This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft File: 9wC7WRwCd4gZrqH1uPZEFns9fC4.mft (raw, json) Hash identifier: aZP4bXd+eU2phtswrILuZcqrOkw6tKQ79o+79iYjLbc= Subject key identifier: 80:CE:77:18:93:55:F0:70:70:68:10:2B:07:0D:D9:B8:25:0F:D1:FF Authority key identifier: F7:00:BB:59:1C:02:77:88:19:AE:A1:F5:B8:F6:44:16:7B:3D:7C:2E Certificate issuer: /CN=f700bb591c02778819aea1f5b8f644167b3d7c2e Certificate serial: 019AF1D1B1BE4A31760677ABC9DA22C18593 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9wC7WRwCd4gZrqH1uPZEFns9fC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft Manifest number: 1061 Signing time: Sat 06 Dec 2025 04:00:42 +0000 Manifest this update: Sat 06 Dec 2025 04:00:42 +0000 Manifest next update: Sun 07 Dec 2025 04:00:42 +0000 Files and hashes: 1: 9wC7WRwCd4gZrqH1uPZEFns9fC4.crl (hash: nmvtpq5AaCM51dkQsYNP7knoR74/CalLq4OXmGv/4Y8=) 2: K4Gb3AwaGq3gzkyO-1MyxTIk3gg.roa (hash: DCLfidqg0r72HrTsNGYvW13eljCKxYuCqdsXQsy2ahc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.crl rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft rsync://rpki.ripe.net/repository/DEFAULT/9wC7WRwCd4gZrqH1uPZEFns9fC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:b1:be:4a:31:76:06:77:ab:c9:da:22:c1:85:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f700bb591c02778819aea1f5b8f644167b3d7c2e Validity Not Before: Dec 6 04:00:42 2025 GMT Not After : Dec 7 04:00:42 2025 GMT Subject: CN=80ce77189355f0707068102b070dd9b8250fd1ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5c:ed:61:d9:47:1c:ee:9a:04:8e:90:f2:1b: 23:6f:61:ab:15:4f:cd:7b:a3:14:27:af:f1:af:c5: 9b:2c:76:d2:55:65:21:f0:b5:8f:41:1a:ab:99:69: b4:3a:6a:14:66:c0:a2:44:63:f6:51:bd:8d:3d:bd: 78:d9:e2:df:c9:da:ec:d6:a4:7b:87:35:45:e1:92: 20:1e:30:e9:ec:54:93:1c:fa:c2:27:b3:26:6f:c9: fa:c1:af:db:c0:1e:34:6d:a6:1c:24:b2:35:84:25: 14:50:54:7b:d7:2e:39:7b:19:6a:91:68:79:de:47: a9:8b:f7:d6:4f:64:72:4d:0b:f2:2b:95:da:34:f1: c9:07:42:ce:e7:50:ac:d4:f0:dd:3c:73:d8:2d:e8: c2:12:d0:e5:c3:ec:e1:57:d3:41:8f:42:ae:dd:b1: 8d:a5:31:b6:ec:aa:76:cc:79:6a:e9:b4:a8:96:89: 56:57:5b:cb:1e:f0:0f:0d:c8:8f:54:2d:39:ad:6f: 19:ef:56:6f:48:ed:ba:4a:e6:63:de:3b:59:02:2d: 52:11:34:ed:81:69:7f:d7:1d:7b:30:c6:7e:ea:3d: 9e:95:94:2d:53:e3:3a:fb:82:b2:c7:5c:f6:11:28: 79:a2:43:0d:a1:b6:c1:ca:25:ac:c2:30:01:2d:25: 52:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:CE:77:18:93:55:F0:70:70:68:10:2B:07:0D:D9:B8:25:0F:D1:FF X509v3 Authority Key Identifier: keyid:F7:00:BB:59:1C:02:77:88:19:AE:A1:F5:B8:F6:44:16:7B:3D:7C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wC7WRwCd4gZrqH1uPZEFns9fC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/05f7c5-b21b-435e-8ebc-82a68118c752/1/9wC7WRwCd4gZrqH1uPZEFns9fC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:5d:62:7e:42:b0:d1:52:34:3a:e6:32:de:cf:c9:10:b8:c9: f3:5d:3e:a7:aa:06:50:d8:17:87:ac:f0:05:9b:68:76:74:2d: 33:dd:60:77:30:61:7b:bf:62:09:05:63:0c:f7:3d:76:e9:cd: ea:61:d3:1f:7b:23:6c:2e:6e:71:40:e8:c8:57:a3:b6:1d:75: f9:4e:be:cd:49:f1:f3:09:c5:94:5a:7c:98:6a:2d:71:3e:e0: 32:1e:05:d5:2f:cd:13:0a:b7:8e:e8:21:79:93:ec:41:59:bf: 3e:48:5a:23:ba:c5:14:c4:0a:c8:a2:cb:9b:08:0f:bd:5c:4a: 2d:c6:6a:c1:bf:fd:dd:75:6c:b8:2d:c7:4b:fe:74:7d:67:b3: 84:e9:26:93:4d:e4:7d:91:2c:43:72:52:ad:ff:8b:bc:c3:58: e1:a2:80:57:95:3d:91:19:ad:75:b4:a6:00:7c:5f:7e:83:e1: f1:14:40:d7:3e:d8:b0:14:3d:d0:aa:71:a6:65:90:34:fa:79: 39:41:38:2d:fd:4a:82:16:f1:eb:48:a3:c2:2f:12:a2:19:99: e0:f9:3e:41:68:5a:41:a7:23:4f:ff:48:7a:34:b8:38:56:2c: e6:c4:3b:e5:b0:02:34:f4:3a:e1:2e:46:2c:3f:9c:76:bf:ef: b8:2d:92:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0bG+SjF2BnerydoiwYWTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MDBiYjU5MWMwMjc3ODgxOWFlYTFmNWI4ZjY0NDE2N2Iz ZDdjMmUwHhcNMjUxMjA2MDQwMDQyWhcNMjUxMjA3MDQwMDQyWjAzMTEwLwYDVQQD Eyg4MGNlNzcxODkzNTVmMDcwNzA2ODEwMmIwNzBkZDliODI1MGZkMWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1ztYdlHHO6aBI6Q8hsjb2GrFU/N e6MUJ6/xr8WbLHbSVWUh8LWPQRqrmWm0OmoUZsCiRGP2Ub2NPb142eLfydrs1qR7 hzVF4ZIgHjDp7FSTHPrCJ7Mmb8n6wa/bwB40baYcJLI1hCUUUFR71y45exlqkWh5 3kepi/fWT2RyTQvyK5XaNPHJB0LO51Cs1PDdPHPYLejCEtDlw+zhV9NBj0Ku3bGN pTG27Kp2zHlq6bSololWV1vLHvAPDciPVC05rW8Z71ZvSO26SuZj3jtZAi1SETTt gWl/1x17MMZ+6j2elZQtU+M6+4Kyx1z2ESh5okMNobbByiWswjABLSVSxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDOdxiTVfBwcGgQKwcN2bglD9H/MB8GA1UdIwQY MBaAFPcAu1kcAneIGa6h9bj2RBZ7PXwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXdDN1dSd0NkNGdacnFIMXVQWkVGbnM5ZkM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wNWY3YzUtYjIxYi00MzVlLThlYmMt ODJhNjgxMThjNzUyLzEvOXdDN1dSd0NkNGdacnFIMXVQWkVGbnM5ZkM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8wNWY3YzUtYjIxYi00MzVlLThlYmMtODJhNjgxMThjNzUy LzEvOXdDN1dSd0NkNGdacnFIMXVQWkVGbnM5ZkM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARF1ifkKw 0VI0OuYy3s/JELjJ810+p6oGUNgXh6zwBZtodnQtM91gdzBhe79iCQVjDPc9dunN 6mHTH3sjbC5ucUDoyFejth11+U6+zUnx8wnFlFp8mGotcT7gMh4F1S/NEwq3jugh eZPsQVm/PkhaI7rFFMQKyKLLmwgPvVxKLcZqwb/93XVsuC3HS/50fWezhOkmk03k fZEsQ3JSrf+LvMNY4aKAV5U9kRmtdbSmAHxffoPh8RRA1z7YsBQ90KpxpmWQNPp5 OUE4Lf1Kghbx60ijwi8SohmZ4Pk+QWhaQacjT/9IejS4OFYs5sQ75bACNPQ64S5G LD+cdr/vuC2SDQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:33:13 2025 by rpki-client