This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft File: 9JUCyXSCsoUChSyX75vToKKl6fA.mft (raw, json) Hash identifier: kcLIsMSw4NDkTHdiP5P2C3jmhufail/sP+uvxhdoSTw= Subject key identifier: 6A:AB:58:23:A0:91:72:0D:0B:B8:51:EB:40:B6:CF:21:4B:2B:24:7B Authority key identifier: F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0 Certificate issuer: /CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0 Certificate serial: 019AF277184D2F996CEF8798872998DA291C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft Manifest number: 1532 Signing time: Sat 06 Dec 2025 07:01:22 +0000 Manifest this update: Sat 06 Dec 2025 07:01:22 +0000 Manifest next update: Sun 07 Dec 2025 07:01:22 +0000 Files and hashes: 1: 9JUCyXSCsoUChSyX75vToKKl6fA.crl (hash: x9AbQvxOdZHsCUbb/VBMpNIObVGqrzxboHQcQ24Tx/Q=) 2: EaZvYH2YGiO37NZ1bGFHkmEdMcw.roa (hash: HSZLZ0cKEKUvUtWkwWARshBwReQDxlGBdY+EDDOfXjA=) 3: NbJCCt6mZbGhQhsVck9Ye84ql_A.roa (hash: 1GHJ4CqSoQFt3IGPoRuzPcM9vgZHBXB7ib41DM1rbg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:18:4d:2f:99:6c:ef:87:98:87:29:98:da:29:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0 Validity Not Before: Dec 6 07:01:22 2025 GMT Not After : Dec 7 07:01:22 2025 GMT Subject: CN=6aab5823a091720d0bb851eb40b6cf214b2b247b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:60:4a:14:66:1e:8a:38:b3:75:d4:84:6b:df: 80:2d:9b:9e:2f:a4:d0:31:4c:6f:c8:de:67:8b:0a: ab:a7:80:0a:50:a3:e0:8f:aa:59:d1:c2:53:a5:fa: 96:93:07:c2:4a:7c:e3:44:46:ee:64:05:fc:84:8b: c1:e7:2e:77:22:5c:17:a5:91:70:b4:85:8a:42:82: f6:98:ce:1c:e9:f7:f3:83:22:cb:e4:d6:06:f1:2f: 70:d9:4e:0e:96:d2:17:89:50:b2:2e:6c:de:d3:ed: 2c:0a:b0:64:92:23:12:d4:a8:cc:22:a7:79:27:41: 54:58:91:e2:f2:33:a2:1b:01:75:cf:ac:c5:6e:b3: 5f:94:7b:db:c6:73:df:37:c8:65:30:e1:1d:fe:cc: 25:36:d6:96:52:10:e5:0e:03:9e:50:85:47:51:32: ff:7d:17:7a:b1:5f:a7:2f:bf:8d:7a:68:a5:cc:eb: 63:79:a9:8b:ef:90:ad:2e:d3:2d:a2:ed:92:cd:99: 31:1e:3c:fa:34:c7:99:4a:7e:fc:cd:7d:97:89:06: 08:06:89:05:0d:3c:de:6e:2a:7f:9d:74:7b:2d:97: c4:49:0d:ab:84:8c:d8:65:82:a0:53:e9:12:7f:93: 08:c6:d1:b0:6d:f2:05:cf:4a:44:d2:5d:63:dd:ec: 3e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:AB:58:23:A0:91:72:0D:0B:B8:51:EB:40:B6:CF:21:4B:2B:24:7B X509v3 Authority Key Identifier: keyid:F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:01:43:31:69:b9:9f:f2:28:26:5b:a4:b7:b1:8f:b1:80:f6: 