This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft File: 9Csush9rBnIU3PrbKQJT2nF9YuM.mft (raw, json) Hash identifier: TF+PxpHaCvYWI8Q/bJ8Kj+v07Fc0u9siU81Uu1r5E+Q= Subject key identifier: 2C:87:BD:5F:02:2F:0E:9A:54:AD:9C:C6:51:30:0D:EB:01:77:A4:41 Authority key identifier: F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3 Certificate issuer: /CN=f42b2eb21f6b067214dcfadb290253da717d62e3 Certificate serial: 019AF0BF00B64D864027F187BC33E00BF6D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft Manifest number: 1760 Signing time: Fri 05 Dec 2025 23:00:40 +0000 Manifest this update: Fri 05 Dec 2025 23:00:40 +0000 Manifest next update: Sat 06 Dec 2025 23:00:40 +0000 Files and hashes: 1: 9Csush9rBnIU3PrbKQJT2nF9YuM.crl (hash: 2WE7pgPkzucpoVj70IHmJ06NEWa0zonrDTivRQ1TLqE=) 2: pauhzMvpgkVgNc366YpahktJW_E.roa (hash: CXLZhXqRNNwNQ9k+Lw14xdWMjm1xkv/Bk4H8O3Arf58=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:00:b6:4d:86:40:27:f1:87:bc:33:e0:0b:f6:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f42b2eb21f6b067214dcfadb290253da717d62e3 Validity Not Before: Dec 5 23:00:40 2025 GMT Not After : Dec 6 23:00:40 2025 GMT Subject: CN=2c87bd5f022f0e9a54ad9cc651300deb0177a441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a0:98:b3:0c:0d:01:3b:5b:47:89:8a:0b:4b: 9f:35:0d:63:5e:3b:ed:e8:cd:fb:02:de:88:9e:4f: 98:61:c9:47:33:64:9f:8b:b8:de:d7:15:bd:7b:02: eb:00:43:bd:50:f2:ea:31:97:14:1e:15:f5:3b:bb: db:2a:d4:d3:28:b3:94:f0:4c:aa:cd:95:a4:cf:5f: 30:db:3b:3b:98:0b:de:58:58:aa:09:ab:c0:9c:ab: 2d:e5:09:84:46:af:e4:ef:04:0d:e8:2f:52:3f:d2: bf:0b:71:4a:8a:77:91:45:98:7f:04:41:e9:96:71: 70:6b:e9:e7:c5:80:55:61:fb:80:5f:85:df:d9:3c: e6:20:1f:52:1c:91:14:25:67:e0:ac:85:aa:5e:87: 94:49:c1:83:c0:28:8b:84:eb:42:a2:c7:17:73:a9: f8:4e:b3:1d:1d:ff:8f:8d:50:45:ff:03:60:4e:b9: 8f:b9:06:57:c1:d5:ab:cb:eb:58:4e:d7:8f:2e:1f: 11:35:2d:9b:1d:6e:20:a1:b3:c7:cb:e9:89:0d:e7: 19:ff:d9:ca:9c:39:78:74:0d:83:1b:de:35:c2:a4: dc:49:67:a0:14:44:45:11:05:72:30:b1:f6:ef:d6: 8c:9c:cc:1f:9f:ea:0c:a0:7b:09:5c:89:27:ee:e7: 2f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:87:BD:5F:02:2F:0E:9A:54:AD:9C:C6:51:30:0D:EB:01:77:A4:41 X509v3 Authority Key Identifier: keyid:F4:2B:2E:B2:1F:6B:06:72:14:DC:FA:DB:29:02:53:DA:71:7D:62:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Csush9rBnIU3PrbKQJT2nF9YuM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/472888-f170-4666-85bd-183356530177/1/9Csush9rBnIU3PrbKQJT2nF9YuM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:8f:f8:36:65:d2:bf:85:fe:17:27:2f:35:6f:cf:6d:f8:6c: