This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft File: kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft (raw, json) Hash identifier: CQcniT5m29QwubQiL4cUHWSgmoiPQ631iG7L0hpbqRc= Subject key identifier: 9D:A7:64:99:57:C1:D2:D2:A9:AF:9E:34:92:6D:BC:C7:4C:C4:3C:0F Authority key identifier: 90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2 Certificate issuer: /CN=901f648dce927fe41833f86d575160b0bc5130a2 Certificate serial: 019AF2769F8B0DB26051F6AFD187BF110E1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft Manifest number: 03F5 Signing time: Sat 06 Dec 2025 07:00:51 +0000 Manifest this update: Sat 06 Dec 2025 07:00:51 +0000 Manifest next update: Sun 07 Dec 2025 07:00:51 +0000 Files and hashes: 1: kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl (hash: oVs71ezelazyLKPjC2xiK2YpitN9ISpORPclOQMduyk=) 2: zfxMRbf5mdjUMmv1wfh1AaOn2cM.roa (hash: jcUlXj90sAjd3pxsJhlKVr5rFOgIRX3LrqrBra0uGW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:9f:8b:0d:b2:60:51:f6:af:d1:87:bf:11:0e:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=901f648dce927fe41833f86d575160b0bc5130a2 Validity Not Before: Dec 6 07:00:51 2025 GMT Not After : Dec 7 07:00:51 2025 GMT Subject: CN=9da7649957c1d2d2a9af9e34926dbcc74cc43c0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c7:8d:3c:9c:03:1b:56:c2:45:58:3b:b5:b1: 29:4f:7b:aa:a1:5a:0f:f7:e7:c9:a7:b9:78:54:ba: d8:10:09:23:18:b5:9b:aa:0f:a2:95:04:00:da:c6: 3f:f5:1f:fe:8b:a3:b0:79:e9:12:7c:19:98:43:89: 3d:39:bd:a0:cb:a2:ee:f8:50:bb:94:d1:ba:8a:bc: 05:93:75:c6:d6:c5:95:e0:a6:60:df:41:a4:90:19: ec:fe:59:b1:96:bb:fe:c0:ab:42:73:5b:f3:be:6d: 66:4f:79:24:a2:2c:79:ce:e1:c7:f2:9a:01:70:e3: ba:10:24:73:83:12:68:12:c4:4a:9f:38:6d:42:39: d3:94:b2:98:5c:0a:35:13:df:8a:00:57:33:12:b3: af:c0:39:1f:42:ce:47:ba:c5:a1:1c:a2:18:26:01: 64:d0:c4:1d:b1:09:5b:44:6a:77:b3:e6:73:3c:55: a3:15:9e:91:66:c5:7e:5f:fa:f0:d5:1b:6a:d1:cc: 71:e7:6e:bc:61:0b:1d:6e:8b:0b:2a:e1:3f:7d:2b: 25:ff:20:1e:b7:e2:11:eb:e2:63:d8:16:3c:cc:8f: f3:4d:36:70:0e:23:3b:a0:4a:13:0b:6f:27:eb:aa: 64:f7:94:fe:0d:59:9b:be:45:66:99:84:e6:59:6c: 1a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A7:64:99:57:C1:D2:D2:A9:AF:9E:34:92:6D:BC:C7:4C:C4:3C:0F X509v3 Authority Key Identifier: keyid:90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:91:df:24:af:22:71:f5:f5:e1:71:11:a7:3c:23:c4:6b:6e: 