This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft File: 9M3Ux8i_hxhwMKZEcCColvQeSZM.mft (raw, json) Hash identifier: liycAH0S3WIS0dt968OJIXQ/ivVaxKzk4TLTTYMShAg= Subject key identifier: 72:57:1F:8F:97:C0:F9:5C:71:62:7A:E7:20:5F:B4:07:D5:85:EE:F6 Authority key identifier: F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93 Certificate issuer: /CN=f4cdd4c7c8bf87187030a6447020a896f41e4993 Certificate serial: 019AF31C986C62DBD6AB3382DEED0FC315ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft Manifest number: 13F0 Signing time: Sat 06 Dec 2025 10:02:08 +0000 Manifest this update: Sat 06 Dec 2025 10:02:08 +0000 Manifest next update: Sun 07 Dec 2025 10:02:08 +0000 Files and hashes: 1: 9M3Ux8i_hxhwMKZEcCColvQeSZM.crl (hash: nRNeWNrOc2n3cRh9h+R9KzlOz/6tCKdO36RWVlAf0hg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:98:6c:62:db:d6:ab:33:82:de:ed:0f:c3:15:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4cdd4c7c8bf87187030a6447020a896f41e4993 Validity Not Before: Dec 6 10:02:08 2025 GMT Not After : Dec 7 10:02:08 2025 GMT Subject: CN=72571f8f97c0f95c71627ae7205fb407d585eef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:74:47:8f:e4:b4:48:e1:44:98:59:3a:d2:8e: cc:38:6e:1d:63:9f:4d:b2:49:bf:b3:37:7e:00:b9: e6:61:57:09:8d:58:2d:ed:d0:f0:10:69:a3:f9:d3: ba:8d:0b:b0:99:c7:cd:54:6b:e6:ba:01:c9:14:fb: 11:e9:4a:e7:e8:66:46:6f:aa:e0:40:d1:df:73:42: 1a:b8:0f:30:fa:2a:41:08:bb:29:50:bf:52:9b:6a: 5f:60:7e:64:22:28:ed:52:20:9e:56:96:b0:b4:35: ac:59:c0:16:1a:8a:35:f4:73:33:4d:89:f3:bd:ad: 4d:0b:d8:1d:70:a7:6f:f5:e8:46:c6:f9:63:b6:21: ce:7c:b8:d9:ec:42:be:41:4e:5b:27:bd:de:51:33: 1e:51:34:43:6d:30:3a:9f:e0:ac:29:b3:19:b8:2c: 5a:43:4e:02:96:06:26:7d:f9:2e:2a:db:85:e0:42: 26:73:b7:74:9f:68:fe:ba:55:83:45:c7:40:eb:77: e1:43:58:10:ab:8f:e9:b9:39:e9:3c:a6:97:9b:3d: d2:1d:10:9f:f5:53:0f:97:57:69:a4:d3:66:6f:80: 6a:48:38:7b:b2:40:e9:6f:10:5a:a8:af:f0:01:6a: ce:dd:32:63:c0:f7:ff:d5:29:97:57:6a:d1:bd:36: fb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:57:1F:8F:97:C0:F9:5C:71:62:7A:E7:20:5F:B4:07:D5:85:EE:F6 X509v3 Authority Key Identifier: keyid:F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:61:03:41:14:3c:65:17:cf:e6:76:c6:64:3c:63:da:4c:c2: 08:a0:2c:09:20:3a:98:ed:e2:a0:fa:0f:72:19:08:bf:c1:19: e2:6a:09:dc:02:bc:ed:4c:95:36:31:51:4e:6a:18:87:65:1b: 