This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft File: 9rpgBVyyum_cmnX99hk3GwBVk84.mft (raw, json) Hash identifier: vwu2RdKQro6Wti47kD5H+H+VIC+XdUqNnmE93hv5lJA= Subject key identifier: DF:BD:DD:8A:FA:1C:F6:30:B0:09:B0:BE:CB:03:B0:DC:99:42:CD:67 Authority key identifier: F6:BA:60:05:5C:B2:BA:6F:DC:9A:75:FD:F6:19:37:1B:00:55:93:CE Certificate issuer: /CN=f6ba60055cb2ba6fdc9a75fdf619371b005593ce Certificate serial: 019AF12CCA9D7D8540ED781FC379B082C0EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft Manifest number: 0868 Signing time: Sat 06 Dec 2025 01:00:35 +0000 Manifest this update: Sat 06 Dec 2025 01:00:35 +0000 Manifest next update: Sun 07 Dec 2025 01:00:35 +0000 Files and hashes: 1: 9rpgBVyyum_cmnX99hk3GwBVk84.crl (hash: 335ztZyjnKehGvUK8ycb7JPoeyeWL51CP1Ubqzd1rz0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ca:9d:7d:85:40:ed:78:1f:c3:79:b0:82:c0:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6ba60055cb2ba6fdc9a75fdf619371b005593ce Validity Not Before: Dec 6 01:00:35 2025 GMT Not After : Dec 7 01:00:35 2025 GMT Subject: CN=dfbddd8afa1cf630b009b0becb03b0dc9942cd67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:85:31:ba:cb:1e:10:75:03:5c:00:31:bc:d1: d7:cb:80:7d:49:55:3b:48:54:63:9e:02:67:52:cd: e0:1c:f4:15:62:31:c9:1d:54:ed:83:45:ae:72:cb: b9:36:78:63:e9:da:01:14:05:a9:85:f1:10:3d:d2: de:22:9b:c3:83:c6:e7:a7:ef:f1:53:12:13:dd:c5: 00:ae:58:86:37:bc:1d:d3:9a:39:ac:a9:7c:9f:76: 1b:97:ea:75:8f:48:1e:77:ac:37:a4:6b:4a:1c:1b: 21:98:72:9e:a5:1b:13:fe:34:59:69:34:41:b2:25: 65:bb:c2:7e:d1:fc:d5:ed:d3:32:69:21:a3:ed:40: aa:34:df:c4:78:62:e9:ff:18:04:42:e8:e4:cf:df: 56:a1:56:08:80:01:d7:4a:76:0f:74:ec:f9:e7:3b: 48:3f:8c:0c:6d:c5:24:0f:ae:22:26:08:9b:4c:be: 5e:94:11:71:b2:dd:43:f8:78:70:9d:46:54:9e:8b: 5c:a1:9c:10:84:1d:c8:98:2c:c8:e3:3e:4e:76:74: b1:e4:78:e7:a4:0f:9c:58:51:4d:a1:7a:4f:06:cd: 9e:32:e2:d4:e5:e3:4b:13:13:2c:95:fc:10:7c:db: 1e:22:c8:18:cd:3a:c9:37:d1:8d:b5:77:44:61:6a: ae:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BD:DD:8A:FA:1C:F6:30:B0:09:B0:BE:CB:03:B0:DC:99:42:CD:67 X509v3 Authority Key Identifier: keyid:F6:BA:60:05:5C:B2:BA:6F:DC:9A:75:FD:F6:19:37:1B:00:55:93:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:f8:ce:b5:2a:e0:85:e4:8b:9c:29:32:d9:b5:94:b7:9d:b1: f9:5b:1d:da:7f:b5:c0:be:77:7c:04:b7:10:37:00:a3:89:67: 