This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft File: 9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft (raw, json) Hash identifier: dUZz+wBjtg63QrATXABzFPkTuAUKlu/T3Gnn7SINH64= Subject key identifier: 48:30:FF:5B:ED:54:91:AF:66:79:6C:00:46:D4:2A:D6:D0:5A:C9:D5 Authority key identifier: F6:38:7E:90:C4:FE:56:EE:1B:63:94:6F:E4:D4:63:1C:60:87:E7:ED Certificate issuer: /CN=f6387e90c4fe56ee1b63946fe4d4631c6087e7ed Certificate serial: 019AF276F981D030A50D43D4FB4E718BE689 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft Manifest number: 0826 Signing time: Sat 06 Dec 2025 07:01:14 +0000 Manifest this update: Sat 06 Dec 2025 07:01:14 +0000 Manifest next update: Sun 07 Dec 2025 07:01:14 +0000 Files and hashes: 1: 9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.crl (hash: Dwh799GuAKYIF6XG97bukgOLTLfFZ+HjtEDvVhjznGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.crl rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft rsync://rpki.ripe.net/repository/DEFAULT/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:f9:81:d0:30:a5:0d:43:d4:fb:4e:71:8b:e6:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6387e90c4fe56ee1b63946fe4d4631c6087e7ed Validity Not Before: Dec 6 07:01:14 2025 GMT Not After : Dec 7 07:01:14 2025 GMT Subject: CN=4830ff5bed5491af66796c0046d42ad6d05ac9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:00:8c:86:0e:cb:f8:d4:1c:0c:95:f8:fb:9e: 43:81:88:bf:73:c8:3f:58:55:3a:e0:48:2a:d7:f1: d9:b9:26:a5:34:4f:c5:7a:f3:d1:e3:22:90:db:40: 18:bd:f7:0e:6e:e0:35:64:32:b4:55:7a:66:d9:d4: b4:ca:2e:dc:c9:fa:97:ea:21:ee:c8:a5:3e:80:58: a4:25:38:22:30:99:f7:c2:2d:72:b0:1d:75:2a:e5: 76:e5:72:40:a7:8a:eb:0c:51:1a:df:ef:c2:b8:d0: cf:74:d0:11:07:05:fe:14:cc:4f:3b:0b:b0:65:53: 00:3f:07:3d:57:fe:16:99:65:a5:d9:33:41:74:69: 9a:21:ac:f7:10:04:5f:db:a4:c1:a6:6e:20:19:06: 48:03:d6:e4:79:9c:3a:8a:f3:04:f8:6d:e3:52:2e: 28:c9:b4:04:f7:ad:ec:64:75:47:1b:f0:2d:3c:c9: 69:19:42:ab:2e:b6:a2:b0:84:37:87:fd:39:f7:58: 56:49:0b:ad:77:c3:76:56:3e:39:e7:2f:1c:e2:66: a6:78:6e:4f:e6:d6:ce:2b:b5:6d:dc:90:49:73:70: d2:e2:e7:26:c0:0e:a7:d4:46:81:e1:d8:1e:68:67: d5:e8:fa:4e:1f:22:01:54:5f:3e:b7:5f:7e:cc:00: 9e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:30:FF:5B:ED:54:91:AF:66:79:6C:00:46:D4:2A:D6:D0:5A:C9:D5 X509v3 Authority Key Identifier: keyid:F6:38:7E:90:C4:FE:56:EE:1B:63:94:6F:E4:D4:63:1C:60:87:E7:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/8b6fcc-14ef-47f0-883e-8ebaa090cf6e/1/9jh-kMT-Vu4bY5Rv5NRjHGCH5-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:7a:41:99:30:ac:46:1b:a3:cc:12:3d:78:3a:7a:41:53:68: 