This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft File: 9vwoeVAOHrgIVXBc-ENeA2NRN94.mft (raw, json) Hash identifier: hxmRrz0oB/Y/ef0Z5BJrkxQjKCdph247bGElt5VH6aI= Subject key identifier: A5:16:E0:9B:4A:D4:1A:B8:F2:E4:D8:C1:0B:F4:7F:24:6E:24:1F:1E Authority key identifier: F6:FC:28:79:50:0E:1E:B8:08:55:70:5C:F8:43:5E:03:63:51:37:DE Certificate issuer: /CN=f6fc2879500e1eb80855705cf8435e03635137de Certificate serial: 019AF12DD1ED282B4E21517D6BFACA18A6A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft Manifest number: 07B3 Signing time: Sat 06 Dec 2025 01:01:43 +0000 Manifest this update: Sat 06 Dec 2025 01:01:43 +0000 Manifest next update: Sun 07 Dec 2025 01:01:43 +0000 Files and hashes: 1: 9vwoeVAOHrgIVXBc-ENeA2NRN94.crl (hash: KMVGhrtXqq1k0Cu0dvxUQUuzrlEw90gGxEhasCz9G/M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:d1:ed:28:2b:4e:21:51:7d:6b:fa:ca:18:a6:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6fc2879500e1eb80855705cf8435e03635137de Validity Not Before: Dec 6 01:01:43 2025 GMT Not After : Dec 7 01:01:43 2025 GMT Subject: CN=a516e09b4ad41ab8f2e4d8c10bf47f246e241f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fd:38:e6:d0:aa:ce:69:c1:97:3c:2b:17:4f: 70:44:5d:dc:6c:15:ec:31:00:62:af:28:36:1a:46: bf:be:35:9b:f6:aa:44:9f:97:4c:da:63:d9:41:33: bd:d5:19:b7:bf:69:0a:ad:50:27:50:9d:91:23:10: b3:b1:c1:3b:49:4c:ee:93:d2:27:50:be:0e:58:a2: 2e:c5:07:c5:b4:80:a1:2a:8b:eb:91:32:3b:16:6e: 4f:f3:12:17:e0:16:d2:df:42:bf:27:45:f1:19:97: 31:61:72:14:e3:96:a3:1f:9c:69:09:54:87:ac:12: ac:49:37:d3:72:ac:1a:b5:44:e7:58:1a:41:32:cd: 4e:06:35:c9:a0:bb:f5:bb:82:ac:af:36:bb:0b:14: 0b:70:0a:0d:37:aa:87:0e:fd:51:66:68:f5:01:ff: b9:d9:6a:c9:42:a3:15:9e:97:87:5c:3c:fd:c6:85: 26:c0:01:7c:68:5b:75:b0:1b:b7:d7:c5:d2:45:51: 0d:12:02:b5:94:5b:4a:af:0f:d9:fa:50:b2:1c:7f: 9f:c1:c3:d6:77:9e:a4:ab:df:ee:6a:a1:03:e6:a3: 69:7f:dd:d3:65:1a:56:3b:ef:0f:b7:9d:62:54:10: 5d:44:81:06:82:a5:3c:37:3f:fd:d9:1a:07:83:7a: 6e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:16:E0:9B:4A:D4:1A:B8:F2:E4:D8:C1:0B:F4:7F:24:6E:24:1F:1E X509v3 Authority Key Identifier: keyid:F6:FC:28:79:50:0E:1E:B8:08:55:70:5C:F8:43:5E:03:63:51:37:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vwoeVAOHrgIVXBc-ENeA2NRN94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/eeeba3-b034-43d9-8e43-74472e396e85/1/9vwoeVAOHrgIVXBc-ENeA2NRN94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:fa:01:00:1d:fb:94:4a:06:dc:c5:96:53:c7:98:c5:34:4d: 