This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft File: ct9pdDDLtXxJoKGZMCTW0yn35WU.mft (raw, json) Hash identifier: RO/XY7K7TdLgFem55oEJMxCCOpaJ9hQyKoHeUmMdilI= Subject key identifier: 61:27:67:1E:A6:66:5E:2C:4E:A0:2F:95:85:91:CC:5A:08:01:8F:69 Authority key identifier: 72:DF:69:74:30:CB:B5:7C:49:A0:A1:99:30:24:D6:D3:29:F7:E5:65 Certificate issuer: /CN=72df697430cbb57c49a0a1993024d6d329f7e565 Certificate serial: 019AF16458F8756825D7A0B4E0576921E5A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft Manifest number: 120D Signing time: Sat 06 Dec 2025 02:01:16 +0000 Manifest this update: Sat 06 Dec 2025 02:01:16 +0000 Manifest next update: Sun 07 Dec 2025 02:01:16 +0000 Files and hashes: 1: ct9pdDDLtXxJoKGZMCTW0yn35WU.crl (hash: n78rMTDMuJ+cN4c00LOtifEytUxgIRk+iaRKacoumEU=) 2: hcuixNDtZTOahJr2Izkq1PkvB30.roa (hash: 0Y98rWR7z+ovo4LddJHUN4JqVyjOhGekgLOw4fEG1XU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:58:f8:75:68:25:d7:a0:b4:e0:57:69:21:e5:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72df697430cbb57c49a0a1993024d6d329f7e565 Validity Not Before: Dec 6 02:01:16 2025 GMT Not After : Dec 7 02:01:16 2025 GMT Subject: CN=6127671ea6665e2c4ea02f958591cc5a08018f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2b:b6:08:6b:c8:43:a6:27:98:b4:41:8e:dc: bf:e4:a5:45:19:98:12:8d:9c:d3:ef:b7:88:1a:10: d6:e1:88:51:69:e8:44:f3:24:9b:37:e1:d0:9a:51: 81:1e:f2:7c:dd:3d:ed:9c:03:c9:a1:44:19:a1:e9: 1f:fb:a2:1c:9d:f4:12:5a:db:00:64:df:89:29:7c: 5f:dc:d7:06:80:3a:c2:f9:26:ce:46:71:b2:29:02: c8:e6:63:ec:71:63:a5:77:16:1e:96:ec:1a:c6:3a: 4b:03:bc:29:9e:2f:ca:4c:7d:3d:ff:96:a6:c3:0a: 41:f6:16:01:68:ba:a2:84:df:32:48:9a:01:0a:52: de:1f:8f:72:38:1c:22:01:c0:12:01:07:2a:63:fb: 2f:29:ed:e8:94:9f:7f:00:1e:9f:e5:2e:20:82:19: 31:68:46:3f:76:d6:25:42:29:18:1c:91:17:2b:60: 0d:1a:2c:29:9f:bf:ec:b1:f6:1b:7b:25:ed:2e:45: 32:54:f5:24:18:09:9a:e1:9f:e8:43:cc:07:ee:81: 38:12:4a:69:3c:95:a1:d5:49:e7:05:ee:8a:d1:31: 45:33:7a:ac:d2:46:7c:97:c4:a4:bd:21:f5:dc:62: 4d:f5:ef:ba:ab:5d:13:b2:f3:d0:12:b7:16:70:f3: f0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:27:67:1E:A6:66:5E:2C:4E:A0:2F:95:85:91:CC:5A:08:01:8F:69 X509v3 Authority Key Identifier: keyid:72:DF:69:74:30:CB:B5:7C:49:A0:A1:99:30:24:D6:D3:29:F7:E5:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e4:e8:91:e7:45:d3:c8:a9:ec:5a:b7:be:e2:e8:73:94:b2: e6:0e:3b:ed:83:dc:fc:2e:68:4f:bb:45:d7:97:f2:84:ca:19: 0a:b4:31:dd:18:1d:1b:73:b2:83:70:18:9d:4a:9f:d0:ce:56: 84:1e:23:13:b9:59:1b:55:1e:c7:da:5e:14:32:cd:40:41:6a: 31:90:36:3c:29:bb:d2:97:58:98:eb:32:76:f6:cf:85:43:93: 7c:9d:ea:b6:79:36:b0:56:b9:d9:c5:5e:b6:d6:f4:ca:17:2d: ad:9c:7f:fa:a9:ce:5d:e0:c9:d7:bc:8c:7f:77:1b:db:a4:dc: 7b:e3:df:48:1b:0e:1f:80:51:d9:10:f3:83:66:b8:f2:ac:42: b4:bc:6d:a9:f1:28:ea:54:50:02:14:d8:ad:e0:83:d8:0e:e3: 6e:94:c2:cf:e8:e2:35:11:03:77:ce:e5:55:4d:fe:df:7e:e8: 4f:f3:28:a3:66:63:f7:f1:ca:2d:2d:1b:f3:43:bc:02:88:5a: c1:95:39:3d:98:b9:e7:d0:ec:9e:77:16:7a:1f:c1:9f:ac:80: 9e:fa:bc:fd:63:ce:6a:31:34:34:b7:c6:7b:30:d9:59:75:8d: 40:80:66:0f:b6:18:bd:87:d5:68:e2:45:49:15:47:de:93:ae: 30:7b:f8:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFj4dWgl16C04FdpIeWpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZGY2OTc0MzBjYmI1N2M0OWEwYTE5OTMwMjRkNmQzMjlm N2U1NjUwHhcNMjUxMjA2MDIwMTE2WhcNMjUxMjA3MDIwMTE2WjAzMTEwLwYDVQQD Eyg2MTI3NjcxZWE2NjY1ZTJjNGVhMDJmOTU4NTkxY2M1YTA4MDE4ZjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliu2CGvIQ6YnmLRBjty/5KVFGZgS jZzT77eIGhDW4YhRaehE8ySbN+HQmlGBHvJ83T3tnAPJoUQZoekf+6IcnfQSWtsA ZN+JKXxf3NcGgDrC+SbORnGyKQLI5mPscWOldxYeluwaxjpLA7wpni/KTH09/5am wwpB9hYBaLqihN8ySJoBClLeH49yOBwiAcASAQcqY/svKe3olJ9/AB6f5S4gghkx aEY/dtYlQikYHJEXK2ANGiwpn7/ssfYbeyXtLkUyVPUkGAma4Z/oQ8wH7oE4Ekpp PJWh1UnnBe6K0TFFM3qs0kZ8l8SkvSH13GJN9e+6q10TsvPQErcWcPPwuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGEnZx6mZl4sTqAvlYWRzFoIAY9pMB8GA1UdIwQY MBaAFHLfaXQwy7V8SaChmTAk1tMp9+VlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3Q5cGREREx0WHhKb0tHWk1DVFcweW4zNVdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9mODE2ZDYtMDE2YS00MTM1LTk5ZTMt OGM0MmJiMjIzMWFiLzEvY3Q5cGREREx0WHhKb0tHWk1DVFcweW4zNVdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9mODE2ZDYtMDE2YS00MTM1LTk5ZTMtOGM0MmJiMjIzMWFi LzEvY3Q5cGREREx0WHhKb0tHWk1DVFcweW4zNVdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGuTokedF 08ip7Fq3vuLoc5Sy5g477YPc/C5oT7tF15fyhMoZCrQx3RgdG3Oyg3AYnUqf0M5W hB4jE7lZG1Uex9peFDLNQEFqMZA2PCm70pdYmOsydvbPhUOTfJ3qtnk2sFa52cVe ttb0yhctrZx/+qnOXeDJ17yMf3cb26Tce+PfSBsOH4BR2RDzg2a48qxCtLxtqfEo 6lRQAhTYreCD2A7jbpTCz+jiNREDd87lVU3+337oT/Moo2Zj9/HKLS0b80O8Aoha wZU5PZi559DsnncWeh/Bn6yAnvq8/WPOajE0NLfGezDZWXWNQIBmD7YYvYfVaOJF SRVH3pOuMHv4tA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:17 2025 by rpki-client