This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft File: S91CzNE9f4p8PtpbVQLY1ty7vhE.mft (raw, json) Hash identifier: +HrRivZrlqP91wz6d93oLMOGoq7+PBKdchnAJfREUhM= Subject key identifier: C8:6B:FD:AC:5F:9A:11:83:1B:B7:14:6C:11:0B:63:A2:1E:50:4D:1A Authority key identifier: 4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11 Certificate issuer: /CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11 Certificate serial: 019AF50A1384887D1760DC32DB72CEF61619 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft Manifest number: 0D10 Signing time: Sat 06 Dec 2025 19:01:09 +0000 Manifest this update: Sat 06 Dec 2025 19:01:09 +0000 Manifest next update: Sun 07 Dec 2025 19:01:09 +0000 Files and hashes: 1: S91CzNE9f4p8PtpbVQLY1ty7vhE.crl (hash: RDG2HKDoRdEeyFxNp/O+yCeMyNYa6MV9w4lPvGwAe1c=) 2: oa49XCli4BnhzjMFZt__xzBFHcY.roa (hash: tJwIQtT+Kk475hshkks2qpfV9lu0TNlB3mE3lLaKnow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:13:84:88:7d:17:60:dc:32:db:72:ce:f6:16:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bdd42ccd13d7f8a7c3eda5b5502d8d6dcbbbe11 Validity Not Before: Dec 6 19:01:09 2025 GMT Not After : Dec 7 19:01:09 2025 GMT Subject: CN=c86bfdac5f9a11831bb7146c110b63a21e504d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b1:aa:bb:6d:a8:bf:33:b3:cd:eb:fd:24:82: 93:12:6b:9b:55:92:22:86:83:6b:3c:07:ae:34:55: a5:6b:10:db:dd:6c:bc:49:a4:61:c2:3b:9d:d1:24: 07:55:4c:5c:58:ea:29:c8:7a:6b:ac:7e:bd:72:dc: 5c:74:fb:cb:5e:e9:2a:22:e1:48:b6:9d:65:ae:b0: 72:50:44:18:1e:01:86:8f:1e:1a:9d:41:b9:56:d2: 30:08:bf:c3:a8:fe:4e:21:66:7f:87:24:fd:98:93: 84:47:3f:10:af:69:eb:21:84:1c:b2:c5:72:41:69: 6b:f5:05:fe:91:f1:50:3e:08:86:7b:5f:ab:a4:39: e7:41:f6:b7:1e:2e:94:92:49:db:84:37:53:8a:be: 30:d7:46:6f:ff:55:80:eb:dc:d4:e7:d3:c9:95:bf: 8a:cd:6c:52:81:66:33:52:8f:d5:02:74:24:15:a2: 04:8b:85:a3:68:24:dd:0b:d7:81:13:f4:3e:ae:46: 12:14:88:21:a8:36:a1:fc:2a:d3:af:c4:1d:21:2e: 3d:db:34:0a:82:b3:bd:52:c2:4d:66:43:f6:e1:40: 2f:24:fd:64:18:f6:6f:8c:d8:b0:43:3b:d7:17:2b: 90:65:f0:1a:71:e0:87:f5:aa:ef:df:0e:5a:61:77: b0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:6B:FD:AC:5F:9A:11:83:1B:B7:14:6C:11:0B:63:A2:1E:50:4D:1A X509v3 Authority Key Identifier: keyid:4B:DD:42:CC:D1:3D:7F:8A:7C:3E:DA:5B:55:02:D8:D6:DC:BB:BE:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S91CzNE9f4p8PtpbVQLY1ty7vhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/fc8e22-9a3b-4646-babe-1ca2120ee436/1/S91CzNE9f4p8PtpbVQLY1ty7vhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:16:6a:ee:63:ba:aa:d1:a6:7e:c1:06:ea:47:12:4d:eb:98: cb:c6:5b:7d:6c:8e:8c:d8:e9:e2:06:a5:92:3a:55:65:55:aa: fe:43:62:fb:28:90:6e:79:db:b7:80:c0:92:0b:c5:e5:cb:06: 4a:74:14:97:03:75:e2:c0:8f:a5:49:12:59:e0:6b:3a:45:a1: 92:35:c7:41:2b:0e:e4:0e:09:58:d1:3c:9d:92:d8:19:43:42: 83:07:c5:57:40:05:de:69:0a:78:79:0b:1f:6e:72:fa:c0:40: 2a:3e:70:74:9c:f0:72:09:f3:27:e0:ca:76:ac:e0:57:f3:94: bf:f0:0a:24:64:ec:43:ce:fb:42:fd:7b:73:5b:74:12:fa:2c: a3:d1:8d:96:04:8f:92:e9:38:09:0a:96:20:d7:7e:69:81:af: 8d:bb:f9:9c:76:76:75:dc:96:6e:f1:7a:05:9b:b4:8d:f3:8f: d7:be:b9:d7:6f:91:b5:d7:cf:63:27:84:46:ce:2d:c3:a4:2d: 2e:84:cd:c6:61:8c:c6:26:bf:b0:8a:d8:6b:c0:82:fc:68:cf: 9c:7e:36:2a:4b:94:0e:0e:1d:e9:f8:96:70:05:e3:e4:54:bd: e3:f4:b4:eb:1c:58:0b:31:e4:65:7c:e3:03:19:d2:52:cf:24: 94:52:f0:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ChOEiH0XYNwy23LO9hYZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZGQ0MmNjZDEzZDdmOGE3YzNlZGE1YjU1MDJkOGQ2ZGNi YmJlMTEwHhcNMjUxMjA2MTkwMTA5WhcNMjUxMjA3MTkwMTA5WjAzMTEwLwYDVQQD EyhjODZiZmRhYzVmOWExMTgzMWJiNzE0NmMxMTBiNjNhMjFlNTA0ZDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07Gqu22ovzOzzev9JIKTEmubVZIi hoNrPAeuNFWlaxDb3Wy8SaRhwjud0SQHVUxcWOopyHprrH69ctxcdPvLXukqIuFI tp1lrrByUEQYHgGGjx4anUG5VtIwCL/DqP5OIWZ/hyT9mJOERz8Qr2nrIYQcssVy QWlr9QX+kfFQPgiGe1+rpDnnQfa3Hi6UkknbhDdTir4w10Zv/1WA69zU59PJlb+K zWxSgWYzUo/VAnQkFaIEi4WjaCTdC9eBE/Q+rkYSFIghqDah/CrTr8QdIS492zQK grO9UsJNZkP24UAvJP1kGPZvjNiwQzvXFyuQZfAaceCH9arv3w5aYXewHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhr/axfmhGDG7cUbBELY6IeUE0aMB8GA1UdIwQY MBaAFEvdQszRPX+KfD7aW1UC2Nbcu74RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzkxQ3pORTlmNHA4UHRwYlZRTFkxdHk3dmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mYzhlMjItOWEzYi00NjQ2LWJhYmUt MWNhMjEyMGVlNDM2LzEvUzkxQ3pORTlmNHA4UHRwYlZRTFkxdHk3dmhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9mYzhlMjItOWEzYi00NjQ2LWJhYmUtMWNhMjEyMGVlNDM2 LzEvUzkxQ3pORTlmNHA4UHRwYlZRTFkxdHk3dmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAExZq7mO6 qtGmfsEG6kcSTeuYy8ZbfWyOjNjp4galkjpVZVWq/kNi+yiQbnnbt4DAkgvF5csG SnQUlwN14sCPpUkSWeBrOkWhkjXHQSsO5A4JWNE8nZLYGUNCgwfFV0AF3mkKeHkL H25y+sBAKj5wdJzwcgnzJ+DKdqzgV/OUv/AKJGTsQ877Qv17c1t0Evoso9GNlgSP kuk4CQqWINd+aYGvjbv5nHZ2ddyWbvF6BZu0jfOP176512+RtdfPYyeERs4tw6Qt LoTNxmGMxia/sIrYa8CC/GjPnH42KkuUDg4d6fiWcAXj5FS94/S06xxYCzHkZXzj AxnSUs8klFLwfg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:45:24 2025 by rpki-client