This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft File: 9WFTxQuIFb0o37sA4j5vJjIDFy4.mft (raw, json) Hash identifier: WLTFujSofOKZecgCGPEXxFBPNU6dtg7U/mJg16lVNSY= Subject key identifier: 48:4A:77:05:C5:5A:95:B6:59:E1:0B:46:D3:B0:15:FE:3B:5E:1B:AE Authority key identifier: F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E Certificate issuer: /CN=f56153c50b8815bd28dfbb00e23e6f263203172e Certificate serial: 019AF20987D9B252B4DA5C7BE3F3F1F1936A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft Manifest number: 0C44 Signing time: Sat 06 Dec 2025 05:01:42 +0000 Manifest this update: Sat 06 Dec 2025 05:01:42 +0000 Manifest next update: Sun 07 Dec 2025 05:01:42 +0000 Files and hashes: 1: 9WFTxQuIFb0o37sA4j5vJjIDFy4.crl (hash: O6NMZm0Iad/f7Tg3ymxb+Jqtnf0L//9B/SThXR6R/L4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:87:d9:b2:52:b4:da:5c:7b:e3:f3:f1:f1:93:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f56153c50b8815bd28dfbb00e23e6f263203172e Validity Not Before: Dec 6 05:01:42 2025 GMT Not After : Dec 7 05:01:42 2025 GMT Subject: CN=484a7705c55a95b659e10b46d3b015fe3b5e1bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ad:18:2c:be:f6:00:fa:46:e6:22:2f:c9:68: 29:fd:8e:d3:db:82:1c:d8:f6:f6:04:fa:02:a5:b1: 09:16:3b:99:7d:5c:38:fe:a9:22:17:cf:fd:44:aa: 8c:3f:fa:d3:71:3e:64:95:81:9a:32:00:d9:75:23: 97:a7:79:71:ac:75:39:ea:65:14:12:d8:13:26:a9: 51:50:1d:77:4d:44:ba:95:bf:78:03:53:ab:22:16: 18:59:b1:2c:ce:42:f2:c3:ba:24:19:1e:be:93:e6: c3:5c:ca:2e:39:76:95:d7:97:82:69:de:11:b9:15: 03:7a:1b:9d:ae:83:f0:c7:46:57:99:cf:05:a3:90: 1a:95:85:54:f9:2c:6a:61:c6:42:af:2d:72:1d:a7: 48:90:43:ea:8d:b8:3a:17:f1:f6:e1:1e:c6:2a:4b: af:84:89:da:92:1a:6f:a4:62:7c:e2:7d:e0:97:78: fb:de:b1:13:c8:74:01:d7:b5:ad:ba:f9:34:d8:1d: c1:61:1a:9a:87:97:61:f9:69:27:b6:bb:9d:1f:0d: 58:ea:54:3d:85:12:4a:ac:b0:d7:54:81:93:b6:69: c3:61:77:57:fa:8f:c6:0f:ef:4d:ac:9c:ba:c7:05: 6d:79:89:b9:b8:65:3b:8f:eb:0b:5d:29:0d:b1:75: 1d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4A:77:05:C5:5A:95:B6:59:E1:0B:46:D3:B0:15:FE:3B:5E:1B:AE X509v3 Authority Key Identifier: keyid:F5:61:53:C5:0B:88:15:BD:28:DF:BB:00:E2:3E:6F:26:32:03:17:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WFTxQuIFb0o37sA4j5vJjIDFy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/606aca-377f-4fe9-b27e-8c726291d86c/1/9WFTxQuIFb0o37sA4j5vJjIDFy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:37:4e:84:a4:fb:70:88:fc:97:bc:e8:2a:30:c1:3f:3f:36: 