This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft File: 9YQK34T7C3WOuopaE1qYA5Pov3M.mft (raw, json) Hash identifier: 93nCLYxn3Uq44al+kvF5tRsEZnSz7EMLT/lFv27H5xg= Subject key identifier: FE:6D:93:C6:22:EF:82:CB:4D:7C:04:72:B6:BB:31:B1:D3:47:12:E1 Authority key identifier: F5:84:0A:DF:84:FB:0B:75:8E:BA:8A:5A:13:5A:98:03:93:E8:BF:73 Certificate issuer: /CN=f5840adf84fb0b758eba8a5a135a980393e8bf73 Certificate serial: 019AF42DFFEACF2273E3C3639587C8517072 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft Manifest number: 030E Signing time: Sat 06 Dec 2025 15:00:46 +0000 Manifest this update: Sat 06 Dec 2025 15:00:46 +0000 Manifest next update: Sun 07 Dec 2025 15:00:46 +0000 Files and hashes: 1: 9YQK34T7C3WOuopaE1qYA5Pov3M.crl (hash: L04aamYrFkjcPad6XkmLKxr0C3u8GfjdjHs+RgwtvkY=) 2: ug_6Y8ki9EP25vsoMMlfyRj48uY.roa (hash: iRz3po2Z+C7i19HNQJqYaoWDRng24eOA7rSUnQMnMPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.crl rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:ff:ea:cf:22:73:e3:c3:63:95:87:c8:51:70:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5840adf84fb0b758eba8a5a135a980393e8bf73 Validity Not Before: Dec 6 15:00:46 2025 GMT Not After : Dec 7 15:00:46 2025 GMT Subject: CN=fe6d93c622ef82cb4d7c0472b6bb31b1d34712e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:32:c0:ff:ec:e2:52:0b:1a:57:b8:ba:95:11: a8:ed:e3:ed:f0:69:83:23:19:ed:ca:06:5a:f9:69: b6:11:7c:16:4e:62:54:af:ea:7c:13:63:97:df:36: 3e:7f:af:d0:d7:62:f2:07:7d:d9:d0:87:91:c3:b6: 78:71:de:90:6f:65:b5:c9:ea:e3:54:06:f4:ec:ad: 5c:f8:01:ba:a2:c8:b2:76:91:45:63:41:e5:87:ac: 80:2a:f2:b8:9d:0a:7e:44:9e:57:b5:17:a6:eb:e1: c5:87:ba:d4:a6:1b:97:8f:2c:20:5e:f3:a2:1f:4c: 5e:f1:0f:8a:1e:c4:24:e2:b0:91:17:48:a9:b3:05: ab:d2:99:0e:90:38:8d:ab:df:ed:fd:bb:72:c3:a0: 05:ee:00:58:ac:71:8a:16:22:ce:32:b8:44:fd:90: 2b:71:24:b8:83:24:41:df:96:d0:95:8a:a3:0f:8b: db:e2:b8:21:c6:61:a0:32:80:84:a1:84:ed:04:6e: 1b:10:9f:45:3d:87:68:2e:93:ea:75:ed:de:a0:d8: 4a:31:ba:07:85:6c:3e:fa:82:4d:27:a7:9d:14:74: c9:29:88:7c:78:04:b1:0e:b4:13:de:1c:53:53:6d: ab:71:24:18:a8:b9:6e:cf:7f:8a:f2:16:c7:76:9e: 08:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:6D:93:C6:22:EF:82:CB:4D:7C:04:72:B6:BB:31:B1:D3:47:12:E1 X509v3 Authority Key Identifier: keyid:F5:84:0A:DF:84:FB:0B:75:8E:BA:8A:5A:13:5A:98:03:93:E8:BF:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:fd:20:d7:b0:4c:a2:54:5a:5b:a7:cc:5b:e8:03:b2:98:62: 