66:e9:41:67:09:e2:85:73:89:67:f0:56:95:8f:8f:05:ea:b6: fb:81:5a:f2:8a:32:41:ac:12:4f:61:fc:c0:31:5e:78:3e:12: f4:66:0c:93:f8:b2:24:c4:f3:28:bc:19:46:41:9c:65:d0:9e: 2e:5f:73:dc:0a:1b:59:f7:d5:7c:8b:8f:47:81:96:7e:00:2e: ba:07:3b:75:c9:f6:e3:20:70:5c:a6:d1:1f:13:a3:a3:a1:43: ba:ab:c5:41:5c:e8:d7:b7:a8:6f:a1:f4:41:96:2c:7d:54:e2: 1c:0a:9d:dd:3a:a3:fb:4b:7f:1f:d5:99:b4:ab:6f:65:70:21: 02:72:e9:34:ae:6b:1a:7f:73:6d:86:0f:98:54:32:43:e4:bb: 8b:2f:c2:b0:33:26:bd:fe:d9:f3:6c:5f:5e:be:9a:b3:60:35: 8c:f0:7b:91:00:0a:3d:6c:70:c0:1a:f6:cf:93:9f:fd:ad:5d: 8d:6f:ce:ef:94:09:cb:e8:12:3f:71:0a:6d:2a:76:cf:67:5c: c4:0d:31:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHJhsYtvWqzOC3u0PwxXtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Y2RkNGM3YzhiZjg3MTg3MDMwYTY0NDcwMjBhODk2ZjQx ZTQ5OTMwHhcNMjUxMjA2MTAwMjA4WhcNMjUxMjA3MTAwMjA4WjAzMTEwLwYDVQQD Eyg3MjU3MWY4Zjk3YzBmOTVjNzE2MjdhZTcyMDVmYjQwN2Q1ODVlZWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3RHj+S0SOFEmFk60o7MOG4dY59N skm/szd+ALnmYVcJjVgt7dDwEGmj+dO6jQuwmcfNVGvmugHJFPsR6Urn6GZGb6rg QNHfc0IauA8w+ipBCLspUL9Sm2pfYH5kIijtUiCeVpawtDWsWcAWGoo19HMzTYnz va1NC9gdcKdv9ehGxvljtiHOfLjZ7EK+QU5bJ73eUTMeUTRDbTA6n+CsKbMZuCxa Q04ClgYmffkuKtuF4EImc7d0n2j+ulWDRcdA63fhQ1gQq4/puTnpPKaXmz3SHRCf 9VMPl1dppNNmb4BqSDh7skDpbxBaqK/wAWrO3TJjwPf/1SmXV2rRvTb7qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJXH4+XwPlccWJ65yBftAfVhe72MB8GA1UdIwQY MBaAFPTN1MfIv4cYcDCmRHAgqJb0HkmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU0zVXg4aV9oeGh3TUtaRWNDQ29sdlFlU1pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lY2Q4YzgtMTNlMS00MGVhLTk4YzAt ZjFlMTk4YTI0ZGJmLzEvOU0zVXg4aV9oeGh3TUtaRWNDQ29sdlFlU1pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9lY2Q4YzgtMTNlMS00MGVhLTk4YzAtZjFlMTk4YTI0ZGJm LzEvOU0zVXg4aV9oeGh3TUtaRWNDQ29sdlFlU1pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2EDQRQ8 ZRfP5nbGZDxj2kzCCKAsCSA6mO3ioPoPchkIv8EZ4moJ3AK87UyVNjFRTmoYh2Ub ZulBZwnihXOJZ/BWlY+PBeq2+4Fa8ooyQawST2H8wDFeeD4S9GYMk/iyJMTzKLwZ RkGcZdCeLl9z3AobWffVfIuPR4GWfgAuugc7dcn24yBwXKbRHxOjo6FDuqvFQVzo 17eob6H0QZYsfVTiHAqd3Tqj+0t/H9WZtKtvZXAhAnLpNK5rGn9zbYYPmFQyQ+S7 iy/CsDMmvf7Z82xfXr6as2A1jPB7kQAKPWxwwBr2z5Of/a1djW/O75QJy+gSP3EK bSp2z2dcxA0x5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 15:56:17 2025 by rpki-client