This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft File: V9minRgOgZpHgvtsbqFtOn0ykQA.mft (raw, json) Hash identifier: tUQ64O8qB4zK9gGnM8fTxZByRVkitrnQqo1tc4TFQqM= Subject key identifier: A6:EA:29:1C:29:9E:8E:5F:EB:C7:01:AE:E0:5B:58:46:41:A4:BD:9F Authority key identifier: 57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00 Certificate issuer: /CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100 Certificate serial: 019AF50AA657A9900768C72785EED22FCA19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft Manifest number: 0978 Signing time: Sat 06 Dec 2025 19:01:46 +0000 Manifest this update: Sat 06 Dec 2025 19:01:46 +0000 Manifest next update: Sun 07 Dec 2025 19:01:46 +0000 Files and hashes: 1: V9minRgOgZpHgvtsbqFtOn0ykQA.crl (hash: hYlmMHvJ6lX2t8aWDIRVTlStEV4UgY44plV37GFPwCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:a6:57:a9:90:07:68:c7:27:85:ee:d2:2f:ca:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100 Validity Not Before: Dec 6 19:01:46 2025 GMT Not After : Dec 7 19:01:46 2025 GMT Subject: CN=a6ea291c299e8e5febc701aee05b584641a4bd9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:63:dc:72:be:57:d4:a9:32:db:83:3a:43:75: 7f:ea:28:29:ac:d5:f0:90:02:f3:bd:a8:c8:0b:e5: 08:38:65:8c:78:a9:20:82:11:5c:43:53:5e:3a:8b: 0c:36:61:b6:7a:61:e5:dc:16:90:e8:ec:f8:c7:99: 71:76:f2:18:83:c4:19:48:ea:48:49:67:28:6b:af: 65:97:23:a9:03:84:de:df:b3:16:75:7d:48:9e:55: 3f:66:a8:39:af:70:c6:11:1c:a0:06:fb:fc:13:19: 0d:21:a3:f7:c3:78:cc:89:4a:4f:1f:78:8d:89:17: 01:1f:f8:df:d5:66:1b:88:41:23:d1:25:71:c3:f6: 36:d7:c5:3c:38:62:58:c6:93:03:6d:39:a5:c4:65: 2f:5d:16:c5:8e:ce:46:75:16:3d:9f:a8:a0:70:21: a4:7f:bb:d4:7e:d4:33:1c:a1:70:a5:9d:2b:7a:16: 8e:d2:f4:3b:1f:f2:fd:de:86:9b:c8:d5:b2:ba:fd: ae:38:29:41:60:de:2b:48:33:1f:d7:25:a9:e2:da: c7:bf:5d:cf:29:3b:5c:69:84:b7:e0:aa:ce:49:e2: 36:7c:0c:1d:88:c6:2e:7b:c9:ce:36:ea:b8:b9:ea: 39:e5:b0:51:c5:60:d9:81:c2:67:4f:29:27:17:80: 19:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EA:29:1C:29:9E:8E:5F:EB:C7:01:AE:E0:5B:58:46:41:A4:BD:9F X509v3 Authority Key Identifier: keyid:57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:24:c2:df:c3:40:69:bd:9f:07:ba:20:2b:df:8a:b6:91:61: bf:f8:4a:be:cc:79:64:66:6e:ad:7d:a5:f9:50:36:0b:68:d1: 91:f9:d4:86:dc:85:94:bd:88:75:e3:0d:87:67:38:bd:ea:27: a6:51:d4:0f:0d:d5:db:08:a2:de:a4:a8:12:75:17:5e:35:03: 9d:ae:f7:40:f2:04:33:c9:68:f2:f4:03:72:b8:a0:dc:8e:ad: 00:e5:6f:dc:c2:60:1e:f4:63:9a:f2:6b:65:00:6e:4a:79:78: 15:0d:d9:0e:5a:7c:57:dd:d9:79:db:51:1e:57:08:11:bf:31: f2:9c:2b:52:71:2b:16:b9:bc:64:27:f9:3a:88:e5:84:8e:2f: 80:b9:0f:ea:b2:6b:88:55:32:ff:27:2f:f3:b0:df:15:07:32: 4d:13:67:46:1e:59:e8:68:6d:65:7c:93:da:38:6a:d1:34:c6: 58:3a:74:11:f5:d6:39:15:8d:74:32:dd:87:92:56:e4:24:38: 13:dd:ce:3a:11:bf:81:5f:d1:bc:f1:33:ff:01:7c:57:6d:7f: dd:a8:e7:70:ba:38:43:ef:d7:8e:2b:cc:27:a0:5d:92:4b:02: 0b:5c:36:b6:3a:a6:51:a4:b5:79:d9:d3:af:e1:cf:c0:12:a8: 8c:43:d0:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CqZXqZAHaMcnhe7SL8oZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3ZDlhMjlkMTgwZTgxOWE0NzgyZmI2YzZlYTE2ZDNhN2Qz MjkxMDAwHhcNMjUxMjA2MTkwMTQ2WhcNMjUxMjA3MTkwMTQ2WjAzMTEwLwYDVQQD EyhhNmVhMjkxYzI5OWU4ZTVmZWJjNzAxYWVlMDViNTg0NjQxYTRiZDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mPccr5X1Kky24M6Q3V/6igprNXw kALzvajIC+UIOGWMeKkgghFcQ1NeOosMNmG2emHl3BaQ6Oz4x5lxdvIYg8QZSOpI SWcoa69llyOpA4Te37MWdX1InlU/Zqg5r3DGERygBvv8ExkNIaP3w3jMiUpPH3iN iRcBH/jf1WYbiEEj0SVxw/Y218U8OGJYxpMDbTmlxGUvXRbFjs5GdRY9n6igcCGk f7vUftQzHKFwpZ0rehaO0vQ7H/L93oabyNWyuv2uOClBYN4rSDMf1yWp4trHv13P KTtcaYS34KrOSeI2fAwdiMYue8nONuq4ueo55bBRxWDZgcJnTyknF4AZpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbqKRwpno5f68cBruBbWEZBpL2fMB8GA1UdIwQY MBaAFFfZop0YDoGaR4L7bG6hbTp9MpEAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjltaW5SZ09nWnBIZ3Z0c2JxRnRPbjB5a1FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMWFiNTMtZWNkZC00ZjNmLWI2MDQt MDE1Y2Y1NDdlNDQ3LzEvVjltaW5SZ09nWnBIZ3Z0c2JxRnRPbjB5a1FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9jMWFiNTMtZWNkZC00ZjNmLWI2MDQtMDE1Y2Y1NDdlNDQ3 LzEvVjltaW5SZ09nWnBIZ3Z0c2JxRnRPbjB5a1FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAViTC38NA ab2fB7ogK9+KtpFhv/hKvsx5ZGZurX2l+VA2C2jRkfnUhtyFlL2IdeMNh2c4veon plHUDw3V2wii3qSoEnUXXjUDna73QPIEM8lo8vQDcrig3I6tAOVv3MJgHvRjmvJr ZQBuSnl4FQ3ZDlp8V93ZedtRHlcIEb8x8pwrUnErFrm8ZCf5OojlhI4vgLkP6rJr iFUy/ycv87DfFQcyTRNnRh5Z6GhtZXyT2jhq0TTGWDp0EfXWORWNdDLdh5JW5CQ4 E93OOhG/gV/RvPEz/wF8V21/3ajncLo4Q+/XjivMJ6BdkksCC1w2tjqmUaS1ednT r+HPwBKojEPQxA== -----END CERTIFICATE-----Generated at Sun Dec 7 04:52:36 2025 by rpki-client