This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft File: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft (raw, json) Hash identifier: l1/52mgOT+gsudRQkoGgnd3V7iJAoxZZ/K9KSrQqS98= Subject key identifier: D2:DD:F5:1D:82:03:82:D8:91:32:78:CA:05:8E:24:85:9A:5C:63:31 Authority key identifier: D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C Certificate issuer: /CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c Certificate serial: 019AF50A514A1D755B9D0A5FB8AAC08E55A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 19:01:25 +0000 Manifest this update: Sat 06 Dec 2025 19:01:25 +0000 Manifest next update: Sun 07 Dec 2025 19:01:25 +0000 Files and hashes: 1: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl (hash: Sh4QuLIrtwtsTBxx446GmgYQHkH9VfzPPn2tQtmRR44=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:51:4a:1d:75:5b:9d:0a:5f:b8:aa:c0:8e:55:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c Validity Not Before: Dec 6 19:01:25 2025 GMT Not After : Dec 7 19:01:25 2025 GMT Subject: CN=d2ddf51d820382d8913278ca058e24859a5c6331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3e:f7:7c:67:4b:01:4c:f8:94:68:a4:0a:b2: 2c:4a:10:bf:42:69:01:94:01:62:b5:c5:ab:25:7b: 8d:0d:05:eb:4d:66:aa:52:45:b0:8b:33:8c:7a:79: ab:31:18:56:71:5c:75:8f:d7:69:ee:e1:fa:cd:1c: 9c:84:0b:5f:4b:14:d1:38:7d:ce:1e:92:a4:bc:ae: e7:c6:1c:8d:fd:31:14:12:c2:8b:fa:b6:96:58:ae: 67:32:97:bd:3e:62:c3:89:50:cf:45:66:b9:ea:1a: 90:97:1c:88:c9:a9:4f:a3:16:c4:2c:64:19:d9:d0: f7:88:c6:9a:87:a8:33:c1:3a:2b:5f:53:46:14:73: 9e:83:d5:67:ab:2b:f2:c2:ea:4c:07:19:47:36:08: ee:48:b8:84:60:f9:bd:6c:11:d2:d9:53:86:5d:92: 7e:a3:3d:e2:da:34:5b:e6:5d:60:41:3f:4a:5a:a1: 23:7f:08:cb:12:36:da:e3:8b:c4:69:72:4f:79:89: 8e:70:b1:09:15:67:7f:80:28:d0:42:e5:f3:55:4c: 59:02:88:d8:f4:5d:30:a2:e5:5f:1e:65:9b:91:e4: 79:1b:e6:39:7d:f1:c5:49:27:f1:80:0b:b3:9b:86: 72:34:f9:0c:29:ad:7c:7c:e9:c4:9a:08:81:f9:b6: 06:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DD:F5:1D:82:03:82:D8:91:32:78:CA:05:8E:24:85:9A:5C:63:31 X509v3 Authority Key Identifier: keyid:D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:cc:2f:09:08:0d:d8:14:28:b2:a1:df:7f:66:a0:70:50:92: 5c:fb:75:28:77:df:da:40:86:5d:f9:8e:e2:70:97:48:0f:69: 11:ed:56:0b:1f:bc:4d:38:f1:99:00:a0:a5:e8:97:88:08:3b: 5d:39:3e:24:9d:e5:21:fe:75:1d:44:87:4e:8c:a6:e0:d6:e0: c1:e1:a0:9b:ed:1e:70:eb:24:57:9c:0c:4e:55:22:09:39:31: 42:a9:a7:0c:c6:57:f2:c1:23:e5:22:ca:82:86:fe:c8:d7:d7: d5:c8:4c:27:71:93:3f:89:8b:d5:80:d0:29:89:6d:a2:d8:90: db:5f:5d:e8:1e:bf:b0:d9:4b:00:f8:fe:d3:42:e9:fe:de:96: 51:b6:cd:b6:f7:89:f2:84:8d:04:fc:0a:37:d0:58:89:d5:3e: 68:9f:a2:c3:fe:9e:3e:e1:a4:d3:30:89:02:b9:5c:61:02:a0: bc:b6:a2:e4:76:7a:b1:21:56:1e:68:2b:04:e8:9d:66:a2:d7: 1a:bc:cb:3c:f2:ed:f9:bc:32:55:f4:fa:b2:9c:85:64:2d:76: e1:06:f3:3f:24:66:70:6d:e2:fd:61:3b:40:ce:db:05:be:ce: 91:f9:56:bd:b3:ed:f7:37:30:7e:92:75:0a:f2:bd:89:7e:b3: 83:a9:81:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1ClFKHXVbnQpfuKrAjlWkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMmY0MTU5MTIwYWE1MWJiMWNkZjExNmQwNmE0ZmMwMjky ZmY5NmMwHhcNMjUxMjA2MTkwMTI1WhcNMjUxMjA3MTkwMTI1WjAzMTEwLwYDVQQD EyhkMmRkZjUxZDgyMDM4MmQ4OTEzMjc4Y2EwNThlMjQ4NTlhNWM2MzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj73fGdLAUz4lGikCrIsShC/QmkB lAFitcWrJXuNDQXrTWaqUkWwizOMenmrMRhWcVx1j9dp7uH6zRychAtfSxTROH3O HpKkvK7nxhyN/TEUEsKL+raWWK5nMpe9PmLDiVDPRWa56hqQlxyIyalPoxbELGQZ 2dD3iMaah6gzwTorX1NGFHOeg9VnqyvywupMBxlHNgjuSLiEYPm9bBHS2VOGXZJ+ oz3i2jRb5l1gQT9KWqEjfwjLEjba44vEaXJPeYmOcLEJFWd/gCjQQuXzVUxZAojY 9F0wouVfHmWbkeR5G+Y5ffHFSSfxgAuzm4ZyNPkMKa18fOnEmgiB+bYG4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLd9R2CA4LYkTJ4ygWOJIWaXGMxMB8GA1UdIwQY MBaAFNEvQVkSCqUbsc3xFtBqT8ApL/lsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFM5QldSSUtwUnV4emZFVzBHcFB3Q2t2LVd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ODk2N2EtZDM5Ni00OTIxLWEwOWYt ZmM0YTZhYjc4OGFkLzEvMFM5QldSSUtwUnV4emZFVzBHcFB3Q2t2LVd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85ODk2N2EtZDM5Ni00OTIxLWEwOWYtZmM0YTZhYjc4OGFk LzEvMFM5QldSSUtwUnV4emZFVzBHcFB3Q2t2LVd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdswvCQgN 2BQosqHff2agcFCSXPt1KHff2kCGXfmO4nCXSA9pEe1WCx+8TTjxmQCgpeiXiAg7 XTk+JJ3lIf51HUSHToym4NbgweGgm+0ecOskV5wMTlUiCTkxQqmnDMZX8sEj5SLK gob+yNfX1chMJ3GTP4mL1YDQKYltotiQ219d6B6/sNlLAPj+00Lp/t6WUbbNtveJ 8oSNBPwKN9BYidU+aJ+iw/6ePuGk0zCJArlcYQKgvLai5HZ6sSFWHmgrBOidZqLX GrzLPPLt+bwyVfT6spyFZC124QbzPyRmcG3i/WE7QM7bBb7OkflWvbPt9zcwfpJ1 CvK9iX6zg6mB1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 23:16:32 2025 by rpki-client