This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft File: 9mKtW4G4BxPe0-__RCmfzXZfKrE.mft (raw, json) Hash identifier: 6Wf0XdJ/5cuTSkWFGeqaqS9wm2v+av8LSwf1avjgLRY= Subject key identifier: 3D:1A:64:47:5C:FF:EB:7C:EA:0F:A1:DD:15:EF:E3:62:D0:60:E2:0E Authority key identifier: F6:62:AD:5B:81:B8:07:13:DE:D3:EF:FF:44:29:9F:CD:76:5F:2A:B1 Certificate issuer: /CN=f662ad5b81b80713ded3efff44299fcd765f2ab1 Certificate serial: 019AF0511D078908DA2DA7AC8C009435D28A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9mKtW4G4BxPe0-__RCmfzXZfKrE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft Manifest number: D2 Signing time: Fri 05 Dec 2025 21:00:38 +0000 Manifest this update: Fri 05 Dec 2025 21:00:38 +0000 Manifest next update: Sat 06 Dec 2025 21:00:38 +0000 Files and hashes: 1: 9mKtW4G4BxPe0-__RCmfzXZfKrE.crl (hash: SaYFOkaby7mrDgwaZ9KJQtMLtuJVbgY7821+/xv5Ayk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.crl rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft rsync://rpki.ripe.net/repository/DEFAULT/9mKtW4G4BxPe0-__RCmfzXZfKrE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:1d:07:89:08:da:2d:a7:ac:8c:00:94:35:d2:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f662ad5b81b80713ded3efff44299fcd765f2ab1 Validity Not Before: Dec 5 21:00:38 2025 GMT Not After : Dec 6 21:00:38 2025 GMT Subject: CN=3d1a64475cffeb7cea0fa1dd15efe362d060e20e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7c:02:95:a9:ca:de:01:43:d0:d1:dd:2f:53: a7:31:69:e9:4e:67:2e:9a:bc:4a:c4:ba:8d:18:2d: a7:8d:84:27:be:44:7c:84:72:f3:bb:34:2f:85:d2: fc:f2:5f:69:d5:f0:82:bf:8c:f8:ee:6e:12:10:5d: 48:c2:89:ed:87:69:6e:27:c8:ef:2b:d1:ed:1a:54: f0:4f:a3:b0:e5:e4:59:a4:ce:67:33:e8:59:54:1d: 98:5e:0e:7c:a3:04:21:e0:71:cb:63:e3:fe:d1:29: 2f:e3:61:e0:2e:ee:3b:7e:8a:ea:8e:fb:34:a1:3d: 29:4a:30:01:80:f2:90:a3:7c:d0:a7:07:b1:5a:78: b7:ac:c7:03:61:f8:30:c0:4c:1c:f1:e7:15:4e:7f: 25:d1:67:2a:aa:50:d5:4e:2e:06:1c:65:51:79:ea: f7:9c:fa:4a:4e:76:82:4d:0d:bb:be:5c:b4:70:c8: df:54:f8:94:ad:58:6d:db:e3:f5:5d:bd:ac:a2:b2: 3c:62:55:dc:74:c2:8d:c1:47:75:14:8c:16:2d:c4: fc:68:1e:0c:89:c3:c5:f5:6e:a5:4c:11:8d:f4:10: c5:06:78:27:a8:1e:85:9c:97:94:bf:98:41:33:f9: 6a:d3:9c:32:c5:af:98:b3:94:ac:1b:c4:28:15:3f: c3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:1A:64:47:5C:FF:EB:7C:EA:0F:A1:DD:15:EF:E3:62:D0:60:E2:0E X509v3 Authority Key Identifier: keyid:F6:62:AD:5B:81:B8:07:13:DE:D3:EF:FF:44:29:9F:CD:76:5F:2A:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9mKtW4G4BxPe0-__RCmfzXZfKrE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/408a31-cd7e-479f-bd2a-a660faeeb1e2/1/9mKtW4G4BxPe0-__RCmfzXZfKrE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d6:75:0a:5f:50:22:dd:75:ee:3a:41:32:28:db:99:d3:dc: 