This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft File: 9n1n2ohguDIsTyBNYRsAYTjxs5E.mft (raw, json) Hash identifier: hzHO3UgdPCgi8LyUCXAUONascpccyufS6vzEw3jb0zw= Subject key identifier: C5:CD:48:5C:AB:E5:8A:61:7D:2D:27:49:8E:43:BF:80:65:AC:78:97 Authority key identifier: F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91 Certificate issuer: /CN=f67d67da8860b8322c4f204d611b006138f1b391 Certificate serial: 019AF1D205B54389049A2636C15C3191D501 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft Manifest number: 0460 Signing time: Sat 06 Dec 2025 04:01:04 +0000 Manifest this update: Sat 06 Dec 2025 04:01:04 +0000 Manifest next update: Sun 07 Dec 2025 04:01:04 +0000 Files and hashes: 1: 9n1n2ohguDIsTyBNYRsAYTjxs5E.crl (hash: gVAXhS1TKvGpvRYlReFUUyA3lEzfF7qniVNwalEum5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:05:b5:43:89:04:9a:26:36:c1:5c:31:91:d5:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f67d67da8860b8322c4f204d611b006138f1b391 Validity Not Before: Dec 6 04:01:04 2025 GMT Not After : Dec 7 04:01:04 2025 GMT Subject: CN=c5cd485cabe58a617d2d27498e43bf8065ac7897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:15:21:23:e6:22:66:cd:b4:10:93:b5:29:6f: 2d:72:70:33:71:f3:af:d3:c7:57:a1:d8:cc:e7:ca: 5e:d4:62:c0:c6:56:f6:49:0e:ee:12:bb:63:fb:a6: 0c:50:90:42:05:50:40:2d:f3:8a:dc:9a:26:f6:51: 10:3f:94:ae:33:3a:b6:77:1c:e2:74:bf:52:d5:d5: c5:e1:5d:de:48:68:87:ea:f3:fe:93:88:a7:48:f9: 33:2c:3d:b6:ca:3a:84:03:19:33:1e:2d:5d:20:d6: 54:14:bc:62:57:86:66:9c:fc:e2:2a:47:4f:83:21: 87:f5:91:82:9e:85:21:c5:8e:9f:09:51:a8:2d:0b: b3:d9:91:cb:8f:74:38:6a:88:62:4f:b5:e0:6e:d3: a9:87:52:d9:03:d3:33:f6:d8:3f:ca:7c:9e:77:e1: 87:a9:be:0a:ff:19:59:90:74:72:48:97:28:d1:25: 6a:bc:14:cc:9b:58:9f:3f:ca:30:63:c3:6b:3f:dc: d2:4e:3b:b3:a6:8d:67:a3:b7:59:ba:73:07:76:da: b4:0e:28:72:d4:2b:05:0e:de:1f:c8:4e:b0:a5:3c: d7:1d:b4:e1:92:48:33:8a:5c:50:2a:74:ff:31:44: 44:db:db:6f:ab:35:fc:85:0e:e3:a5:23:f9:57:ea: 02:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:CD:48:5C:AB:E5:8A:61:7D:2D:27:49:8E:43:BF:80:65:AC:78:97 X509v3 Authority Key Identifier: keyid:F6:7D:67:DA:88:60:B8:32:2C:4F:20:4D:61:1B:00:61:38:F1:B3:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n1n2ohguDIsTyBNYRsAYTjxs5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9cf270-e654-4337-8814-bf2b8b48465f/1/9n1n2ohguDIsTyBNYRsAYTjxs5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:54:b2:22:da:cf:75:d3:39:08:10:8d:b3:f8:4f:41:cb:f8: a8:13:6b:f8:2d:a4:54:d6:95:fe:00:e9:d7:a6:17:24:f2:b6: e8:a3:d2:da:3a:69:da:b9:f5:86:ff:40:e6:8a:49:8f:13:91: 48:87:6d:21:0d:f6:17:ca:27:1a:00:89:5b:3e:fa:7d:8c:09: 44:8e:51:79:81:5f:6b:21:8e:69:72:23:35:73:b4:b8:f2:66: 48:6f:50:0f:34:7b:0e:07:07:1e:ac:81:97:8d:ef:9b:67:83: c6:d7:90:e4:6d:38:ee:cb:70:12:fd:d8:66:aa:fe:c7:c7:f6: 6b:74:73:cf:76:e3:f7:6a:21:62:c9:6a:8f:1b:f1:bb:35:83: 1d:b3:c7:95:92:29:c1:c8:f6:53:3e:a1:ad:83:a8:f5:13:16: 2c:31:de:94:ad:99:a1:41:87:4d:a8:11:91:a6:65:4c:38:32: f6:e6:d7:3b:aa:6b:ef:5c:57:bf:0d:ab:14:3b:d0:1c:f4:41: ad:57:91:e2:95:c2:6c:1f:1c:cd:63:31:a9:6b:48:1c:df:21: ee:be:5c:5c:03:52:a0:2c:4f:c6:3b:07:57:69:db:12:d0:9b: ed:0a:0a:f2:e0:0f:9f:8e:60:f6:63:37:88:f8:9d:dc:08:85: d9:92:67:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gW1Q4kEmiY2wVwxkdUBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2N2Q2N2RhODg2MGI4MzIyYzRmMjA0ZDYxMWIwMDYxMzhm MWIzOTEwHhcNMjUxMjA2MDQwMTA0WhcNMjUxMjA3MDQwMTA0WjAzMTEwLwYDVQQD EyhjNWNkNDg1Y2FiZTU4YTYxN2QyZDI3NDk4ZTQzYmY4MDY1YWM3ODk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBUhI+YiZs20EJO1KW8tcnAzcfOv 08dXodjM58pe1GLAxlb2SQ7uErtj+6YMUJBCBVBALfOK3Jom9lEQP5SuMzq2dxzi dL9S1dXF4V3eSGiH6vP+k4inSPkzLD22yjqEAxkzHi1dINZUFLxiV4ZmnPziKkdP gyGH9ZGCnoUhxY6fCVGoLQuz2ZHLj3Q4aohiT7XgbtOph1LZA9Mz9tg/ynyed+GH qb4K/xlZkHRySJco0SVqvBTMm1ifP8owY8NrP9zSTjuzpo1no7dZunMHdtq0Dihy 1CsFDt4fyE6wpTzXHbThkkgzilxQKnT/MURE29tvqzX8hQ7jpSP5V+oCoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXNSFyr5YphfS0nSY5Dv4BlrHiXMB8GA1UdIwQY MBaAFPZ9Z9qIYLgyLE8gTWEbAGE48bORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW4xbjJvaGd1RElzVHlCTllSc0FZVGp4czVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS85Y2YyNzAtZTY1NC00MzM3LTg4MTQt YmYyYjhiNDg0NjVmLzEvOW4xbjJvaGd1RElzVHlCTllSc0FZVGp4czVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS85Y2YyNzAtZTY1NC00MzM3LTg4MTQtYmYyYjhiNDg0NjVm LzEvOW4xbjJvaGd1RElzVHlCTllSc0FZVGp4czVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVSyItrP ddM5CBCNs/hPQcv4qBNr+C2kVNaV/gDp16YXJPK26KPS2jpp2rn1hv9A5opJjxOR SIdtIQ32F8onGgCJWz76fYwJRI5ReYFfayGOaXIjNXO0uPJmSG9QDzR7DgcHHqyB l43vm2eDxteQ5G047stwEv3YZqr+x8f2a3Rzz3bj92ohYslqjxvxuzWDHbPHlZIp wcj2Uz6hrYOo9RMWLDHelK2ZoUGHTagRkaZlTDgy9ubXO6pr71xXvw2rFDvQHPRB rVeR4pXCbB8czWMxqWtIHN8h7r5cXANSoCxPxjsHV2nbEtCb7QoK8uAPn45g9mM3 iPid3AiF2ZJnww== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:25 2025 by rpki-client