This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft File: 9X3FmWyBeMDeLqIEme696t5AI-s.mft (raw, json) Hash identifier: cpX4T9Yluq60awDlGWPaDUmisqPqARz47qO4yHAJNtA= Subject key identifier: 29:AC:01:3C:7D:B1:50:4A:88:64:C4:ED:21:59:61:42:FF:25:E2:CE Authority key identifier: F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB Certificate issuer: /CN=f57dc5996c8178c0de2ea20499eebdeade4023eb Certificate serial: 019AF0BF7A15B7EA58A5EE6E3F9C0B62923F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 23:01:11 +0000 Manifest this update: Fri 05 Dec 2025 23:01:11 +0000 Manifest next update: Sat 06 Dec 2025 23:01:11 +0000 Files and hashes: 1: 9X3FmWyBeMDeLqIEme696t5AI-s.crl (hash: 44ja5VlfRdxgdqR/ls/vTrg6ba+FvJAWoQPOksBS/fM=) 2: Ja-1OHflBPV5uzkrzsrUkckcSDQ.roa (hash: 5hTfi5zIdy0pksBzayRUkBZiz92X7DgH1Hnbmun+ujM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:7a:15:b7:ea:58:a5:ee:6e:3f:9c:0b:62:92:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f57dc5996c8178c0de2ea20499eebdeade4023eb Validity Not Before: Dec 5 23:01:11 2025 GMT Not After : Dec 6 23:01:11 2025 GMT Subject: CN=29ac013c7db1504a8864c4ed21596142ff25e2ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:21:e4:a7:03:19:f7:68:6b:0a:59:fc:e8:92: 2a:d8:18:72:47:4a:68:34:b7:46:61:08:be:c8:82: d9:ef:ba:7d:e0:7f:71:ce:93:7f:cc:6e:f4:ae:50: 4e:71:c1:5f:c9:27:20:3a:f0:02:01:50:b1:37:3f: 7a:c8:bf:22:e4:4f:7e:25:3d:8b:96:cd:1f:18:02: d6:54:ed:5b:ee:cb:d6:f9:50:3f:bd:cc:92:df:36: cb:b9:ec:9f:fc:d4:6d:ff:ed:d2:d0:0b:2d:fa:3d: 78:f2:44:82:0a:00:1a:ca:d0:a5:5d:84:f1:dd:41: 40:f3:14:52:9a:2e:34:72:ce:35:f1:78:f4:1f:60: d9:fc:db:2c:47:f7:73:68:35:89:df:29:90:81:14: 05:95:de:ca:c6:ea:f7:14:96:66:1f:e6:1b:0f:a4: 78:69:59:7d:cc:c4:59:01:33:6f:a9:69:c0:87:1c: c3:d4:c6:57:31:52:6e:38:e7:95:2d:ee:0d:e0:19: 2a:a7:ff:dd:47:8e:46:2b:b3:d1:d7:70:11:a2:52: 9f:b0:ae:0b:29:be:3a:29:ad:1e:8a:30:a9:84:97: 2d:68:4c:c7:5b:25:5a:a7:15:8e:ac:3b:cd:a2:06: db:e5:f1:71:b2:70:e1:39:ca:0f:fb:31:8c:c7:9d: 55:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AC:01:3C:7D:B1:50:4A:88:64:C4:ED:21:59:61:42:FF:25:E2:CE X509v3 Authority Key Identifier: keyid:F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:fd:2e:2f:c9:8e:47:e5:72:f5:f3:dc:de:a6:c2:2a:3c:05: 70:ed:e8:3c:f8:46:19:59:17:5a:93:c7:63:de:bd:a5:99:c9: 