This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft File: 91sCopx2blsTs-sXapccEt3h1M4.mft (raw, json) Hash identifier: 61y97mqDShsSI/WubEPWqcT8fsHHeEowC9RlToOpZmU= Subject key identifier: B1:F5:4F:33:29:5D:85:14:B5:03:64:32:B8:5F:EE:C4:AC:ED:13:7E Authority key identifier: F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE Certificate issuer: /CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce Certificate serial: 019AF23FAB94FFC09FB15AE90643D247F93C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft Manifest number: 12E8 Signing time: Sat 06 Dec 2025 06:00:50 +0000 Manifest this update: Sat 06 Dec 2025 06:00:50 +0000 Manifest next update: Sun 07 Dec 2025 06:00:50 +0000 Files and hashes: 1: 91sCopx2blsTs-sXapccEt3h1M4.crl (hash: lkI95HIftDBFp8D3HPJ0YUiZQdcbTRadBtGXUQMDrZQ=) 2: IKYkPycoZ16me6Kb0OaEhELdyLo.roa (hash: Um/+K1DsE/fHN8bVJfVKmH+mN7B9+NKyvrFzBu4jUT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:ab:94:ff:c0:9f:b1:5a:e9:06:43:d2:47:f9:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce Validity Not Before: Dec 6 06:00:50 2025 GMT Not After : Dec 7 06:00:50 2025 GMT Subject: CN=b1f54f33295d8514b5036432b85feec4aced137e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a5:c9:5c:01:a9:36:64:89:56:b8:22:9b:01: d4:da:50:30:d6:14:76:43:ff:d3:80:85:4a:24:c1: 21:b2:53:65:e7:3b:f7:5c:42:11:da:85:05:8f:9f: ea:cd:13:e3:a9:f1:28:5c:d2:a2:6d:d1:26:22:8a: fc:3f:23:5b:56:3d:7f:6b:30:2f:6e:1e:cb:c8:72: 07:60:97:a1:a1:fb:bb:55:4b:74:1b:28:0f:f3:a4: 3f:5f:b0:3e:25:9c:40:41:e3:0e:fb:58:4e:63:e1: 2a:01:f4:56:22:22:ef:70:96:cb:60:ca:ff:74:a0: b4:5b:72:8f:2a:84:da:74:49:a8:fa:30:f8:cb:4e: fd:a4:f2:93:51:ee:8b:60:20:84:a0:60:07:ee:9f: d6:33:9e:04:fb:b0:0e:4d:8c:38:26:6e:c5:32:35: 87:bd:7b:6f:0a:9c:fe:43:20:39:bd:4b:68:b4:0b: cd:9b:76:f2:24:23:8f:8c:b2:64:c3:d0:3c:4d:15: 02:dd:32:7c:ea:9e:cc:b3:c0:8c:c4:c7:fe:02:80: a9:e1:70:43:22:db:de:c7:39:6e:87:f7:56:5c:f3: 8b:88:80:47:2c:54:b6:70:1e:b6:31:5b:81:57:26: 99:a6:54:55:0b:d9:b2:3e:4f:a5:32:62:a2:1d:9a: db:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F5:4F:33:29:5D:85:14:B5:03:64:32:B8:5F:EE:C4:AC:ED:13:7E X509v3 Authority Key Identifier: keyid:F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d1:12:f7:11:c4:ae:68:c8:35:9d:4b:f8:76:da:c7:72:13: 42:bd:15:aa:2e:73:2e:e6:62:fb:33:00:23:fc:cc:79:3e:6c: 