This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft File: 1-c9m7XQoo55j8NJzYDf0McQao08.mft (raw, json) Hash identifier: VqfNEHtsPMC8KPsvwupLit8NJ1WbyRGBU3KsrLdshFA= Subject key identifier: D9:6C:F4:19:11:84:CA:06:87:08:6D:EA:AC:11:CF:E2:FA:04:4E:00 Authority key identifier: F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F Certificate issuer: /CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f Certificate serial: 019AF2AD749176699573355F050D161064C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 08:00:45 +0000 Manifest this update: Sat 06 Dec 2025 08:00:45 +0000 Manifest next update: Sun 07 Dec 2025 08:00:45 +0000 Files and hashes: 1: 1-c9m7XQoo55j8NJzYDf0McQao08.crl (hash: 26j4eOuCFRGfiYB6AhZ/T7JjMs8HSYBMDqaFPEys584=) 2: rbOZFLBJLeiBgSg-ywSTHEPc89w.roa (hash: Wz1ZKiJOk56RIdFfsa2AALc0JqTjfQEXp/iXAbjA7+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:74:91:76:69:95:73:35:5f:05:0d:16:10:64:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f Validity Not Before: Dec 6 08:00:45 2025 GMT Not After : Dec 7 08:00:45 2025 GMT Subject: CN=d96cf4191184ca0687086deaac11cfe2fa044e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:24:97:a6:da:6d:a9:bd:d0:a6:02:1b:37:50: cf:d7:fe:fa:d5:a7:a7:9d:b5:ba:17:13:12:ab:aa: 93:e7:9f:6e:70:93:80:34:ca:e4:cd:47:d1:09:95: cb:d6:d9:ab:81:d0:66:a1:26:ec:21:75:d9:e5:d1: 23:99:fb:af:89:14:76:08:cf:8c:ee:75:1b:4c:3c: 35:57:b5:3d:dc:49:f5:01:1e:92:35:61:0c:8d:fe: b8:34:1a:13:1b:52:c8:67:8c:fb:fe:67:24:4f:93: bc:87:4e:65:e4:54:eb:af:34:6c:3f:fe:21:6e:67: 2e:a2:b8:ec:2f:d0:8a:a7:64:13:92:8e:60:85:a3: aa:e4:54:65:6a:fc:7d:23:a0:88:4a:ae:06:a9:90: 7f:f2:df:7d:f0:c7:10:31:a3:b3:97:78:c8:9b:0b: e3:94:f3:74:fa:20:89:11:04:1d:fc:8b:ae:4e:d6: 4e:84:8a:6c:f2:ea:21:85:22:5a:f0:3d:8b:e0:3e: 86:f7:91:ae:f1:0e:c7:77:77:e8:04:3a:83:b5:91: 94:af:f1:a8:b9:5c:ea:9d:1d:89:59:71:89:b4:c2: 8c:9d:1c:23:ab:36:56:c8:b5:33:89:da:44:84:8b: 61:e2:67:18:a7:09:5b:3a:89:88:6e:8a:25:83:f5: d2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6C:F4:19:11:84:CA:06:87:08:6D:EA:AC:11:CF:E2:FA:04:4E:00 X509v3 Authority Key Identifier: keyid:F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:81:e9:4a:ce:de:da:0b:b6:b1:34:16:30:db:0d:cb:3a:6a: d0:c1:51:98:06:7e:f5:8e:51:28:9e:34:84:2f:72:af:63:dc: 7b:db:85:d6:00:72:26:06:19:83:41:ee:a1:bc:2b:ea:02:b3: f6:8c:62:35:e3:99:17:95:19:a8:34:9c:e7:42:e4:3b:67:15: 4f:04:49:a1:e0:2f:7f:35:eb:50:b1:2a:84:55:62:18:ca:17: dc:3a:3d:52:de:20:1b:02:cb:92:5a:94:7e:1c:60:78:37:fd: 95:23:fc:11:13:31:c5:b1:41:3d:ee:1b:dc:d8:3e:d8:d0:39: 41:4f:30:b8:39:14:92:02:25:94:51:dc:bc:ae:bb:1f:9b:ce: 4e:a1:6a:fc:c2:83:e5:90:7c:97:bb:7f:a2:a6:f0:e1:84:5e: 92:de:9f:a6:8f:32:d4:52:a8:b9:65:c1:45:80:45:ba:bb:29: 17:ca:da:c7:73:7e:06:b5:b3:36:b9:cd:a9:c5:64:a4:e6:da: 45:49:58:9a:4d:5e:63:f6:ff:1f:c2:32:5d:69:14:f6:6d:d1: 50:47:55:d9:0d:42:5c:95:53:4f:fe:ec:30:55:ee:35:8b:56: 2e:3e:fd:bc:6e:c9:c4:cd:84:f5:f4:27:ba:84:2c:95:01:b0: cd:86:8c:9c -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZryrXSRdmmVczVfBQ0WEGTHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5Y2Y2NmVkNzQyOGEzOWU2M2YwZDI3MzYwMzdmNDMxYzQx YWEzNGYwHhcNMjUxMjA2MDgwMDQ1WhcNMjUxMjA3MDgwMDQ1WjAzMTEwLwYDVQQD EyhkOTZjZjQxOTExODRjYTA2ODcwODZkZWFhYzExY2ZlMmZhMDQ0ZTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CSXptptqb3QpgIbN1DP1/761aen nbW6FxMSq6qT559ucJOANMrkzUfRCZXL1tmrgdBmoSbsIXXZ5dEjmfuviRR2CM+M 7nUbTDw1V7U93En1AR6SNWEMjf64NBoTG1LIZ4z7/mckT5O8h05l5FTrrzRsP/4h bmcuorjsL9CKp2QTko5ghaOq5FRlavx9I6CISq4GqZB/8t998McQMaOzl3jImwvj lPN0+iCJEQQd/IuuTtZOhIps8uohhSJa8D2L4D6G95Gu8Q7Hd3foBDqDtZGUr/Go uVzqnR2JWXGJtMKMnRwjqzZWyLUzidpEhIth4mcYpwlbOomIboolg/XS0QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFNls9BkRhMoGhwht6qwRz+L6BE4AMB8GA1UdIwQY MBaAFPnPZu10KKOeY/DSc2A39DHEGqNPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1jOW03WFFvbzU1ajhOSnpZRGYwTWNRYW8wOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvZDc4NGVkLWJlNzUtNDA3Mi1hNzgw LWU2MzM3MDNmY2JlZC8xLzEtYzltN1hRb281NWo4Tkp6WURmME1jUWFvMDgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzcxL2Q3ODRlZC1iZTc1LTQwNzItYTc4MC1lNjMzNzAzZmNi ZWQvMS8xLWM5bTdYUW9vNTVqOE5KellEZjBNY1FhbzA4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfoHp Ss7e2gu2sTQWMNsNyzpq0MFRmAZ+9Y5RKJ40hC9yr2Pce9uF1gByJgYZg0Huobwr 6gKz9oxiNeOZF5UZqDSc50LkO2cVTwRJoeAvfzXrULEqhFViGMoX3Do9Ut4gGwLL klqUfhxgeDf9lSP8ERMxxbFBPe4b3Ng+2NA5QU8wuDkUkgIllFHcvK67H5vOTqFq /MKD5ZB8l7t/oqbw4YRekt6fpo8y1FKouWXBRYBFurspF8rax3N+BrWzNrnNqcVk pObaRUlYmk1eY/b/H8IyXWkU9m3RUEdV2Q1CXJVTT/7sMFXuNYtWLj79vG7JxM2E 9fQnuoQslQGwzYaMnA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:57 2025 by rpki-client