This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft File: b9M_nmhWjdYFvJKvwe9raeEnq9g.mft (raw, json) Hash identifier: W0U9KG6OLrDt59cFPvchkWxY+MNMJM551a/A+ebNtLY= Subject key identifier: AA:84:D0:8A:11:D6:72:D0:6D:01:64:45:1A:21:F8:D7:C0:3C:B7:E1 Authority key identifier: 6F:D3:3F:9E:68:56:8D:D6:05:BC:92:AF:C1:EF:6B:69:E1:27:AB:D8 Certificate issuer: /CN=6fd33f9e68568dd605bc92afc1ef6b69e127abd8 Certificate serial: 019AF23FF173526305B8F1FCC7940DEE1D3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft Manifest number: 10CD Signing time: Sat 06 Dec 2025 06:01:08 +0000 Manifest this update: Sat 06 Dec 2025 06:01:08 +0000 Manifest next update: Sun 07 Dec 2025 06:01:08 +0000 Files and hashes: 1: QgZP-cnsGLbXLiB8i-j6fiH8Sys.roa (hash: S2EGBlisrDeYdPuuPvmxq5XQnasXOcn30j5uFZy7zjM=) 2: b9M_nmhWjdYFvJKvwe9raeEnq9g.crl (hash: UaBjEDw925miljLyio5lmqszhP7/s9Iy4q0u+p2uFq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.crl rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:f1:73:52:63:05:b8:f1:fc:c7:94:0d:ee:1d:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fd33f9e68568dd605bc92afc1ef6b69e127abd8 Validity Not Before: Dec 6 06:01:08 2025 GMT Not After : Dec 7 06:01:08 2025 GMT Subject: CN=aa84d08a11d672d06d0164451a21f8d7c03cb7e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:8e:3c:2b:08:d9:ab:54:c5:91:60:bc:2a:fa: fd:67:0b:c2:3a:a4:03:ae:13:24:21:33:1b:f6:ee: 5d:fb:53:42:79:57:63:bb:75:7d:7a:65:fb:83:73: 9f:a0:27:4a:15:c4:47:a4:c4:a8:28:c3:6c:a2:f0: b1:e3:02:35:4a:61:ba:77:34:2c:7e:89:98:3e:f7: 93:75:5c:22:ba:ef:89:e3:3b:e1:bb:7d:bf:03:86: f7:2a:01:e2:9e:c9:2e:a8:20:21:a2:34:05:ad:d5: 02:5b:7e:32:f7:dc:c5:16:14:86:01:29:42:76:72: a1:61:87:ed:93:29:30:90:97:72:56:e6:e0:c9:96: 66:f5:37:7d:21:46:67:ff:50:06:22:f5:2e:fd:b6: 73:68:be:9f:27:5d:f1:46:cb:74:0a:12:8d:8b:ef: e7:b7:69:28:06:a8:ce:43:72:00:05:43:25:f9:60: 8c:65:09:65:71:9e:13:34:d1:0c:ed:1e:d7:4c:2c: 1c:2d:c6:3e:72:48:ed:9b:a7:8e:4f:5e:eb:9a:51: fc:8b:77:02:e5:80:83:5d:a0:b9:16:91:5a:9b:bf: 9e:82:d9:b4:a0:52:88:03:89:ce:f2:4a:e0:9e:fa: d8:1f:a2:04:f5:70:a2:d6:aa:a9:b7:eb:c3:c0:95: 04:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:84:D0:8A:11:D6:72:D0:6D:01:64:45:1A:21:F8:D7:C0:3C:B7:E1 X509v3 Authority Key Identifier: keyid:6F:D3:3F:9E:68:56:8D:D6:05:BC:92:AF:C1:EF:6B:69:E1:27:AB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:3f:b2:0d:52:0d:09:c8:45:8f:ad:e3:55:3c:ac:fc:16:37: 