4b:3c:c6:dd:a1:b9:e2:1d:63:01:82:0b:19:0a:b5:1d:de:2e: 0c:d2:46:2a:a5:62:aa:77:f7:d8:e0:ed:4d:d3:6e:56:b2:e7: ba:ad:1e:fb:f7:6d:f7:8c:11:e7:b7:ef:3f:dc:e2:4b:fc:3c: 79:aa:34:ec:b6:55:b4:a0:e9:c7:4e:98:f3:92:51:aa:7b:7d: ce:34:08:f8:6a:04:19:d7:7e:1a:e5:a8:0c:5f:cf:34:4a:4b: 94:21:9e:00:51:4b:13:14:3d:85:15:f1:df:70:38:de:27:fe: f3:b7:40:40:4a:ff:3a:43:2e:7e:92:25:17:e6:fd:73:6a:a3: 0a:86:26:0f:af:88:48:a6:db:dc:b5:6f:46:d1:de:60:d2:43: b9:1a:7b:0c:f3:b7:36:e4:c0:ab:ea:89:e1:df:d4:8e:f4:f5: 48:4e:14:e5:30:c1:4b:a2:c0:59:09:54:27:9c:1f:a2:be:8f: f5:fe:02:1a:ab:68:21:a2:19:fe:f2:50:13:61:e8:a9:df:c6: 32:66:be:09:9d:6c:b8:dc:f8:e4:0b:ec:cf:d2:c8:c1:ef:d8: b1:4e:4f:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3oVt+pYpe5uP5wLYpI/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1N2RjNTk5NmM4MTc4YzBkZTJlYTIwNDk5ZWViZGVhZGU0 MDIzZWIwHhcNMjUxMjA1MjMwMTExWhcNMjUxMjA2MjMwMTExWjAzMTEwLwYDVQQD EygyOWFjMDEzYzdkYjE1MDRhODg2NGM0ZWQyMTU5NjE0MmZmMjVlMmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSHkpwMZ92hrCln86JIq2BhyR0po NLdGYQi+yILZ77p94H9xzpN/zG70rlBOccFfyScgOvACAVCxNz96yL8i5E9+JT2L ls0fGALWVO1b7svW+VA/vcyS3zbLueyf/NRt/+3S0Ast+j148kSCCgAaytClXYTx 3UFA8xRSmi40cs418Xj0H2DZ/NssR/dzaDWJ3ymQgRQFld7Kxur3FJZmH+YbD6R4 aVl9zMRZATNvqWnAhxzD1MZXMVJuOOeVLe4N4Bkqp//dR45GK7PR13ARolKfsK4L Kb46Ka0eijCphJctaEzHWyVapxWOrDvNogbb5fFxsnDhOcoP+zGMx51VXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmsATx9sVBKiGTE7SFZYUL/JeLOMB8GA1UdIwQY MBaAFPV9xZlsgXjA3i6iBJnuvereQCPrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVgzRm1XeUJlTURlTHFJRW1lNjk2dDVBSS1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82N2UzYWMtYzMzMi00ZDEzLTgzZWYt YzdiMTBkNTA1Y2ZlLzEvOVgzRm1XeUJlTURlTHFJRW1lNjk2dDVBSS1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My82N2UzYWMtYzMzMi00ZDEzLTgzZWYtYzdiMTBkNTA1Y2Zl LzEvOVgzRm1XeUJlTURlTHFJRW1lNjk2dDVBSS1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/0uL8mO R+Vy9fPc3qbCKjwFcO3oPPhGGVkXWpPHY969pZnJSzzG3aG54h1jAYILGQq1Hd4u DNJGKqViqnf32ODtTdNuVrLnuq0e+/dt94wR57fvP9ziS/w8eao07LZVtKDpx06Y 85JRqnt9zjQI+GoEGdd+GuWoDF/PNEpLlCGeAFFLExQ9hRXx33A43if+87dAQEr/ OkMufpIlF+b9c2qjCoYmD6+ISKbb3LVvRtHeYNJDuRp7DPO3NuTAq+qJ4d/UjvT1 SE4U5TDBS6LAWQlUJ5wfor6P9f4CGqtoIaIZ/vJQE2Hoqd/GMma+CZ1suNz45Avs z9LIwe/YsU5PYw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:19 2025 by rpki-client