This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft File: 9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft (raw, json) Hash identifier: c3Xt8H4ggTCguTn6fmlOFScrhB92tzLv8ArrpnytnFw= Subject key identifier: 24:47:45:22:DF:7E:BF:9A:49:1D:5E:F8:27:29:88:CA:DB:DE:63:87 Authority key identifier: F6:6C:6A:3F:A3:17:0C:25:16:E1:1E:E9:10:4F:ED:32:69:99:7D:D6 Certificate issuer: /CN=f66c6a3fa3170c2516e11ee9104fed3269997dd6 Certificate serial: 019AF3895B4FCDFFD0A7DFC978535383BC4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9mxqP6MXDCUW4R7pEE_tMmmZfdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft Manifest number: 0E19 Signing time: Sat 06 Dec 2025 12:00:56 +0000 Manifest this update: Sat 06 Dec 2025 12:00:56 +0000 Manifest next update: Sun 07 Dec 2025 12:00:56 +0000 Files and hashes: 1: 9mxqP6MXDCUW4R7pEE_tMmmZfdY.crl (hash: Ri/5Ztc6sEf6R+qxFLfIuRp/lnwkDNHJCwv5GIO+wzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.crl rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft rsync://rpki.ripe.net/repository/DEFAULT/9mxqP6MXDCUW4R7pEE_tMmmZfdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:5b:4f:cd:ff:d0:a7:df:c9:78:53:53:83:bc:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f66c6a3fa3170c2516e11ee9104fed3269997dd6 Validity Not Before: Dec 6 12:00:56 2025 GMT Not After : Dec 7 12:00:56 2025 GMT Subject: CN=24474522df7ebf9a491d5ef8272988cadbde6387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6e:5f:52:a1:99:38:8e:eb:49:43:6b:45:1f: 73:ef:2e:ee:bc:f6:ed:62:61:1c:e4:aa:2b:c2:54: 1c:47:ed:e9:df:0e:81:44:61:02:d1:a6:cd:15:4e: af:e3:95:a4:de:c5:45:2a:53:82:08:59:c1:7d:92: 1f:96:6d:65:48:44:be:50:62:8a:e1:7f:5a:d5:5e: 2b:0b:d5:5e:18:05:43:53:58:09:0f:da:90:89:12: d4:74:9f:cb:ae:1f:38:80:55:a4:f6:01:4f:96:e9: f4:7f:e6:5f:46:5a:2c:cb:9f:b2:6d:e8:ec:e9:fb: 68:70:83:c2:bc:6e:9c:2f:f9:cc:c1:12:0f:e8:0a: 81:89:07:26:2a:6d:0c:f5:6a:04:20:1a:7a:2b:c2: e2:5f:54:57:6b:cd:1f:92:e5:17:6a:3b:58:61:18: 6a:bd:5b:e5:6e:6a:ed:20:63:b6:a8:0e:20:27:80: 78:f3:aa:33:e3:12:92:79:92:57:d5:cb:0a:e7:ff: a7:eb:91:48:30:00:d7:80:11:ff:5c:d1:4b:b9:3a: 4f:e2:0e:8e:e2:0c:68:42:73:15:6f:13:d7:f7:96: 77:dd:b3:df:88:ac:0a:71:2b:9d:09:25:54:77:8d: 63:42:0a:5b:23:c6:e3:6d:01:d2:b0:61:62:27:a7: b8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:47:45:22:DF:7E:BF:9A:49:1D:5E:F8:27:29:88:CA:DB:DE:63:87 X509v3 Authority Key Identifier: keyid:F6:6C:6A:3F:A3:17:0C:25:16:E1:1E:E9:10:4F:ED:32:69:99:7D:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9mxqP6MXDCUW4R7pEE_tMmmZfdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/63ca08-b92c-4b4c-b82b-6e76c78a9c63/1/9mxqP6MXDCUW4R7pEE_tMmmZfdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a9:29:c7:c1:56:0a:20:8d:20:6f:22:e4:98:39:13:06:48: 