This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft File: 9i4OVeXFow7AS9bcRtFUs-S3tfU.mft (raw, json) Hash identifier: u95dBwGnyX0uR30p8jsXM+RkIJNMYKtdUZdYwXLahRU= Subject key identifier: 9D:39:DE:ED:99:43:33:D2:F7:A0:4C:BB:54:88:75:B1:1E:50:17:EB Authority key identifier: F6:2E:0E:55:E5:C5:A3:0E:C0:4B:D6:DC:46:D1:54:B3:E4:B7:B5:F5 Certificate issuer: /CN=f62e0e55e5c5a30ec04bd6dc46d154b3e4b7b5f5 Certificate serial: 019AF23FEA6743A0FD58549ACC1167295E14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft Manifest number: 0B9E Signing time: Sat 06 Dec 2025 06:01:06 +0000 Manifest this update: Sat 06 Dec 2025 06:01:06 +0000 Manifest next update: Sun 07 Dec 2025 06:01:06 +0000 Files and hashes: 1: 9i4OVeXFow7AS9bcRtFUs-S3tfU.crl (hash: RKlkKap+qIO3ViZLMd4kACWE6+XVgz0l2uqpHDGjarc=) 2: t-NTnv2Ro8nWywZwXpvfbvg95_c.roa (hash: nKK6UB3Rz/fAFcSsBek32u+mXGAo3Dx3MPDp3oR/j+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft rsync://rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:ea:67:43:a0:fd:58:54:9a:cc:11:67:29:5e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f62e0e55e5c5a30ec04bd6dc46d154b3e4b7b5f5 Validity Not Before: Dec 6 06:01:06 2025 GMT Not After : Dec 7 06:01:06 2025 GMT Subject: CN=9d39deed994333d2f7a04cbb548875b11e5017eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:39:1f:b3:7a:8b:f5:ec:9b:4c:61:0f:5c:bb: 72:32:dd:e4:cd:f6:8e:18:44:39:2c:aa:bc:31:12: 71:cd:bc:95:9d:b5:84:b7:0a:e0:45:43:af:c9:1f: 65:27:f2:30:79:c6:8a:f0:bb:27:fe:09:0d:4f:68: 58:77:d9:ce:c2:ed:5b:c4:44:3c:3d:3b:02:af:1d: 7b:ea:96:44:08:0f:3c:47:f4:01:41:5a:bc:0a:56: 8b:ee:e7:29:41:b8:1a:7c:be:07:9d:35:6d:6b:05: e9:0b:82:06:74:f5:2d:22:2e:52:87:37:6a:d6:ad: e5:ba:65:0a:af:db:bd:54:3a:c9:09:7b:95:94:13: 31:9e:2d:79:3e:60:2f:f2:37:36:fe:6a:9e:22:19: d9:82:12:bf:77:eb:bf:a5:27:d2:8c:a5:a5:90:25: 13:62:aa:75:1d:2c:a1:9a:d4:ac:38:34:be:73:9e: ef:0f:b0:64:cf:63:40:e3:e7:e1:17:d4:14:57:74: cf:cd:8d:b6:2e:2b:cb:89:0b:38:10:c8:b0:82:8b: 87:73:42:73:9a:3a:cc:82:4b:7f:95:c0:8b:13:10: a2:c4:3b:38:72:65:48:f2:c0:75:ff:8b:d8:28:9a: 4b:cd:83:68:b7:5d:99:0b:23:0b:d0:cb:63:a4:44: 6f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:39:DE:ED:99:43:33:D2:F7:A0:4C:BB:54:88:75:B1:1E:50:17:EB X509v3 Authority Key Identifier: keyid:F6:2E:0E:55:E5:C5:A3:0E:C0:4B:D6:DC:46:D1:54:B3:E4:B7:B5:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i4OVeXFow7AS9bcRtFUs-S3tfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f997c8-df70-4d7f-b86d-192cb369423f/1/9i4OVeXFow7AS9bcRtFUs-S3tfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:40:23:70:84:8c:ba:7d:d2:62:a3:21:a5:93:aa:ad:b0:b1: 