This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft File: x9CAN66dCrMNEA0U2WFLeNY5Srw.mft (raw, json) Hash identifier: Hy319Syu6GtBQGCP9LBmHP0efY2wix6zF/fWrDBGbvA= Subject key identifier: 6A:88:86:CB:CF:1C:17:31:1D:DD:33:DD:CC:76:3A:9A:6D:7E:8C:56 Authority key identifier: C7:D0:80:37:AE:9D:0A:B3:0D:10:0D:14:D9:61:4B:78:D6:39:4A:BC Certificate issuer: /CN=c7d08037ae9d0ab30d100d14d9614b78d6394abc Certificate serial: 019AF27715F857F68F758292A47734191506 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9CAN66dCrMNEA0U2WFLeNY5Srw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft Manifest number: 0310 Signing time: Sat 06 Dec 2025 07:01:21 +0000 Manifest this update: Sat 06 Dec 2025 07:01:21 +0000 Manifest next update: Sun 07 Dec 2025 07:01:21 +0000 Files and hashes: 1: x9CAN66dCrMNEA0U2WFLeNY5Srw.crl (hash: kALyaW/4xlvSyjllusdGril2MCDUquNFicJf0Hnsux4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft rsync://rpki.ripe.net/repository/DEFAULT/x9CAN66dCrMNEA0U2WFLeNY5Srw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:15:f8:57:f6:8f:75:82:92:a4:77:34:19:15:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7d08037ae9d0ab30d100d14d9614b78d6394abc Validity Not Before: Dec 6 07:01:21 2025 GMT Not After : Dec 7 07:01:21 2025 GMT Subject: CN=6a8886cbcf1c17311ddd33ddcc763a9a6d7e8c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:03:54:9c:ba:70:99:70:6d:1e:ea:d0:98:6e: d0:53:ee:ae:15:e2:fb:78:83:27:66:1b:fb:35:ce: 78:80:81:2f:cc:54:6c:9e:bb:23:5b:d5:9c:14:d8: 1b:59:ae:7c:d0:90:86:72:74:77:50:51:30:f8:69: f7:61:c4:a5:2d:ed:b5:59:c8:d8:60:29:b8:29:7c: f6:a8:55:8c:c1:ea:98:97:aa:66:95:d3:d6:71:a1: 66:77:75:84:96:de:74:9a:08:f7:54:fb:3b:3e:76: 41:14:bb:bf:48:8b:76:f3:17:36:d8:bd:a5:a3:31: ca:f7:36:42:7c:7e:38:c9:4d:9a:6f:83:a0:91:a5: d5:4f:6a:5d:9f:bf:b8:50:06:a7:7a:dd:e0:df:1f: 34:b7:86:6d:cf:9b:51:d8:91:25:82:ff:d2:1e:1c: 18:bd:07:7e:b7:03:7f:aa:d4:65:69:28:29:4d:ba: b1:b0:7c:50:b2:d8:63:d4:98:ad:a9:40:be:fc:77: e7:b2:cd:fc:fe:8d:2c:0d:83:a5:66:7d:1c:ed:c1: 21:7c:f6:a0:b3:54:5a:d3:f0:64:d7:a7:68:83:39: 5f:2c:a1:5b:0d:a7:7d:0a:08:f5:96:54:02:82:ac: 89:29:63:42:42:bb:e8:09:13:67:41:33:4f:5e:f4: 0f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:88:86:CB:CF:1C:17:31:1D:DD:33:DD:CC:76:3A:9A:6D:7E:8C:56 X509v3 Authority Key Identifier: keyid:C7:D0:80:37:AE:9D:0A:B3:0D:10:0D:14:D9:61:4B:78:D6:39:4A:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9CAN66dCrMNEA0U2WFLeNY5Srw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:f4:9d:57:5f:3f:b9:c8:6c:02:8d:ca:a9:29:99:02:dd:99: 