This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft File: 9SMu6AX3jlku_yzKYVORCeWjRn0.mft (raw, json) Hash identifier: FxTdBv1hT2XtOOocQuBShyn+QcpE5kwXphcUTJMs/q0= Subject key identifier: 85:90:14:39:1D:6C:91:E5:63:95:7A:01:D4:36:E7:BE:D7:F0:4C:E9 Authority key identifier: F5:23:2E:E8:05:F7:8E:59:2E:FF:2C:CA:61:53:91:09:E5:A3:46:7D Certificate issuer: /CN=f5232ee805f78e592eff2cca61539109e5a3467d Certificate serial: 019AF1D1A752FADD05753EE5159C5913EABF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft Manifest number: 058F Signing time: Sat 06 Dec 2025 04:00:40 +0000 Manifest this update: Sat 06 Dec 2025 04:00:40 +0000 Manifest next update: Sun 07 Dec 2025 04:00:40 +0000 Files and hashes: 1: 9SMu6AX3jlku_yzKYVORCeWjRn0.crl (hash: MemheEZjplsbttwshdg7F1XpqhuiqcLM5+GT9AZa338=) 2: mUlVQVQA_6DZI0Ul4lrD7MOPmCA.roa (hash: KLYv7255AIBTzhsrUwU5ETXppAJnyWMdZ4HLY5/fahk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.crl rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a7:52:fa:dd:05:75:3e:e5:15:9c:59:13:ea:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5232ee805f78e592eff2cca61539109e5a3467d Validity Not Before: Dec 6 04:00:40 2025 GMT Not After : Dec 7 04:00:40 2025 GMT Subject: CN=859014391d6c91e563957a01d436e7bed7f04ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:9f:78:21:11:71:47:f7:75:00:6c:c8:44:98: c4:7a:b0:10:4d:7b:46:51:d6:47:97:63:e2:6f:0c: 3a:4c:ef:27:47:52:eb:8a:af:ae:e5:ac:a2:54:4a: b5:55:4a:c4:6c:00:61:ef:0b:25:41:83:39:ea:81: 6d:a8:35:c6:ff:bb:e2:f9:b9:5e:76:e5:a3:46:c1: 63:50:a5:9e:7d:3b:5e:1d:56:5e:42:58:0d:82:83: a6:68:25:4a:33:ac:78:92:85:f2:5d:5c:e6:3c:70: 35:9a:b6:5e:e2:b5:aa:64:10:27:32:30:10:40:16: af:13:8b:f0:ea:f6:10:46:20:5b:cd:88:13:89:9a: e7:b3:1b:38:e8:47:0d:b5:3e:40:c9:51:f8:52:63: 2a:98:09:bb:e9:f4:25:a2:e9:5f:cd:94:57:e5:94: 2a:c5:ed:a5:f6:09:71:24:ea:3b:3a:f3:2b:27:85: 9a:c4:57:00:b3:db:81:55:0e:20:bf:35:5f:39:fb: d8:38:65:d1:b5:46:bc:55:6e:14:af:7d:5d:23:71: 31:e6:74:50:2b:15:69:85:88:63:2a:90:5d:24:93: 14:cf:c1:dc:6e:ec:22:16:1d:88:d1:83:98:83:27: 39:2b:1f:bb:e1:55:60:91:10:50:27:4b:89:7a:a1: 4d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:90:14:39:1D:6C:91:E5:63:95:7A:01:D4:36:E7:BE:D7:F0:4C:E9 X509v3 Authority Key Identifier: keyid:F5:23:2E:E8:05:F7:8E:59:2E:FF:2C:CA:61:53:91:09:E5:A3:46:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9SMu6AX3jlku_yzKYVORCeWjRn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f0fd3d-c0fe-4c5d-b4d1-7db53c657c29/1/9SMu6AX3jlku_yzKYVORCeWjRn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e5:e7:6f:d5:62:ca:ce:db:be:ba:4a:c3:b8:71:d8:a9:01: e8:17:3e:e6:45:51:18:4f:b9:0d:e6:96:0e:b9:79:ca:41:3b: 6b:b5:ef:95:6e:63:6b:76:1d:a9:cc:16:56:51:eb:d6:15:76: c7:1a:fa:9b:cb:68:8b:56:9c:ae:23:77:95:0f:54:5c:a8:fd: b7:9f:dc:db:39:f7:b4:ea:7f:3f:de:4e:ac:1c:68:c5:64:f5: e8:e7:ce:08:5f:d6:85:c9:99:fb:f7:09:bf:12:0e:fe:b7:a0: bf:84:02:16:1b:f7:2f:ae:e7:50:5b:c1:d0:cb:ee:e1:cb:87: 04:d9:10:98:70:6c:e6:bd:f9:9d:e7:b6:d5:58:50:ce:35:af: c1:bb:7a:80:ec:2b:0f:b8:2c:8f:bd:76:fa:45:d5:61:6c:16: 82:c8:c9:c4:75:df:b8:4f:3f:fd:b5:c9:74:d0:b4:1d:9d:ab: c7:38:76:c1:4f:26:ec:9e:dd:c0:10:57:23:11:78:4d:41:1f: af:8b:97:02:46:b0:34:ec:ac:28:e9:3f:f4:1b:19:91:a3:1b: 88:a9:c3:d2:0a:bb:45:f3:21:b4:61:5c:6c:38:a1:9d:de:6b: 56:27:24:36:9e:24:dc:23:bb:09:0a:a6:6f:0c:92:c2:34:1c: 56:b0:ba:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0adS+t0FdT7lFZxZE+q/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MjMyZWU4MDVmNzhlNTkyZWZmMmNjYTYxNTM5MTA5ZTVh MzQ2N2QwHhcNMjUxMjA2MDQwMDQwWhcNMjUxMjA3MDQwMDQwWjAzMTEwLwYDVQQD Eyg4NTkwMTQzOTFkNmM5MWU1NjM5NTdhMDFkNDM2ZTdiZWQ3ZjA0Y2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8594IRFxR/d1AGzIRJjEerAQTXtG UdZHl2Pibww6TO8nR1Lriq+u5ayiVEq1VUrEbABh7wslQYM56oFtqDXG/7vi+ble duWjRsFjUKWefTteHVZeQlgNgoOmaCVKM6x4koXyXVzmPHA1mrZe4rWqZBAnMjAQ QBavE4vw6vYQRiBbzYgTiZrnsxs46EcNtT5AyVH4UmMqmAm76fQloulfzZRX5ZQq xe2l9glxJOo7OvMrJ4WaxFcAs9uBVQ4gvzVfOfvYOGXRtUa8VW4Ur31dI3Ex5nRQ KxVphYhjKpBdJJMUz8HcbuwiFh2I0YOYgyc5Kx+74VVgkRBQJ0uJeqFNxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWQFDkdbJHlY5V6AdQ2577X8EzpMB8GA1UdIwQY MBaAFPUjLugF945ZLv8symFTkQnlo0Z9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVNNdTZBWDNqbGt1X3l6S1lWT1JDZVdqUm4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mMGZkM2QtYzBmZS00YzVkLWI0ZDEt N2RiNTNjNjU3YzI5LzEvOVNNdTZBWDNqbGt1X3l6S1lWT1JDZVdqUm4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9mMGZkM2QtYzBmZS00YzVkLWI0ZDEtN2RiNTNjNjU3YzI5 LzEvOVNNdTZBWDNqbGt1X3l6S1lWT1JDZVdqUm4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjuXnb9Vi ys7bvrpKw7hx2KkB6Bc+5kVRGE+5DeaWDrl5ykE7a7XvlW5ja3YdqcwWVlHr1hV2 xxr6m8toi1acriN3lQ9UXKj9t5/c2zn3tOp/P95OrBxoxWT16OfOCF/WhcmZ+/cJ vxIO/regv4QCFhv3L67nUFvB0Mvu4cuHBNkQmHBs5r35nee21VhQzjWvwbt6gOwr D7gsj712+kXVYWwWgsjJxHXfuE8//bXJdNC0HZ2rxzh2wU8m7J7dwBBXIxF4TUEf r4uXAkawNOysKOk/9BsZkaMbiKnD0gq7RfMhtGFcbDihnd5rVickNp4k3CO7CQqm bwySwjQcVrC6lA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:22:31 2025 by rpki-client