This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft File: 9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft (raw, json) Hash identifier: ApNLrOw2VNUFSiTEg2O5bk7pFHRf9fnN1MoF4syIGao= Subject key identifier: EF:CA:11:55:A9:E5:8B:95:06:4C:F4:D9:F3:9E:02:CC:5A:DA:FB:1B Authority key identifier: F5:4B:FB:01:B0:3C:AA:6F:CE:88:7B:43:84:25:3D:B2:0E:59:FA:71 Certificate issuer: /CN=f54bfb01b03caa6fce887b4384253db20e59fa71 Certificate serial: 019AF12E7806ACAAC8FC75A67EFC09BE199B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:02:25 +0000 Manifest this update: Sat 06 Dec 2025 01:02:25 +0000 Manifest next update: Sun 07 Dec 2025 01:02:25 +0000 Files and hashes: 1: 9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.crl (hash: RZj3T6jWpEPq7wjUkjVMryEcAFmzFgToVI2iUVim7To=) 2: V341t6lFU17La723o82yJ0OztQk.roa (hash: 5ZnBvoWyakZy583RsB0+KziGW81oXH+bvf5OC8lpqqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.crl rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft rsync://rpki.ripe.net/repository/DEFAULT/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:78:06:ac:aa:c8:fc:75:a6:7e:fc:09:be:19:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f54bfb01b03caa6fce887b4384253db20e59fa71 Validity Not Before: Dec 6 01:02:25 2025 GMT Not After : Dec 7 01:02:25 2025 GMT Subject: CN=efca1155a9e58b95064cf4d9f39e02cc5adafb1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:42:63:c7:45:af:1a:a3:b6:69:cc:fc:87:6b: 2e:94:ae:72:ce:a6:de:20:1a:cc:da:09:0c:1f:97: 54:3e:93:91:22:4f:e8:52:7c:7f:af:18:b6:bb:18: f0:be:d3:2a:78:a7:0d:b5:8c:43:d1:3d:58:33:0c: 53:7a:d0:65:c8:d1:38:39:67:ec:93:11:80:34:74: cd:d7:3d:4b:0b:8d:48:78:41:c5:fa:0e:c4:05:af: 17:59:b7:84:c5:3c:a7:a8:bc:28:c6:88:ed:99:b1: 03:f2:49:fe:c4:71:bc:27:6e:16:70:45:64:ec:f9: f5:a4:ca:1d:c5:20:6c:5e:f6:67:f6:e8:84:5b:84: 01:c4:2d:17:fc:ac:bf:d5:8c:d8:2b:b5:80:2d:b0: 4f:e7:bc:6f:60:93:f7:de:e6:7d:ce:76:56:58:23: 45:2f:2c:b8:aa:f4:6a:b2:42:ca:0f:8c:5c:76:6c: ce:96:73:a1:e2:b6:5e:cd:01:6a:28:59:24:80:45: 39:48:14:95:a8:cf:44:03:82:05:0e:b9:9a:3c:6c: fb:89:3c:45:84:3d:d8:54:3f:8e:a1:1c:33:40:22: 0e:7d:76:33:74:02:d7:b6:33:ae:66:e1:57:0e:75: 6d:07:99:58:6b:a7:3e:99:58:60:9d:9c:3b:87:8f: 21:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CA:11:55:A9:E5:8B:95:06:4C:F4:D9:F3:9E:02:CC:5A:DA:FB:1B X509v3 Authority Key Identifier: keyid:F5:4B:FB:01:B0:3C:AA:6F:CE:88:7B:43:84:25:3D:B2:0E:59:FA:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e5e689-c58a-4e86-bf8b-ac0598ec342f/1/9Uv7AbA8qm_OiHtDhCU9sg5Z-nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:90:6c:f1:d1:9b:70:80:b1:60:ab:4c:15:f1:a3:53:f4:13: 