This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft File: 9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft (raw, json) Hash identifier: PE1EjG3DzlMu4BF8+yLRBe1VTNqIJX/8EEpIi6gs1mo= Subject key identifier: 59:69:30:E2:A3:1B:0E:7C:FA:C7:C6:B6:37:88:BD:53:8C:65:4D:EA Authority key identifier: F6:B5:4E:15:71:4C:23:F3:5F:DC:F5:A3:16:C6:B9:9A:35:41:05:88 Certificate issuer: /CN=f6b54e15714c23f35fdcf5a316c6b99a35410588 Certificate serial: 019AF276963B3E4D97AED90473CCD5E4F37D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft Manifest number: 120D Signing time: Sat 06 Dec 2025 07:00:49 +0000 Manifest this update: Sat 06 Dec 2025 07:00:49 +0000 Manifest next update: Sun 07 Dec 2025 07:00:49 +0000 Files and hashes: 1: 5VpJh85q40wiF3tIcwBqbUYfHXs.roa (hash: FZq736wENvopOQrubygsWoOWFmhs6QXxNgIM0epTpuM=) 2: 9rVOFXFMI_Nf3PWjFsa5mjVBBYg.crl (hash: Gg578KST8X8vIxHd/ZuoDEQiuNICHtgI9DLZy+jo2i0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.crl rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft rsync://rpki.ripe.net/repository/DEFAULT/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:96:3b:3e:4d:97:ae:d9:04:73:cc:d5:e4:f3:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6b54e15714c23f35fdcf5a316c6b99a35410588 Validity Not Before: Dec 6 07:00:49 2025 GMT Not After : Dec 7 07:00:49 2025 GMT Subject: CN=596930e2a31b0e7cfac7c6b63788bd538c654dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:83:da:c1:03:94:8f:3a:48:aa:18:4a:6d:1b: ab:c4:9e:29:12:2b:fe:4b:f0:c5:e1:dc:2a:22:b5: f5:2b:1d:f9:cb:77:14:e0:a6:4a:25:71:9a:ed:78: 36:a1:e1:fd:65:3a:ff:7d:83:c2:b2:a4:52:23:a2: 54:a0:0e:b5:e6:9d:b9:7b:e6:88:a7:00:19:34:23: 47:3a:12:0c:53:7f:90:df:98:3b:76:9a:5a:67:40: 57:20:4a:46:7e:92:73:f6:a3:f5:61:66:98:22:bc: 75:95:48:eb:09:7f:bc:79:0f:c8:89:fd:c6:8e:03: 6e:0c:f3:f2:1d:c4:7c:e2:b2:cb:63:7f:45:80:1b: a0:a4:ab:a5:12:be:bd:28:01:74:57:07:3e:57:6d: b3:ad:24:54:a9:bf:6c:ee:17:b5:ff:f0:69:81:36: a0:71:c0:c5:e7:cd:fe:db:7f:69:68:38:32:69:d8: bc:1c:d1:00:58:50:83:99:67:2f:70:eb:89:82:43: a9:4f:c1:16:ca:d6:fe:34:4e:97:4b:89:dd:2a:71: 5a:f2:80:ac:84:a9:42:d2:e3:6a:b7:1a:9a:3b:5f: 49:e5:4f:b1:0e:e4:25:59:1d:52:64:26:a2:46:bf: 69:05:33:43:bb:c2:60:ea:0e:60:bc:73:b6:c4:fd: 90:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:69:30:E2:A3:1B:0E:7C:FA:C7:C6:B6:37:88:BD:53:8C:65:4D:EA X509v3 Authority Key Identifier: keyid:F6:B5:4E:15:71:4C:23:F3:5F:DC:F5:A3:16:C6:B9:9A:35:41:05:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/097278-eab6-41f7-82ac-a078c6ccbe6b/1/9rVOFXFMI_Nf3PWjFsa5mjVBBYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:67:90:6c:69:8f:50:9c:76:34:9a:dc:b6:42:46:19:42:38: a1:c7:a7:34:59:31:44:a8:4a:8f:98:f2:df:64:ec:40:c8:27: 56:0d:ec:1e:95:5a:f3:5e:ee:f0:0d:7b:d4:1f:10:35:71:c6: f5:de:fa:e2:8e:48:cb:2a:ca:84:1c:97:4f:35:04:c2:a1:6d: cc:ce:d0:b9:1b:e9:72:05:c6:50:39:41:86:85:9c:08:70:d0: 5e:c3:d6:cc:8a:45:6f:f2:4d:15:68:f1:92:8c:52:75:84:5c: ef:ac:be:c5:15:2b:d0:d0:02:29:49:d8:e6:93:cc:c5:d7:ce: 24:14:eb:d9:b2:7d:f1:87:4b:bd:97:b7:2d:26:fd:91:3f:0c: 06:fa:0a:fd:28:9d:a4:c8:6a:6a:6f:04:12:21:58:fc:02:f3: 5f:0d:e3:bb:ba:7f:86:7b:1c:fe:26:3b:c0:02:bb:fa:b0:c9: e7:65:6b:01:82:02:5b:ee:d6:c1:f8:90:ce:10:e0:5c:fb:fe: 7d:c9:12:d0:fa:cf:b1:ad:c9:fe:79:a2:39:8d:90:72:4a:e7: 22:25:a4:0d:74:55:8f:0b:70:5f:6c:6b:5c:d4:ed:64:58:85: c5:cc:68:41:17:ce:3b:87:03:6b:3c:ef:12:5a:e7:0d:86:1b: c3:7d:6d:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydpY7Pk2XrtkEc8zV5PN9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YjU0ZTE1NzE0YzIzZjM1ZmRjZjVhMzE2YzZiOTlhMzU0 MTA1ODgwHhcNMjUxMjA2MDcwMDQ5WhcNMjUxMjA3MDcwMDQ5WjAzMTEwLwYDVQQD Eyg1OTY5MzBlMmEzMWIwZTdjZmFjN2M2YjYzNzg4YmQ1MzhjNjU0ZGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4PawQOUjzpIqhhKbRurxJ4pEiv+ S/DF4dwqIrX1Kx35y3cU4KZKJXGa7Xg2oeH9ZTr/fYPCsqRSI6JUoA615p25e+aI pwAZNCNHOhIMU3+Q35g7dppaZ0BXIEpGfpJz9qP1YWaYIrx1lUjrCX+8eQ/Iif3G jgNuDPPyHcR84rLLY39FgBugpKulEr69KAF0Vwc+V22zrSRUqb9s7he1//BpgTag ccDF583+239paDgyadi8HNEAWFCDmWcvcOuJgkOpT8EWytb+NE6XS4ndKnFa8oCs hKlC0uNqtxqaO19J5U+xDuQlWR1SZCaiRr9pBTNDu8Jg6g5gvHO2xP2QWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFlpMOKjGw58+sfGtjeIvVOMZU3qMB8GA1UdIwQY MBaAFPa1ThVxTCPzX9z1oxbGuZo1QQWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXJWT0ZYRk1JX05mM1BXakZzYTVtalZCQllnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8wOTcyNzgtZWFiNi00MWY3LTgyYWMt YTA3OGM2Y2NiZTZiLzEvOXJWT0ZYRk1JX05mM1BXakZzYTVtalZCQllnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8wOTcyNzgtZWFiNi00MWY3LTgyYWMtYTA3OGM2Y2NiZTZi LzEvOXJWT0ZYRk1JX05mM1BXakZzYTVtalZCQllnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWeQbGmP UJx2NJrctkJGGUI4ocenNFkxRKhKj5jy32TsQMgnVg3sHpVa817u8A171B8QNXHG 9d764o5IyyrKhByXTzUEwqFtzM7QuRvpcgXGUDlBhoWcCHDQXsPWzIpFb/JNFWjx koxSdYRc76y+xRUr0NACKUnY5pPMxdfOJBTr2bJ98YdLvZe3LSb9kT8MBvoK/Sid pMhqam8EEiFY/ALzXw3ju7p/hnsc/iY7wAK7+rDJ52VrAYICW+7WwfiQzhDgXPv+ fckS0PrPsa3J/nmiOY2QckrnIiWkDXRVjwtwX2xrXNTtZFiFxcxoQRfOO4cDazzv ElrnDYYbw31tiA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:21 2025 by rpki-client