This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft File: k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft (raw, json) Hash identifier: YKzpSjL1Bol3cUxhOg3HPiiCWhpGnzQQmkLD9UDb2LE= Subject key identifier: 2D:80:31:8A:43:F3:76:0A:6C:A8:4B:FF:B8:96:92:89:5D:81:B4:BC Authority key identifier: 93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20 Certificate issuer: /CN=93d43d499868091bbdc47d95aee1c9099f005620 Certificate serial: 019AF31CC2ECB9787F70FEE445CE17E7B074 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 10:02:19 +0000 Manifest this update: Sat 06 Dec 2025 10:02:19 +0000 Manifest next update: Sun 07 Dec 2025 10:02:19 +0000 Files and hashes: 1: d_f-2basXF4ecUjEUuL7_QGvdV8.roa (hash: 3qi4PJf12FWilDaOg+5R4nsdnVGnK/XQkSLQfanFNGo=) 2: k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl (hash: yZ83J8wmG9pintKI1aBoSdawCs4I/Ii4d1yoQE/zybM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:c2:ec:b9:78:7f:70:fe:e4:45:ce:17:e7:b0:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93d43d499868091bbdc47d95aee1c9099f005620 Validity Not Before: Dec 6 10:02:19 2025 GMT Not After : Dec 7 10:02:19 2025 GMT Subject: CN=2d80318a43f3760a6ca84bffb89692895d81b4bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:00:4e:49:dc:02:c2:da:1d:39:0c:fd:46:51: 3b:b6:09:b9:9a:af:05:6b:17:96:c3:04:e7:47:57: 29:92:6a:1f:af:e9:f7:2d:dc:4d:33:78:25:f7:f6: 4a:7d:c9:99:5d:41:3e:d5:af:18:68:96:1c:98:0a: e6:ce:3b:c0:d4:db:aa:e3:f6:52:26:43:66:0a:69: d4:16:f5:2a:a2:52:3d:29:a6:68:91:4d:1f:5a:0e: 96:c0:06:c1:92:38:49:d5:e3:4a:e9:62:ea:47:cc: b1:ed:2d:d5:bc:86:09:e2:91:07:f4:ae:6f:8b:ee: af:42:57:74:0b:d6:cf:c6:68:33:08:2a:af:ac:2a: 12:08:ee:02:3e:95:83:3b:bf:5b:2c:cc:62:74:71: 67:6d:c0:d7:a9:ee:7b:eb:6f:ac:96:e8:63:c8:ec: 76:eb:52:80:dd:03:d3:76:6a:35:68:3c:d5:ee:9c: ad:ba:38:cb:ee:66:e6:bc:3f:10:3d:23:22:0c:6f: e6:32:3a:ac:b9:99:e0:d3:82:b2:69:30:fc:4f:78: 9a:99:58:60:76:70:b5:ef:92:14:8d:b7:83:c3:9d: dd:c1:6b:02:cb:11:97:6f:20:8a:ad:81:5a:0c:b1: d5:a4:80:05:0c:66:66:58:72:61:db:9e:48:97:01: c4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:80:31:8A:43:F3:76:0A:6C:A8:4B:FF:B8:96:92:89:5D:81:B4:BC X509v3 Authority Key Identifier: keyid:93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:5e:5f:ef:be:2a:26:59:16:c7:e3:4c:7c:92:82:eb:06:9b: 41:fb:b4:5f:aa:82:fb:c9:47:0a:6a:42:82:2b:1e:5e:97:03: 