This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft File: 9bdVrRo8ekUCu8PqNMdba85hyUw.mft (raw, json) Hash identifier: OI00muTRVypTLBCI+lvxiaoONZDUa5aSf89Bx3lljmU= Subject key identifier: 35:A1:41:E2:20:7D:3F:A1:18:ED:6F:30:20:5E:6A:FE:7A:64:E2:C1 Authority key identifier: F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C Certificate issuer: /CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c Certificate serial: 019AF209A014EF0047147C875A0136BE0B85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 05:01:48 +0000 Manifest this update: Sat 06 Dec 2025 05:01:48 +0000 Manifest next update: Sun 07 Dec 2025 05:01:48 +0000 Files and hashes: 1: 9bdVrRo8ekUCu8PqNMdba85hyUw.crl (hash: 4ZwX3AkmJBJS9O3BIS7c3z1m508jURCT+49v/L41Dhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:a0:14:ef:00:47:14:7c:87:5a:01:36:be:0b:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5b755ad1a3c7a4502bbc3ea34c75b6bce61c94c Validity Not Before: Dec 6 05:01:48 2025 GMT Not After : Dec 7 05:01:48 2025 GMT Subject: CN=35a141e2207d3fa118ed6f30205e6afe7a64e2c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d7:a7:63:69:a1:ca:92:b1:0b:7d:fe:df:ea: d4:d4:7a:92:4f:85:ad:ea:54:66:45:1a:a6:0c:4e: f5:b6:81:fe:af:a6:3f:d9:af:8e:19:e0:80:81:e5: bf:03:e3:ee:1b:1f:e5:16:58:c6:db:73:b0:bd:5d: 44:bc:92:60:ff:01:25:8b:fd:4a:aa:67:4a:e3:e6: 0b:18:3e:97:96:6f:86:84:da:d1:58:df:26:95:34: 8e:85:65:98:15:b1:29:d2:4e:af:a6:a3:9a:d1:b5: 59:ff:e3:bb:01:d3:1a:13:0a:62:3d:c8:6b:06:31: 9e:a3:01:34:7e:8e:44:5e:bc:7c:55:11:a6:ed:c5: 34:55:0f:67:07:f7:4d:4e:a6:ca:4d:f6:48:8b:89: a7:83:f0:64:0e:69:f6:50:90:38:a8:39:65:07:1c: b6:c4:bf:92:48:b1:3f:c4:13:be:62:96:8f:05:e8: a6:b7:6a:0c:5f:b4:ab:25:4e:90:5e:a5:d0:3e:35: df:52:91:68:ee:af:95:0b:00:c7:37:c8:86:2e:55: 1b:22:25:7a:b7:64:7c:8b:df:98:45:d0:d7:a1:cc: c7:a5:12:06:0a:a4:59:47:79:54:be:e3:b6:55:ce: 2c:5a:8a:d2:17:b0:21:f9:c0:45:63:31:0b:02:b1: b8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:A1:41:E2:20:7D:3F:A1:18:ED:6F:30:20:5E:6A:FE:7A:64:E2:C1 X509v3 Authority Key Identifier: keyid:F5:B7:55:AD:1A:3C:7A:45:02:BB:C3:EA:34:C7:5B:6B:CE:61:C9:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bdVrRo8ekUCu8PqNMdba85hyUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b64964-b675-4e53-8ef8-0bbde884e812/1/9bdVrRo8ekUCu8PqNMdba85hyUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:ca:79:87:c5:fc:3d:e9:97:10:85:85:2e:5a:96:17:03:6b: 