52:3a:a9:3e:57:8a:d7:65:ab:e5:11:38:41:d1:96:a2:0c:3c: 3e:5f:06:82:6e:5f:3a:ad:81:99:23:14:f9:1c:05:da:17:f1: a7:13:77:08:54:87:5d:30:e2:29:01:02:20:38:04:d1:6b:3f: 9d:23:15:c0:ae:6c:f9:00:be:8a:0d:cb:2b:0f:50:7d:60:49: 8b:52:d8:74:7e:b1:96:b6:14:af:87:5f:48:3a:0f:bb:96:79: 89:5b:2f:81:b7:0a:8e:10:6b:fc:25:45:ed:dc:53:34:b8:fb: 1a:70:1a:c8:eb:74:d7:95:b0:e9:3f:fb:61:28:39:16:1f:91: d1:0e:55:c3:49:07:ff:a2:f3:8c:27:bf:0b:d0:e1:0f:8a:4d: 34:3a:b7:a8:35:89:3b:87:4d:fd:d2:23:f9:12:07:c7:b4:d4: 1d:cc:08:65:df:dc:9a:36:6b:cb:ae:16:14:1f:d4:7b:95:72: c0:08:24:4c:2f:c4:0e:bc:e3:8a:48:63:49:1f:7e:9b:fb:78: 16:0a:2e:b7:f9:3d:33:83:3b:87:4f:fc:a7:4c:60:87:6c:16: 51:a4:4d:e4:75:16:b4:5a:2f:60:e4:d2:9d:2b:c9:53:1c:7e: 21:2e:49:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziVtPzf/Qp9/JeFNTg7xPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NmM2YTNmYTMxNzBjMjUxNmUxMWVlOTEwNGZlZDMyNjk5 OTdkZDYwHhcNMjUxMjA2MTIwMDU2WhcNMjUxMjA3MTIwMDU2WjAzMTEwLwYDVQQD EygyNDQ3NDUyMmRmN2ViZjlhNDkxZDVlZjgyNzI5ODhjYWRiZGU2Mzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj25fUqGZOI7rSUNrRR9z7y7uvPbt YmEc5KorwlQcR+3p3w6BRGEC0abNFU6v45Wk3sVFKlOCCFnBfZIflm1lSES+UGKK 4X9a1V4rC9VeGAVDU1gJD9qQiRLUdJ/Lrh84gFWk9gFPlun0f+ZfRlosy5+ybejs 6ftocIPCvG6cL/nMwRIP6AqBiQcmKm0M9WoEIBp6K8LiX1RXa80fkuUXajtYYRhq vVvlbmrtIGO2qA4gJ4B486oz4xKSeZJX1csK5/+n65FIMADXgBH/XNFLuTpP4g6O 4gxoQnMVbxPX95Z33bPfiKwKcSudCSVUd41jQgpbI8bjbQHSsGFiJ6e42wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRHRSLffr+aSR1e+CcpiMrb3mOHMB8GA1UdIwQY MBaAFPZsaj+jFwwlFuEe6RBP7TJpmX3WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW14cVA2TVhEQ1VXNFI3cEVFX3RNbW1aZmRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni82M2NhMDgtYjkyYy00YjRjLWI4MmIt NmU3NmM3OGE5YzYzLzEvOW14cVA2TVhEQ1VXNFI3cEVFX3RNbW1aZmRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni82M2NhMDgtYjkyYy00YjRjLWI4MmItNmU3NmM3OGE5YzYz LzEvOW14cVA2TVhEQ1VXNFI3cEVFX3RNbW1aZmRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbqkpx8FW CiCNIG8i5Jg5EwZIUjqpPleK12Wr5RE4QdGWogw8Pl8Ggm5fOq2BmSMU+RwF2hfx pxN3CFSHXTDiKQECIDgE0Ws/nSMVwK5s+QC+ig3LKw9QfWBJi1LYdH6xlrYUr4df SDoPu5Z5iVsvgbcKjhBr/CVF7dxTNLj7GnAayOt015Ww6T/7YSg5Fh+R0Q5Vw0kH /6LzjCe/C9DhD4pNNDq3qDWJO4dN/dIj+RIHx7TUHcwIZd/cmjZry64WFB/Ue5Vy wAgkTC/EDrzjikhjSR9+m/t4Fgout/k9M4M7h0/8p0xgh2wWUaRN5HUWtFovYOTS nSvJUxx+IS5J1A== -----END CERTIFICATE-----Generated at Sat Dec 6 15:00:17 2025 by rpki-client