94:53:77:7a:7a:59:1f:ce:95:0d:86:fc:da:d1:20:c4:33:91: 74:f3:1b:ef:31:f6:2b:29:0f:31:e8:10:5c:78:bb:8a:57:c0: 64:77:3a:10:84:c5:f1:ff:1b:8e:68:11:30:fc:16:f9:1a:04: 73:dc:dd:e1:bf:d9:c3:ef:27:62:34:7e:23:cf:11:4e:fd:f4: a9:48:f8:7e:12:86:73:ca:2f:98:f5:5b:c9:9f:fe:7a:22:5c: e0:24:48:3b:e9:b4:01:49:78:d4:df:86:ab:33:fb:de:c6:1b: 54:bb:28:e5:cb:ef:25:a4:38:f1:bb:09:65:89:c4:64:90:20: b4:26:7a:71:01:c1:23:14:fb:43:a6:41:25:8f:57:ed:30:1b: e9:8a:bc:15:fc:e3:6f:ea:b2:da:7b:8d:36:9d:f7:4b:64:4a: 71:ae:8f:d6:5b:cc:3c:41:c3:1a:42:d8:c9:d0:7b:9f:88:0e: b7:16:07:4d:9c:92:a9:94:51:b5:7c:89:a2:cb:da:77:7d:40: 65:34:b7:9c:bf:05:e8:22:46:e1:73:22:57:6e:b3:df:ea:bf: c2:1d:32:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6uU/8CfsVrpBkPSR/k8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NWIwMmEyOWM3NjZlNWIxM2IzZWIxNzZhOTcxYzEyZGRl MWQ0Y2UwHhcNMjUxMjA2MDYwMDUwWhcNMjUxMjA3MDYwMDUwWjAzMTEwLwYDVQQD EyhiMWY1NGYzMzI5NWQ4NTE0YjUwMzY0MzJiODVmZWVjNGFjZWQxMzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqXJXAGpNmSJVrgimwHU2lAw1hR2 Q//TgIVKJMEhslNl5zv3XEIR2oUFj5/qzRPjqfEoXNKibdEmIor8PyNbVj1/azAv bh7LyHIHYJehofu7VUt0GygP86Q/X7A+JZxAQeMO+1hOY+EqAfRWIiLvcJbLYMr/ dKC0W3KPKoTadEmo+jD4y079pPKTUe6LYCCEoGAH7p/WM54E+7AOTYw4Jm7FMjWH vXtvCpz+QyA5vUtotAvNm3byJCOPjLJkw9A8TRUC3TJ86p7Ms8CMxMf+AoCp4XBD Itvexzluh/dWXPOLiIBHLFS2cB62MVuBVyaZplRVC9myPk+lMmKiHZrbvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLH1TzMpXYUUtQNkMrhf7sSs7RN+MB8GA1UdIwQY MBaAFPdbAqKcdm5bE7PrF2qXHBLd4dTOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTFzQ29weDJibHNUcy1zWGFwY2NFdDNoMU00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wYTlmZjItN2RmOC00M2YzLWEzMWYt YmNkYmI1NDJjYjVhLzEvOTFzQ29weDJibHNUcy1zWGFwY2NFdDNoMU00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8wYTlmZjItN2RmOC00M2YzLWEzMWYtYmNkYmI1NDJjYjVh LzEvOTFzQ29weDJibHNUcy1zWGFwY2NFdDNoMU00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9ES9xHE rmjINZ1L+Hbax3ITQr0Vqi5zLuZi+zMAI/zMeT5slFN3enpZH86VDYb82tEgxDOR dPMb7zH2KykPMegQXHi7ilfAZHc6EITF8f8bjmgRMPwW+RoEc9zd4b/Zw+8nYjR+ I88RTv30qUj4fhKGc8ovmPVbyZ/+eiJc4CRIO+m0AUl41N+GqzP73sYbVLso5cvv JaQ48bsJZYnEZJAgtCZ6cQHBIxT7Q6ZBJY9X7TAb6Yq8Ffzjb+qy2nuNNp33S2RK ca6P1lvMPEHDGkLYydB7n4gOtxYHTZySqZRRtXyJosvad31AZTS3nL8F6CJG4XMi V26z3+q/wh0yGg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:56:39 2025 by rpki-client