This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/497125-61fb-42e8-ac49-61673a477543/1/9z1njq7ZSnm3Qt1DveP1TynbMVI.mft File: 9z1njq7ZSnm3Qt1DveP1TynbMVI.mft (raw, json) Hash identifier: /lW/IHqLLMebP7gCQv8IW8AlQVwOxy/6zEBY/blPJXo= Subject key identifier: 47:1C:9E:62:67:DD:53:F9:E7:8E:89:36:1A:90:CA:C8:00:A2:81:FA Authority key identifier: F7:3D:67:8E:AE:D9:4A:79:B7:42:DD:43:BD:E3:F5:4F:29:DB:31:52 Certificate issuer: /CN=f73d678eaed94a79b742dd43bde3f54f29db3152 Certificate serial: 019AF164343C1A90670CAE9E5A9CF4E7C5E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9z1njq7ZSnm3Qt1DveP1TynbMVI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/497125-61fb-42e8-ac49-61673a477543/1/9z1njq7ZSnm3Qt1DveP1TynbMVI.mft Manifest number: 015B Signing time: Sat 06 Dec 2025 02:01:07 +0000 Manifest this update: Sat 06 Dec 2025 02:01:07 +0000 Manifest next update: Sun 07 Dec 2025 02:01:07 +0000 Files and hashes: 1: 9z1njq7ZSnm3Qt1DveP1TynbMVI.crl (hash: 9lRghGAvGGrD5GmrlWzRpwaOCUHLhNOXwGskd3PT2bo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/497125-61fb-42e8-ac49-61673a477543/1/9z1njq7ZSnm3Qt1DveP1TynbMVI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/497125-61fb-42e8-ac49-61673a477543/1/9z1njq7ZSnm3Qt1DveP1TynbMVI.mft rsync://rpki.ripe.net/repository/DEFAULT/9z1njq7ZSnm3Qt1DveP1TynbMVI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:34:3c:1a:90:67:0c:ae:9e:5a:9c:f4:e7:c5:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f73d678eaed94a79b742dd43bde3f54f29db3152 Validity Not Before: Dec 6 02:01:07 2025 GMT Not After : Dec 7 02:01:07 2025 GMT Subject: CN=471c9e6267dd53f9e78e89361a90cac800a281fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f8:f3:0d:38:ea:61:11:f1:f3:f7:7f:1a:af: 1b:83:d0:30:06:f9:ea:20:c3:a9:71:4d:9e:af:e6: 68:f5:ac:9b:6a:94:bf:c0:36:a7:94:29:1d:ff:e7: 4d:be:5d:e6:7f:c7:b9:9e:4c:c5:f3:d5:8b:d8:03: 92:e2:0a:17:49:cb:b9:95:c9:82:68:01:af:9f:cd: 61:e1:99:56:04:be:50:48:65:0e:c6:70:69:33:0c: 59:6c:8a:27:93:2e:64:ae:62:65:28:af:49:fd:ba: 27:d3:ff:03:2e:7b:2d:96:f8:f2:42:62:cf:28:19: 3d:86:23:ce:f8:7b:d7:41:25:2f:a6:3e:18:05:fe: c0:08:5d:c3:03:b3:37:61:ee:8d:14:05:2a:42:3f: ff:b1:a8:a7:ec:fd:72:86:1d:42:bb:03:b8:59:62: 8f:6d:2b:c0:6b:28:d8:29:0e:5f:3d:6f:68:0c:f9: f0:63:9a:4f:29:be:d5:d0:83:ab:c9:3f:02:9b:02: b8:f9:41:1b:5b:87:cf:22:19:37:96:96:c3:db:dd: 46:67:c4:f3:d9:8b:0c:c3:28:09:39:13:0f:f2:c0: a7:af:2a:e9:c2:cb:ec:a2:e6:8a:f6:47:59:2d:3a: b8:28:80:4c:e6:05:d9:2c:86:5f:20:87:04:1f:a0: 1c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:1C:9E:62:67:DD:53:F9:E7:8E:89:36:1A:90:CA:C8:00:A2:81:FA X509v3 Authority Key Identifier: keyid:F7:3D:67:8E:AE:D9:4A:79:B7:42:DD:43:BD:E3:F5:4F:29:DB:31:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9z1njq7ZSnm3Qt1DveP1TynbMVI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/497125-61fb-42e8-ac49-61673a477543/1/9z1njq7ZSnm3Qt1DveP1TynbMVI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/497125-61fb-42e8-ac49-61673a477543/1/9z1njq7ZSnm3Qt1DveP1TynbMVI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:13:ed:94:be:1f:c5:bf:8b:1c:11:e6:16:eb:df:e9:d0:10: 26:4c:d0:b3:69:5e:e3:41:79:c7:e8:91:07:1f:23:a8:3d:98: bf:28:d9:3f:f5:1d:c0:2e:f9:e2:f0:da:ff:9f:86:85:4f:fb: f2:e9:83:4a:f4:d7:39:5d:00:29:26:b1:f0:58:e1:a8:9d:f7: 8d:c7:ab:09:01:b9:17:c5:e4:cf:cf:2c:72:4c:d7:6d:3a:e0: 6f:07:8d:07:bb:a1:87:a6:71:f4:a3:96:2d:c7:7f:39:bc:b3: 25:15:82:81:54:4d:9f:61:9f:5e:f6:61:f3:0c:d4:3b:4e:f6: dd:a4:72:7c:f3:93:49:75:40:68:94:5a:18:71:05:df:fe:0a: 04:a9:b0:79:68:f8:a7:1c:33:d7:be:4c:a1:a8:81:15:ff:3d: 48:5f:39:3a:6b:a2:8d:1d:3d:a8:1d:74:3d:87:9e:b4:9d:70: e1:3e:fb:ba:d2:bf:9e:f6:3f:3c:e2:16:5c:27:87:05:98:82: f4:c9:42:35:a7:f6:1b:d8:e6:4c:00:43:52:c2:93:88:d0:4c: 9f:5e:74:ea:bc:71:24:0c:8f:93:dd:fa:4e:cd:07:d5:4e:21: cf:9f:ef:de:a3:e6:4b:c5:36:e8:f6:e5:70:2a:bd:53:5f:f6: c8:c9:3d:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDQ8GpBnDK6eWpz058XpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3M2Q2NzhlYWVkOTRhNzliNzQyZGQ0M2JkZTNmNTRmMjlk YjMxNTIwHhcNMjUxMjA2MDIwMTA3WhcNMjUxMjA3MDIwMTA3WjAzMTEwLwYDVQQD Eyg0NzFjOWU2MjY3ZGQ1M2Y5ZTc4ZTg5MzYxYTkwY2FjODAwYTI4MWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfjzDTjqYRHx8/d/Gq8bg9AwBvnq IMOpcU2er+Zo9aybapS/wDanlCkd/+dNvl3mf8e5nkzF89WL2AOS4goXScu5lcmC aAGvn81h4ZlWBL5QSGUOxnBpMwxZbIonky5krmJlKK9J/bon0/8DLnstlvjyQmLP KBk9hiPO+HvXQSUvpj4YBf7ACF3DA7M3Ye6NFAUqQj//sain7P1yhh1CuwO4WWKP bSvAayjYKQ5fPW9oDPnwY5pPKb7V0IOryT8CmwK4+UEbW4fPIhk3lpbD291GZ8Tz 2YsMwygJORMP8sCnryrpwsvsouaK9kdZLTq4KIBM5gXZLIZfIIcEH6AcPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEccnmJn3VP5546JNhqQysgAooH6MB8GA1UdIwQY MBaAFPc9Z46u2Up5t0LdQ73j9U8p2zFSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXoxbmpxN1pTbm0zUXQxRHZlUDFUeW5iTVZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi80OTcxMjUtNjFmYi00MmU4LWFjNDkt NjE2NzNhNDc3NTQzLzEvOXoxbmpxN1pTbm0zUXQxRHZlUDFUeW5iTVZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi80OTcxMjUtNjFmYi00MmU4LWFjNDktNjE2NzNhNDc3NTQz LzEvOXoxbmpxN1pTbm0zUXQxRHZlUDFUeW5iTVZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPRPtlL4f xb+LHBHmFuvf6dAQJkzQs2le40F5x+iRBx8jqD2YvyjZP/UdwC754vDa/5+GhU/7 8umDSvTXOV0AKSax8FjhqJ33jcerCQG5F8Xkz88sckzXbTrgbweNB7uhh6Zx9KOW Lcd/ObyzJRWCgVRNn2GfXvZh8wzUO0723aRyfPOTSXVAaJRaGHEF3/4KBKmweWj4 pxwz175MoaiBFf89SF85OmuijR09qB10PYeetJ1w4T77utK/nvY/POIWXCeHBZiC 9MlCNaf2G9jmTABDUsKTiNBMn1506rxxJAyPk936Ts0H1U4hz5/v3qPmS8U26Pbl cCq9U1/2yMk9qA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:42 2025 by rpki-client