This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft File: 9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft (raw, json) Hash identifier: mU8px4AzmPYS2KXXTRDWLDksTm7EI5aB3m73174gagg= Subject key identifier: 36:54:37:5B:EA:AB:82:DB:FA:28:96:46:0B:CF:3F:19:BD:BF:18:D7 Authority key identifier: F6:09:32:C7:B8:94:51:9D:34:62:47:30:2E:B3:65:F5:C4:09:B0:3C Certificate issuer: /CN=f60932c7b894519d346247302eb365f5c409b03c Certificate serial: 019AF54068A03B0E0252808BC69F952CB2DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gkyx7iUUZ00YkcwLrNl9cQJsDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft Manifest number: 9F Signing time: Sat 06 Dec 2025 20:00:30 +0000 Manifest this update: Sat 06 Dec 2025 20:00:30 +0000 Manifest next update: Sun 07 Dec 2025 20:00:30 +0000 Files and hashes: 1: 9gkyx7iUUZ00YkcwLrNl9cQJsDw.crl (hash: i/OLLi8ZAtQDbc1ygCGADh6t3rnZ2nlvrA4XykeIZ1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft rsync://rpki.ripe.net/repository/DEFAULT/9gkyx7iUUZ00YkcwLrNl9cQJsDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:68:a0:3b:0e:02:52:80:8b:c6:9f:95:2c:b2:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60932c7b894519d346247302eb365f5c409b03c Validity Not Before: Dec 6 20:00:30 2025 GMT Not After : Dec 7 20:00:30 2025 GMT Subject: CN=3654375beaab82dbfa2896460bcf3f19bdbf18d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7a:79:e8:a2:ee:67:76:76:e5:61:98:7e:26: 9c:20:79:dc:3e:e0:6f:9f:3e:a0:44:c3:3e:63:9a: c9:9d:93:24:a3:1a:16:87:7d:ab:00:4b:17:51:04: 27:b9:c6:f0:e0:a8:d5:ae:9c:46:10:e8:65:a5:d1: 2b:56:6b:79:16:ae:e5:7e:1c:b1:29:1f:f8:a2:11: 71:68:aa:ac:b8:a5:a2:a1:36:3f:07:ea:af:44:55: 6f:41:68:67:01:a7:63:d3:9b:9c:ec:74:5f:6e:a5: 7d:a6:75:db:59:25:96:65:2f:ac:17:0e:82:cf:c7: 6d:06:ea:bb:02:2a:73:02:c8:7c:f0:58:de:e2:10: 4b:1c:25:cf:e1:c0:e3:b6:09:f4:8f:22:6c:76:19: 19:05:26:d6:2a:91:d5:d2:ce:f5:84:fa:bb:36:6e: 74:dd:bc:05:62:a4:d9:ea:31:5e:51:65:a4:31:42: 33:25:9a:f7:4e:8c:c6:a7:cf:9d:c0:e5:86:9b:16: 2a:7e:cd:69:7f:e6:1c:00:91:95:8f:52:5c:5c:d5: cf:d7:9d:0e:cc:0f:bf:e2:7d:ac:98:fb:be:7c:7f: c2:03:3e:8e:98:e7:b9:0f:ad:2c:ec:fd:e5:31:e1: 45:4f:4e:08:89:08:1e:67:6e:f5:c8:4e:44:33:c9: ee:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:54:37:5B:EA:AB:82:DB:FA:28:96:46:0B:CF:3F:19:BD:BF:18:D7 X509v3 Authority Key Identifier: keyid:F6:09:32:C7:B8:94:51:9D:34:62:47:30:2E:B3:65:F5:C4:09:B0:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkyx7iUUZ00YkcwLrNl9cQJsDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:0c:4f:ff:36:9b:41:84:d5:49:4a:22:89:c0:6d:e0:e7:0e: 