This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft File: 9f9GumzY4vNa_bW1-fhlAvg0w0o.mft (raw, json) Hash identifier: J7G+4PuXmgRpwcx6BIgqOSiuHGBz5Du/L8RVsLlJYK4= Subject key identifier: F9:1B:CB:79:9C:34:9D:CE:A8:8F:DA:46:CF:81:02:25:8C:13:3F:B3 Authority key identifier: F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A Certificate issuer: /CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a Certificate serial: 019AF23FA54816FC8803FAA5BBA7B48456AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft Manifest number: 134D Signing time: Sat 06 Dec 2025 06:00:48 +0000 Manifest this update: Sat 06 Dec 2025 06:00:48 +0000 Manifest next update: Sun 07 Dec 2025 06:00:48 +0000 Files and hashes: 1: 9f9GumzY4vNa_bW1-fhlAvg0w0o.crl (hash: Y7e9DSFqIOArzvgdCBxkrUGDMj2OtdXfLMg8s2cjKcI=) 2: jFj_wAVFaMa6v6BwAOU_Uc1FIto.roa (hash: OCl5X/o2fl4tL/vj2OOu1PZNEi03ZxIx2lIN6Tnh8gk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a5:48:16:fc:88:03:fa:a5:bb:a7:b4:84:56:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a Validity Not Before: Dec 6 06:00:48 2025 GMT Not After : Dec 7 06:00:48 2025 GMT Subject: CN=f91bcb799c349dcea88fda46cf8102258c133fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:87:40:29:fb:32:0b:91:d8:3a:b0:7c:45:25: d1:c0:b7:3e:e1:7e:4e:b7:f8:e5:26:84:75:d4:78: 9d:a0:57:e1:75:d1:7e:a2:e6:af:ff:7f:b8:32:2b: 43:61:4c:60:c4:7d:43:12:c8:27:74:b2:fc:00:81: 96:8e:c5:f6:1d:47:8e:58:7f:a1:fd:12:1a:4e:54: 0c:d8:7b:45:bf:32:3f:f7:b3:b3:0a:a1:65:f1:9d: 40:ca:ff:48:fa:fc:cc:40:ea:d8:65:bf:99:60:25: e7:5d:28:71:2b:77:56:0e:a0:85:a5:03:00:b2:30: 64:2b:80:73:7c:ba:00:25:20:b2:7c:ed:31:bd:45: 8d:2e:0d:8d:11:19:52:24:fe:13:7f:46:ef:cc:1a: 75:2c:96:d2:14:0f:0e:ec:8e:3b:d0:13:38:15:2d: c8:9f:44:e5:dd:e5:5b:7f:00:50:51:fc:f5:7d:25: 4e:5d:d1:a4:5b:7d:56:93:1f:4f:e6:cd:ca:79:25: 47:3e:d2:25:ad:58:b5:b2:48:0e:b6:04:cf:64:cb: be:50:26:cf:cc:dc:ac:8c:18:1e:1e:52:25:dc:34: d2:a6:c1:5b:4a:60:28:b2:ec:79:fe:f6:bf:0c:88: 8b:8e:64:64:db:e9:51:a4:4b:64:35:6d:a3:e9:94: f5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1B:CB:79:9C:34:9D:CE:A8:8F:DA:46:CF:81:02:25:8C:13:3F:B3 X509v3 Authority Key Identifier: keyid:F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:fd:e2:72:d8:11:c3:73:b3:29:87:bf:1b:75:ff:22:cc:d4: 6a:18:45:05:ce:46:f7:a2:bd:ad:f8:88:c0:50:ad:b0:23:33: cf:0b:75:d6:60:c5:f5:34:31:93:8e:17:d3:10:09:8c:c0:6e: 83:a9:3a:d4:45:85:fb:de:0e:ef:ba:07:99:58:cf:de:5d:49: be:f7:84:b8:ce:e4:67:74:67:78:e9:14:86:e5:60:11:33:41: 96:e6:07:80:93:89:80:2d:87:9d:31:35:1d:86:38:94:5a:b4: 67:af:66:58:9b:01:04:29:54:17:fc:b1:44:03:b2:dd:e4:d9: 9c:37:60:d1:c8:c3:d4:90:4f:d0:83:63:12:dc:2e:77:9f:be: 73:62:e1:f9:b6:49:d7:96:87:f6:9e:1a:9e:25:ce:78:fa:bd: 51:d8:61:7f:85:3a:9c:8b:a5:00:ef:57:33:d3:11:82:a8:71: 34:0b:4e:5f:0e:d7:57:89:c5:1c:5a:ed:98:e0:e3:dc:d7:1d: 26:66:ab:9e:d8:c8:4b:7f:f6:84:fa:09:7b:0d:74:56:14:3a: c5:f2:5f:46:ab:e3:c3:35:64:50:96:74:5c:be:54:83:9e:b1: 69:29:73:cc:b4:7c:d4:a9:ce:99:dc:f0:d9:24:c5:13:07:81: 89:15:78:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6VIFvyIA/qlu6e0hFaqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmY0NmJhNmNkOGUyZjM1YWZkYjViNWY5Zjg2NTAyZjgz NGMzNGEwHhcNMjUxMjA2MDYwMDQ4WhcNMjUxMjA3MDYwMDQ4WjAzMTEwLwYDVQQD EyhmOTFiY2I3OTljMzQ5ZGNlYTg4ZmRhNDZjZjgxMDIyNThjMTMzZmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9odAKfsyC5HYOrB8RSXRwLc+4X5O t/jlJoR11HidoFfhddF+ouav/3+4MitDYUxgxH1DEsgndLL8AIGWjsX2HUeOWH+h /RIaTlQM2HtFvzI/97OzCqFl8Z1Ayv9I+vzMQOrYZb+ZYCXnXShxK3dWDqCFpQMA sjBkK4BzfLoAJSCyfO0xvUWNLg2NERlSJP4Tf0bvzBp1LJbSFA8O7I470BM4FS3I n0Tl3eVbfwBQUfz1fSVOXdGkW31Wkx9P5s3KeSVHPtIlrVi1skgOtgTPZMu+UCbP zNysjBgeHlIl3DTSpsFbSmAosux5/va/DIiLjmRk2+lRpEtkNW2j6ZT1UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkby3mcNJ3OqI/aRs+BAiWMEz+zMB8GA1UdIwQY MBaAFPX/Rrps2OLzWv21tfn4ZQL4NMNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xZmRlMDQtNTg3Yi00MDg1LWI1ODUt NmFkMjBhMmVhY2I4LzEvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xZmRlMDQtNTg3Yi00MDg1LWI1ODUtNmFkMjBhMmVhY2I4 LzEvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJf3ictgR w3OzKYe/G3X/IszUahhFBc5G96K9rfiIwFCtsCMzzwt11mDF9TQxk44X0xAJjMBu g6k61EWF+94O77oHmVjP3l1JvveEuM7kZ3RneOkUhuVgETNBluYHgJOJgC2HnTE1 HYY4lFq0Z69mWJsBBClUF/yxRAOy3eTZnDdg0cjD1JBP0INjEtwud5++c2Lh+bZJ 15aH9p4aniXOePq9Udhhf4U6nIulAO9XM9MRgqhxNAtOXw7XV4nFHFrtmODj3Ncd JmarntjIS3/2hPoJew10VhQ6xfJfRqvjwzVkUJZ0XL5Ug56xaSlzzLR81KnOmdzw 2STFEweBiRV4JQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:29:11 2025 by rpki-client