This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft File: S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft (raw, json) Hash identifier: x/jKILCHuGSNOKrHiUW+Iy2Jz8kX2QeELOErhsesOKM= Subject key identifier: D8:18:5F:A5:6F:30:43:82:A7:5A:B8:0E:8E:B0:B1:F9:FC:85:E9:50 Authority key identifier: 4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39 Certificate issuer: /CN=4bd1f50df263fe509fc5de9c5a473a28e3812639 Certificate serial: 019AF31C790602AD7AB9A7F45716C3D2AEB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft Manifest number: 12D1 Signing time: Sat 06 Dec 2025 10:02:00 +0000 Manifest this update: Sat 06 Dec 2025 10:02:00 +0000 Manifest next update: Sun 07 Dec 2025 10:02:00 +0000 Files and hashes: 1: S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl (hash: hRnhs0DksbV1rOnXbCn9YH04n3BWywoKoULIt4255jM=) 2: ejjlASXkUcRdnr6-VdCF2Mgcm40.roa (hash: vzr2w6+iif68HBa0Udg4Ex8g0igxmMWxnsZRKLXilEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:79:06:02:ad:7a:b9:a7:f4:57:16:c3:d2:ae:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bd1f50df263fe509fc5de9c5a473a28e3812639 Validity Not Before: Dec 6 10:02:00 2025 GMT Not After : Dec 7 10:02:00 2025 GMT Subject: CN=d8185fa56f304382a75ab80e8eb0b1f9fc85e950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4d:b7:7e:01:27:f4:f9:36:45:fe:db:37:f1: e3:00:27:a6:34:09:8a:5d:ff:98:89:e9:fc:b0:66: e8:4b:3a:38:21:99:6f:0d:cd:65:d4:21:55:89:53: a8:09:1f:99:19:a4:ee:66:4f:8d:a8:38:dd:c8:c5: f8:a4:fb:ea:65:95:9f:fb:3f:ba:7b:c7:1a:94:0b: 18:f7:b0:ac:51:72:6f:64:1a:29:04:64:40:86:be: 94:69:68:ba:48:5a:c0:5b:b1:3c:8b:9c:fa:a1:4d: e9:e0:96:ef:9a:f3:c4:51:f4:58:77:63:a8:34:ff: 71:d6:59:35:65:34:ae:ea:67:33:48:9d:81:b1:4e: 44:03:44:68:52:b7:6c:b7:66:db:cb:6a:8c:3c:cd: bc:67:40:1a:25:1f:29:6d:2b:f1:7c:62:47:54:7a: a5:ee:2e:cb:f5:32:c3:16:11:1b:b3:5e:f9:46:2a: 5c:ef:ee:69:4d:e4:28:29:c1:4c:22:c4:50:d4:6a: 44:31:00:9d:70:34:06:30:3a:2f:4b:09:f7:d6:d0: a0:69:da:d1:8b:a4:ec:64:9e:cb:86:72:f5:1f:4a: ad:f8:ef:8e:1a:a0:23:4f:43:24:ba:2f:74:eb:da: 4a:f2:36:b2:81:1c:a7:41:ff:e2:e8:cb:f9:1d:05: 91:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:18:5F:A5:6F:30:43:82:A7:5A:B8:0E:8E:B0:B1:F9:FC:85:E9:50 X509v3 Authority Key Identifier: keyid:4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:15:d0:ab:55:d1:83:44:d6:e6:12:cb:aa:1e:8d:45:1f:88: 