This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft File: 9XGHM6rUPvapm9jZUEog3YkCLo8.mft (raw, json) Hash identifier: XjwbMqMrsUSE5wlpjLqyDZ07d8eRyUZbSdeA5+UKy3k= Subject key identifier: 32:E1:E4:3A:21:31:82:E8:21:F9:77:A0:86:5E:8B:5F:63:D0:88:BF Authority key identifier: F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F Certificate issuer: /CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f Certificate serial: 019AF465905DE19099538A687F333EAB76CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft Manifest number: 1462 Signing time: Sat 06 Dec 2025 16:01:27 +0000 Manifest this update: Sat 06 Dec 2025 16:01:27 +0000 Manifest next update: Sun 07 Dec 2025 16:01:27 +0000 Files and hashes: 1: 9XGHM6rUPvapm9jZUEog3YkCLo8.crl (hash: dqCwZd7Mr+RBboESoUl8dXdcC6jawaHC/vZWbbQwwgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:90:5d:e1:90:99:53:8a:68:7f:33:3e:ab:76:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f Validity Not Before: Dec 6 16:01:27 2025 GMT Not After : Dec 7 16:01:27 2025 GMT Subject: CN=32e1e43a213182e821f977a0865e8b5f63d088bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b3:0e:a1:ab:70:45:41:22:b1:f7:db:54:b4: 51:52:18:0b:40:72:94:c0:46:09:5c:2b:d2:d5:82: 2d:bf:33:98:b3:c7:48:b3:0b:b2:52:a1:5e:ff:c2: c6:c0:d4:c7:33:38:18:c7:4f:67:d7:37:1d:04:14: 02:d3:c7:35:c4:17:2b:ee:5f:ef:6a:b8:f0:3d:dd: 01:42:7f:80:68:ae:38:7c:9e:a7:93:df:92:8e:e8: df:0a:ac:ba:37:f1:e1:ae:85:89:47:8c:ac:da:74: 96:e3:9a:a5:cf:12:4b:70:9a:c7:8c:ff:46:fe:43: 8e:54:ef:7a:18:23:b6:65:e3:f7:80:98:aa:17:e3: 39:59:00:fa:20:83:45:2b:d4:0f:ae:bb:f3:5e:a9: d3:c7:39:98:42:f7:7f:45:53:0d:c9:17:6d:e4:85: 07:03:2b:1c:28:35:50:2e:46:fa:1f:c6:87:73:97: 79:08:07:58:c1:1c:f1:e9:01:c3:36:9f:d5:57:b9: 61:67:56:01:a0:08:5f:e5:72:8f:86:44:16:de:2d: b4:83:b6:79:88:e5:dd:f3:b3:09:2c:2b:c8:16:9b: 0f:43:33:3f:4a:bb:e5:b1:55:9c:70:71:99:96:69: 69:fe:93:3e:7b:be:ac:7f:05:d0:af:bf:06:05:a6: 15:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E1:E4:3A:21:31:82:E8:21:F9:77:A0:86:5E:8B:5F:63:D0:88:BF X509v3 Authority Key Identifier: keyid:F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:d6:87:d3:2a:46:a5:4e:0c:cc:a2:ea:7d:6a:9f:5e:98:c0: 47:28:5f:44:11:18:46:05:76:46:11:cc:29:26:ce:6b:28:ae: f7:9b:5e:43:98:49:a5:7b:e1:2d:55:75:ce:52:02:e6:f4:ee: 1a:0a:e8:e3:46:c0:f3:ec:94:17:1c:d1:c5:ba:a4:cf:25:78: 91:fa:fa:7a:8d:50:15:f7:bb:77:9c:33:bd:e8:78:3a:a5:af: 70:66:1d:7d:97:15:e7:1c:70:f7:62:cb:74:6b:9e:22:c1:ce: 35:5d:1e:8e:17:4b:5c:4b:67:b2:75:d5:20:37:ec:51:5d:95: 82:ec:f8:49:4b:24:0c:d0:33:97:ba:ed:ab:74:cc:1d:cc:d1: a9:f8:ea:2c:2e:83:cc:79:b6:04:a0:6c:e3:01:f8:6d:3a:a0: 3e:d2:7e:69:32:c2:e4:aa:15:63:0c:d1:80:49:0a:76:90:c5: 7b:3d:ee:fd:33:79:b3:0e:de:8a:89:65:51:8a:6c:82:b3:88: b0:23:a5:12:ae:ad:e9:9e:dd:3f:c4:a7:17:59:19:01:13:58: a0:ff:e2:2c:50:39:24:f2:ba:ac:d5:c6:6a:ec:d3:ac:03:f0: 59:85:93:69:7c:63:50:a8:43:32:19:54:27:3f:45:84:5b:9b: 11:22:9f:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZZBd4ZCZU4pofzM+q3bPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NzE4NzMzYWFkNDNlZjZhOTliZDhkOTUwNGEyMGRkODkw MjJlOGYwHhcNMjUxMjA2MTYwMTI3WhcNMjUxMjA3MTYwMTI3WjAzMTEwLwYDVQQD EygzMmUxZTQzYTIxMzE4MmU4MjFmOTc3YTA4NjVlOGI1ZjYzZDA4OGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LMOoatwRUEisffbVLRRUhgLQHKU wEYJXCvS1YItvzOYs8dIswuyUqFe/8LGwNTHMzgYx09n1zcdBBQC08c1xBcr7l/v arjwPd0BQn+AaK44fJ6nk9+SjujfCqy6N/HhroWJR4ys2nSW45qlzxJLcJrHjP9G /kOOVO96GCO2ZeP3gJiqF+M5WQD6IINFK9QPrrvzXqnTxzmYQvd/RVMNyRdt5IUH AyscKDVQLkb6H8aHc5d5CAdYwRzx6QHDNp/VV7lhZ1YBoAhf5XKPhkQW3i20g7Z5 iOXd87MJLCvIFpsPQzM/SrvlsVWccHGZlmlp/pM+e76sfwXQr78GBaYVQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLh5DohMYLoIfl3oIZei19j0Ii/MB8GA1UdIwQY MBaAFPVxhzOq1D72qZvY2VBKIN2JAi6PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVhHSE02clVQdmFwbTlqWlVFb2czWWtDTG84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yMzMzN2MtMzc1OC00MGI2LWE5Yzgt ZDcyNWZhNjczMmI2LzEvOVhHSE02clVQdmFwbTlqWlVFb2czWWtDTG84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8yMzMzN2MtMzc1OC00MGI2LWE5YzgtZDcyNWZhNjczMmI2 LzEvOVhHSE02clVQdmFwbTlqWlVFb2czWWtDTG84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASNaH0ypG pU4MzKLqfWqfXpjARyhfRBEYRgV2RhHMKSbOayiu95teQ5hJpXvhLVV1zlIC5vTu Ggro40bA8+yUFxzRxbqkzyV4kfr6eo1QFfe7d5wzveh4OqWvcGYdfZcV5xxw92LL dGueIsHONV0ejhdLXEtnsnXVIDfsUV2Vguz4SUskDNAzl7rtq3TMHczRqfjqLC6D zHm2BKBs4wH4bTqgPtJ+aTLC5KoVYwzRgEkKdpDFez3u/TN5sw7eiollUYpsgrOI sCOlEq6t6Z7dP8SnF1kZARNYoP/iLFA5JPK6rNXGauzTrAPwWYWTaXxjUKhDMhlU Jz9FhFubESKfeg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:45:12 2025 by rpki-client