This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft File: 9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft (raw, json) Hash identifier: 9b2Fi2x+B/2/nSeYtERyNhsbUkjKuJ36TDJTQ3BSrJ0= Subject key identifier: DC:7D:93:C9:8B:84:A8:C0:2C:95:FE:84:CF:F2:17:64:5D:19:B2:29 Authority key identifier: F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36 Certificate issuer: /CN=f6f49bfb2a0b82446060c7fc907810e518705936 Certificate serial: 019AF208F53166D4619D6B2D691A475E3A37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft Manifest number: 03C8 Signing time: Sat 06 Dec 2025 05:01:04 +0000 Manifest this update: Sat 06 Dec 2025 05:01:04 +0000 Manifest next update: Sun 07 Dec 2025 05:01:04 +0000 Files and hashes: 1: 9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl (hash: IZnh44VZbUCJhkMtsTzdPmhJpEOUnd5nM5Je4uYHFto=) 2: jSx6lr1ClHwvX34A8pMwt0RR9b8.roa (hash: 8qaP26J8XC7Mhz3DA86mgKU6vMfpb43EGZW/j662nEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f5:31:66:d4:61:9d:6b:2d:69:1a:47:5e:3a:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6f49bfb2a0b82446060c7fc907810e518705936 Validity Not Before: Dec 6 05:01:04 2025 GMT Not After : Dec 7 05:01:04 2025 GMT Subject: CN=dc7d93c98b84a8c02c95fe84cff217645d19b229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c7:e4:4b:e8:e8:f7:ac:39:88:0e:76:4b:c9: 1a:02:cd:23:86:45:14:ee:b9:9d:24:82:71:3b:3c: da:2d:51:b2:83:1c:5a:06:95:bf:df:d3:f4:db:34: 16:78:a0:d0:4c:a8:1b:b0:9f:f6:d8:04:7e:31:68: fc:da:81:5a:8a:15:8b:eb:47:b9:0c:49:ed:15:11: be:f3:7d:26:5a:39:e9:b7:8b:9e:f9:e5:7a:f8:4e: 9f:a3:a5:41:6d:01:d0:32:5b:e6:0f:0d:e0:5c:b8: 6c:c5:76:96:d3:8f:fc:44:ca:00:cd:0b:f1:cb:40: 2b:c6:8f:8e:5a:f1:8c:1a:b4:72:52:ab:5c:ef:5a: 6f:12:21:45:cf:9b:a5:27:6a:dc:fd:a6:37:c4:53: fb:9a:ab:49:f6:d3:c8:75:c5:63:f7:ca:38:f8:76: 0a:4a:6c:74:7a:b4:8c:1d:3c:df:63:1d:e0:e3:4f: 3a:35:05:a6:e7:20:1c:d0:9f:00:fb:b9:39:ff:1c: a4:c0:09:8c:6e:39:9e:f7:c8:c8:77:00:59:27:2c: 6d:58:69:7c:9a:6c:a7:b9:3a:38:3f:9b:49:0e:76: a9:f8:55:73:a8:2e:cf:04:55:58:41:64:40:e9:26: 2f:18:42:db:2e:63:2f:d8:2c:6e:ca:81:16:b5:e0: 39:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:7D:93:C9:8B:84:A8:C0:2C:95:FE:84:CF:F2:17:64:5D:19:B2:29 X509v3 Authority Key Identifier: keyid:F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:af:bc:02:5d:bb:38:f9:78:03:32:c9:2d:13:dc:1d:2b:5b: 