9c:da:6f:a9:56:1e:40:fb:87:bd:21:3e:15:17:56:b3:af:f8: c2:5f:b2:66:b0:3d:28:97:c6:8c:cd:47:4c:f0:04:c9:a0:a4: ad:8d:d2:1a:f8:63:be:93:7c:9b:88:c9:56:df:a2:64:0a:31: f5:89:c4:34:e5:84:1d:67:5c:91:bf:17:d6:16:ba:aa:f4:97: 83:0e:6f:4e:f8:de:6c:d8:e4:39:96:52:6f:5d:90:37:08:39: bf:2f:e1:22:7f:ce:50:48:ae:06:ee:56:ac:45:48:e0:10:23: 5d:ff:8d:4d:d4:cb:96:4c:05:51:72:6b:78:7a:db:40:c3:5c: fa:cb:7f:e0:42:79:13:3c:74:52:03:18:a5:30:93:1d:d7:8b: 81:88:70:78:74:0c:f7:1e:5d:34:d7:33:c3:ee:bf:5e:6a:2d: 0c:0b:8d:b9:a4:05:af:76:e8:72:c5:a1:e1:48:be:12:92:67: fe:cf:92:31:d3:33:05:a5:d2:01:f5:b0:af:42:5d:b4:4e:2c: 18:c0:58:35:b0:71:1a:fa:39:26:03:2f:4b:1d:af:48:27:b2: 54:35:17:5a:a2:3e:cc:6f:f0:08:83:fa:01:8e:00:ae:2d:a0: 1b:91:92:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydp+LDbJgUfav0Ye/EQ4bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwMWY2NDhkY2U5MjdmZTQxODMzZjg2ZDU3NTE2MGIwYmM1 MTMwYTIwHhcNMjUxMjA2MDcwMDUxWhcNMjUxMjA3MDcwMDUxWjAzMTEwLwYDVQQD Eyg5ZGE3NjQ5OTU3YzFkMmQyYTlhZjllMzQ5MjZkYmNjNzRjYzQzYzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMeNPJwDG1bCRVg7tbEpT3uqoVoP 9+fJp7l4VLrYEAkjGLWbqg+ilQQA2sY/9R/+i6OweekSfBmYQ4k9Ob2gy6Lu+FC7 lNG6irwFk3XG1sWV4KZg30GkkBns/lmxlrv+wKtCc1vzvm1mT3kkoix5zuHH8poB cOO6ECRzgxJoEsRKnzhtQjnTlLKYXAo1E9+KAFczErOvwDkfQs5HusWhHKIYJgFk 0MQdsQlbRGp3s+ZzPFWjFZ6RZsV+X/rw1Rtq0cxx5268YQsdbosLKuE/fSsl/yAe t+IR6+Jj2BY8zI/zTTZwDiM7oEoTC28n66pk95T+DVmbvkVmmYTmWWwa1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2nZJlXwdLSqa+eNJJtvMdMxDwPMB8GA1UdIwQY MBaAFJAfZI3Okn/kGDP4bVdRYLC8UTCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0I5a2pjNlNmLVFZTV9odFYxRmdzTHhSTUtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC83M2MwODUtY2M0Mi00Y2MxLWExYWIt NGMxM2M1ZTFlMWFhLzEva0I5a2pjNlNmLVFZTV9odFYxRmdzTHhSTUtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC83M2MwODUtY2M0Mi00Y2MxLWExYWItNGMxM2M1ZTFlMWFh LzEva0I5a2pjNlNmLVFZTV9odFYxRmdzTHhSTUtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpHfJK8i cfX14XERpzwjxGtunNpvqVYeQPuHvSE+FRdWs6/4wl+yZrA9KJfGjM1HTPAEyaCk rY3SGvhjvpN8m4jJVt+iZAox9YnENOWEHWdckb8X1ha6qvSXgw5vTvjebNjkOZZS b12QNwg5vy/hIn/OUEiuBu5WrEVI4BAjXf+NTdTLlkwFUXJreHrbQMNc+st/4EJ5 Ezx0UgMYpTCTHdeLgYhweHQM9x5dNNczw+6/XmotDAuNuaQFr3bocsWh4Ui+EpJn /s+SMdMzBaXSAfWwr0JdtE4sGMBYNbBxGvo5JgMvSx2vSCeyVDUXWqI+zG/wCIP6 AY4Ari2gG5GSnA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:50:32 2025 by rpki-client