73:58:43:a3:d3:69:4c:04:61:a0:4a:81:b6:c3:28:fb:53:3e: 2e:8f:f0:fe:88:40:d0:34:af:57:19:e3:45:58:68:81:a0:45: fc:5e:87:25:2a:8f:f3:cd:89:e5:e3:32:bf:de:7c:94:71:4d: 1c:95:dc:2b:41:06:f6:45:42:6d:5d:8c:7f:35:ee:1b:13:ad: 88:70:30:8c:76:a2:c9:28:dd:92:ce:7e:01:9d:75:1e:8e:74: 4f:81:03:41:df:fe:d1:bb:df:3a:34:c1:ed:c5:46:07:23:be: 3e:67:fd:7d:45:6d:5e:0c:83:8f:d7:78:bb:62:55:e3:7a:e8: 34:1e:92:5a:4c:62:e5:32:0b:6a:d2:ad:12:14:d0:59:5f:1c: 92:84:ec:67:b0:68:33:a2:8b:a6:18:1d:32:8c:49:42:82:23: c3:43:16:4a:0b:4a:5b:fe:5d:52:b9:b4:77:f6:c8:07:48:01: 08:34:0c:2b:67:b5:ce:d9:1f:f7:a9:81:9f:97:4b:01:d1:7a: 29:ce:50:fc:81:13:7f:62:80:92:3a:73:4e:33:15:3d:af:56: a3:c4:40:74:72:e7:4c:7d:ff:e7:d1:68:1a:9c:2c:cc:d4:aa: b6:44:e6:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxhNL5ls74eYhymY2ikcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0OTUwMmM5NzQ4MmIyODUwMjg1MmM5N2VmOWJkM2EwYTJh NWU5ZjAwHhcNMjUxMjA2MDcwMTIyWhcNMjUxMjA3MDcwMTIyWjAzMTEwLwYDVQQD Eyg2YWFiNTgyM2EwOTE3MjBkMGJiODUxZWI0MGI2Y2YyMTRiMmIyNDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmBKFGYeijizddSEa9+ALZueL6TQ MUxvyN5niwqrp4AKUKPgj6pZ0cJTpfqWkwfCSnzjREbuZAX8hIvB5y53IlwXpZFw tIWKQoL2mM4c6ffzgyLL5NYG8S9w2U4OltIXiVCyLmze0+0sCrBkkiMS1KjMIqd5 J0FUWJHi8jOiGwF1z6zFbrNflHvbxnPfN8hlMOEd/swlNtaWUhDlDgOeUIVHUTL/ fRd6sV+nL7+NemilzOtjeamL75CtLtMtou2SzZkxHjz6NMeZSn78zX2XiQYIBokF DTzebip/nXR7LZfESQ2rhIzYZYKgU+kSf5MIxtGwbfIFz0pE0l1j3ew+JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqrWCOgkXINC7hR60C2zyFLKyR7MB8GA1UdIwQY MBaAFPSVAsl0grKFAoUsl++b06CipenwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUpVQ3lYU0Nzb1VDaFN5WDc1dlRvS0tsNmZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8xZjg2ZDMtMDg3ZC00ZDY5LWI4ZTct NzNiMGM3NGU5YjY0LzEvOUpVQ3lYU0Nzb1VDaFN5WDc1dlRvS0tsNmZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8xZjg2ZDMtMDg3ZC00ZDY5LWI4ZTctNzNiMGM3NGU5YjY0 LzEvOUpVQ3lYU0Nzb1VDaFN5WDc1dlRvS0tsNmZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiQFDMWm5 n/IoJlukt7GPsYD2c1hDo9NpTARhoEqBtsMo+1M+Lo/w/ohA0DSvVxnjRVhogaBF /F6HJSqP882J5eMyv958lHFNHJXcK0EG9kVCbV2MfzXuGxOtiHAwjHaiySjdks5+ AZ11Ho50T4EDQd/+0bvfOjTB7cVGByO+Pmf9fUVtXgyDj9d4u2JV43roNB6SWkxi 5TILatKtEhTQWV8ckoTsZ7BoM6KLphgdMoxJQoIjw0MWSgtKW/5dUrm0d/bIB0gB CDQMK2e1ztkf96mBn5dLAdF6Kc5Q/IETf2KAkjpzTjMVPa9Wo8RAdHLnTH3/59Fo GpwszNSqtkTmNA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:43:55 2025 by rpki-client