This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft File: 9-CSr_r5tUhOAJmap_HO8ax7QJM.mft (raw, json) Hash identifier: HDbb8J62frg4Ld+PBNVQYoXUuUsOW/Z51TUR5bKKBng= Subject key identifier: 58:6D:13:74:EC:D1:28:1C:6B:32:94:5F:C9:5A:87:87:A2:88:2C:8B Authority key identifier: F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93 Certificate issuer: /CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093 Certificate serial: 019AF5AEDBFF3BD4E0D179E83772EA32A37E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 22:01:08 +0000 Manifest this update: Sat 06 Dec 2025 22:01:08 +0000 Manifest next update: Sun 07 Dec 2025 22:01:08 +0000 Files and hashes: 1: 9-CSr_r5tUhOAJmap_HO8ax7QJM.crl (hash: QhVleDX4bYEm4Io/l6uEfgkMNHzNayFXiVyIDZdZOLQ=) 2: s1tohRSZu__XAcftU1RiatFR4dQ.roa (hash: VEmypovoGht5ITUXKfWFpiCHNX0Yi9nhk6KgNzb6xkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:db:ff:3b:d4:e0:d1:79:e8:37:72:ea:32:a3:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093 Validity Not Before: Dec 6 22:01:08 2025 GMT Not After : Dec 7 22:01:08 2025 GMT Subject: CN=586d1374ecd1281c6b32945fc95a8787a2882c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:52:dc:33:ae:1a:f6:bb:1d:e9:5e:79:51:0c: e7:26:18:1c:b3:c2:88:76:65:6e:5e:05:9c:53:39: 42:5f:92:89:1c:dd:94:79:2a:4e:fd:42:0c:7c:d6: 0e:53:5e:1b:27:03:15:a7:cd:9c:0b:46:dd:be:a1: bf:2e:ab:fe:09:16:a0:52:aa:ae:14:1e:51:7b:c1: 34:c8:e0:c6:60:e5:4f:62:2a:29:97:ed:c7:d7:dc: 17:64:5f:1d:d5:68:90:82:98:e6:db:64:12:83:52: 34:ab:1f:82:91:f8:df:cf:07:15:37:af:ef:07:01: 5f:2c:61:1f:53:72:cb:f1:a4:dd:28:0a:27:89:ff: 74:fd:18:db:83:08:f2:3a:ab:7d:81:0a:ad:a3:b2: 80:5c:34:bb:22:c2:10:77:85:ff:60:4c:56:2b:53: ce:d0:79:6f:8b:e4:eb:d6:db:f9:b9:81:a1:4f:a4: 4e:54:0a:56:20:14:c0:20:84:c1:9b:b7:0a:a2:6e: 81:a7:9d:15:ef:62:f4:a5:e6:84:d7:60:66:04:7c: 38:e3:be:d3:12:4a:84:fa:7d:17:c2:c5:7c:b6:55: 55:8e:b1:62:56:83:b6:22:bb:a2:68:ff:ad:5b:3c: b6:28:e6:7e:d1:7b:0a:42:16:c2:52:74:2b:03:6d: 28:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6D:13:74:EC:D1:28:1C:6B:32:94:5F:C9:5A:87:87:A2:88:2C:8B X509v3 Authority Key Identifier: keyid:F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:6e:c2:40:ae:c8:e8:7c:98:08:6d:dc:0f:be:85:fa:98:b9: 88:f6:c2:71:17:d5:59:e7:65:1d:5d:ba:42:8d:11:5f:1d:6b: f5:d2:b4:a6:c9:85:90:27:48:a8:50:3a:ff:85:42:b3:68:27: 