This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft File: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft (raw, json) Hash identifier: xvFxPsMp+tjeBY6Lg5f4s6Fox/yI/MQ9Mme0TJohaM8= Subject key identifier: 74:AB:04:8B:A8:05:99:39:53:59:25:18:4C:BA:EE:4F:7B:F9:DC:A1 Authority key identifier: F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4 Certificate issuer: /CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4 Certificate serial: 019AF2772F1A30B1DFFE8358C62E897FD7F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 07:01:28 +0000 Manifest this update: Sat 06 Dec 2025 07:01:28 +0000 Manifest next update: Sun 07 Dec 2025 07:01:28 +0000 Files and hashes: 1: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl (hash: f54RrMJizHy1MV7O9jp20icsLF8W3OuPze9/HfhIE8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:2f:1a:30:b1:df:fe:83:58:c6:2e:89:7f:d7:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4 Validity Not Before: Dec 6 07:01:28 2025 GMT Not After : Dec 7 07:01:28 2025 GMT Subject: CN=74ab048ba8059939535925184cbaee4f7bf9dca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:51:3a:0b:15:b2:ae:fc:c5:0d:ef:6b:cf:3c: 38:1d:2d:6d:01:17:5c:7e:fc:7c:0e:46:54:e8:67: b0:f2:2e:b3:51:7a:71:b1:d9:a9:52:fd:ed:8f:58: 40:d9:a3:9f:09:2c:4a:c1:e8:df:d8:96:05:c6:07: 15:f5:4a:da:f6:3b:75:63:92:5d:d4:2a:ef:b5:5c: db:89:c9:68:f6:43:ec:87:42:e9:e2:24:05:2e:2c: 62:80:2f:de:11:71:00:77:82:46:0c:71:4e:d9:91: bd:96:c1:b4:af:64:8b:26:40:cb:ba:6a:fc:31:d1: f8:0b:40:a1:ea:ab:d5:f4:61:1b:ea:fc:51:5d:e8: 47:49:3a:d4:f1:0a:2e:2a:f7:fa:7c:a3:9d:20:dd: 8a:de:66:2f:1b:08:6c:71:ac:06:e0:cd:d0:17:c8: dc:75:47:b9:8c:3e:c9:c9:36:5d:62:c2:63:1b:9d: 4c:98:6d:11:0c:48:02:3d:4d:98:13:df:e7:00:62: 99:e0:d9:f9:10:47:e5:9a:d2:01:de:50:3f:bb:b9: 34:ea:ee:4b:4d:21:98:e3:e4:6a:73:43:d8:f8:f0: e7:f7:3d:02:c3:96:01:8f:3d:40:86:9c:1d:e8:7e: f3:27:6f:62:02:14:41:65:f3:ed:46:60:6d:a8:2e: 04:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AB:04:8B:A8:05:99:39:53:59:25:18:4C:BA:EE:4F:7B:F9:DC:A1 X509v3 Authority Key Identifier: keyid:F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:8d:b0:3d:b9:8a:f1:35:52:77:07:db:a3:98:2d:ce:96:ba: 7b:dc:b3:b3:bd:aa:66:c9:3f:76:32:58:cb:3e:60:f1:ee:c1: 46:70:56:1f:b4:b5:05:1e:e1:22:1f:a7:80:84:11:e4:5a:0e: 45:91:0e:30:54:98:f9:4c:66:02:8b:72:d7:d7:ea:3a:be:37: 3c:a8:d8:4d:d5:15:eb:e6:63:a4:43:08:39:0c:42:61:30:00: c1:be:d3:17:04:51:60:bb:3a:01:67:51:d5:2f:cc:9b:62:df: 28:06:51:6f:44:91:ec:d5:c5:13:37:6d:b1:b3:86:df:07:7d: 92:35:c1:ac:2d:f3:f6:e7:4a:ec:9f:9e:d2:d1:89:45:d7:8a: 80:60:8f:3f:48:d7:7d:dd:7f:8c:b7:17:28:d1:b9:c5:e8:55: 0a:e6:d8:37:d9:57:ca:da:2e:e3:ec:98:9d:c9:ba:a3:2e:e9: 7e:d8:5d:92:24:96:a7:f3:d6:39:84:11:ea:f4:ed:9c:09:58: 83:a0:56:9c:69:6e:32:87:da:d6:2c:41:e6:6a:6c:e6:ac:80: e7:95:aa:ed:1a:6f:70:94:b7:50:17:d9:2e:f3:8d:fb:c4:0f: 5d:c4:4a:53:70:81:b9:56:29:3a:66:21:1b:60:f4:f4:6c:1e: 8f:f9:a8:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydy8aMLHf/oNYxi6Jf9fxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NWM2ZGNkOWZkYmQyNGMxNmU1MGFlMTU1MWVlOGY0M2Fj OGJmZDQwHhcNMjUxMjA2MDcwMTI4WhcNMjUxMjA3MDcwMTI4WjAzMTEwLwYDVQQD Eyg3NGFiMDQ4YmE4MDU5OTM5NTM1OTI1MTg0Y2JhZWU0ZjdiZjlkY2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VE6CxWyrvzFDe9rzzw4HS1tARdc fvx8DkZU6Gew8i6zUXpxsdmpUv3tj1hA2aOfCSxKwejf2JYFxgcV9Ura9jt1Y5Jd 1CrvtVzbiclo9kPsh0Lp4iQFLixigC/eEXEAd4JGDHFO2ZG9lsG0r2SLJkDLumr8 MdH4C0Ch6qvV9GEb6vxRXehHSTrU8QouKvf6fKOdIN2K3mYvGwhscawG4M3QF8jc dUe5jD7JyTZdYsJjG51MmG0RDEgCPU2YE9/nAGKZ4Nn5EEflmtIB3lA/u7k06u5L TSGY4+Rqc0PY+PDn9z0Cw5YBjz1Ahpwd6H7zJ29iAhRBZfPtRmBtqC4EHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSrBIuoBZk5U1klGEy67k97+dyhMB8GA1UdIwQY MBaAFPZcbc2f29JMFuUK4VUe6PQ6yL/UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWx4dHpaX2Iwa3dXNVFyaFZSN285RHJJdjlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NWE5M2UtMzNlZi00NzYwLWJkNGUt MTk3MzYzNTE2N2IyLzEvOWx4dHpaX2Iwa3dXNVFyaFZSN285RHJJdjlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82NWE5M2UtMzNlZi00NzYwLWJkNGUtMTk3MzYzNTE2N2Iy LzEvOWx4dHpaX2Iwa3dXNVFyaFZSN285RHJJdjlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeI2wPbmK 8TVSdwfbo5gtzpa6e9yzs72qZsk/djJYyz5g8e7BRnBWH7S1BR7hIh+ngIQR5FoO RZEOMFSY+UxmAoty19fqOr43PKjYTdUV6+ZjpEMIOQxCYTAAwb7TFwRRYLs6AWdR 1S/Mm2LfKAZRb0SR7NXFEzdtsbOG3wd9kjXBrC3z9udK7J+e0tGJRdeKgGCPP0jX fd1/jLcXKNG5xehVCubYN9lXytou4+yYncm6oy7pfthdkiSWp/PWOYQR6vTtnAlY g6BWnGluMofa1ixB5mps5qyA55Wq7RpvcJS3UBfZLvON+8QPXcRKU3CBuVYpOmYh G2D09Gwej/mo+w== -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:36 2025 by rpki-client