This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft File: 9bJzfl2X4RCOsEmQTemxbzauseA.mft (raw, json) Hash identifier: Mq6t3YQmmSjzijgIFNILBQez8kdjFOo7eVYxcRMLc7I= Subject key identifier: D9:34:24:EF:86:C6:95:BB:2C:50:D1:E9:6A:74:92:82:8A:29:3A:B7 Authority key identifier: F5:B2:73:7E:5D:97:E1:10:8E:B0:49:90:4D:E9:B1:6F:36:AE:B1:E0 Certificate issuer: /CN=f5b2737e5d97e1108eb049904de9b16f36aeb1e0 Certificate serial: 019AF12EB55C01DA2BB24F6B58E223C548AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:02:41 +0000 Manifest this update: Sat 06 Dec 2025 01:02:41 +0000 Manifest next update: Sun 07 Dec 2025 01:02:41 +0000 Files and hashes: 1: 9bJzfl2X4RCOsEmQTemxbzauseA.crl (hash: k1+tBq7iGuk6XRRdZLcjDGYblBEqIHjpsaq0Ra+Yzp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:b5:5c:01:da:2b:b2:4f:6b:58:e2:23:c5:48:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5b2737e5d97e1108eb049904de9b16f36aeb1e0 Validity Not Before: Dec 6 01:02:41 2025 GMT Not After : Dec 7 01:02:41 2025 GMT Subject: CN=d93424ef86c695bb2c50d1e96a7492828a293ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a8:c9:c2:3d:82:3f:93:2c:0c:c0:43:74:d6: 98:11:42:97:76:f8:6d:84:e8:4a:98:69:e2:52:fe: 10:d8:3d:3e:de:37:5a:66:0b:1d:08:dd:b8:21:fc: a3:1e:01:76:29:b9:b2:24:d4:32:fe:04:5d:46:36: 34:09:4e:f6:60:0b:16:7e:f7:ed:08:03:cd:5a:4f: 9c:d4:41:8c:ab:42:44:bf:f9:13:90:c5:45:9c:e1: 29:31:9f:a0:c7:a6:b7:f7:b9:6d:1b:12:b0:eb:e9: c6:d2:d4:31:b6:46:a2:ad:16:a2:51:7a:e3:2d:c7: c1:e7:db:7f:d7:a7:29:a2:ed:3f:87:64:48:f5:20: 04:95:96:ef:72:a0:58:c0:02:7a:41:c4:e0:fa:9d: 9a:89:70:a9:97:dc:30:47:09:76:d6:46:6e:f2:a0: a1:27:df:de:ca:d2:c6:bb:fa:9a:d0:59:38:b2:b4: 6a:3b:5f:14:63:d1:9a:39:16:04:eb:35:c6:19:1f: 8f:4c:bf:55:ae:1a:e4:38:03:5f:cd:c3:d5:c5:30: a5:70:11:62:b0:77:d5:6f:6e:98:44:5c:7f:61:2b: 88:fc:af:1a:ca:43:ec:79:3a:1a:00:17:c1:f7:1c: b1:2d:30:fb:11:9d:1b:40:eb:85:b9:69:0e:81:28: fc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:34:24:EF:86:C6:95:BB:2C:50:D1:E9:6A:74:92:82:8A:29:3A:B7 X509v3 Authority Key Identifier: keyid:F5:B2:73:7E:5D:97:E1:10:8E:B0:49:90:4D:E9:B1:6F:36:AE:B1:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:2b:09:76:f2:80:30:ee:f5:d8:b3:7e:d0:29:0b:32:b6:2b: d4:d3:49:24:17:5f:2b:bd:5f:66:04:60:9c:d0:bf:77:ad:b1: 41:07:40:15:87:0a:ba:e5:c2:d6:bb:d2:53:c4:66:9b:cf:e3: 