46:eb:13:5d:2c:5b:88:1e:70:b9:49:71:7e:bd:90:aa:6a:05: 58:7e:88:5b:da:a2:1c:bf:8e:c2:56:6d:c2:81:06:91:0b:c4: bc:38:b5:6f:d1:ec:1d:2c:6e:3a:7c:9c:21:4e:3a:f3:db:27: b2:72:7b:2a:17:29:48:15:a5:54:c7:cb:93:21:8b:05:8e:0c: 4f:0d:d5:9d:b2:e6:58:b8:c2:e6:8d:38:47:7a:4a:aa:5b:99: 31:9b:88:e3:64:6a:a0:5e:79:18:ac:d9:6f:c7:33:92:5a:b3: 7e:b3:3a:37:2f:7d:6f:41:f9:ad:8c:65:e4:bc:39:83:ae:dd: 46:cf:59:1a:5d:80:29:36:1d:10:0f:ec:b7:6c:fb:f9:43:db: 99:15:b7:0b:cf:4d:f1:a3:e2:2d:29:db:57:9b:2b:c2:38:e9: 97:00:ab:c6:35:38:d9:72:2e:5b:e2:0f:23:21:64:81:62:43: a2:2b:4d:1b:5c:ea:fe:b8:77:74:0b:20:11:7d:e0:72:dd:3d: aa:92:6a:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rtv/O9Tg0XnoN3LqMqN+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZTA5MmFmZmFmOWI1NDg0ZTAwOTk5YWE3ZjFjZWYxYWM3 YjQwOTMwHhcNMjUxMjA2MjIwMTA4WhcNMjUxMjA3MjIwMTA4WjAzMTEwLwYDVQQD Eyg1ODZkMTM3NGVjZDEyODFjNmIzMjk0NWZjOTVhODc4N2EyODgyYzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1LcM64a9rsd6V55UQznJhgcs8KI dmVuXgWcUzlCX5KJHN2UeSpO/UIMfNYOU14bJwMVp82cC0bdvqG/Lqv+CRagUqqu FB5Re8E0yODGYOVPYiopl+3H19wXZF8d1WiQgpjm22QSg1I0qx+CkfjfzwcVN6/v BwFfLGEfU3LL8aTdKAonif90/RjbgwjyOqt9gQqto7KAXDS7IsIQd4X/YExWK1PO 0Hlvi+Tr1tv5uYGhT6ROVApWIBTAIITBm7cKom6Bp50V72L0peaE12BmBHw4477T EkqE+n0XwsV8tlVVjrFiVoO2IruiaP+tWzy2KOZ+0XsKQhbCUnQrA20oiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhtE3Ts0SgcazKUX8lah4eiiCyLMB8GA1UdIwQY MBaAFPfgkq/6+bVITgCZmqfxzvGse0CTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOS1DU3JfcjV0VWhPQUptYXBfSE84YXg3UUpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lYzkwOTItMWJjMi00YWFkLWFkM2Et MTBmZjllZTJhOGMyLzEvOS1DU3JfcjV0VWhPQUptYXBfSE84YXg3UUpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9lYzkwOTItMWJjMi00YWFkLWFkM2EtMTBmZjllZTJhOGMy LzEvOS1DU3JfcjV0VWhPQUptYXBfSE84YXg3UUpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABm7CQK7I 6HyYCG3cD76F+pi5iPbCcRfVWedlHV26Qo0RXx1r9dK0psmFkCdIqFA6/4VCs2gn RusTXSxbiB5wuUlxfr2QqmoFWH6IW9qiHL+OwlZtwoEGkQvEvDi1b9HsHSxuOnyc IU4689snsnJ7KhcpSBWlVMfLkyGLBY4MTw3VnbLmWLjC5o04R3pKqluZMZuI42Rq oF55GKzZb8czklqzfrM6Ny99b0H5rYxl5Lw5g67dRs9ZGl2AKTYdEA/st2z7+UPb mRW3C89N8aPiLSnbV5srwjjplwCrxjU42XIuW+IPIyFkgWJDoitNG1zq/rh3dAsg EX3gct09qpJqDA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:18:22 2025 by rpki-client