28:b0:1e:eb:3e:59:a5:65:25:72:07:23:bf:00:e0:ba:92:1e: de:dc:77:6f:86:aa:30:2c:90:94:77:e1:cc:c3:9d:f5:6c:29: 14:ec:e9:6c:45:d6:74:4c:a7:c4:00:62:6c:79:ff:b2:da:39: 94:80:7d:23:65:55:df:96:98:6e:82:f1:3c:cd:6b:7a:85:ef: 14:8b:54:d8:b2:fe:45:80:b9:37:1d:02:a3:7c:3c:7d:16:fe: 7d:05:fd:63:81:c0:c1:4a:00:4c:ae:3b:97:a5:60:a0:c2:a1: f4:c1:ac:a1:be:14:b4:ed:f3:31:9d:82:bd:26:4b:72:c7:5c: b9:fd:52:6d:2a:c7:80:02:e8:e5:7f:17:99:6b:06:f7:b0:ce: ab:7e:c9:ed:24:83:a9:ba:a0:50:07:4e:d5:d1:77:05:5e:3b: 69:d5:18:38:9f:ac:b5:b3:31:f5:ba:84:5d:92:2b:de:2c:f7: cf:1e:12:31:4f:26:9e:44:de:8b:a4:fb:7f:e0:0c:32:5f:47: cb:5a:e1:d1:ca:dd:8b:03:13:a7:f0:6f:fc:d6:45:01:a4:f3: 01:98:8f:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHMLsuXh/cP7kRc4X57B0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZDQzZDQ5OTg2ODA5MWJiZGM0N2Q5NWFlZTFjOTA5OWYw MDU2MjAwHhcNMjUxMjA2MTAwMjE5WhcNMjUxMjA3MTAwMjE5WjAzMTEwLwYDVQQD EygyZDgwMzE4YTQzZjM3NjBhNmNhODRiZmZiODk2OTI4OTVkODFiNGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwBOSdwCwtodOQz9RlE7tgm5mq8F axeWwwTnR1cpkmofr+n3LdxNM3gl9/ZKfcmZXUE+1a8YaJYcmArmzjvA1Nuq4/ZS JkNmCmnUFvUqolI9KaZokU0fWg6WwAbBkjhJ1eNK6WLqR8yx7S3VvIYJ4pEH9K5v i+6vQld0C9bPxmgzCCqvrCoSCO4CPpWDO79bLMxidHFnbcDXqe5762+sluhjyOx2 61KA3QPTdmo1aDzV7pytujjL7mbmvD8QPSMiDG/mMjqsuZng04KyaTD8T3iamVhg dnC175IUjbeDw53dwWsCyxGXbyCKrYFaDLHVpIAFDGZmWHJh255IlwHEgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2AMYpD83YKbKhL/7iWkoldgbS8MB8GA1UdIwQY MBaAFJPUPUmYaAkbvcR9la7hyQmfAFYgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazlROVNaaG9DUnU5eEgyVnJ1SEpDWjhBVmlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC82YjA4YzItNWMzYS00Mjg4LTg0NGIt N2ZlNDJmZjRkY2Q4LzEvazlROVNaaG9DUnU5eEgyVnJ1SEpDWjhBVmlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC82YjA4YzItNWMzYS00Mjg4LTg0NGItN2ZlNDJmZjRkY2Q4 LzEvazlROVNaaG9DUnU5eEgyVnJ1SEpDWjhBVmlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf15f774q JlkWx+NMfJKC6wabQfu0X6qC+8lHCmpCgiseXpcDKLAe6z5ZpWUlcgcjvwDgupIe 3tx3b4aqMCyQlHfhzMOd9WwpFOzpbEXWdEynxABibHn/sto5lIB9I2VV35aYboLx PM1reoXvFItU2LL+RYC5Nx0Co3w8fRb+fQX9Y4HAwUoATK47l6VgoMKh9MGsob4U tO3zMZ2CvSZLcsdcuf1SbSrHgALo5X8XmWsG97DOq37J7SSDqbqgUAdO1dF3BV47 adUYOJ+stbMx9bqEXZIr3iz3zx4SMU8mnkTei6T7f+AMMl9Hy1rh0crdiwMTp/Bv /NZFAaTzAZiPYw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:56 2025 by rpki-client