23:0e:bc:75:23:fd:1d:3c:46:40:13:b4:b6:46:87:16:f3:4f: 62:af:bf:ca:49:0b:90:25:a1:51:03:7f:b9:3b:7c:9b:9e:07: ae:87:81:e9:5d:92:c6:f2:1f:7c:39:17:cc:4f:58:d5:da:f1: a2:27:dc:44:e6:04:fa:97:75:6e:89:a1:e3:39:12:f4:c7:d6: a4:6a:36:3b:e0:56:a6:e7:80:af:9d:4c:c3:9b:0e:e5:6f:7d: e3:21:5b:ea:9a:eb:7d:77:08:b9:92:6a:0d:38:36:a1:df:a3: c6:35:c9:cc:fa:90:39:96:43:49:ef:a2:ab:96:4e:ce:96:ef: b3:55:b4:7a:ef:98:5a:7b:38:f0:6c:9f:c3:42:e1:e5:c5:58: ac:26:09:3d:13:b4:16:7d:3a:a6:46:4b:b8:7e:c1:fa:15:fe: 2d:28:f2:a8:2a:85:bd:38:61:6b:83:58:51:2b:25:a3:5c:3d: e7:b9:23:0e:c5:c1:04:77:8b:11:fd:bc:cf:24:be:90:22:c2: 33:58:c4:69:0f:4a:f4:68:7f:1f:7d:1e:c4:03:bb:38:3c:9c: fc:60:6d:47:ce:60:8c:26:ef:d1:6d:d8:9c:39:fc:d7:52:0d: 2f:3b:c0:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPUxZtRhnWstaRpHXjo3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ZjQ5YmZiMmEwYjgyNDQ2MDYwYzdmYzkwNzgxMGU1MTg3 MDU5MzYwHhcNMjUxMjA2MDUwMTA0WhcNMjUxMjA3MDUwMTA0WjAzMTEwLwYDVQQD EyhkYzdkOTNjOThiODRhOGMwMmM5NWZlODRjZmYyMTc2NDVkMTliMjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsfkS+jo96w5iA52S8kaAs0jhkUU 7rmdJIJxOzzaLVGygxxaBpW/39P02zQWeKDQTKgbsJ/22AR+MWj82oFaihWL60e5 DEntFRG+830mWjnpt4ue+eV6+E6fo6VBbQHQMlvmDw3gXLhsxXaW04/8RMoAzQvx y0Arxo+OWvGMGrRyUqtc71pvEiFFz5ulJ2rc/aY3xFP7mqtJ9tPIdcVj98o4+HYK Smx0erSMHTzfYx3g4086NQWm5yAc0J8A+7k5/xykwAmMbjme98jIdwBZJyxtWGl8 mmynuTo4P5tJDnap+FVzqC7PBFVYQWRA6SYvGELbLmMv2CxuyoEWteA5wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNx9k8mLhKjALJX+hM/yF2RdGbIpMB8GA1UdIwQY MBaAFPb0m/sqC4JEYGDH/JB4EOUYcFk2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXZTYi15b0xna1JnWU1mOGtIZ1E1Umh3V1RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My83NzcyOGQtYWNmZS00NGE0LWJjOTIt MzNhNTZmNDU5YmMwLzEvOXZTYi15b0xna1JnWU1mOGtIZ1E1Umh3V1RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My83NzcyOGQtYWNmZS00NGE0LWJjOTItMzNhNTZmNDU5YmMw LzEvOXZTYi15b0xna1JnWU1mOGtIZ1E1Umh3V1RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASq+8Al27 OPl4AzLJLRPcHStbIw68dSP9HTxGQBO0tkaHFvNPYq+/ykkLkCWhUQN/uTt8m54H roeB6V2SxvIffDkXzE9Y1drxoifcROYE+pd1bomh4zkS9MfWpGo2O+BWpueAr51M w5sO5W994yFb6prrfXcIuZJqDTg2od+jxjXJzPqQOZZDSe+iq5ZOzpbvs1W0eu+Y Wns48Gyfw0Lh5cVYrCYJPRO0Fn06pkZLuH7B+hX+LSjyqCqFvThha4NYUSslo1w9 57kjDsXBBHeLEf28zyS+kCLCM1jEaQ9K9Gh/H30exAO7ODyc/GBtR85gjCbv0W3Y nDn811INLzvA8g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:19 2025 by rpki-client