This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft File: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft (raw, json) Hash identifier: 8xvlV/b/LquedHfd4vuMCCzBqMtAzePUFTYA2wFKd7o= Subject key identifier: 10:16:F7:BC:64:AA:E0:A3:61:41:4F:50:34:7B:DE:09:6E:D7:6E:43 Authority key identifier: F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76 Certificate issuer: /CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76 Certificate serial: 019AF19B8E44C36CF2D9EA33289B2ACDE8FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 03:01:34 +0000 Manifest this update: Sat 06 Dec 2025 03:01:34 +0000 Manifest next update: Sun 07 Dec 2025 03:01:34 +0000 Files and hashes: 1: 9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl (hash: oDS/zJCE5lisAIJX5nh9CLCRzZdKFf9AbMTPdAFu6ic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:8e:44:c3:6c:f2:d9:ea:33:28:9b:2a:cd:e8:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6db1b691b30dbe48e788b7cca4ad31dcdc85c76 Validity Not Before: Dec 6 03:01:34 2025 GMT Not After : Dec 7 03:01:34 2025 GMT Subject: CN=1016f7bc64aae0a361414f50347bde096ed76e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8f:fe:03:a4:5d:d0:23:c1:4e:47:c8:ef:22: 6f:36:fa:9c:34:67:18:8e:0d:80:58:a2:4d:a8:46: 62:be:63:89:d6:39:a1:6f:35:18:6b:1c:40:08:30: 66:18:25:8e:81:24:d7:76:92:6e:ad:46:bd:18:6b: 4d:d2:f9:01:0e:de:4b:1c:42:bc:e4:1f:73:c8:a8: 9b:18:cd:b8:07:98:a8:00:3e:4c:f7:5f:bc:5d:6b: 55:8b:0f:8e:6d:32:30:c3:5e:a0:2d:b0:4a:0b:86: db:da:af:64:b0:8d:67:c5:62:d6:f3:ff:5a:14:cf: 01:54:b2:c3:2e:0a:ee:fb:0a:1a:94:08:66:2e:12: bb:b1:60:f0:70:dc:40:12:03:d4:d0:69:6c:8d:8e: ed:2b:05:39:d3:a7:38:a1:f3:d6:15:51:b6:b7:32: a0:8f:8d:4d:b4:72:82:ce:ef:da:60:eb:d7:68:29: 0c:ee:b9:e9:5e:7e:40:a6:65:2e:27:06:b5:26:fd: 4f:38:21:20:3e:41:ae:a9:85:2b:40:fb:54:22:e2: c0:48:e9:d5:75:7a:be:12:b9:77:2b:7d:de:cf:98: 2a:84:55:02:29:ed:b1:66:51:38:7a:f1:09:78:59: 1a:54:5c:33:a2:7a:db:2e:f3:47:24:1c:bd:e2:34: c6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:16:F7:BC:64:AA:E0:A3:61:41:4F:50:34:7B:DE:09:6E:D7:6E:43 X509v3 Authority Key Identifier: keyid:F6:DB:1B:69:1B:30:DB:E4:8E:78:8B:7C:CA:4A:D3:1D:CD:C8:5C:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9tsbaRsw2-SOeIt8ykrTHc3IXHY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e34fa5-4e8d-4b41-bbb8-e31ce1b967e9/1/9tsbaRsw2-SOeIt8ykrTHc3IXHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:7b:3d:a8:95:30:17:4d:25:96:f2:5e:cf:9c:61:fb:c0:10: 