34:c5:9c:d4:03:17:6d:7b:8c:a8:09:5e:e2:69:9f:d2:f6:6a: 8a:15:5e:57:51:8b:d7:b8:05:c7:d0:73:07:b6:88:7a:cf:ff: 99:f6:45:2e:9c:48:a0:32:f7:dd:c4:f7:67:69:d9:65:3a:9b: ef:21:50:ba:24:93:2a:88:50:0a:24:1c:35:fa:35:a0:0b:38: e9:f8:8d:4d:ab:de:cf:fe:a0:b8:a5:e1:b9:20:bd:8b:e1:31: 0a:89:83:93:0a:5d:ca:5e:c3:e9:10:11:a5:11:65:8e:8d:9f: e0:6f:86:22:fb:b1:34:38:b6:ea:34:cd:92:9f:39:20:2f:84: 43:77:70:f5:91:55:e2:62:00:7c:8b:3a:a8:88:85:c9:b7:62: fd:a1:7a:2d:c3:38:ab:52:70:8f:1d:fb:34:8f:65:57:d9:83: c8:6a:ef:5b:94:eb:c3:d1:c0:02:6b:05:31:6f:f7:aa:90:d1: 3d:47:98:e5:4f:8f:0f:b9:ca:8f:60:e6:ba:35:3a:54:af:46: 72:eb:f4:a8:94:7b:c0:1c:76:5e:c7:77:47:bc:92:ff:51:1c: a1:b9:ff:6f:01:4b:47:d7:0e:0a:d3:ff:77:5b:2a:56:b4:1f: 6f:f9:f8:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvmB0DClDUPU+05xi+aJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2Mzg3ZTkwYzRmZTU2ZWUxYjYzOTQ2ZmU0ZDQ2MzFjNjA4 N2U3ZWQwHhcNMjUxMjA2MDcwMTE0WhcNMjUxMjA3MDcwMTE0WjAzMTEwLwYDVQQD Eyg0ODMwZmY1YmVkNTQ5MWFmNjY3OTZjMDA0NmQ0MmFkNmQwNWFjOWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgCMhg7L+NQcDJX4+55DgYi/c8g/ WFU64Egq1/HZuSalNE/FevPR4yKQ20AYvfcObuA1ZDK0VXpm2dS0yi7cyfqX6iHu yKU+gFikJTgiMJn3wi1ysB11KuV25XJAp4rrDFEa3+/CuNDPdNARBwX+FMxPOwuw ZVMAPwc9V/4WmWWl2TNBdGmaIaz3EARf26TBpm4gGQZIA9bkeZw6ivME+G3jUi4o ybQE963sZHVHG/AtPMlpGUKrLraisIQ3h/0591hWSQutd8N2Vj455y8c4mameG5P 5tbOK7Vt3JBJc3DS4ucmwA6n1EaB4dgeaGfV6PpOHyIBVF8+t19+zACeowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgw/1vtVJGvZnlsAEbUKtbQWsnVMB8GA1UdIwQY MBaAFPY4fpDE/lbuG2OUb+TUYxxgh+ftMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWpoLWtNVC1WdTRiWTVSdjVOUmpIR0NINS0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84YjZmY2MtMTRlZi00N2YwLTg4M2Ut OGViYWEwOTBjZjZlLzEvOWpoLWtNVC1WdTRiWTVSdjVOUmpIR0NINS0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS84YjZmY2MtMTRlZi00N2YwLTg4M2UtOGViYWEwOTBjZjZl LzEvOWpoLWtNVC1WdTRiWTVSdjVOUmpIR0NINS0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFnpBmTCs RhujzBI9eDp6QVNoNMWc1AMXbXuMqAle4mmf0vZqihVeV1GL17gFx9BzB7aIes// mfZFLpxIoDL33cT3Z2nZZTqb7yFQuiSTKohQCiQcNfo1oAs46fiNTavez/6guKXh uSC9i+ExComDkwpdyl7D6RARpRFljo2f4G+GIvuxNDi26jTNkp85IC+EQ3dw9ZFV 4mIAfIs6qIiFybdi/aF6LcM4q1Jwjx37NI9lV9mDyGrvW5Trw9HAAmsFMW/3qpDR PUeY5U+PD7nKj2DmujU6VK9Gcuv0qJR7wBx2Xsd3R7yS/1Ecobn/bwFLR9cOCtP/ d1sqVrQfb/n4Ng== -----END CERTIFICATE-----Generated at Sat Dec 6 13:49:17 2025 by rpki-client