7e:e9:98:45:90:a1:05:40:12:49:04:a3:ca:09:71:14:2e:57: 57:44:08:d0:3c:53:8f:2b:65:39:0c:95:92:ed:1d:e1:a9:84: fc:03:3e:83:ac:b6:65:c3:c2:7c:d0:7f:9b:51:65:ae:80:22: a6:1e:53:af:5a:92:13:c8:7a:59:f3:62:dd:19:73:8d:fa:c1: e9:62:af:ba:e1:63:86:3f:7b:ac:fd:43:d5:1f:4b:82:18:34: fc:73:9c:f5:a3:6e:c7:21:45:9e:82:ec:82:92:24:7d:88:9b: 01:32:89:4d:38:4c:16:fe:e7:ea:7a:1d:7b:09:e5:b0:6c:1f: a5:a8:84:38:33:a5:9f:13:cc:eb:b4:4d:7a:68:31:00:85:18: a5:2d:2f:cb:6c:d1:48:5a:72:4d:95:45:46:68:dc:9d:87:dc: 1a:52:60:76:5d:b8:21:6c:64:32:34:79:9c:d1:33:20:fb:58: c4:f6:7d:6e:83:00:1a:ac:04:96:ca:24:b7:90:c4:c2:18:31: c7:dc:ff:22:19:13:0a:7d:e2:fa:ee:a9:87:7d:f1:94:fb:fd: 12:f0:26:c1:06:e1:44:58:0f:64:85:6d:6e:d2:84:ff:da:0b: 3f:12:32:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCaAU7wBHFHyHWgE2vguFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1Yjc1NWFkMWEzYzdhNDUwMmJiYzNlYTM0Yzc1YjZiY2U2 MWM5NGMwHhcNMjUxMjA2MDUwMTQ4WhcNMjUxMjA3MDUwMTQ4WjAzMTEwLwYDVQQD EygzNWExNDFlMjIwN2QzZmExMThlZDZmMzAyMDVlNmFmZTdhNjRlMmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59enY2mhypKxC33+3+rU1HqST4Wt 6lRmRRqmDE71toH+r6Y/2a+OGeCAgeW/A+PuGx/lFljG23OwvV1EvJJg/wEli/1K qmdK4+YLGD6Xlm+GhNrRWN8mlTSOhWWYFbEp0k6vpqOa0bVZ/+O7AdMaEwpiPchr BjGeowE0fo5EXrx8VRGm7cU0VQ9nB/dNTqbKTfZIi4mng/BkDmn2UJA4qDllBxy2 xL+SSLE/xBO+YpaPBeimt2oMX7SrJU6QXqXQPjXfUpFo7q+VCwDHN8iGLlUbIiV6 t2R8i9+YRdDXoczHpRIGCqRZR3lUvuO2Vc4sWorSF7Ah+cBFYzELArG4tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWhQeIgfT+hGO1vMCBeav56ZOLBMB8GA1UdIwQY MBaAFPW3Va0aPHpFArvD6jTHW2vOYclMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWJkVnJSbzhla1VDdThQcU5NZGJhODVoeVV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9iNjQ5NjQtYjY3NS00ZTUzLThlZjgt MGJiZGU4ODRlODEyLzEvOWJkVnJSbzhla1VDdThQcU5NZGJhODVoeVV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9iNjQ5NjQtYjY3NS00ZTUzLThlZjgtMGJiZGU4ODRlODEy LzEvOWJkVnJSbzhla1VDdThQcU5NZGJhODVoeVV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAsp5h8X8 PemXEIWFLlqWFwNrfumYRZChBUASSQSjyglxFC5XV0QI0DxTjytlOQyVku0d4amE /AM+g6y2ZcPCfNB/m1FlroAiph5Tr1qSE8h6WfNi3RlzjfrB6WKvuuFjhj97rP1D 1R9Lghg0/HOc9aNuxyFFnoLsgpIkfYibATKJTThMFv7n6nodewnlsGwfpaiEODOl nxPM67RNemgxAIUYpS0vy2zRSFpyTZVFRmjcnYfcGlJgdl24IWxkMjR5nNEzIPtY xPZ9boMAGqwElsokt5DEwhgxx9z/IhkTCn3i+u6ph33xlPv9EvAmwQbhRFgPZIVt btKE/9oLPxIy1g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:44 2025 by rpki-client