0f:da:a6:cc:bc:ed:c0:80:df:5e:b7:a4:35:00:8a:86:f1:3c: 28:ac:13:92:1c:b8:7e:c2:8f:9d:7a:24:13:4b:c1:34:ad:a6: ec:d2:7c:0c:3e:66:b8:de:42:0e:ee:12:6a:32:c0:58:28:25: bb:b2:a5:fe:3d:db:fe:f5:fb:bf:05:31:b1:a6:dd:42:ca:38: 19:ea:79:4b:46:ae:48:f4:cd:a5:e1:02:b1:75:a5:4e:ea:9e: 45:86:d0:95:1e:91:96:cf:46:36:92:85:b1:17:b8:d1:5d:61: a0:10:e1:5e:57:a1:c3:ec:96:8a:dc:13:b9:51:23:ea:4d:a5: 10:4c:89:13:cf:ca:2d:28:52:62:20:6a:93:3b:7d:06:65:f0: c4:bf:92:13:c7:a9:f5:85:e4:1e:c8:1b:63:d2:11:6b:e1:2d: 9a:0c:34:42:44:e4:ab:1e:15:d2:d4:4d:eb:4a:4e:f8:52:69: 9d:9c:1d:41:ad:d6:33:fc:88:df:62:2e:b0:16:d1:62:c0:ab: f5:3e:2a:d1:21:a6:46:92:1d:a1:31:66:b9:c0:a3:f4:79:1b: 49:34:47:af:81:0b:a8:47:af:a6:3d:fc:31:57:fa:0a:67:57: f3:af:6d:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm45Ew2zy2eozKJsqzej8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ZGIxYjY5MWIzMGRiZTQ4ZTc4OGI3Y2NhNGFkMzFkY2Rj ODVjNzYwHhcNMjUxMjA2MDMwMTM0WhcNMjUxMjA3MDMwMTM0WjAzMTEwLwYDVQQD EygxMDE2ZjdiYzY0YWFlMGEzNjE0MTRmNTAzNDdiZGUwOTZlZDc2ZTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApI/+A6Rd0CPBTkfI7yJvNvqcNGcY jg2AWKJNqEZivmOJ1jmhbzUYaxxACDBmGCWOgSTXdpJurUa9GGtN0vkBDt5LHEK8 5B9zyKibGM24B5ioAD5M91+8XWtViw+ObTIww16gLbBKC4bb2q9ksI1nxWLW8/9a FM8BVLLDLgru+woalAhmLhK7sWDwcNxAEgPU0GlsjY7tKwU506c4ofPWFVG2tzKg j41NtHKCzu/aYOvXaCkM7rnpXn5ApmUuJwa1Jv1POCEgPkGuqYUrQPtUIuLASOnV dXq+Erl3K33ez5gqhFUCKe2xZlE4evEJeFkaVFwzonrbLvNHJBy94jTGBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAW97xkquCjYUFPUDR73glu125DMB8GA1UdIwQY MBaAFPbbG2kbMNvkjniLfMpK0x3NyFx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXRzYmFSc3cyLVNPZUl0OHlrclRIYzNJWEhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lMzRmYTUtNGU4ZC00YjQxLWJiYjgt ZTMxY2UxYjk2N2U5LzEvOXRzYmFSc3cyLVNPZUl0OHlrclRIYzNJWEhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9lMzRmYTUtNGU4ZC00YjQxLWJiYjgtZTMxY2UxYjk2N2U5 LzEvOXRzYmFSc3cyLVNPZUl0OHlrclRIYzNJWEhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdns9qJUw F00llvJez5xh+8AQD9qmzLztwIDfXrekNQCKhvE8KKwTkhy4fsKPnXokE0vBNK2m 7NJ8DD5muN5CDu4SajLAWCglu7Kl/j3b/vX7vwUxsabdQso4Gep5S0auSPTNpeEC sXWlTuqeRYbQlR6Rls9GNpKFsRe40V1hoBDhXlehw+yWitwTuVEj6k2lEEyJE8/K LShSYiBqkzt9BmXwxL+SE8ep9YXkHsgbY9IRa+Etmgw0QkTkqx4V0tRN60pO+FJp nZwdQa3WM/yI32IusBbRYsCr9T4q0SGmRpIdoTFmucCj9HkbSTRHr4ELqEevpj38 MVf6CmdX869tsw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:58:47 2025 by rpki-client