This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft File: 9rpgBVyyum_cmnX99hk3GwBVk84.mft (raw, json) Hash identifier: 37LqLN0JYk+YPdZS8PEUagKNOBzZNDvKhEOkb7tBVh8= Subject key identifier: C4:FB:40:26:F0:A8:3B:68:60:56:3B:87:3B:05:84:E3:16:50:47:E5 Authority key identifier: F6:BA:60:05:5C:B2:BA:6F:DC:9A:75:FD:F6:19:37:1B:00:55:93:CE Certificate issuer: /CN=f6ba60055cb2ba6fdc9a75fdf619371b005593ce Certificate serial: 019B3C7DD6528737325FB072C9D3A47AB097 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft Manifest number: 088F Signing time: Sat 20 Dec 2025 16:00:38 +0000 Manifest this update: Sat 20 Dec 2025 16:00:38 +0000 Manifest next update: Sun 21 Dec 2025 16:00:38 +0000 Files and hashes: 1: 9rpgBVyyum_cmnX99hk3GwBVk84.crl (hash: 1/0UwB8wIONBY9COFIYkZGwK1dcNgfYOWw1vXq4AgFY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:d6:52:87:37:32:5f:b0:72:c9:d3:a4:7a:b0:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6ba60055cb2ba6fdc9a75fdf619371b005593ce Validity Not Before: Dec 20 16:00:38 2025 GMT Not After : Dec 21 16:00:38 2025 GMT Subject: CN=c4fb4026f0a83b6860563b873b0584e3165047e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e7:f2:21:9a:8e:e8:bc:b8:a3:46:d9:73:48: e7:c0:f5:1d:17:32:11:06:23:54:de:09:ab:d9:5c: ec:7e:b4:df:fd:f6:5a:29:da:91:9a:78:2c:ce:7a: 95:f7:41:dc:9c:61:bc:7d:be:8e:16:cd:8e:e0:23: 55:dc:35:3a:26:c1:cf:50:1b:48:bf:f1:68:15:aa: f5:9d:f4:24:71:f9:61:00:1b:9e:f1:97:2b:6a:f6: d5:5a:80:3b:04:63:71:0f:bf:1a:3e:98:39:91:43: 62:0d:1a:87:3d:99:22:00:c9:38:f5:6e:72:c1:ae: 1e:92:20:08:49:c2:5b:66:fd:cd:6c:b5:7a:e0:89: d8:61:16:0b:1b:c2:43:81:b2:ed:15:78:85:1e:d3: 22:73:55:ea:89:69:97:21:d3:cb:93:b1:35:07:b0: 70:2b:5a:b3:7f:6c:bb:79:35:a9:55:b5:d3:05:68: 05:15:c1:f4:f1:14:70:9d:3c:e4:43:31:c1:b7:63: b8:1e:1f:46:ad:99:70:c2:c6:64:25:d4:ee:ba:38: bd:33:72:3d:97:55:83:67:f7:c3:a4:95:12:41:bc: 5f:a8:ef:52:bf:e1:12:25:73:d9:b0:b7:ee:3c:b1: e0:6e:03:58:30:ce:ac:db:38:0a:57:6f:4e:3e:38: dd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:FB:40:26:F0:A8:3B:68:60:56:3B:87:3B:05:84:E3:16:50:47:E5 X509v3 Authority Key Identifier: keyid:F6:BA:60:05:5C:B2:BA:6F:DC:9A:75:FD:F6:19:37:1B:00:55:93:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c1:b5:09:af:d6:db:72:1c:67:7b:11:1d:ab:c0:a3:e3:ee: ab:8e:18:d6:50:33:d5:9a:9d:df:83:9b:d8:43:da:a9:61:51: bf:e2:39:f9:93:5f:ff:91:a9:30:cc:ea:08:a6:3d:e1:11:29: 9b:e6:cb:c7:e6:fa:85:07:65:f3:fe:52:db:28:d8:ce:62:8f: 13:dc:c3:1b:20:f3:07:20:9e:0d:b9:03:14:25:b0:2b:4d:7d: 92:dd:90:94:c2:7b:80:63:53:35:43:2a:70:ed:34:d4:a5:5d: c2:8d:0a:3e:35:aa:44:d3:31:02:ab:a3:a1:22:74:46:80:7e: 02:ae:49:c2:79:0e:50:5a:1d:a4:73:58:5c:89:c2:29:64:c1: 08:a9:87:eb:0c:c0:5f:f0:a3:9e:32:2f:a2:db:36:33:4c:67: 48:25:d3:73:47:62:f4:77:0c:8b:b3:98:99:e5:dc:7f:a5:61: 66:9e:ce:61:5a:5f:0b:63:a5:f1:99:a2:7f:bb:cf:87:90:b5: 3d:56:56:1f:2e:62:3c:56:31:72:ae:6c:29:9b:39:54:40:2f: 75:68:6b:46:33:21:e2:a8:77:3d:45:0f:27:79:fe:77:d0:bf: 18:f5:50:77:03:d4:9c:d7:b1:5a:bc:e3:5b:95:5a:e0:08:19: a7:76:91:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fdZShzcyX7ByydOkerCXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YmE2MDA1NWNiMmJhNmZkYzlhNzVmZGY2MTkzNzFiMDA1 NTkzY2UwHhcNMjUxMjIwMTYwMDM4WhcNMjUxMjIxMTYwMDM4WjAzMTEwLwYDVQQD EyhjNGZiNDAyNmYwYTgzYjY4NjA1NjNiODczYjA1ODRlMzE2NTA0N2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+fyIZqO6Ly4o0bZc0jnwPUdFzIR BiNU3gmr2VzsfrTf/fZaKdqRmngsznqV90HcnGG8fb6OFs2O4CNV3DU6JsHPUBtI v/FoFar1nfQkcflhABue8ZcravbVWoA7BGNxD78aPpg5kUNiDRqHPZkiAMk49W5y wa4ekiAIScJbZv3NbLV64InYYRYLG8JDgbLtFXiFHtMic1XqiWmXIdPLk7E1B7Bw K1qzf2y7eTWpVbXTBWgFFcH08RRwnTzkQzHBt2O4Hh9GrZlwwsZkJdTuuji9M3I9 l1WDZ/fDpJUSQbxfqO9Sv+ESJXPZsLfuPLHgbgNYMM6s2zgKV29OPjjdSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMT7QCbwqDtoYFY7hzsFhOMWUEflMB8GA1UdIwQY MBaAFPa6YAVcsrpv3Jp1/fYZNxsAVZPOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXJwZ0JWeXl1bV9jbW5YOTloazNHd0JWazg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS82YTY0NTktMjMyMC00NTM0LWE5MjYt NGY5ZDk4OGJkMWQzLzEvOXJwZ0JWeXl1bV9jbW5YOTloazNHd0JWazg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS82YTY0NTktMjMyMC00NTM0LWE5MjYtNGY5ZDk4OGJkMWQz LzEvOXJwZ0JWeXl1bV9jbW5YOTloazNHd0JWazg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8G1Ca/W 23IcZ3sRHavAo+Puq44Y1lAz1Zqd34Ob2EPaqWFRv+I5+ZNf/5GpMMzqCKY94REp m+bLx+b6hQdl8/5S2yjYzmKPE9zDGyDzByCeDbkDFCWwK019kt2QlMJ7gGNTNUMq cO001KVdwo0KPjWqRNMxAqujoSJ0RoB+Aq5JwnkOUFodpHNYXInCKWTBCKmH6wzA X/CjnjIvots2M0xnSCXTc0di9HcMi7OYmeXcf6VhZp7OYVpfC2Ol8Zmif7vPh5C1 PVZWHy5iPFYxcq5sKZs5VEAvdWhrRjMh4qh3PUUPJ3n+d9C/GPVQdwPUnNexWrzj W5Va4AgZp3aRQQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:20:29 2025 by rpki-client