80:4a:c8:17:28:7d:c3:4e:9e:0c:7b:7d:58:55:08:b2:ce:1b: 41:3e:f4:e0:9e:0a:8f:7f:47:5d:55:3e:87:a6:70:85:dd:92: 28:62:39:59:d8:af:bf:41:83:0e:57:33:91:63:21:16:8c:e2: f6:0b:7a:a7:b8:71:e4:a1:51:a3:44:db:92:aa:01:f3:8b:37: ca:92:52:da:1e:7c:70:ca:04:56:4e:9a:81:53:b3:a6:b8:63: 65:ab:67:40:51:57:b9:5f:1b:60:65:d4:84:c9:af:95:cb:4f: dd:24:3c:05:f9:f9:5b:f7:d5:21:47:5e:b6:38:d4:9a:ca:9a: 6b:eb:d9:b4:67:ff:a7:4a:1e:24:6d:49:77:1a:2d:2b:d2:f4: bb:91:a7:cc:71:1b:11:2e:87:4a:11:d7:f3:61:3c:52:26:c6: 85:c7:68:c3:5d:bf:7e:ee:bd:56:2f:d8:13:d3:f0:8b:7d:2c: 18:36:ce:79:c0:72:7b:ea:cd:a5:80:f4:c7:05:4a:8a:f8:25: c4:11:1f:7f:5a:7f:5a:51:47:35:74:39:56:76:bb:df:5e:da: 44:37:0d:95:f0:ab:3a:0b:b3:33:e0:aa:a4:72:8c:30:b2:85: 55:42:a6:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUR0HiQjaLaesjACUNdKKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NjJhZDViODFiODA3MTNkZWQzZWZmZjQ0Mjk5ZmNkNzY1 ZjJhYjEwHhcNMjUxMjA1MjEwMDM4WhcNMjUxMjA2MjEwMDM4WjAzMTEwLwYDVQQD EygzZDFhNjQ0NzVjZmZlYjdjZWEwZmExZGQxNWVmZTM2MmQwNjBlMjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnwClanK3gFD0NHdL1OnMWnpTmcu mrxKxLqNGC2njYQnvkR8hHLzuzQvhdL88l9p1fCCv4z47m4SEF1Iwonth2luJ8jv K9HtGlTwT6Ow5eRZpM5nM+hZVB2YXg58owQh4HHLY+P+0Skv42HgLu47forqjvs0 oT0pSjABgPKQo3zQpwexWni3rMcDYfgwwEwc8ecVTn8l0WcqqlDVTi4GHGVReer3 nPpKTnaCTQ27vly0cMjfVPiUrVht2+P1Xb2sorI8YlXcdMKNwUd1FIwWLcT8aB4M icPF9W6lTBGN9BDFBngnqB6FnJeUv5hBM/lq05wyxa+Ys5SsG8QoFT/DuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0aZEdc/+t86g+h3RXv42LQYOIOMB8GA1UdIwQY MBaAFPZirVuBuAcT3tPv/0Qpn812XyqxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW1LdFc0RzRCeFBlMC1fX1JDbWZ6WFpmS3JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80MDhhMzEtY2Q3ZS00NzlmLWJkMmEt YTY2MGZhZWViMWUyLzEvOW1LdFc0RzRCeFBlMC1fX1JDbWZ6WFpmS3JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi80MDhhMzEtY2Q3ZS00NzlmLWJkMmEtYTY2MGZhZWViMWUy LzEvOW1LdFc0RzRCeFBlMC1fX1JDbWZ6WFpmS3JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9Z1Cl9Q It117jpBMijbmdPcgErIFyh9w06eDHt9WFUIss4bQT704J4Kj39HXVU+h6Zwhd2S KGI5Wdivv0GDDlczkWMhFozi9gt6p7hx5KFRo0TbkqoB84s3ypJS2h58cMoEVk6a gVOzprhjZatnQFFXuV8bYGXUhMmvlctP3SQ8Bfn5W/fVIUdetjjUmsqaa+vZtGf/ p0oeJG1JdxotK9L0u5GnzHEbES6HShHX82E8UibGhcdow12/fu69Vi/YE9Pwi30s GDbOecBye+rNpYD0xwVKivglxBEff1p/WlFHNXQ5Vna7317aRDcNlfCrOguzM+Cq pHKMMLKFVUKm9w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:25 2025 by rpki-client