88:ae:c2:db:0b:df:0f:f3:ab:67:34:9c:04:d8:93:8f:dd:cd: 7f:dd:b6:56:05:e5:e3:1a:de:d7:16:e7:77:36:d1:de:e4:27: 17:8a:26:0f:c3:f3:a4:bd:43:c8:3d:c7:04:7c:a3:73:6d:72: f8:31:a4:3c:3c:f4:08:02:b5:30:b8:18:50:2e:14:9c:4b:9d: 5f:2b:b5:ad:1a:89:68:e2:17:7d:8b:df:d0:3a:cb:42:5a:1d: e1:e6:e8:8c:da:d8:b2:bc:44:e4:8b:45:73:f8:13:0b:46:48: b6:00:d6:74:30:7f:6d:3e:e9:71:f7:0a:3f:4a:0a:ae:35:b9: 97:f1:16:b2:83:8c:ea:10:e0:a1:27:2c:68:92:95:35:f1:9f: 87:d5:41:2a:a9:2d:87:f5:e1:a7:5f:84:29:bc:6f:2a:01:f3: 1a:c4:3e:81:21:ad:ff:70:3b:cb:8c:7d:dd:09:d5:90:8a:7c: a5:49:0e:6a:45:cc:b9:45:5c:bd:29:15:04:f8:f5:73:56:1a: ac:1d:ef:25:ec:31:b4:1e:c7:90:68:c8:f1:b9:f3:f8:7c:81: 40:9b:e8:12:20:f0:64:6b:29:d3:4f:4a:12:ad:9d:8d:f3:f6: 45:61:21:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxX4V/aPdYKSpHc0GRUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZDA4MDM3YWU5ZDBhYjMwZDEwMGQxNGQ5NjE0Yjc4ZDYz OTRhYmMwHhcNMjUxMjA2MDcwMTIxWhcNMjUxMjA3MDcwMTIxWjAzMTEwLwYDVQQD Eyg2YTg4ODZjYmNmMWMxNzMxMWRkZDMzZGRjYzc2M2E5YTZkN2U4YzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwNUnLpwmXBtHurQmG7QU+6uFeL7 eIMnZhv7Nc54gIEvzFRsnrsjW9WcFNgbWa580JCGcnR3UFEw+Gn3YcSlLe21WcjY YCm4KXz2qFWMweqYl6pmldPWcaFmd3WElt50mgj3VPs7PnZBFLu/SIt28xc22L2l ozHK9zZCfH44yU2ab4OgkaXVT2pdn7+4UAanet3g3x80t4Ztz5tR2JElgv/SHhwY vQd+twN/qtRlaSgpTbqxsHxQsthj1JitqUC+/Hfnss38/o0sDYOlZn0c7cEhfPag s1Ra0/Bk16dogzlfLKFbDad9Cgj1llQCgqyJKWNCQrvoCRNnQTNPXvQPawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqIhsvPHBcxHd0z3cx2OpptfoxWMB8GA1UdIwQY MBaAFMfQgDeunQqzDRANFNlhS3jWOUq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDlDQU42NmRDck1ORUEwVTJXRkxlTlk1U3J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85MGY2MWItOTU0Mi00NDMzLTkxM2Ut M2U5YThmYmVhYWE1LzEveDlDQU42NmRDck1ORUEwVTJXRkxlTlk1U3J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85MGY2MWItOTU0Mi00NDMzLTkxM2UtM2U5YThmYmVhYWE1 LzEveDlDQU42NmRDck1ORUEwVTJXRkxlTlk1U3J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYfSdV18/ uchsAo3KqSmZAt2ZiK7C2wvfD/OrZzScBNiTj93Nf922VgXl4xre1xbndzbR3uQn F4omD8PzpL1DyD3HBHyjc21y+DGkPDz0CAK1MLgYUC4UnEudXyu1rRqJaOIXfYvf 0DrLQlod4ebojNrYsrxE5ItFc/gTC0ZItgDWdDB/bT7pcfcKP0oKrjW5l/EWsoOM 6hDgoScsaJKVNfGfh9VBKqkth/Xhp1+EKbxvKgHzGsQ+gSGt/3A7y4x93QnVkIp8 pUkOakXMuUVcvSkVBPj1c1YarB3vJewxtB7HkGjI8bnz+HyBQJvoEiDwZGsp009K Eq2djfP2RWEhaw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:36:00 2025 by rpki-client