02:1a:ee:32:a5:65:f2:d8:8a:b6:b0:31:e0:24:04:11:9e:43: 7b:b3:60:13:da:60:b9:3a:fe:f5:7d:d9:7f:4f:42:6f:0a:68: dd:9e:50:f7:d1:2d:c1:41:a0:84:f5:cd:97:35:f6:dd:1c:78: 9e:e0:26:f9:04:3f:8a:06:7d:66:f4:b6:64:c8:43:8e:07:62: 6b:50:c3:ea:a8:91:6c:e3:ae:70:a8:4c:a8:08:7f:75:ac:a2: 26:e2:22:a0:ba:fe:b9:08:f8:12:fd:52:69:1e:d3:b8:9a:25: 71:ce:13:3b:b8:35:10:d2:41:66:53:96:ad:80:d8:65:74:3f: 87:83:1f:70:ca:15:33:3b:bc:3e:5d:55:e3:fa:55:21:47:08: 01:b5:e6:e3:6a:5d:6c:b7:7c:4c:f9:ee:24:1e:da:d0:36:e7: 65:d4:a6:0b:12:12:ec:00:f3:57:9f:4b:0a:7c:8e:96:a5:54: 2b:7b:55:fb:cc:3a:19:d4:dd:fd:6e:45:c2:e1:b1:95:40:e4: ca:ed:59:a9:7e:0a:f1:68:1d:19:cc:90:d9:bd:00:ae:40:cd: 82:40:6f:9a:ca:c4:9a:e4:3f:18:c7:a6:5f:8c:fe:27:d7:27: d2:7e:2a:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYfZslK02lx74/Px8ZNqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NjE1M2M1MGI4ODE1YmQyOGRmYmIwMGUyM2U2ZjI2MzIw MzE3MmUwHhcNMjUxMjA2MDUwMTQyWhcNMjUxMjA3MDUwMTQyWjAzMTEwLwYDVQQD Eyg0ODRhNzcwNWM1NWE5NWI2NTllMTBiNDZkM2IwMTVmZTNiNWUxYmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx60YLL72APpG5iIvyWgp/Y7T24Ic 2Pb2BPoCpbEJFjuZfVw4/qkiF8/9RKqMP/rTcT5klYGaMgDZdSOXp3lxrHU56mUU EtgTJqlRUB13TUS6lb94A1OrIhYYWbEszkLyw7okGR6+k+bDXMouOXaV15eCad4R uRUDehudroPwx0ZXmc8Fo5AalYVU+SxqYcZCry1yHadIkEPqjbg6F/H24R7GKkuv hInakhpvpGJ84n3gl3j73rETyHQB17Wtuvk02B3BYRqah5dh+WkntrudHw1Y6lQ9 hRJKrLDXVIGTtmnDYXdX+o/GD+9NrJy6xwVteYm5uGU7j+sLXSkNsXUdcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhKdwXFWpW2WeELRtOwFf47XhuuMB8GA1UdIwQY MBaAFPVhU8ULiBW9KN+7AOI+byYyAxcuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVdGVHhRdUlGYjBvMzdzQTRqNXZKaklERnk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82MDZhY2EtMzc3Zi00ZmU5LWIyN2Ut OGM3MjYyOTFkODZjLzEvOVdGVHhRdUlGYjBvMzdzQTRqNXZKaklERnk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy82MDZhY2EtMzc3Zi00ZmU5LWIyN2UtOGM3MjYyOTFkODZj LzEvOVdGVHhRdUlGYjBvMzdzQTRqNXZKaklERnk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAczdOhKT7 cIj8l7zoKjDBPz82AhruMqVl8tiKtrAx4CQEEZ5De7NgE9pguTr+9X3Zf09Cbwpo 3Z5Q99EtwUGghPXNlzX23Rx4nuAm+QQ/igZ9ZvS2ZMhDjgdia1DD6qiRbOOucKhM qAh/dayiJuIioLr+uQj4Ev1SaR7TuJolcc4TO7g1ENJBZlOWrYDYZXQ/h4MfcMoV Mzu8Pl1V4/pVIUcIAbXm42pdbLd8TPnuJB7a0DbnZdSmCxIS7ADzV59LCnyOlqVU K3tV+8w6GdTd/W5FwuGxlUDkyu1ZqX4K8WgdGcyQ2b0ArkDNgkBvmsrEmuQ/GMem X4z+J9cn0n4qlw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:50 2025 by rpki-client