This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.mft File: V9mi-itxfqefxbJ5LV9VvW7qKQY.mft (raw, json) Hash identifier: 7Z98+4iXVnottBVQe61N+AJZRD8iypTpT3qhaNnyF48= Subject key identifier: 65:09:89:04:9C:3F:83:D7:6C:D9:61:68:40:29:B4:43:68:21:C5:D9 Authority key identifier: 57:D9:A2:FA:2B:71:7E:A7:9F:C5:B2:79:2D:5F:55:BD:6E:EA:29:06 Certificate issuer: /CN=57d9a2fa2b717ea79fc5b2792d5f55bd6eea2906 Certificate serial: 019AF464DBA39A8FBF521160AEAB6BBA1300 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9mi-itxfqefxbJ5LV9VvW7qKQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.mft Manifest number: 0609 Signing time: Sat 06 Dec 2025 16:00:41 +0000 Manifest this update: Sat 06 Dec 2025 16:00:41 +0000 Manifest next update: Sun 07 Dec 2025 16:00:41 +0000 Files and hashes: 1: V9mi-itxfqefxbJ5LV9VvW7qKQY.crl (hash: Ex4XjugNhmhPL73Fhp4u3DnG304burTLDcedLAb6FRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.mft rsync://rpki.ripe.net/repository/DEFAULT/V9mi-itxfqefxbJ5LV9VvW7qKQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:db:a3:9a:8f:bf:52:11:60:ae:ab:6b:ba:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57d9a2fa2b717ea79fc5b2792d5f55bd6eea2906 Validity Not Before: Dec 6 16:00:41 2025 GMT Not After : Dec 7 16:00:41 2025 GMT Subject: CN=650989049c3f83d76cd961684029b4436821c5d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:97:a0:ec:da:9b:fd:32:3a:e7:0a:3b:ec:6c: 0f:53:50:da:ed:4f:d7:2a:92:e7:b9:28:8b:6b:9f: 25:29:06:08:02:5e:4a:bc:40:7d:68:e9:ce:a9:c8: 56:51:13:43:5b:42:f7:b0:40:06:b3:8b:92:8c:8b: 13:cd:4a:12:dd:7d:61:48:18:78:a0:2d:4e:7a:6d: be:b7:e5:bb:b4:85:25:43:81:83:e9:68:26:41:c5: a7:8f:ef:bb:c5:32:d4:51:b7:84:03:2e:bf:3e:32: d4:ed:f9:e9:32:dd:10:75:ed:81:09:f2:8d:a4:b3: d5:d0:e3:d4:8d:34:a5:74:61:91:72:a9:39:3b:1e: dc:fb:8f:61:65:c8:0a:8e:fc:dc:1a:5e:65:a4:53: c4:a5:15:45:9e:12:4f:80:68:06:9e:18:96:f0:6f: 42:2c:86:e9:04:85:fa:40:fa:d0:8f:eb:bc:64:e6: a5:31:32:d7:fa:39:de:4a:eb:1f:00:6e:f7:b0:12: 5b:35:29:e7:1e:86:6a:65:27:94:ac:8f:75:53:4f: 7e:8e:50:90:6d:3f:5f:7e:57:aa:1f:ed:58:73:fc: f7:ae:23:01:9c:ec:12:2e:01:24:dd:78:93:36:2b: 41:87:06:72:7b:2e:9f:c3:4a:fd:a5:3d:94:4d:de: cf:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:09:89:04:9C:3F:83:D7:6C:D9:61:68:40:29:B4:43:68:21:C5:D9 X509v3 Authority Key Identifier: keyid:57:D9:A2:FA:2B:71:7E:A7:9F:C5:B2:79:2D:5F:55:BD:6E:EA:29:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9mi-itxfqefxbJ5LV9VvW7qKQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7e6962-73ae-49fd-bb93-c81003eeb3bd/1/V9mi-itxfqefxbJ5LV9VvW7qKQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:65:b0:b4:50:42:8c:52:80:9e:d7:3b:bd:6b:ec:e1:76:73: b3:6e:bf:23:39:8f:81:33:04:f0:a4:83:21:56:58:3f:c5:1b: 85:32:f8:ae:4d:1c:e1:eb:78:ea:11:da:c2:d1:f0:86:4c:0a: ec:14:5c:bf:d8:53:c4:40:73:e4:91:0f:ca:16:fd:d1:3d:85: 2f:b6:b9:38:96:2d:57:06:aa:2a:3c:b8:d9:4d:62:31:ab:02: 25:50:f6:d5:8c:9e:bf:45:68:63:5d:b5:46:a3:e1:d1:f5:81: b5:71:41:e0:a6:e1:6c:18:a2:84:66:58:c4:d7:2b:bb:8a:ee: 61:44:37:bd:73:e1:a7:6a:2d:3b:c2:04:49:11:c2:24:05:db: e7:a2:57:8f:6a:bc:c5:ff:0f:e1:c8:77:a0:66:f1:50:1a:c8: d9:9c:75:40:ca:dc:71:c4:28:62:f6:d7:ec:51:04:33:e4:61: 07:99:3d:f8:c6:ee:f9:b5:01:f5:cb:85:dd:b2:a3:92:af:cb: b8:93:6b:75:a1:8e:b9:9b:e1:a1:3e:96:14:bd:f6:25:c4:b3: eb:e6:ee:3d:45:44:99:fe:ae:0d:6d:cb:49:39:ed:aa:eb:69: 03:8a:16:4a:2a:9d:f6:15:38:78:e9:83:50:7c:eb:e1:73:dd: c3:30:e2:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZNujmo+/UhFgrqtruhMAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3ZDlhMmZhMmI3MTdlYTc5ZmM1YjI3OTJkNWY1NWJkNmVl YTI5MDYwHhcNMjUxMjA2MTYwMDQxWhcNMjUxMjA3MTYwMDQxWjAzMTEwLwYDVQQD Eyg2NTA5ODkwNDljM2Y4M2Q3NmNkOTYxNjg0MDI5YjQ0MzY4MjFjNWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5eg7Nqb/TI65wo77GwPU1Da7U/X KpLnuSiLa58lKQYIAl5KvEB9aOnOqchWURNDW0L3sEAGs4uSjIsTzUoS3X1hSBh4 oC1Oem2+t+W7tIUlQ4GD6WgmQcWnj++7xTLUUbeEAy6/PjLU7fnpMt0Qde2BCfKN pLPV0OPUjTSldGGRcqk5Ox7c+49hZcgKjvzcGl5lpFPEpRVFnhJPgGgGnhiW8G9C LIbpBIX6QPrQj+u8ZOalMTLX+jneSusfAG73sBJbNSnnHoZqZSeUrI91U09+jlCQ bT9ffleqH+1Yc/z3riMBnOwSLgEk3XiTNitBhwZyey6fw0r9pT2UTd7PJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUJiQScP4PXbNlhaEAptENoIcXZMB8GA1UdIwQY MBaAFFfZovorcX6nn8WyeS1fVb1u6ikGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjltaS1pdHhmcWVmeGJKNUxWOVZ2VzdxS1FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC83ZTY5NjItNzNhZS00OWZkLWJiOTMt YzgxMDAzZWViM2JkLzEvVjltaS1pdHhmcWVmeGJKNUxWOVZ2VzdxS1FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC83ZTY5NjItNzNhZS00OWZkLWJiOTMtYzgxMDAzZWViM2Jk LzEvVjltaS1pdHhmcWVmeGJKNUxWOVZ2VzdxS1FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJmWwtFBC jFKAntc7vWvs4XZzs26/IzmPgTME8KSDIVZYP8UbhTL4rk0c4et46hHawtHwhkwK 7BRcv9hTxEBz5JEPyhb90T2FL7a5OJYtVwaqKjy42U1iMasCJVD21Yyev0VoY121 RqPh0fWBtXFB4KbhbBiihGZYxNcru4ruYUQ3vXPhp2otO8IESRHCJAXb56JXj2q8 xf8P4ch3oGbxUBrI2Zx1QMrcccQoYvbX7FEEM+RhB5k9+Mbu+bUB9cuF3bKjkq/L uJNrdaGOuZvhoT6WFL32JcSz6+buPUVEmf6uDW3LSTntqutpA4oWSiqd9hU4eOmD UHzr4XPdwzDihQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:06:49 2025 by rpki-client