486886b56231dec573fad4f8ab32cbf92a4 Validity Not Before: Dec 6 01:02:16 2025 GMT Not After : Dec 7 01:02:16 2025 GMT Subject: CN=0d011c59b59f7a1d8ae9dee3421830fd8cfd672e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b2:ad:55:fe:98:1a:db:c1:40:bb:22:00:89: 9d:b1:8d:35:b0:f8:ab:7b:75:df:e0:2e:c9:8c:ea: 94:6e:2a:cd:1a:bd:a8:58:3d:40:49:ce:4c:9c:6f: ad:86:7b:ee:2e:99:81:0e:e6:9a:f6:db:89:23:25: 6d:9f:05:63:77:19:d4:0f:7c:48:ee:3a:93:16:c4: 02:03:e6:2a:b6:d9:7e:20:fe:a8:d1:23:03:e8:f6: 20:6e:74:c1:e6:57:49:24:ad:47:fd:ab:ba:e4:c4: 9d:ad:6f:60:95:83:12:de:e4:ea:8d:4c:73:ec:dd: 20:e2:b9:ff:b5:a2:9a:c9:e3:da:b9:d2:9c:bc:51: 5b:9f:2b:f3:f0:7e:db:da:28:b4:f2:0c:cb:32:96: ba:2f:db:30:28:df:23:14:6b:f1:1f:41:d3:ba:6a: ca:b7:2c:5e:20:cf:62:f3:93:52:e6:12:69:19:99: c6:cd:c4:87:6b:02:10:36:e3:ae:96:d8:d7:15:cd: 4e:44:02:a1:40:54:d2:85:94:61:0a:63:1f:f5:29: 00:92:11:c3:92:2e:22:f3:74:4b:8a:4b:86:46:a0: fb:8d:8d:b9:dc:b2:52:a8:2c:f9:57:dc:ca:b3:83: 91:d1:cf:65:99:b1:e3:09:a6:f0:3b:5d:9f:ba:6b: 02:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:01:1C:59:B5:9F:7A:1D:8A:E9:DE:E3:42:18:30:FD:8C:FD:67:2E X509v3 Authority Key Identifier: keyid:F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:5e:39:d0:1b:1c:d4:2b:53:16:51:af:a2:c5:38:ce:a7:cb: ee:4c:a2:57:8b:aa:40:74:c4:a2:b7:36:4d:c8:32:8b:bf:39: 72:f7:6c:38:28:ad:f2:7d:d7:54:52:f9:99:70:16:94:ca:69: fa:a0:df:84:91:68:4f:0a:0c:11:34:5f:7d:e5:6f:cd:f5:e1: e9:7d:3e:3a:45:7a:ed:ed:02:2d:8a:ce:58:3b:85:7a:73:fa: aa:65:00:0b:3e:76:3e:70:2d:2b:51:bb:2f:77:5f:a0:e8:74: 28:4e:9a:c3:fd:19:c0:b4:d6:78:af:48:5e:df:6a:89:cb:cb: a9:d8:30:d3:b8:60:d7:68:0e:83:cb:c2:68:5f:7f:40:8a:6d: e2:63:da:78:e2:ea:eb:60:04:1d:f2:58:07:75:63:0b:01:06: 83:9e:74:f1:7b:c7:03:c0:b0:c2:21:97:e4:58:dd:4a:e0:0b: e8:f0:ea:ee:0f:75:8f:c9:f8:fd:8c:39:a5:a3:1c:d6:87:f5: 07:ed:0f:c3:b8:2d:36:ad:e1:f3:ea:a5:52:b6:33:dd:13:5b: 83:c6:a6:fc:95:cd:e0:2b:5f:2c:8d:2e:d4:fc:d7:34:74:08: 61:41:d8:98:62:d7:39:2a:b6:ad:91:9a:07:a6:d9:51:d5:e4: 08:f0:9a:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLlRZLsZX54SN1hD4O9MiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NDEzNDg2ODg2YjU2MjMxZGVjNTczZmFkNGY4YWIzMmNi ZjkyYTQwHhcNMjUxMjA2MDEwMjE2WhcNMjUxMjA3MDEwMjE2WjAzMTEwLwYDVQQD EygwZDAxMWM1OWI1OWY3YTFkOGFlOWRlZTM0MjE4MzBmZDhjZmQ2NzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbKtVf6YGtvBQLsiAImdsY01sPir e3Xf4C7JjOqUbirNGr2oWD1ASc5MnG+thnvuLpmBDuaa9tuJIyVtnwVjdxnUD3xI 7jqTFsQCA+Yqttl+IP6o0SMD6PYgbnTB5ldJJK1H/au65MSdrW9glYMS3uTqjUxz 7N0g4rn/taKayePaudKcvFFbnyvz8H7b2ii08gzLMpa6L9swKN8jFGvxH0HTumrK tyxeIM9i85NS5hJpGZnGzcSHawIQNuOultjXFc1ORAKhQFTShZRhCmMf9SkAkhHD ki4i83RLikuGRqD7jY253LJSqCz5V9zKs4OR0c9lmbHjCabwO12fumsCUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0BHFm1n3odiune40IYMP2M/WcuMB8GA1UdIwQY MBaAFPZBNIaIa1YjHexXP61PirMsv5KkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWtFMGhvaHJWaU1kN0ZjX3JVLUtzeXlfa3FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8yYjU4N2YtMzVlNC00YmJjLWJjZDAt OTllZWY2OTA1ZDgzLzEvOWtFMGhvaHJWaU1kN0ZjX3JVLUtzeXlfa3FRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8yYjU4N2YtMzVlNC00YmJjLWJjZDAtOTllZWY2OTA1ZDgz LzEvOWtFMGhvaHJWaU1kN0ZjX3JVLUtzeXlfa3FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1450Bsc 1CtTFlGvosU4zqfL7kyiV4uqQHTEorc2Tcgyi785cvdsOCit8n3XVFL5mXAWlMpp +qDfhJFoTwoMETRffeVvzfXh6X0+OkV67e0CLYrOWDuFenP6qmUACz52PnAtK1G7 L3dfoOh0KE6aw/0ZwLTWeK9IXt9qicvLqdgw07hg12gOg8vCaF9/QIpt4mPaeOLq 62AEHfJYB3VjCwEGg5508XvHA8CwwiGX5FjdSuAL6PDq7g91j8n4/Yw5paMc1of1 B+0Pw7gtNq3h8+qlUrYz3RNbg8am/JXN4CtfLI0u1PzXNHQIYUHYmGLXOSq2rZGa B6bZUdXkCPCaYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:03:34 2025 by rpki-client