This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft File: 9URgWW1tUyQB3jE9-JA2blN21gI.mft (raw, json) Hash identifier: +W2KBklSTVkb14vJMeXqfh/5hC5CiseHkhOJ/zuUg3s= Subject key identifier: 29:23:D7:47:3B:CC:54:CE:E4:C6:CC:5C:DF:3F:29:F7:AE:C6:CB:0A Authority key identifier: F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02 Certificate issuer: /CN=f54460596d6d532401de313df890366e5376d602 Certificate serial: 019AF19AF4EEBA18119F5E59C521E351F41B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft Manifest number: 0733 Signing time: Sat 06 Dec 2025 03:00:55 +0000 Manifest this update: Sat 06 Dec 2025 03:00:55 +0000 Manifest next update: Sun 07 Dec 2025 03:00:55 +0000 Files and hashes: 1: 9URgWW1tUyQB3jE9-JA2blN21gI.crl (hash: kSLQsauDPo26jJ6FpsA5j78qtc7/aSaLcq2EQzavJD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:f4:ee:ba:18:11:9f:5e:59:c5:21:e3:51:f4:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f54460596d6d532401de313df890366e5376d602 Validity Not Before: Dec 6 03:00:55 2025 GMT Not After : Dec 7 03:00:55 2025 GMT Subject: CN=2923d7473bcc54cee4c6cc5cdf3f29f7aec6cb0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4a:5a:0a:93:c7:2b:4e:31:a6:93:3e:73:8c: ca:99:53:61:27:46:6a:58:c3:19:07:a1:6e:d5:d5: 70:bf:c0:60:37:d7:e0:52:d8:3e:95:aa:2c:63:01: d0:8f:17:ec:cc:22:27:cd:03:bb:c1:ab:d3:5f:3d: 6f:9c:d0:ba:cd:d4:f3:c7:ee:d1:34:03:33:50:38: 87:c8:44:7f:4f:8a:4c:66:2e:33:ff:72:62:b2:3f: 05:63:57:df:d8:36:d1:4a:bf:d4:f8:51:39:dc:32: a9:f1:84:a7:94:f7:49:1e:7f:ba:74:b3:1b:be:1e: 58:5e:7f:e6:80:bc:42:05:d8:35:7a:24:07:c0:fb: ac:e2:e1:48:ca:fd:23:dd:fd:2c:bd:d7:79:f2:86: e4:6e:c4:b1:1f:79:eb:42:c6:3a:c4:dc:36:f0:23: 0b:43:69:f6:24:bd:a4:ba:3a:7b:98:44:a9:8a:92: f5:40:14:2d:46:e6:73:bf:38:7f:95:c0:e8:83:18: 7d:2c:61:57:f1:46:4b:52:a2:b8:bd:46:5c:e9:2f: bd:a9:b1:b8:09:ed:05:ff:ec:81:f1:f1:ac:8a:98: d3:de:c7:03:b6:4f:01:64:21:e3:de:63:42:6f:0b: e0:d3:4b:e9:75:cf:e3:79:91:a0:b8:55:bf:49:a1: 77:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:23:D7:47:3B:CC:54:CE:E4:C6:CC:5C:DF:3F:29:F7:AE:C6:CB:0A X509v3 Authority Key Identifier: keyid:F5:44:60:59:6D:6D:53:24:01:DE:31:3D:F8:90:36:6E:53:76:D6:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9URgWW1tUyQB3jE9-JA2blN21gI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a9ede2-28c2-4bef-9bef-c809c0a40888/1/9URgWW1tUyQB3jE9-JA2blN21gI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:29:43:d3:f2:7d:db:20:6e:f0:a3:95:d7:ff:ef:be:b1:3b: d1:83:66:7b:f2:f1:73:88:3b:69:4d:82:0c:3b:f2:85:e2:f6: ea:85:01:fc:0d:73:b2:b7:1b:e7:48:e9:f0:b7:72:c9:34:32: 95:ca:68:9e:9e:05:57:27:3d:01:a9:e2:3c:d5:f7:09:4b:e8: 5c:47:9c:5e:75:dc:99:68:ee:67:cd:1d:81:06:a8:99:7a:d0: 99:86:f2:a9:7c:c9:af:2b:54:07:37:ed:e4:c5:9d:12:d6:51: 4b:5a:20:17:a0:24:ae:dd:65:c9:f0:bc:16:af:43:2a:10:2f: 39:24:94:7e:8a:76:a2:15:7a:31:e9:98:ee:16:f6:10:38:66: c0:73:90:ef:c3:32:d7:21:01:42:8a:52:83:27:cd:8a:4f:fe: 76:7f:bf:36:03:62:2a:a0:7c:93:0e:c1:da:b8:53:4d:79:a2: 1c:9f:6f:8d:32:67:1a:cd:18:ba:ea:0f:a5:af:c6:13:3f:57: ce:05:5f:5a:53:a6:4c:0e:cc:ad:f8:4e:4b:74:8d:14:27:cd: 29:7a:b2:3b:ba:85:01:d2:a7:28:8e:84:3e:09:bf:8a:a2:ae: 67:c5:da:d9:73:5d:87:c4:df:9b:87:b4:28:69:14:c4:1a:fe: 95:ad:de:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvTuuhgRn15ZxSHjUfQbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NDQ2MDU5NmQ2ZDUzMjQwMWRlMzEzZGY4OTAzNjZlNTM3 NmQ2MDIwHhcNMjUxMjA2MDMwMDU1WhcNMjUxMjA3MDMwMDU1WjAzMTEwLwYDVQQD EygyOTIzZDc0NzNiY2M1NGNlZTRjNmNjNWNkZjNmMjlmN2FlYzZjYjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEpaCpPHK04xppM+c4zKmVNhJ0Zq WMMZB6Fu1dVwv8BgN9fgUtg+laosYwHQjxfszCInzQO7wavTXz1vnNC6zdTzx+7R NAMzUDiHyER/T4pMZi4z/3Jisj8FY1ff2DbRSr/U+FE53DKp8YSnlPdJHn+6dLMb vh5YXn/mgLxCBdg1eiQHwPus4uFIyv0j3f0svdd58obkbsSxH3nrQsY6xNw28CML Q2n2JL2kujp7mESpipL1QBQtRuZzvzh/lcDogxh9LGFX8UZLUqK4vUZc6S+9qbG4 Ce0F/+yB8fGsipjT3scDtk8BZCHj3mNCbwvg00vpdc/jeZGguFW/SaF3XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkj10c7zFTO5MbMXN8/KfeuxssKMB8GA1UdIwQY MBaAFPVEYFltbVMkAd4xPfiQNm5TdtYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVVSZ1dXMXRVeVFCM2pFOS1KQTJibE4yMWdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9hOWVkZTItMjhjMi00YmVmLTliZWYt YzgwOWMwYTQwODg4LzEvOVVSZ1dXMXRVeVFCM2pFOS1KQTJibE4yMWdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9hOWVkZTItMjhjMi00YmVmLTliZWYtYzgwOWMwYTQwODg4 LzEvOVVSZ1dXMXRVeVFCM2pFOS1KQTJibE4yMWdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApSlD0/J9 2yBu8KOV1//vvrE70YNme/Lxc4g7aU2CDDvyheL26oUB/A1zsrcb50jp8LdyyTQy lcponp4FVyc9AaniPNX3CUvoXEecXnXcmWjuZ80dgQaomXrQmYbyqXzJrytUBzft 5MWdEtZRS1ogF6Akrt1lyfC8Fq9DKhAvOSSUfop2ohV6MemY7hb2EDhmwHOQ78My 1yEBQopSgyfNik/+dn+/NgNiKqB8kw7B2rhTTXmiHJ9vjTJnGs0YuuoPpa/GEz9X zgVfWlOmTA7MrfhOS3SNFCfNKXqyO7qFAdKnKI6EPgm/iqKuZ8Xa2XNdh8Tfm4e0 KGkUxBr+la3e6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:14:11 2025 by rpki-client