9e:29:e8:6f:21:24:48:f7:dc:a0:db:8f:18:87:d0:62:a4:c8: 47:68:71:72:77:e9:00:44:a2:df:c1:17:27:1d:e2:54:39:60: 71:d6:4e:a4:91:27:e6:c3:2c:01:ea:d6:a7:35:78:06:a3:ee: 48:32:61:8f:42:8c:c6:5a:aa:b5:d0:e7:b6:74:a6:c5:5a:21: 53:a4:40:b4:12:1a:fd:1a:b5:ee:27:7a:53:86:ff:fd:0d:62: dc:6a:8a:aa:3b:1e:02:b0:05:d8:71:4b:f1:c2:12:46:2d:24: e3:43:57:91:95:fe:19:35:f4:7d:01:02:9d:77:27:88:44:cb: 19:0b:3b:a2:77:1d:49:7c:c2:8d:17:f0:a6:94:b5:5a:7b:e0: a5:ac:78:9b:c8:7b:54:58:d0:b3:1d:96:b0:1b:9c:1c:8d:08: fc:67:8c:cc:b3:fb:5f:24:e2:a8:65:0b:ab:bb:7e:a4:35:64: 00:5d:66:1a:e3:3f:f7:30:4d:45:c6:80:97:86:74:ff:85:62: c4:83:34:5c:31:50:51:90:47:53:98:c2:24:d4:00:58:f6:2b: 7c:d3:83:16:ec:64:1c:8f:4b:da:5f:c0:68:55:9e:fa:72:e8: 42:cc:2d:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHHkGAq16uaf0VxbD0q63MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZDFmNTBkZjI2M2ZlNTA5ZmM1ZGU5YzVhNDczYTI4ZTM4 MTI2MzkwHhcNMjUxMjA2MTAwMjAwWhcNMjUxMjA3MTAwMjAwWjAzMTEwLwYDVQQD EyhkODE4NWZhNTZmMzA0MzgyYTc1YWI4MGU4ZWIwYjFmOWZjODVlOTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu023fgEn9Pk2Rf7bN/HjACemNAmK Xf+Yien8sGboSzo4IZlvDc1l1CFViVOoCR+ZGaTuZk+NqDjdyMX4pPvqZZWf+z+6 e8calAsY97CsUXJvZBopBGRAhr6UaWi6SFrAW7E8i5z6oU3p4JbvmvPEUfRYd2Oo NP9x1lk1ZTSu6mczSJ2BsU5EA0RoUrdst2bby2qMPM28Z0AaJR8pbSvxfGJHVHql 7i7L9TLDFhEbs175Ripc7+5pTeQoKcFMIsRQ1GpEMQCdcDQGMDovSwn31tCgadrR i6TsZJ7LhnL1H0qt+O+OGqAjT0Mkui9069pK8jaygRynQf/i6Mv5HQWRwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgYX6VvMEOCp1q4Do6wsfn8helQMB8GA1UdIwQY MBaAFEvR9Q3yY/5Qn8XenFpHOijjgSY5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzlIMURmSmpfbENmeGQ2Y1drYzZLT09CSmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83ZDIwYTItYjg4MS00NjFjLWJiZjUt MmI2ODA5MzM5NzAyLzEvUzlIMURmSmpfbENmeGQ2Y1drYzZLT09CSmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83ZDIwYTItYjg4MS00NjFjLWJiZjUtMmI2ODA5MzM5NzAy LzEvUzlIMURmSmpfbENmeGQ2Y1drYzZLT09CSmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADhXQq1XR g0TW5hLLqh6NRR+IninobyEkSPfcoNuPGIfQYqTIR2hxcnfpAESi38EXJx3iVDlg cdZOpJEn5sMsAerWpzV4BqPuSDJhj0KMxlqqtdDntnSmxVohU6RAtBIa/Rq17id6 U4b//Q1i3GqKqjseArAF2HFL8cISRi0k40NXkZX+GTX0fQECnXcniETLGQs7oncd SXzCjRfwppS1Wnvgpax4m8h7VFjQsx2WsBucHI0I/GeMzLP7XyTiqGULq7t+pDVk AF1mGuM/9zBNRcaAl4Z0/4VixIM0XDFQUZBHU5jCJNQAWPYrfNODFuxkHI9L2l/A aFWe+nLoQswtWQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:57:53 2025 by rpki-client