4e:2a:36:98:b9:82:02:f8:a9:56:b2:b2:7c:c0:b8:9e:f5:0b: da:c6:63:3b:90:e3:de:b0:85:4c:44:6f:4f:1e:78:4f:b6:1a: 14:66:5a:16:50:7d:31:c9:c8:2d:57:18:b7:16:6a:ba:60:75: af:47:4f:f5:5e:b6:e2:8e:5e:85:9a:f7:c8:a5:32:b6:58:86: ba:aa:69:95:f7:e0:08:bb:0e:17:4e:80:36:bb:70:0a:52:a8: 35:77:21:00:41:3e:86:d9:d6:a1:9e:65:5c:6a:d1:eb:f1:9c: 2c:ab:46:d9:c7:fc:eb:f6:4d:49:aa:a1:d8:0d:e3:a3:3d:82: 1e:cc:c1:f5:70:20:24:be:10:0d:c4:ce:57:17:ae:a1:64:0a: 75:1f:30:eb:ec:2c:5a:dc:16:5b:54:d3:04:77:32:25:e6:13: 42:50:2a:9a:3b:88:80:92:ca:68:4f:4d:3f:a3:40:74:bf:c0: a4:99:48:ae:9c:45:64:77:5e:5d:ef:12:7e:17:e6:88:1d:bc: f0:e0:52:38:4b:7c:db:a5:e6:4b:34:19:9f:18:eb:93:80:ef: 03:69:95:52:d8:5e:63:e8:f5:04:18:89:33:7e:23:e2:48:67: 57:c0:4b:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdHtKCtOIVF9a/rKGKalMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ZmMyODc5NTAwZTFlYjgwODU1NzA1Y2Y4NDM1ZTAzNjM1 MTM3ZGUwHhcNMjUxMjA2MDEwMTQzWhcNMjUxMjA3MDEwMTQzWjAzMTEwLwYDVQQD EyhhNTE2ZTA5YjRhZDQxYWI4ZjJlNGQ4YzEwYmY0N2YyNDZlMjQxZjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv045tCqzmnBlzwrF09wRF3cbBXs MQBiryg2Gka/vjWb9qpEn5dM2mPZQTO91Rm3v2kKrVAnUJ2RIxCzscE7SUzuk9In UL4OWKIuxQfFtIChKovrkTI7Fm5P8xIX4BbS30K/J0XxGZcxYXIU45ajH5xpCVSH rBKsSTfTcqwatUTnWBpBMs1OBjXJoLv1u4Ksrza7CxQLcAoNN6qHDv1RZmj1Af+5 2WrJQqMVnpeHXDz9xoUmwAF8aFt1sBu318XSRVENEgK1lFtKrw/Z+lCyHH+fwcPW d56kq9/uaqED5qNpf93TZRpWO+8Pt51iVBBdRIEGgqU8Nz/92RoHg3pueQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUW4JtK1Bq48uTYwQv0fyRuJB8eMB8GA1UdIwQY MBaAFPb8KHlQDh64CFVwXPhDXgNjUTfeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXZ3b2VWQU9IcmdJVlhCYy1FTmVBMk5STjk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9lZWViYTMtYjAzNC00M2Q5LThlNDMt NzQ0NzJlMzk2ZTg1LzEvOXZ3b2VWQU9IcmdJVlhCYy1FTmVBMk5STjk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9lZWViYTMtYjAzNC00M2Q5LThlNDMtNzQ0NzJlMzk2ZTg1 LzEvOXZ3b2VWQU9IcmdJVlhCYy1FTmVBMk5STjk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU/oBAB37 lEoG3MWWU8eYxTRNTio2mLmCAvipVrKyfMC4nvUL2sZjO5Dj3rCFTERvTx54T7Ya FGZaFlB9McnILVcYtxZqumB1r0dP9V624o5ehZr3yKUytliGuqpplffgCLsOF06A NrtwClKoNXchAEE+htnWoZ5lXGrR6/GcLKtG2cf86/ZNSaqh2A3joz2CHszB9XAg JL4QDcTOVxeuoWQKdR8w6+wsWtwWW1TTBHcyJeYTQlAqmjuIgJLKaE9NP6NAdL/A pJlIrpxFZHdeXe8SfhfmiB288OBSOEt826XmSzQZnxjrk4DvA2mVUtheY+j1BBiJ M34j4khnV8BLOA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:56 2025 by rpki-client