18:af:78:4b:f1:09:29:a0:2f:8a:6d:b0:cb:01:5c:ca:9b:ca: 69:00:46:36:a6:01:70:03:21:e3:82:6b:63:3d:ca:c9:ae:dd: 6a:b1:fd:7d:5f:93:d2:d4:ad:55:48:7a:57:9c:44:bb:11:38: 4f:fa:e2:5b:e3:89:d5:66:0b:79:a3:84:01:92:a4:4e:2e:4a: 74:9b:b5:1e:2f:2f:c8:51:b9:e4:a1:c3:be:fa:90:e0:fb:54: f4:c6:4e:63:6f:fb:70:b4:d6:73:65:80:d1:66:a2:32:c6:63: 75:39:f5:b0:32:7e:05:d8:7a:7c:74:74:fb:7a:0d:2a:35:5d: 3d:d1:77:0f:6d:8b:1b:31:c6:0f:63:6a:d6:89:ad:33:a8:99: 14:a1:c8:86:61:44:2e:fc:da:84:bc:db:87:f1:c7:3e:79:fe: e3:1c:10:da:85:99:41:1b:e6:e8:5f:e4:10:64:97:31:e7:51: 52:33:2a:b6:b2:e5:2f:b3:b6:c0:b6:50:23:77:6c:79:6e:65: f8:2e:34:55:9d:51:68:fc:78:e2:b8:3e:58:bd:6e:74:23:f7: fc:7c:fd:ac:61:1b:19:04:d1:53:96:dd:5a:61:58:25:ed:d7: db:d7:da:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+pnQ6D9WFSazBFnKV4UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MmUwZTU1ZTVjNWEzMGVjMDRiZDZkYzQ2ZDE1NGIzZTRi N2I1ZjUwHhcNMjUxMjA2MDYwMTA2WhcNMjUxMjA3MDYwMTA2WjAzMTEwLwYDVQQD Eyg5ZDM5ZGVlZDk5NDMzM2QyZjdhMDRjYmI1NDg4NzViMTFlNTAxN2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzkfs3qL9eybTGEPXLtyMt3kzfaO GEQ5LKq8MRJxzbyVnbWEtwrgRUOvyR9lJ/IwecaK8Lsn/gkNT2hYd9nOwu1bxEQ8 PTsCrx176pZECA88R/QBQVq8ClaL7ucpQbgafL4HnTVtawXpC4IGdPUtIi5Shzdq 1q3lumUKr9u9VDrJCXuVlBMxni15PmAv8jc2/mqeIhnZghK/d+u/pSfSjKWlkCUT Yqp1HSyhmtSsODS+c57vD7Bkz2NA4+fhF9QUV3TPzY22LivLiQs4EMiwgouHc0Jz mjrMgkt/lcCLExCixDs4cmVI8sB1/4vYKJpLzYNot12ZCyML0MtjpERvpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ053u2ZQzPS96BMu1SIdbEeUBfrMB8GA1UdIwQY MBaAFPYuDlXlxaMOwEvW3EbRVLPkt7X1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWk0T1ZlWEZvdzdBUzliY1J0RlVzLVMzdGZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9mOTk3YzgtZGY3MC00ZDdmLWI4NmQt MTkyY2IzNjk0MjNmLzEvOWk0T1ZlWEZvdzdBUzliY1J0RlVzLVMzdGZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9mOTk3YzgtZGY3MC00ZDdmLWI4NmQtMTkyY2IzNjk0MjNm LzEvOWk0T1ZlWEZvdzdBUzliY1J0RlVzLVMzdGZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbUAjcISM un3SYqMhpZOqrbCxGK94S/EJKaAvim2wywFcypvKaQBGNqYBcAMh44JrYz3Kya7d arH9fV+T0tStVUh6V5xEuxE4T/riW+OJ1WYLeaOEAZKkTi5KdJu1Hi8vyFG55KHD vvqQ4PtU9MZOY2/7cLTWc2WA0WaiMsZjdTn1sDJ+Bdh6fHR0+3oNKjVdPdF3D22L GzHGD2Nq1omtM6iZFKHIhmFELvzahLzbh/HHPnn+4xwQ2oWZQRvm6F/kEGSXMedR UjMqtrLlL7O2wLZQI3dseW5l+C40VZ1RaPx44rg+WL1udCP3/Hz9rGEbGQTRU5bd WmFYJe3X29fa4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:46 2025 by rpki-client