37:37:3d:6b:da:26:42:35:24:a5:c3:7a:5d:e9:72:11:c5:01: 3d:62:7e:58:3b:b2:ea:ef:05:f5:7a:a4:c5:a7:14:d9:3a:9a: 79:e9:da:d3:71:9f:70:fc:f1:82:95:24:e8:d6:f9:46:7d:4f: f1:5a:ef:93:10:c5:11:f2:12:99:88:91:77:db:6d:37:a4:07: c1:4e:5c:2c:7f:a1:d7:94:64:06:46:a7:1a:f3:d4:9a:7f:25: 50:e1:5b:19:bf:cb:bc:c0:f5:b9:b4:55:f1:e4:df:bf:c4:73: a4:8e:35:61:01:74:4c:03:55:59:ee:7d:1c:25:50:87:34:69: 7e:b8:fd:22:3b:48:7e:1c:d0:4c:eb:9b:71:31:1b:f3:ea:4d: 6b:74:e1:8c:5b:68:f3:77:02:41:8e:30:4b:62:42:2b:c5:04: 7f:6b:98:ab:93:d6:aa:bc:73:32:76:39:3b:ee:1b:f2:a9:a0: 33:39:73:35:b7:98:01:08:6e:71:da:d3:c1:bd:ff:45:ac:95: 56:85:e0:85:e1:d3:ca:78:d4:29:12:89:f4:23:b4:37:29:b5: 40:19:a6:80:dd:83:15:de:33:e9:c6:0a:be:7d:da:ff:3e:24: ff:b0:4c:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLngGrKrI/HWmfvwJvhmbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NGJmYjAxYjAzY2FhNmZjZTg4N2I0Mzg0MjUzZGIyMGU1 OWZhNzEwHhcNMjUxMjA2MDEwMjI1WhcNMjUxMjA3MDEwMjI1WjAzMTEwLwYDVQQD EyhlZmNhMTE1NWE5ZTU4Yjk1MDY0Y2Y0ZDlmMzllMDJjYzVhZGFmYjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokJjx0WvGqO2acz8h2sulK5yzqbe IBrM2gkMH5dUPpORIk/oUnx/rxi2uxjwvtMqeKcNtYxD0T1YMwxTetBlyNE4OWfs kxGANHTN1z1LC41IeEHF+g7EBa8XWbeExTynqLwoxojtmbED8kn+xHG8J24WcEVk 7Pn1pModxSBsXvZn9uiEW4QBxC0X/Ky/1YzYK7WALbBP57xvYJP33uZ9znZWWCNF Lyy4qvRqskLKD4xcdmzOlnOh4rZezQFqKFkkgEU5SBSVqM9EA4IFDrmaPGz7iTxF hD3YVD+OoRwzQCIOfXYzdALXtjOuZuFXDnVtB5lYa6c+mVhgnZw7h48h7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/KEVWp5YuVBkz02fOeAsxa2vsbMB8GA1UdIwQY MBaAFPVL+wGwPKpvzoh7Q4QlPbIOWfpxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVV2N0FiQThxbV9PaUh0RGhDVTlzZzVaLW5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lNWU2ODktYzU4YS00ZTg2LWJmOGIt YWMwNTk4ZWMzNDJmLzEvOVV2N0FiQThxbV9PaUh0RGhDVTlzZzVaLW5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9lNWU2ODktYzU4YS00ZTg2LWJmOGItYWMwNTk4ZWMzNDJm LzEvOVV2N0FiQThxbV9PaUh0RGhDVTlzZzVaLW5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJBs8dGb cICxYKtMFfGjU/QTNzc9a9omQjUkpcN6XelyEcUBPWJ+WDuy6u8F9XqkxacU2Tqa eena03GfcPzxgpUk6Nb5Rn1P8VrvkxDFEfISmYiRd9ttN6QHwU5cLH+h15RkBkan GvPUmn8lUOFbGb/LvMD1ubRV8eTfv8RzpI41YQF0TANVWe59HCVQhzRpfrj9IjtI fhzQTOubcTEb8+pNa3ThjFto83cCQY4wS2JCK8UEf2uYq5PWqrxzMnY5O+4b8qmg MzlzNbeYAQhucdrTwb3/RayVVoXgheHTynjUKRKJ9CO0Nym1QBmmgN2DFd4z6cYK vn3a/z4k/7BMVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:10 2025 by rpki-client