63:42:bd:a7:36:7e:6e:47:11:00:17:b0:83:69:34:51:cb:86: e2:e9:19:31:21:d9:a1:4f:7e:c2:2e:ea:45:81:c8:30:f9:23: 6c:69:43:59:88:ff:42:41:86:bd:50:68:02:77:6d:62:d7:15: 1e:a2:dd:ae:85:a5:ea:93:a8:d5:79:21:1d:81:62:52:f1:ad: 0a:84:da:96:e5:2c:d2:6c:08:00:5b:be:c3:55:19:c2:4c:99: a6:c5:ad:28:e8:4f:fb:60:04:b0:2b:32:cb:7f:23:a4:f9:a2: 09:fa:82:54:a7:af:b8:5d:b5:a2:3c:49:da:47:56:f6:f5:02: fe:8f:39:3f:d8:cc:10:41:ba:3d:47:be:2c:c2:86:e6:82:16: cd:f1:36:52:e4:01:e5:47:3b:0f:e9:d4:bf:a1:22:ac:f7:7d: a0:36:13:ac:e3:03:fd:3e:33:78:c6:c7:2a:f7:ba:92:09:75: d6:0c:98:3f:ef:94:8e:6f:05:5d:02:57:1b:ad:f3:4c:ca:08: 41:39:d2:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLrVcAdorsk9rWOIjxUirMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1YjI3MzdlNWQ5N2UxMTA4ZWIwNDk5MDRkZTliMTZmMzZh ZWIxZTAwHhcNMjUxMjA2MDEwMjQxWhcNMjUxMjA3MDEwMjQxWjAzMTEwLwYDVQQD EyhkOTM0MjRlZjg2YzY5NWJiMmM1MGQxZTk2YTc0OTI4MjhhMjkzYWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqjJwj2CP5MsDMBDdNaYEUKXdvht hOhKmGniUv4Q2D0+3jdaZgsdCN24IfyjHgF2KbmyJNQy/gRdRjY0CU72YAsWfvft CAPNWk+c1EGMq0JEv/kTkMVFnOEpMZ+gx6a397ltGxKw6+nG0tQxtkairRaiUXrj LcfB59t/16cpou0/h2RI9SAElZbvcqBYwAJ6QcTg+p2aiXCpl9wwRwl21kZu8qCh J9/eytLGu/qa0Fk4srRqO18UY9GaORYE6zXGGR+PTL9VrhrkOANfzcPVxTClcBFi sHfVb26YRFx/YSuI/K8aykPseToaABfB9xyxLTD7EZ0bQOuFuWkOgSj8DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNk0JO+GxpW7LFDR6Wp0koKKKTq3MB8GA1UdIwQY MBaAFPWyc35dl+EQjrBJkE3psW82rrHgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWJKemZsMlg0UkNPc0VtUVRlbXhiemF1c2VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC83NGZiZWUtNmVlMC00ZjVhLTk1Y2Ut ZWQyZGZkYTdkZjZhLzEvOWJKemZsMlg0UkNPc0VtUVRlbXhiemF1c2VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC83NGZiZWUtNmVlMC00ZjVhLTk1Y2UtZWQyZGZkYTdkZjZh LzEvOWJKemZsMlg0UkNPc0VtUVRlbXhiemF1c2VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAisJdvKA MO712LN+0CkLMrYr1NNJJBdfK71fZgRgnNC/d62xQQdAFYcKuuXC1rvSU8Rmm8/j Y0K9pzZ+bkcRABewg2k0UcuG4ukZMSHZoU9+wi7qRYHIMPkjbGlDWYj/QkGGvVBo AndtYtcVHqLdroWl6pOo1XkhHYFiUvGtCoTaluUs0mwIAFu+w1UZwkyZpsWtKOhP +2AEsCsyy38jpPmiCfqCVKevuF21ojxJ2kdW9vUC/o85P9jMEEG6PUe+LMKG5oIW zfE2UuQB5Uc7D+nUv6EirPd9oDYTrOMD/T4zeMbHKve6kgl11gyYP++Ujm8FXQJX G63zTMoIQTnSTg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:05 2025 by rpki-client