48:dc:af:6a:44:87:00:2c:49:10:fb:97:0a:dc:d4:bb:32:44: c2:e8:1d:77:2a:e9:09:84:de:0c:87:ba:e1:57:0a:a8:7a:1e: 28:1f:27:9c:2b:b7:13:af:64:a6:fb:b1:e2:4b:f0:03:82:c8: 01:04:a8:49:a6:4a:8a:5c:c8:af:76:ca:5c:c7:3e:6e:a7:94: e7:73:70:14:ee:31:a8:79:27:90:72:0b:24:89:63:d6:3a:bb: 18:33:38:1f:e8:77:c8:a2:80:33:69:29:3e:46:4c:8e:15:7d: 32:9f:9b:73:e6:30:2f:df:57:ee:10:d4:d1:44:c5:46:ea:ab: c5:98:d7:49:d9:a2:06:cb:22:e0:d3:b7:b1:01:42:e3:10:15: ec:b9:08:a7:af:5e:07:41:6d:9d:6d:fc:58:93:4f:f2:6d:5f: 33:fc:b0:e6:ef:26:8a:31:0f:ac:8d:f7:b1:61:e3:86:90:48: da:a8:f3:01:86:44:60:e6:c7:87:30:17:4f:e1:13:da:23:5e: ec:c6:7a:ff:ce:80:64:ec:b7:36:50:79:56:d6:da:b6:a9:65: 8f:fb:bc:31:e0:84:0c:6e:a7:fb:92:a0:d3:79:0e:ee:21:82: 08:cc:81:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lf/qzyJz48NjlYfIUXByMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ODQwYWRmODRmYjBiNzU4ZWJhOGE1YTEzNWE5ODAzOTNl OGJmNzMwHhcNMjUxMjA2MTUwMDQ2WhcNMjUxMjA3MTUwMDQ2WjAzMTEwLwYDVQQD EyhmZTZkOTNjNjIyZWY4MmNiNGQ3YzA0NzJiNmJiMzFiMWQzNDcxMmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTLA/+ziUgsaV7i6lRGo7ePt8GmD IxntygZa+Wm2EXwWTmJUr+p8E2OX3zY+f6/Q12LyB33Z0IeRw7Z4cd6Qb2W1yerj VAb07K1c+AG6osiydpFFY0Hlh6yAKvK4nQp+RJ5XtRem6+HFh7rUphuXjywgXvOi H0xe8Q+KHsQk4rCRF0ipswWr0pkOkDiNq9/t/btyw6AF7gBYrHGKFiLOMrhE/ZAr cSS4gyRB35bQlYqjD4vb4rghxmGgMoCEoYTtBG4bEJ9FPYdoLpPqde3eoNhKMboH hWw++oJNJ6edFHTJKYh8eASxDrQT3hxTU22rcSQYqLluz3+K8hbHdp4I/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5tk8Yi74LLTXwEcra7MbHTRxLhMB8GA1UdIwQY MBaAFPWECt+E+wt1jrqKWhNamAOT6L9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVlRSzM0VDdDM1dPdW9wYUUxcVlBNVBvdjNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS80ZjY4N2YtNDJmZS00N2FlLWEwZGIt NGM1OTYwZGRlYjM3LzEvOVlRSzM0VDdDM1dPdW9wYUUxcVlBNVBvdjNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS80ZjY4N2YtNDJmZS00N2FlLWEwZGItNGM1OTYwZGRlYjM3 LzEvOVlRSzM0VDdDM1dPdW9wYUUxcVlBNVBvdjNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADf0g17BM olRaW6fMW+gDsphiSNyvakSHACxJEPuXCtzUuzJEwugddyrpCYTeDIe64VcKqHoe KB8nnCu3E69kpvux4kvwA4LIAQSoSaZKilzIr3bKXMc+bqeU53NwFO4xqHknkHIL JIlj1jq7GDM4H+h3yKKAM2kpPkZMjhV9Mp+bc+YwL99X7hDU0UTFRuqrxZjXSdmi Bssi4NO3sQFC4xAV7LkIp69eB0FtnW38WJNP8m1fM/yw5u8mijEPrI33sWHjhpBI 2qjzAYZEYObHhzAXT+ET2iNe7MZ6/86AZOy3NlB5Vtbatqllj/u8MeCEDG6n+5Kg 03kO7iGCCMyBoQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:10:19 2025 by rpki-client