40:80:e5:b2:59:e0:06:0b:b9:5c:3b:a5:97:b5:d5:b0:60:5b: 31:fe:1f:a9:e5:18:2d:e7:25:ca:9d:bc:2f:c3:fd:6c:bf:9d: 1f:4a:7c:ae:ce:a3:70:ba:8d:32:de:2d:f2:d9:2b:12:0a:40: 0b:79:41:85:27:05:9a:20:07:a1:7e:0c:cd:aa:e2:c1:99:b6: c3:4f:9e:ba:f3:00:9e:9e:7e:bd:52:8d:d3:1e:80:b6:c0:85: bb:80:2c:80:3e:6d:bf:c0:66:91:6f:06:9a:45:5f:1f:be:54: 01:0a:3d:62:63:5c:ba:07:ba:30:1d:8c:df:30:ec:49:49:50: f2:b2:9a:ce:e6:cc:1e:85:6a:5f:46:e4:3a:df:aa:f7:34:79: 0e:21:01:41:45:02:48:0e:4a:e4:76:94:d5:ae:15:d6:73:70: aa:3f:19:b3:d9:9e:0e:9b:ad:2d:47:e6:a9:a5:78:4f:9d:f7: f2:14:1e:e0:91:fe:5a:da:50:86:48:02:db:19:5f:e4:54:c4: 31:2e:ee:1f:38:be:4e:26:2c:c8:a7:77:33:a5:97:af:8f:1e: d2:1e:5b:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLMqdfYVA7Xgfw3mwgsDqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YmE2MDA1NWNiMmJhNmZkYzlhNzVmZGY2MTkzNzFiMDA1 NTkzY2UwHhcNMjUxMjA2MDEwMDM1WhcNMjUxMjA3MDEwMDM1WjAzMTEwLwYDVQQD EyhkZmJkZGQ4YWZhMWNmNjMwYjAwOWIwYmVjYjAzYjBkYzk5NDJjZDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4UxusseEHUDXAAxvNHXy4B9SVU7 SFRjngJnUs3gHPQVYjHJHVTtg0Wucsu5Nnhj6doBFAWphfEQPdLeIpvDg8bnp+/x UxIT3cUArliGN7wd05o5rKl8n3Ybl+p1j0ged6w3pGtKHBshmHKepRsT/jRZaTRB siVlu8J+0fzV7dMyaSGj7UCqNN/EeGLp/xgEQujkz99WoVYIgAHXSnYPdOz55ztI P4wMbcUkD64iJgibTL5elBFxst1D+HhwnUZUnotcoZwQhB3ImCzI4z5OdnSx5Hjn pA+cWFFNoXpPBs2eMuLU5eNLExMslfwQfNseIsgYzTrJN9GNtXdEYWquVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+93Yr6HPYwsAmwvssDsNyZQs1nMB8GA1UdIwQY MBaAFPa6YAVcsrpv3Jp1/fYZNxsAVZPOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXJwZ0JWeXl1bV9jbW5YOTloazNHd0JWazg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS82YTY0NTktMjMyMC00NTM0LWE5MjYt NGY5ZDk4OGJkMWQzLzEvOXJwZ0JWeXl1bV9jbW5YOTloazNHd0JWazg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS82YTY0NTktMjMyMC00NTM0LWE5MjYtNGY5ZDk4OGJkMWQz LzEvOXJwZ0JWeXl1bV9jbW5YOTloazNHd0JWazg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMfjOtSrg heSLnCky2bWUt52x+Vsd2n+1wL53fAS3EDcAo4lnQIDlslngBgu5XDull7XVsGBb Mf4fqeUYLeclyp28L8P9bL+dH0p8rs6jcLqNMt4t8tkrEgpAC3lBhScFmiAHoX4M zariwZm2w0+euvMAnp5+vVKN0x6AtsCFu4AsgD5tv8BmkW8GmkVfH75UAQo9YmNc uge6MB2M3zDsSUlQ8rKazubMHoVqX0bkOt+q9zR5DiEBQUUCSA5K5HaU1a4V1nNw qj8Zs9meDputLUfmqaV4T5338hQe4JH+WtpQhkgC2xlf5FTEMS7uHzi+TiYsyKd3 M6WXr48e0h5bGw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:15 2025 by rpki-client