This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft File: 9NwmxibFHF3vbyRm849VslApZC8.mft (raw, json) Hash identifier: C0DRTaTqlw90azHaQAyWfVBgebVmT14DZy8kQT5U518= Subject key identifier: 8F:C3:12:F7:D8:5D:66:79:89:65:A5:A2:F6:F3:B4:CA:B9:58:7A:43 Authority key identifier: F4:DC:26:C6:26:C5:1C:5D:EF:6F:24:66:F3:8F:55:B2:50:29:64:2F Certificate issuer: /CN=f4dc26c626c51c5def6f2466f38f55b25029642f Certificate serial: 019AF31C3EB2A783B8B550BAAFE7B78D6401 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft Manifest number: 0FCD Signing time: Sat 06 Dec 2025 10:01:45 +0000 Manifest this update: Sat 06 Dec 2025 10:01:45 +0000 Manifest next update: Sun 07 Dec 2025 10:01:45 +0000 Files and hashes: 1: 9NwmxibFHF3vbyRm849VslApZC8.crl (hash: Br1BmcQCUeL5buGmaHY6l7//tXdnwZG2UjWWSo9+Ppw=) 2: XI2V1xAOtuCnHnEsCZ4HB4sk5c0.roa (hash: NGuYGkHyS6sZ+OmDpCbd7Xg31/u7/ppig2sfjfcm+Ik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.crl rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:3e:b2:a7:83:b8:b5:50:ba:af:e7:b7:8d:64:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4dc26c626c51c5def6f2466f38f55b25029642f Validity Not Before: Dec 6 10:01:45 2025 GMT Not After : Dec 7 10:01:45 2025 GMT Subject: CN=8fc312f7d85d66798965a5a2f6f3b4cab9587a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:92:7b:89:b4:80:91:da:f3:e3:cb:f1:77:0a: ba:b2:6a:26:92:40:73:5d:fc:72:71:ab:ae:3a:fc: 55:eb:0e:cc:15:f5:01:a8:c3:4b:ca:c4:28:bb:27: 30:c9:bb:3b:6f:cb:86:c9:bd:0a:0b:d1:0a:87:b5: 79:1e:7d:9f:2c:60:95:9e:59:ff:d8:99:60:05:dd: fd:d9:60:a9:54:cd:48:3b:3c:68:40:a2:b2:be:37: f1:39:09:25:3b:d3:14:a2:2a:25:17:d9:26:e3:c4: 3d:b6:c4:1d:51:42:61:6b:d3:8d:77:31:cc:5a:4e: c7:75:c6:bc:f1:1c:e1:8c:e8:e4:72:24:f8:fb:8d: 4b:8c:ad:1c:d7:86:ca:cb:bb:98:43:3f:78:d9:ce: f8:15:a0:84:c9:86:68:e7:17:53:a8:d8:db:8a:e1: 9b:32:dd:d8:59:94:97:21:24:24:cf:e3:9e:8d:46: 0d:c5:bb:75:f7:28:44:85:45:91:19:2e:04:38:42: 3d:99:b3:70:c3:2e:20:67:db:dc:4e:44:cc:82:5e: 3c:ec:d2:df:c1:06:60:73:27:e2:af:7f:31:32:08: 91:7d:f5:2c:ec:82:c1:0a:4f:79:b1:5b:f2:59:f8: d8:56:ca:54:f4:b5:10:c9:31:64:81:28:ec:f9:f6: ca:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C3:12:F7:D8:5D:66:79:89:65:A5:A2:F6:F3:B4:CA:B9:58:7A:43 X509v3 Authority Key Identifier: keyid:F4:DC:26:C6:26:C5:1C:5D:EF:6F:24:66:F3:8F:55:B2:50:29:64:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:4e:47:d6:50:9a:90:0f:06:3f:4a:63:19:4b:f4:5a:14:d1: 