ef:e2:8b:61:40:80:9f:32:54:65:26:d6:26:35:80:be:14:05: 02:67:d5:21:47:59:fe:2d:07:1f:17:81:b6:43:a9:b6:51:f5: cd:e4:22:c5:c2:e0:20:54:57:09:94:b5:79:f3:03:62:2c:5a: 7a:45:a3:fd:f7:4b:01:bf:66:82:7f:a6:17:e4:f1:87:6a:96: b4:31:7f:5e:47:85:b0:ab:02:52:92:b0:c6:f2:c0:0f:84:fb: 34:2b:96:e4:d8:10:cd:04:36:be:08:50:c6:fc:ba:ea:60:8c: 24:ed:e9:d8:ce:72:2f:b2:6a:78:67:6b:b9:06:1b:40:41:81: f6:06:22:49:f2:59:ae:7d:2e:88:83:cd:c4:ed:79:1c:dc:4f: 04:19:9f:4c:10:9a:5d:53:a0:93:06:3f:38:0b:59:ab:ab:6c: 5f:31:13:75:f1:e3:cd:9b:d9:b4:fe:31:6e:a5:7a:4e:d5:42: 5e:d2:19:bb:d9:56:95:5b:df:b0:b7:94:54:06:24:c7:ef:0b: 5c:4f:55:f6:30:3f:e5:37:ac:38:36:b7:36:82:20:b6:49:c7: a9:04:92:74:ea:1b:26:53:5e:91:12:a5:ad:a7:67:e2:cb:5c: 4a:00:16:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvwC2TYZAJ/GHvDPgC/bYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0MmIyZWIyMWY2YjA2NzIxNGRjZmFkYjI5MDI1M2RhNzE3 ZDYyZTMwHhcNMjUxMjA1MjMwMDQwWhcNMjUxMjA2MjMwMDQwWjAzMTEwLwYDVQQD EygyYzg3YmQ1ZjAyMmYwZTlhNTRhZDljYzY1MTMwMGRlYjAxNzdhNDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aCYswwNATtbR4mKC0ufNQ1jXjvt 6M37At6Ink+YYclHM2Sfi7je1xW9ewLrAEO9UPLqMZcUHhX1O7vbKtTTKLOU8Eyq zZWkz18w2zs7mAveWFiqCavAnKst5QmERq/k7wQN6C9SP9K/C3FKineRRZh/BEHp lnFwa+nnxYBVYfuAX4Xf2TzmIB9SHJEUJWfgrIWqXoeUScGDwCiLhOtCoscXc6n4 TrMdHf+PjVBF/wNgTrmPuQZXwdWry+tYTtePLh8RNS2bHW4gobPHy+mJDecZ/9nK nDl4dA2DG941wqTcSWegFERFEQVyMLH279aMnMwfn+oMoHsJXIkn7ucvEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyHvV8CLw6aVK2cxlEwDesBd6RBMB8GA1UdIwQY MBaAFPQrLrIfawZyFNz62ykCU9pxfWLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUNzdXNoOXJCbklVM1ByYktRSlQybkY5WXVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80NzI4ODgtZjE3MC00NjY2LTg1YmQt MTgzMzU2NTMwMTc3LzEvOUNzdXNoOXJCbklVM1ByYktRSlQybkY5WXVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS80NzI4ODgtZjE3MC00NjY2LTg1YmQtMTgzMzU2NTMwMTc3 LzEvOUNzdXNoOXJCbklVM1ByYktRSlQybkY5WXVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATo/4NmXS v4X+FycvNW/Pbfhs7+KLYUCAnzJUZSbWJjWAvhQFAmfVIUdZ/i0HHxeBtkOptlH1 zeQixcLgIFRXCZS1efMDYixaekWj/fdLAb9mgn+mF+Txh2qWtDF/XkeFsKsCUpKw xvLAD4T7NCuW5NgQzQQ2vghQxvy66mCMJO3p2M5yL7JqeGdruQYbQEGB9gYiSfJZ rn0uiIPNxO15HNxPBBmfTBCaXVOgkwY/OAtZq6tsXzETdfHjzZvZtP4xbqV6TtVC XtIZu9lWlVvfsLeUVAYkx+8LXE9V9jA/5TesODa3NoIgtknHqQSSdOobJlNekRKl radn4stcSgAW3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:31:09 2025 by rpki-client