0b:da:e8:18:60:59:67:de:b3:62:e9:b2:e0:38:a1:c4:c6:2a: 0f:98:90:bd:78:54:08:90:60:f0:d7:af:13:99:01:94:3d:73: 91:45:c3:2f:25:5d:7e:b9:be:c4:77:0f:f7:e1:89:12:e5:a4: b2:74:00:f1:2b:b8:81:1e:34:1a:33:d2:0d:60:6c:1b:18:af: 93:4a:5a:c4:b4:87:39:67:1a:59:b4:99:53:b6:40:4c:5d:45: 50:cd:ea:01:dc:de:00:3f:e3:12:a0:c9:3e:0f:e1:48:f8:ed: 46:51:63:a0:d5:ed:cc:46:47:f9:63:f9:15:04:2b:df:a0:0e: 8c:cf:25:73:ce:94:ed:83:b9:ab:5e:11:54:86:a2:fc:54:34: bf:2b:3e:21:12:7a:a3:f3:63:a2:89:4b:18:a8:a5:45:ce:2e: 02:11:eb:87:d5:28:0b:03:c2:14:9d:96:97:22:a9:bc:e0:b1: 16:60:6e:25:f4:3b:f2:09:dc:f9:ba:40:e3:4b:12:b9:33:36: e5:bb:e3:b6:30:b3:63:3c:a9:34:52:b2:13:47:5c:63:ed:23: c8:fe:12:67:6d:8c:8d:5c:53:62:e9:2e:ad:2c:27:9f:bf:45: 1e:57:5e:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QGigOw4CUoCLxp+VLLLeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MDkzMmM3Yjg5NDUxOWQzNDYyNDczMDJlYjM2NWY1YzQw OWIwM2MwHhcNMjUxMjA2MjAwMDMwWhcNMjUxMjA3MjAwMDMwWjAzMTEwLwYDVQQD EygzNjU0Mzc1YmVhYWI4MmRiZmEyODk2NDYwYmNmM2YxOWJkYmYxOGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXp56KLuZ3Z25WGYfiacIHncPuBv nz6gRMM+Y5rJnZMkoxoWh32rAEsXUQQnucbw4KjVrpxGEOhlpdErVmt5Fq7lfhyx KR/4ohFxaKqsuKWioTY/B+qvRFVvQWhnAadj05uc7HRfbqV9pnXbWSWWZS+sFw6C z8dtBuq7AipzAsh88Fje4hBLHCXP4cDjtgn0jyJsdhkZBSbWKpHV0s71hPq7Nm50 3bwFYqTZ6jFeUWWkMUIzJZr3TozGp8+dwOWGmxYqfs1pf+YcAJGVj1JcXNXP150O zA+/4n2smPu+fH/CAz6OmOe5D60s7P3lMeFFT04IiQgeZ271yE5EM8nuOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZUN1vqq4Lb+iiWRgvPPxm9vxjXMB8GA1UdIwQY MBaAFPYJMse4lFGdNGJHMC6zZfXECbA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWdreXg3aVVVWjAwWWtjd0xyTmw5Y1FKc0R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS81NzBjY2QtZDJhZC00Y2EzLWFmZWYt YmQ1N2UwZWIyOWYwLzEvOWdreXg3aVVVWjAwWWtjd0xyTmw5Y1FKc0R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS81NzBjY2QtZDJhZC00Y2EzLWFmZWYtYmQ1N2UwZWIyOWYw LzEvOWdreXg3aVVVWjAwWWtjd0xyTmw5Y1FKc0R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAxP/zab QYTVSUoiicBt4OcOC9roGGBZZ96zYumy4DihxMYqD5iQvXhUCJBg8NevE5kBlD1z kUXDLyVdfrm+xHcP9+GJEuWksnQA8Su4gR40GjPSDWBsGxivk0paxLSHOWcaWbSZ U7ZATF1FUM3qAdzeAD/jEqDJPg/hSPjtRlFjoNXtzEZH+WP5FQQr36AOjM8lc86U 7YO5q14RVIai/FQ0vys+IRJ6o/NjoolLGKilRc4uAhHrh9UoCwPCFJ2WlyKpvOCx FmBuJfQ78gnc+bpA40sSuTM25bvjtjCzYzypNFKyE0dcY+0jyP4SZ22MjVxTYuku rSwnn79FHlde8w== -----END CERTIFICATE-----Generated at Sun Dec 7 01:40:48 2025 by rpki-client