This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft File: u9Qr14Mqar4W4VIqLX5OQNProKI.mft (raw, json) Hash identifier: NnYgbmVMioC68i6xK49JVoNhEylGuVesqe8z9sWYYG0= Subject key identifier: 3E:B7:9E:02:0B:80:79:03:26:8F:3B:D2:5B:15:20:F3:FC:7D:9B:06 Authority key identifier: BB:D4:2B:D7:83:2A:6A:BE:16:E1:52:2A:2D:7E:4E:40:D3:EB:A0:A2 Certificate issuer: /CN=bbd42bd7832a6abe16e1522a2d7e4e40d3eba0a2 Certificate serial: 019B2BC210438A26991481FA7D443984C139 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft Manifest number: 177B Signing time: Wed 17 Dec 2025 10:01:36 +0000 Manifest this update: Wed 17 Dec 2025 10:01:36 +0000 Manifest next update: Thu 18 Dec 2025 10:01:36 +0000 Files and hashes: 1: u9Qr14Mqar4W4VIqLX5OQNProKI.crl (hash: 2mr0dTZI/DQ3Dk5i00rzg8JB0sUYKNtLoRWIsamYXtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.crl rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c2:10:43:8a:26:99:14:81:fa:7d:44:39:84:c1:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbd42bd7832a6abe16e1522a2d7e4e40d3eba0a2 Validity Not Before: Dec 17 10:01:36 2025 GMT Not After : Dec 18 10:01:36 2025 GMT Subject: CN=3eb79e020b807903268f3bd25b1520f3fc7d9b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d7:35:d2:8a:9a:bf:e1:70:09:cc:fe:27:b9: 96:8f:27:f8:98:cd:b7:7a:31:97:67:dc:be:e4:67: 25:1f:4d:5b:d4:af:ee:2e:07:76:2e:01:5d:16:26: 52:98:40:ee:ec:2f:f1:c9:5c:07:5f:31:fa:d2:f4: f9:e6:ce:ea:ac:f9:ab:5a:b1:26:a8:de:34:bf:e7: b7:0e:02:9e:48:49:7e:41:45:be:81:12:d4:e2:5b: 57:75:83:d0:81:85:06:ad:e9:ab:9a:32:fb:d1:86: ac:b3:73:97:07:db:45:10:d5:97:03:fb:60:ff:bf: 85:0d:8f:e1:ad:0a:4e:5c:07:17:63:11:0c:43:f2: 59:1a:2d:42:61:dd:95:64:f9:03:38:2a:9e:40:a9: 60:7f:8e:42:97:37:69:e3:47:b4:36:e5:7c:7e:6e: 75:a6:27:04:d1:66:b1:59:da:7a:2c:86:ed:4a:ea: 01:46:de:dc:31:d8:ac:55:d0:1e:77:03:ca:35:d7: 1e:3e:a5:ae:44:1b:b6:8a:e1:07:4a:2e:20:e6:fe: c3:14:28:5e:68:c3:91:22:8d:ce:83:07:00:7d:f3: d2:32:ee:13:7e:86:7e:a4:5f:fc:1e:d4:b8:62:41: be:0d:d5:6d:36:46:e2:97:6f:ab:34:3d:2a:11:56: 35:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B7:9E:02:0B:80:79:03:26:8F:3B:D2:5B:15:20:F3:FC:7D:9B:06 X509v3 Authority Key Identifier: keyid:BB:D4:2B:D7:83:2A:6A:BE:16:E1:52:2A:2D:7E:4E:40:D3:EB:A0:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:e7:fb:b7:14:a6:34:07:21:63:49:de:9a:fc:40:33:d6:fe: 5d:c8:da:d2:10:27:1f:89:62:26:96:e7:7a:ea:ac:52:97:5c: c4:8d:57:e5:ed:b3:a0:17:77:a1:9b:49:f6:4f:53:73:47:b9: 9e:c0:e5:ae:8e:fd:12:d0:a1:f0:40:a6:dc:36:ad:9d:c4:31: d0:3f:15:d9:38:72:19:b2:39:ce:0b:ef:d6:60:08:fa:34:fd: ac:3d:5c:25:ee:4f:be:ef:fc:68:a7:1d:e0:c3:39:9c:d2:63: ee:37:29:aa:1a:85:ef:b2:ae:09:f8:fd:d7:61:fb:f7:35:75: 3e:28:d9:c5:2e:fe:96:a3:4d:08:be:f6:86:c3:0a:4e:fe:6c: fb:50:25:15:dc:16:cb:60:04:6f:8d:ae:75:45:5c:a5:aa:15: b6:f1:d4:51:ae:9a:a3:fa:f9:a7:3b:ed:6e:9c:25:93:39:2f: ac:e0:01:2b:1a:e7:fd:47:e7:20:77:b2:30:9d:cc:9e:a8:34: 3e:25:e6:51:8c:ae:d8:a9:86:7e:a7:00:6b:6b:3f:59:c1:0b: 5c:98:67:55:4c:37:57:a1:eb:25:b6:8f:46:d4:03:28:38:81: a7:61:40:47:60:94:0c:2c:95:2b:e2:fa:bd:0a:e4:f2:59:81: 03:80:aa:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwhBDiiaZFIH6fUQ5hME5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZDQyYmQ3ODMyYTZhYmUxNmUxNTIyYTJkN2U0ZTQwZDNl YmEwYTIwHhcNMjUxMjE3MTAwMTM2WhcNMjUxMjE4MTAwMTM2WjAzMTEwLwYDVQQD EygzZWI3OWUwMjBiODA3OTAzMjY4ZjNiZDI1YjE1MjBmM2ZjN2Q5YjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtc10oqav+FwCcz+J7mWjyf4mM23 ejGXZ9y+5GclH01b1K/uLgd2LgFdFiZSmEDu7C/xyVwHXzH60vT55s7qrPmrWrEm qN40v+e3DgKeSEl+QUW+gRLU4ltXdYPQgYUGremrmjL70Yass3OXB9tFENWXA/tg /7+FDY/hrQpOXAcXYxEMQ/JZGi1CYd2VZPkDOCqeQKlgf45Clzdp40e0NuV8fm51 picE0WaxWdp6LIbtSuoBRt7cMdisVdAedwPKNdcePqWuRBu2iuEHSi4g5v7DFChe aMORIo3OgwcAffPSMu4TfoZ+pF/8HtS4YkG+DdVtNkbil2+rND0qEVY1vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD63ngILgHkDJo870lsVIPP8fZsGMB8GA1UdIwQY MBaAFLvUK9eDKmq+FuFSKi1+TkDT66CiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTlRcjE0TXFhcjRXNFZJcUxYNU9RTlByb0tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9kM2ZmNjMtZTA5OC00ZTc1LWEzNDYt ODBjOGE4NjdkNzcxLzEvdTlRcjE0TXFhcjRXNFZJcUxYNU9RTlByb0tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9kM2ZmNjMtZTA5OC00ZTc1LWEzNDYtODBjOGE4NjdkNzcx LzEvdTlRcjE0TXFhcjRXNFZJcUxYNU9RTlByb0tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxOf7txSm NAchY0nemvxAM9b+Xcja0hAnH4liJpbneuqsUpdcxI1X5e2zoBd3oZtJ9k9Tc0e5 nsDlro79EtCh8ECm3DatncQx0D8V2ThyGbI5zgvv1mAI+jT9rD1cJe5Pvu/8aKcd 4MM5nNJj7jcpqhqF77KuCfj912H79zV1PijZxS7+lqNNCL72hsMKTv5s+1AlFdwW y2AEb42udUVcpaoVtvHUUa6ao/r5pzvtbpwlkzkvrOABKxrn/UfnIHeyMJ3Mnqg0 PiXmUYyu2KmGfqcAa2s/WcELXJhnVUw3V6HrJbaPRtQDKDiBp2FAR2CUDCyVK+L6 vQrk8lmBA4CqAw== -----END CERTIFICATE-----Generated at Wed Dec 17 18:33:11 2025 by rpki-client