27:00:0d:95:08:9a:30:95:d6:24:e2:fc:be:fe:87:67:3c:db: ec:f2:ed:7e:dd:4a:11:4b:3f:fa:e4:df:19:e0:0a:ae:30:e6: 95:5e:ea:33:50:70:6a:65:1d:87:23:00:06:9a:15:97:69:f2: 12:67:d7:bf:cf:d2:82:4b:32:6f:18:32:d0:55:89:6a:97:5d: b4:a4:ec:e4:76:05:be:aa:17:01:03:62:5e:68:fd:f3:95:64: 07:d0:b3:a6:24:2e:cd:73:44:35:d0:de:bb:74:7b:af:ef:8f: 22:48:68:55:9c:5a:47:e5:a8:ad:5a:29:ea:88:c0:64:3e:79: 32:f2:70:1e:6d:c0:94:35:fe:2d:b0:71:fb:31:0b:08:9b:4d: 05:6b:ce:be:08:f3:b9:67:7e:53:67:a2:fe:aa:ab:65:13:87: 1f:50:5a:be:6d:42:42:bd:c1:a2:19:c8:d8:e5:c3:a6:f6:78: 48:98:75:b1:bc:a7:bc:eb:fe:5f:e8:dd:d6:b1:38:7e:b7:b2: c3:e6:c6:85:bc:fe:17:c3:66:50:78:b2:e5:f2:9b:14:b7:c2: c2:71:f7:b2:1f:29:b8:45:65:d6:fc:ed:98:b1:62:33:c2:fe: 30:e1:2a:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHD6yp4O4tVC6r+e3jWQBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZGMyNmM2MjZjNTFjNWRlZjZmMjQ2NmYzOGY1NWIyNTAy OTY0MmYwHhcNMjUxMjA2MTAwMTQ1WhcNMjUxMjA3MTAwMTQ1WjAzMTEwLwYDVQQD Eyg4ZmMzMTJmN2Q4NWQ2Njc5ODk2NWE1YTJmNmYzYjRjYWI5NTg3YTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JJ7ibSAkdrz48vxdwq6smomkkBz XfxycauuOvxV6w7MFfUBqMNLysQouycwybs7b8uGyb0KC9EKh7V5Hn2fLGCVnln/ 2JlgBd392WCpVM1IOzxoQKKyvjfxOQklO9MUoiolF9km48Q9tsQdUUJha9ONdzHM Wk7Hdca88RzhjOjkciT4+41LjK0c14bKy7uYQz942c74FaCEyYZo5xdTqNjbiuGb Mt3YWZSXISQkz+OejUYNxbt19yhEhUWRGS4EOEI9mbNwwy4gZ9vcTkTMgl487NLf wQZgcyfir38xMgiRffUs7ILBCk95sVvyWfjYVspU9LUQyTFkgSjs+fbKhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/DEvfYXWZ5iWWlovbztMq5WHpDMB8GA1UdIwQY MBaAFPTcJsYmxRxd728kZvOPVbJQKWQvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU53bXhpYkZIRjN2YnlSbTg0OVZzbEFwWkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wODc5ZDgtZjIxNi00NWFiLWJmODct MjNlMWRhZGYxMDZjLzEvOU53bXhpYkZIRjN2YnlSbTg0OVZzbEFwWkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wODc5ZDgtZjIxNi00NWFiLWJmODctMjNlMWRhZGYxMDZj LzEvOU53bXhpYkZIRjN2YnlSbTg0OVZzbEFwWkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjE5H1lCa kA8GP0pjGUv0WhTRJwANlQiaMJXWJOL8vv6HZzzb7PLtft1KEUs/+uTfGeAKrjDm lV7qM1BwamUdhyMABpoVl2nyEmfXv8/Sgksybxgy0FWJapddtKTs5HYFvqoXAQNi Xmj985VkB9CzpiQuzXNENdDeu3R7r++PIkhoVZxaR+WorVop6ojAZD55MvJwHm3A lDX+LbBx+zELCJtNBWvOvgjzuWd+U2ei/qqrZROHH1Bavm1CQr3BohnI2OXDpvZ4 SJh1sbynvOv+X+jd1rE4freyw+bGhbz+F8NmUHiy5fKbFLfCwnH3sh8puEVl1vzt mLFiM8L+MOEq1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 18:18:59 2025 by rpki-client