32:d6:88:7a:5d:95:ce:cd:01:19:94:4c:01:6b:07:4e:10:21: e4:e1:4e:f6:d2:e5:12:fe:a4:6a:89:52:1e:59:58:42:f1:bc: b1:86:d1:8a:d1:a0:cd:fa:e6:d0:b8:bc:7a:48:e7:55:8c:0d: da:93:ca:62:ed:1c:f1:93:16:a3:5a:ea:a0:e3:0a:f0:fb:47: f6:bc:95:cc:2a:4c:8b:4b:62:62:f2:b3:b6:80:8d:54:7d:60: c9:76:51:da:bd:35:ab:8f:e7:0c:ed:31:c8:e8:90:f2:08:b7: 66:cf:e5:1a:a7:70:aa:15:85:82:15:f3:e8:ad:1b:20:78:be: 1c:09:d5:be:1d:50:10:a4:ae:30:8b:4e:b1:5c:d8:02:32:9c: 5d:4e:d6:b6:e4:30:c0:a7:1a:93:74:4e:ca:92:a3:24:ca:32: 64:b7:af:47:8f:77:84:f0:a5:5f:36:0c:91:9f:35:e1:fd:79: 54:bc:a1:f0:08:dc:48:27:d8:ab:bd:d6:64:d7:ec:bd:20:8a: dc:64:da:a8:e9:7b:58:ac:66:cf:12:d4:c1:34:22:94:50:02: 93:e8:e3:81:22:f6:30:e4:18:22:8e:a8:de:4c:39:de:57:7d: a9:63:9e:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/FzUmMFuPH8x5QN7h0/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZDMzZjllNjg1NjhkZDYwNWJjOTJhZmMxZWY2YjY5ZTEy N2FiZDgwHhcNMjUxMjA2MDYwMTA4WhcNMjUxMjA3MDYwMTA4WjAzMTEwLwYDVQQD EyhhYTg0ZDA4YTExZDY3MmQwNmQwMTY0NDUxYTIxZjhkN2MwM2NiN2UxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/I48KwjZq1TFkWC8Kvr9ZwvCOqQD rhMkITMb9u5d+1NCeVdju3V9emX7g3OfoCdKFcRHpMSoKMNsovCx4wI1SmG6dzQs fomYPveTdVwiuu+J4zvhu32/A4b3KgHinskuqCAhojQFrdUCW34y99zFFhSGASlC dnKhYYftkykwkJdyVubgyZZm9Td9IUZn/1AGIvUu/bZzaL6fJ13xRst0ChKNi+/n t2koBqjOQ3IABUMl+WCMZQllcZ4TNNEM7R7XTCwcLcY+ckjtm6eOT17rmlH8i3cC 5YCDXaC5FpFam7+egtm0oFKIA4nO8krgnvrYH6IE9XCi1qqpt+vDwJUE6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKqE0IoR1nLQbQFkRRoh+NfAPLfhMB8GA1UdIwQY MBaAFG/TP55oVo3WBbySr8Hva2nhJ6vYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjlNX25taFdqZFlGdkpLdndlOXJhZUVucTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9hMWM3ZjUtMWVhOS00YTFmLWEzZTQt OGMyN2M5NzY2M2RjLzEvYjlNX25taFdqZFlGdkpLdndlOXJhZUVucTlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9hMWM3ZjUtMWVhOS00YTFmLWEzZTQtOGMyN2M5NzY2M2Rj LzEvYjlNX25taFdqZFlGdkpLdndlOXJhZUVucTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWj+yDVIN CchFj63jVTys/BY3MtaIel2Vzs0BGZRMAWsHThAh5OFO9tLlEv6kaolSHllYQvG8 sYbRitGgzfrm0Li8ekjnVYwN2pPKYu0c8ZMWo1rqoOMK8PtH9ryVzCpMi0tiYvKz toCNVH1gyXZR2r01q4/nDO0xyOiQ8gi3Zs/lGqdwqhWFghXz6K0bIHi+HAnVvh1Q EKSuMItOsVzYAjKcXU7WtuQwwKcak3ROypKjJMoyZLevR493hPClXzYMkZ814f15 VLyh8AjcSCfYq73WZNfsvSCK3GTaqOl7WKxmzxLUwTQilFACk+jjgSL2MOQYIo6o 3kw53ld9qWOelQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:50 2025 by rpki-client