This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/65502f-5af6-4056-88bd-1eccd1a832e2/1/tR9P0vTrR-SgnpoKCpHsxKWpMPU.mft File: tR9P0vTrR-SgnpoKCpHsxKWpMPU.mft (raw, json) Hash identifier: t1e77hWVchgsGmeRr+hPOO0T3Wjllr6F6K/52Y3EMvY= Subject key identifier: D8:53:44:8B:49:EF:92:9F:73:13:30:A3:0F:2A:3A:94:23:F9:D5:C0 Authority key identifier: B5:1F:4F:D2:F4:EB:47:E4:A0:9E:9A:0A:0A:91:EC:C4:A5:A9:30:F5 Certificate issuer: /CN=b51f4fd2f4eb47e4a09e9a0a0a91ecc4a5a930f5 Certificate serial: 019AF0F5D97BB67082F7735808B50E0A6BDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR9P0vTrR-SgnpoKCpHsxKWpMPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/65502f-5af6-4056-88bd-1eccd1a832e2/1/tR9P0vTrR-SgnpoKCpHsxKWpMPU.mft Manifest number: 0D Signing time: Sat 06 Dec 2025 00:00:34 +0000 Manifest this update: Sat 06 Dec 2025 00:00:34 +0000 Manifest next update: Sun 07 Dec 2025 00:00:34 +0000 Files and hashes: 1: tR9P0vTrR-SgnpoKCpHsxKWpMPU.crl (hash: T/WmHFKVNjQd/HYfSWPfJoqrmFdNxu/jRM7PcjW3caA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/65502f-5af6-4056-88bd-1eccd1a832e2/1/tR9P0vTrR-SgnpoKCpHsxKWpMPU.crl rsync://rpki.ripe.net/repository/DEFAULT/89/65502f-5af6-4056-88bd-1eccd1a832e2/1/tR9P0vTrR-SgnpoKCpHsxKWpMPU.mft rsync://rpki.ripe.net/repository/DEFAULT/tR9P0vTrR-SgnpoKCpHsxKWpMPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:d9:7b:b6:70:82:f7:73:58:08:b5:0e:0a:6b:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b51f4fd2f4eb47e4a09e9a0a0a91ecc4a5a930f5 Validity Not Before: Dec 6 00:00:34 2025 GMT Not After : Dec 7 00:00:34 2025 GMT Subject: CN=d853448b49ef929f731330a30f2a3a9423f9d5c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c4:8f:6c:ef:2e:df:f9:22:f1:9b:be:4e:5a: ec:8e:0a:1d:4d:31:bc:c3:6a:88:3e:46:9f:d8:a5: 7c:54:ab:9a:c9:fa:75:45:df:1e:66:14:55:c5:13: df:cd:6b:7e:21:01:d6:58:4b:d3:9c:5c:ea:f4:48: f2:db:da:f0:91:55:9e:8b:65:e0:59:fd:2b:c6:ae: 0b:4a:4e:4a:e2:67:1a:b8:4a:5c:6d:89:d5:9a:cf: 58:17:98:a3:21:0b:af:56:8e:e0:1f:d6:86:4b:55: 3a:35:c1:d1:4a:81:e6:32:4e:8d:0d:e4:c2:eb:b1: 0c:77:c1:cc:63:23:9a:8c:bf:04:3c:cb:ad:3c:b3: e1:70:cd:94:dd:e9:51:d5:5c:49:1a:a4:0d:4a:8e: 58:7c:c5:d9:e3:af:94:bc:40:44:74:3e:91:0c:f8: 75:31:dd:41:78:b2:30:52:53:e3:cf:b6:55:fb:5c: 10:13:ae:3e:ac:50:6e:50:2d:2d:da:67:a8:46:4f: c0:c5:62:53:8a:dc:b0:75:1f:49:e0:9d:bc:0c:9a: f9:c3:16:20:3a:42:6f:3d:dc:7a:50:5e:bb:da:1d: 4f:47:c7:f2:86:bf:45:75:e9:94:f0:18:98:80:66: 90:a3:63:60:1e:55:f2:b7:27:18:b7:20:ed:0b:66: cb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:53:44:8B:49:EF:92:9F:73:13:30:A3:0F:2A:3A:94:23:F9:D5:C0 X509v3 Authority Key Identifier: keyid:B5:1F:4F:D2:F4:EB:47:E4:A0:9E:9A:0A:0A:91:EC:C4:A5:A9:30:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR9P0vTrR-SgnpoKCpHsxKWpMPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65502f-5af6-4056-88bd-1eccd1a832e2/1/tR9P0vTrR-SgnpoKCpHsxKWpMPU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/65502f-5af6-4056-88bd-1eccd1a832e2/1/tR9P0vTrR-SgnpoKCpHsxKWpMPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:74:c5:59:0d:7f:77:7d:7b:b7:bf:83:c1:f9:30:0f:8c:5d: 39:08:d4:51:70:e8:21:0b:27:47:ce:7a:4d:fe:0c:c2:da:f0: e2:19:8b:41:e8:d9:99:3d:ab:ed:3f:f6:18:f5:42:ec:60:96: ec:c9:55:7b:5c:a8:eb:b1:d7:f7:85:21:fc:43:b3:a6:79:6c: e5:4e:d0:28:ed:df:a7:b2:9a:a7:24:da:59:de:46:e1:66:75: f1:69:a3:b0:13:84:91:12:99:6f:53:76:5c:a3:41:27:22:e5: 52:05:ae:ae:3f:4f:aa:b7:4b:e7:25:1b:91:d8:e2:cb:fe:53: e8:f5:18:bb:1a:53:c6:f9:e4:5f:bf:c8:aa:ba:f8:61:98:fd: d9:e8:53:d0:b1:79:0d:33:5b:76:3d:9a:6f:41:c3:fe:81:ca: 92:76:2d:0d:e1:cf:53:98:25:b6:73:e6:33:12:7e:2a:2c:dd: 72:dc:6e:a9:9e:f2:83:48:87:87:3d:db:2e:75:f7:ec:a7:9f: 7b:29:ef:cf:b8:62:82:83:d2:55:93:5f:ae:58:4e:3b:62:90: c5:29:8e:7d:4b:3d:e6:b3:cd:7a:4d:cc:fc:7d:ed:ef:28:e6: 63:fa:b9:9e:01:81:f8:e1:46:f0:8d:0f:3f:63:6e:43:ae:c6: 63:99:d5:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9dl7tnCC93NYCLUOCmvfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MWY0ZmQyZjRlYjQ3ZTRhMDllOWEwYTBhOTFlY2M0YTVh OTMwZjUwHhcNMjUxMjA2MDAwMDM0WhcNMjUxMjA3MDAwMDM0WjAzMTEwLwYDVQQD EyhkODUzNDQ4YjQ5ZWY5MjlmNzMxMzMwYTMwZjJhM2E5NDIzZjlkNWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsSPbO8u3/ki8Zu+TlrsjgodTTG8 w2qIPkaf2KV8VKuayfp1Rd8eZhRVxRPfzWt+IQHWWEvTnFzq9Ejy29rwkVWei2Xg Wf0rxq4LSk5K4mcauEpcbYnVms9YF5ijIQuvVo7gH9aGS1U6NcHRSoHmMk6NDeTC 67EMd8HMYyOajL8EPMutPLPhcM2U3elR1VxJGqQNSo5YfMXZ46+UvEBEdD6RDPh1 Md1BeLIwUlPjz7ZV+1wQE64+rFBuUC0t2meoRk/AxWJTitywdR9J4J28DJr5wxYg OkJvPdx6UF672h1PR8fyhr9FdemU8BiYgGaQo2NgHlXytycYtyDtC2bLbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhTRItJ75KfcxMwow8qOpQj+dXAMB8GA1UdIwQY MBaAFLUfT9L060fkoJ6aCgqR7MSlqTD1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFI5UDB2VHJSLVNnbnBvS0NwSHN4S1dwTVBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS82NTUwMmYtNWFmNi00MDU2LTg4YmQt MWVjY2QxYTgzMmUyLzEvdFI5UDB2VHJSLVNnbnBvS0NwSHN4S1dwTVBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS82NTUwMmYtNWFmNi00MDU2LTg4YmQtMWVjY2QxYTgzMmUy LzEvdFI5UDB2VHJSLVNnbnBvS0NwSHN4S1dwTVBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmnTFWQ1/ d317t7+DwfkwD4xdOQjUUXDoIQsnR856Tf4Mwtrw4hmLQejZmT2r7T/2GPVC7GCW 7MlVe1yo67HX94Uh/EOzpnls5U7QKO3fp7KapyTaWd5G4WZ18WmjsBOEkRKZb1N2 XKNBJyLlUgWurj9PqrdL5yUbkdjiy/5T6PUYuxpTxvnkX7/Iqrr4YZj92ehT0LF5 DTNbdj2ab0HD/oHKknYtDeHPU5gltnPmMxJ+KizdctxuqZ7yg0iHhz3bLnX37Kef eynvz7higoPSVZNfrlhOO2KQxSmOfUs95rPNek3M/H3t7yjmY/q5ngGB+OFG8I0P P2NuQ67GY5nVfw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:39 2025 by rpki-client