This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft File: C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft (raw, json) Hash identifier: 27IksWeUqjrla6QyCMALtcaFofOiwjV7uH4traQrDAo= Subject key identifier: CC:89:EE:C8:AD:68:75:C0:F3:3A:DB:D6:1A:BD:AB:E6:74:42:CD:4B Authority key identifier: 0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA Certificate issuer: /CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea Certificate serial: 019AF80ACA73DDFCC70DA0299806A63C8CE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft Manifest number: 0387 Signing time: Sun 07 Dec 2025 09:00:47 +0000 Manifest this update: Sun 07 Dec 2025 09:00:47 +0000 Manifest next update: Mon 08 Dec 2025 09:00:47 +0000 Files and hashes: 1: C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl (hash: SaDMxn/JN/ZHuQpU6RL+i+TqptP8qXqaD44ytrJDJvY=) 2: wD9ir4CCy4E7zOefD7Z-y5RvpRY.roa (hash: 7sn9k3wlZ/27RuueZ6o2qKtcwJI5H5fdnvFFf1ud6xU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:0a:ca:73:dd:fc:c7:0d:a0:29:98:06:a6:3c:8c:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea Validity Not Before: Dec 7 09:00:47 2025 GMT Not After : Dec 8 09:00:47 2025 GMT Subject: CN=cc89eec8ad6875c0f33adbd61abdabe67442cd4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d5:51:6b:ee:83:1d:27:28:8a:dd:91:56:6f: b6:82:ed:66:b4:a2:d6:b8:8f:54:d1:f2:d4:f4:c2: 6d:5a:4a:3b:f1:1b:69:35:73:46:90:98:4b:2a:4d: d2:14:b6:df:fa:04:ca:be:62:d4:9e:50:81:d1:d1: 89:97:07:85:fb:a2:16:a3:4a:48:13:e4:d7:83:5f: 67:08:3d:5b:e1:7c:7c:ef:4b:4b:93:bb:3e:5e:65: c7:58:3b:fd:95:f9:2d:6e:c4:1a:d5:c5:c9:4c:88: 99:cc:3a:a7:5c:71:a4:f7:f5:d5:3e:5f:4b:ef:f9: 0f:7d:50:7b:5c:9a:d9:3b:3b:de:97:03:f4:b6:01: 0f:f0:98:ae:20:6f:46:5d:5e:b2:67:51:b7:89:74: 8f:1a:9b:eb:e7:21:c6:84:f4:55:a6:60:c3:bb:61: 5d:d6:ad:2f:4c:10:a3:f0:ab:9b:ce:85:20:fd:dd: 21:8f:41:fe:23:09:77:62:f6:3b:68:55:f2:fa:a3: 94:3c:3d:c2:76:9e:1f:08:2a:10:c4:5e:ce:8c:c2: c3:6b:a6:bb:19:79:f2:3d:41:81:09:75:68:8c:3b: c9:bc:5c:59:d9:7f:f3:ec:01:7d:c2:4b:31:c8:7f: 1e:35:ba:7c:ec:9b:cb:e1:10:3c:f7:b5:67:75:10: 8e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:89:EE:C8:AD:68:75:C0:F3:3A:DB:D6:1A:BD:AB:E6:74:42:CD:4B X509v3 Authority Key Identifier: keyid:0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:24:ee:fe:50:82:cc:ec:b8:97:a0:7a:c1:86:3a:38:0a:c2: 30:9f:ef:fd:c6:0b:04:1c:19:73:b0:4a:64:86:9c:05:4d:66: bf:dc:96:3a:2a:a7:3d:00:5d:0a:5a:b6:ac:fb:84:e3:d1:ee: 3c:d1:04:4b:a3:d5:11:c4:ef:70:48:21:5f:39:b8:4e:51:00: 60:34:2f:5c:09:45:29:ae:58:0a:a3:08:84:d2:3d:04:4f:c4: 60:d7:e4:ad:d5:cb:44:47:c0:67:3d:95:73:cc:ed:74:7a:0a: 25:9c:a9:43:aa:07:d8:63:bd:5a:f5:1c:5e:f0:81:db:64:da: e1:b5:ab:ec:cb:54:e6:ad:90:ba:58:b7:de:f4:e9:8c:40:b3: bf:6b:10:ac:62:28:4e:e7:38:3b:e3:63:4c:55:26:43:c2:01: 78:3d:08:c4:06:36:2a:8b:bc:61:64:ae:49:54:60:84:f8:44: 35:dc:52:da:9f:1e:04:df:69:f1:59:7d:31:4e:0e:80:3e:2b: 22:d5:13:df:6c:27:3b:85:10:fc:a2:fa:88:f9:2e:60:56:e9: 40:2f:17:65:8a:58:a1:07:0c:d6:a5:dd:cf:b0:86:88:62:d6: 6f:53:2e:0f:66:ec:c0:8d:d7:96:11:ab:e4:9e:c3:fd:e7:05: ef:12:33:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4Cspz3fzHDaApmAamPIziMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZDY0ZmU3ZjQzODc4MmVjOGFmYTllZWY1NDg3YjVkYjgw ZTRkZWEwHhcNMjUxMjA3MDkwMDQ3WhcNMjUxMjA4MDkwMDQ3WjAzMTEwLwYDVQQD EyhjYzg5ZWVjOGFkNjg3NWMwZjMzYWRiZDYxYWJkYWJlNjc0NDJjZDRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9VRa+6DHScoit2RVm+2gu1mtKLW uI9U0fLU9MJtWko78RtpNXNGkJhLKk3SFLbf+gTKvmLUnlCB0dGJlweF+6IWo0pI E+TXg19nCD1b4Xx870tLk7s+XmXHWDv9lfktbsQa1cXJTIiZzDqnXHGk9/XVPl9L 7/kPfVB7XJrZOzvelwP0tgEP8JiuIG9GXV6yZ1G3iXSPGpvr5yHGhPRVpmDDu2Fd 1q0vTBCj8KubzoUg/d0hj0H+Iwl3YvY7aFXy+qOUPD3Cdp4fCCoQxF7OjMLDa6a7 GXnyPUGBCXVojDvJvFxZ2X/z7AF9wksxyH8eNbp87JvL4RA897VndRCOzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyJ7sitaHXA8zrb1hq9q+Z0Qs1LMB8GA1UdIwQY MBaAFAvWT+f0OHguyK+p7vVIe124Dk3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzlaUDVfUTRlQzdJcjZudTlVaDdYYmdPVGVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kMjBjMGUtNjM4NS00YWI3LWI1ZmYt ZDE1YmRiODg2YzZkLzEvQzlaUDVfUTRlQzdJcjZudTlVaDdYYmdPVGVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9kMjBjMGUtNjM4NS00YWI3LWI1ZmYtZDE1YmRiODg2YzZk LzEvQzlaUDVfUTRlQzdJcjZudTlVaDdYYmdPVGVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFiTu/lCC zOy4l6B6wYY6OArCMJ/v/cYLBBwZc7BKZIacBU1mv9yWOiqnPQBdClq2rPuE49Hu PNEES6PVEcTvcEghXzm4TlEAYDQvXAlFKa5YCqMIhNI9BE/EYNfkrdXLREfAZz2V c8ztdHoKJZypQ6oH2GO9WvUcXvCB22Ta4bWr7MtU5q2Quli33vTpjECzv2sQrGIo Tuc4O+NjTFUmQ8IBeD0IxAY2Kou8YWSuSVRghPhENdxS2p8eBN9p8Vl9MU4OgD4r ItUT32wnO4UQ/KL6iPkuYFbpQC8XZYpYoQcM1qXdz7CGiGLWb1MuD2bswI3XlhGr 5J7D/ecF7xIzoA== -----END CERTIFICATE-----Generated at Sun Dec 7 17:02:14 2025 by rpki-client