This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft File: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft (raw, json) Hash identifier: X4VApiOwt1by+TBzB41UuVUSYOhc2yVHFpm0CSuIiDE= Subject key identifier: 44:4C:93:27:76:61:2C:73:40:44:86:79:56:C3:52:0F:22:A4:33:03 Authority key identifier: F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC Certificate issuer: /CN=f643f0352adfc98ac8801b94e5a007e7070b07ac Certificate serial: 019AF19BBADCB56D74E48B6EE74484FA93A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft Manifest number: 0E41 Signing time: Sat 06 Dec 2025 03:01:46 +0000 Manifest this update: Sat 06 Dec 2025 03:01:46 +0000 Manifest next update: Sun 07 Dec 2025 03:01:46 +0000 Files and hashes: 1: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl (hash: hSWKRcG5iHPWIrwUx8CK/rUbovm8r+ECuSEUScMwP3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:ba:dc:b5:6d:74:e4:8b:6e:e7:44:84:fa:93:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f643f0352adfc98ac8801b94e5a007e7070b07ac Validity Not Before: Dec 6 03:01:46 2025 GMT Not After : Dec 7 03:01:46 2025 GMT Subject: CN=444c932776612c734044867956c3520f22a43303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:13:d8:b3:65:d3:45:45:5c:44:56:18:66:d7: 46:5c:f8:60:be:02:b7:8c:f3:79:46:af:4f:d0:ea: 76:49:3a:b3:15:d5:1c:f0:26:54:20:27:5e:6b:a7: 98:26:8a:16:00:c4:03:99:93:02:f3:48:05:c1:b7: 28:9c:dc:8e:b8:b0:dd:ba:58:bc:3c:b0:52:bf:19: ff:52:56:ea:c1:a1:f5:fb:56:2d:10:a1:a3:da:2e: 59:92:2b:71:35:7d:67:b2:a3:0f:dc:5a:2a:66:30: eb:52:d4:02:ea:ab:a5:09:ca:98:ab:a9:0b:a5:2e: 5c:52:59:73:0e:66:8c:e3:e2:e1:4c:3e:43:a3:9c: 1b:5e:ed:01:11:16:11:14:73:d9:4d:b0:b1:fd:96: 6f:ee:5b:57:47:c2:77:02:7e:d7:57:95:79:d4:61: 5a:a2:ac:a4:13:43:6a:1e:3a:a7:73:86:d6:b9:e1: 0e:ea:43:6b:a8:21:97:cd:c5:e6:c1:a8:0c:89:39: 7b:69:90:99:a5:08:05:98:13:2f:a5:2a:18:53:e4: 39:f8:ed:91:c2:c7:32:bb:af:a0:2a:ab:ea:e1:01: 69:55:2f:d5:d3:50:2e:bf:7a:fc:ec:1d:5a:70:75: 90:f2:f6:4b:9f:97:6d:9a:c6:30:31:71:a2:0a:18: 08:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:4C:93:27:76:61:2C:73:40:44:86:79:56:C3:52:0F:22:A4:33:03 X509v3 Authority Key Identifier: keyid:F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:77:39:96:1c:6d:8d:38:d7:e7:7c:36:98:89:c3:1e:7a:a9: 4d:17:b1:46:db:5b:c4:cb:99:6e:ef:da:e1:46:cb:1a:33:0b: c5:e8:24:de:47:30:4a:fc:df:6e:8e:76:87:a5:1f:cb:89:a6: 78:86:b0:ca:20:c4:77:f7:49:fb:2c:69:69:6f:de:11:21:cc: ef:b9:20:8a:61:93:9a:05:0c:10:21:5e:31:42:21:66:43:2c: 6b:7d:df:1e:49:0f:dc:c3:00:6e:5a:70:80:61:81:4d:61:c4: 50:7d:b3:79:c1:f1:88:e7:7f:c6:56:ae:73:59:ed:1c:d1:24: e0:5f:7b:66:07:bf:9c:c5:06:b7:df:24:3a:8d:9d:46:f0:ba: 3e:5f:14:97:fd:a1:21:df:db:90:d2:86:f2:da:cf:d5:cb:fc: c2:e7:fa:de:2f:7c:10:08:bc:f9:f6:15:6c:f6:21:fe:20:2b: a5:17:b8:f1:83:94:e0:5e:ca:e6:d0:83:90:29:98:6e:81:4b: d3:05:17:a5:50:40:6b:be:3d:7b:94:7d:f1:20:ea:62:02:43: 34:5d:b1:b7:9b:7d:bc:a6:b8:9f:e3:d2:78:49:71:c4:53:76: d6:6d:84:78:b7:f4:d0:41:fa:b0:5e:d5:6a:38:ae:89:db:7b: 16:69:4d:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7rctW105Itu50SE+pOgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NDNmMDM1MmFkZmM5OGFjODgwMWI5NGU1YTAwN2U3MDcw YjA3YWMwHhcNMjUxMjA2MDMwMTQ2WhcNMjUxMjA3MDMwMTQ2WjAzMTEwLwYDVQQD Eyg0NDRjOTMyNzc2NjEyYzczNDA0NDg2Nzk1NmMzNTIwZjIyYTQzMzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxPYs2XTRUVcRFYYZtdGXPhgvgK3 jPN5Rq9P0Op2STqzFdUc8CZUICdea6eYJooWAMQDmZMC80gFwbconNyOuLDduli8 PLBSvxn/UlbqwaH1+1YtEKGj2i5ZkitxNX1nsqMP3FoqZjDrUtQC6qulCcqYq6kL pS5cUllzDmaM4+LhTD5Do5wbXu0BERYRFHPZTbCx/ZZv7ltXR8J3An7XV5V51GFa oqykE0NqHjqnc4bWueEO6kNrqCGXzcXmwagMiTl7aZCZpQgFmBMvpSoYU+Q5+O2R wscyu6+gKqvq4QFpVS/V01Auv3r87B1acHWQ8vZLn5dtmsYwMXGiChgIEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERMkyd2YSxzQESGeVbDUg8ipDMDMB8GA1UdIwQY MBaAFPZD8DUq38mKyIAblOWgB+cHCwesMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWtQd05TcmZ5WXJJZ0J1VTVhQUg1d2NMQjZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82YWM3N2EtNGE1Zi00ZDM5LThjZmEt MDA1ZmMwN2NlZGM4LzEvOWtQd05TcmZ5WXJJZ0J1VTVhQUg1d2NMQjZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi82YWM3N2EtNGE1Zi00ZDM5LThjZmEtMDA1ZmMwN2NlZGM4 LzEvOWtQd05TcmZ5WXJJZ0J1VTVhQUg1d2NMQjZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3c5lhxt jTjX53w2mInDHnqpTRexRttbxMuZbu/a4UbLGjMLxegk3kcwSvzfbo52h6Ufy4mm eIawyiDEd/dJ+yxpaW/eESHM77kgimGTmgUMECFeMUIhZkMsa33fHkkP3MMAblpw gGGBTWHEUH2zecHxiOd/xlauc1ntHNEk4F97Zge/nMUGt98kOo2dRvC6Pl8Ul/2h Id/bkNKG8trP1cv8wuf63i98EAi8+fYVbPYh/iArpRe48YOU4F7K5tCDkCmYboFL 0wUXpVBAa749e5R98SDqYgJDNF2xt5t9vKa4n+PSeElxxFN21m2EeLf00EH6sF7V ajiuidt7FmlNoQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:28 2025 by rpki-client