This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft File: rrc9JyyxdKRjjbIVZ44-57kin_o.mft (raw, json) Hash identifier: bKSFLLRVc1G6mNkd7/+KXCHXiK1pqeOQQbK7k0RW8CI= Subject key identifier: B5:C5:78:01:F6:E4:68:32:8B:91:98:7A:C4:BA:09:AA:9F:BE:BF:84 Authority key identifier: AE:B7:3D:27:2C:B1:74:A4:63:8D:B2:15:67:8E:3E:E7:B9:22:9F:FA Certificate issuer: /CN=aeb73d272cb174a4638db215678e3ee7b9229ffa Certificate serial: 019AF19ABD725F8F9E5D3C51A34F84BE4947 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 03:00:41 +0000 Manifest this update: Sat 06 Dec 2025 03:00:41 +0000 Manifest next update: Sun 07 Dec 2025 03:00:41 +0000 Files and hashes: 1: rrc9JyyxdKRjjbIVZ44-57kin_o.crl (hash: dPjCq3wiKywXpOsBxtwUKkdwoVgePk68Yy8NE2eDMXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:bd:72:5f:8f:9e:5d:3c:51:a3:4f:84:be:49:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb73d272cb174a4638db215678e3ee7b9229ffa Validity Not Before: Dec 6 03:00:41 2025 GMT Not After : Dec 7 03:00:41 2025 GMT Subject: CN=b5c57801f6e468328b91987ac4ba09aa9fbebf84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c9:6f:7a:47:04:66:5c:39:64:76:f4:d3:8b: c9:03:9c:6f:ae:01:2b:46:75:99:88:3e:a6:42:72: 5f:bb:c3:dd:48:b5:04:92:fc:ca:6f:b2:16:a8:79: da:3e:9d:ec:80:6b:6a:06:06:7a:95:74:23:47:bc: 31:69:b0:eb:c3:bb:58:60:21:ac:62:10:f1:4e:56: cf:ed:95:84:6b:33:26:1d:45:51:d7:7d:f3:3b:ee: c9:2e:71:45:eb:82:22:ae:cf:8f:49:7e:0a:bd:90: 62:d1:f6:e8:c9:95:81:27:5e:96:25:59:0e:c6:25: 8f:b7:58:7a:a8:db:7a:c1:e9:6b:9c:51:61:92:d1: 9b:c8:70:f0:e6:76:94:94:a7:5e:ee:3b:eb:16:58: 35:e4:92:b6:06:08:ee:ab:e4:5f:0d:f2:e1:a7:94: 54:41:32:16:3a:f8:5b:42:4b:07:36:b9:17:2f:5a: ae:da:72:82:a6:00:1a:17:5c:33:60:b7:8e:b0:20: 32:a3:0e:ba:6e:03:4a:fd:f7:a4:e7:96:fa:0a:6b: 1b:ff:67:19:90:5c:e6:f0:40:61:d0:ab:33:ce:89: f6:d3:40:14:b9:1d:1c:7f:0e:c5:97:b4:d9:d7:f7: 3b:aa:4c:ba:0c:fe:0c:79:7b:5c:48:ce:45:45:69: 10:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C5:78:01:F6:E4:68:32:8B:91:98:7A:C4:BA:09:AA:9F:BE:BF:84 X509v3 Authority Key Identifier: keyid:AE:B7:3D:27:2C:B1:74:A4:63:8D:B2:15:67:8E:3E:E7:B9:22:9F:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:46:19:ff:8c:10:5f:98:02:38:23:6f:a9:02:fc:b7:20:1c: ad:3f:ab:63:06:81:79:5f:db:9c:e7:9a:3a:4c:d1:69:15:ff: b0:9b:45:74:50:3f:8e:de:e2:da:f4:e3:d7:f0:c8:08:90:be: 0d:0a:3a:f9:19:a7:f0:68:65:d6:44:f1:0c:c3:d2:d6:c7:a6: 8f:8b:ad:46:f6:2b:8e:4f:91:83:c2:0d:0e:8d:8a:33:53:45: 63:98:9c:d6:48:c3:cc:61:65:60:96:af:b2:ea:49:5d:7f:92: d3:79:b6:42:6b:cb:b0:2b:c3:43:15:91:6e:b1:63:27:fa:ed: 0a:a3:ea:5c:18:88:2c:ce:df:cb:12:9d:19:cc:dc:56:ec:19: 3c:d2:f8:2b:39:fa:53:82:0f:21:80:ea:57:71:96:f1:cb:f3: e8:d7:f3:b3:1b:34:dd:78:eb:14:20:71:0f:ff:67:e6:23:fa: 0e:25:19:c6:e6:19:33:6e:9f:de:5d:0e:35:70:ac:3a:82:bd: 56:90:03:65:2d:68:5f:a7:36:c3:e2:58:6b:d9:10:92:8d:75: b7:6e:55:37:a2:13:7a:7a:4a:40:5e:6b:50:a9:53:50:a9:d4: 5d:9c:64:d3:04:29:dc:a2:00:d4:94:ca:90:70:b6:d3:a4:42: ab:31:fa:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmr1yX4+eXTxRo0+EvklHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYjczZDI3MmNiMTc0YTQ2MzhkYjIxNTY3OGUzZWU3Yjky MjlmZmEwHhcNMjUxMjA2MDMwMDQxWhcNMjUxMjA3MDMwMDQxWjAzMTEwLwYDVQQD EyhiNWM1NzgwMWY2ZTQ2ODMyOGI5MTk4N2FjNGJhMDlhYTlmYmViZjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MlvekcEZlw5ZHb004vJA5xvrgEr RnWZiD6mQnJfu8PdSLUEkvzKb7IWqHnaPp3sgGtqBgZ6lXQjR7wxabDrw7tYYCGs YhDxTlbP7ZWEazMmHUVR133zO+7JLnFF64Iirs+PSX4KvZBi0fboyZWBJ16WJVkO xiWPt1h6qNt6welrnFFhktGbyHDw5naUlKde7jvrFlg15JK2Bgjuq+RfDfLhp5RU QTIWOvhbQksHNrkXL1qu2nKCpgAaF1wzYLeOsCAyow66bgNK/fek55b6Cmsb/2cZ kFzm8EBh0Kszzon200AUuR0cfw7Fl7TZ1/c7qky6DP4MeXtcSM5FRWkQWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXFeAH25Ggyi5GYesS6Caqfvr+EMB8GA1UdIwQY MBaAFK63PScssXSkY42yFWeOPue5Ip/6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJjOUp5eXhkS1JqamJJVlo0NC01N2tpbl9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yOTQ2MTMtOTAxOS00N2Q0LWIwNjUt NWMxYWMyYWYzNjcyLzEvcnJjOUp5eXhkS1JqamJJVlo0NC01N2tpbl9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8yOTQ2MTMtOTAxOS00N2Q0LWIwNjUtNWMxYWMyYWYzNjcy LzEvcnJjOUp5eXhkS1JqamJJVlo0NC01N2tpbl9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUYZ/4wQ X5gCOCNvqQL8tyAcrT+rYwaBeV/bnOeaOkzRaRX/sJtFdFA/jt7i2vTj1/DICJC+ DQo6+Rmn8Ghl1kTxDMPS1semj4utRvYrjk+Rg8INDo2KM1NFY5ic1kjDzGFlYJav supJXX+S03m2QmvLsCvDQxWRbrFjJ/rtCqPqXBiILM7fyxKdGczcVuwZPNL4Kzn6 U4IPIYDqV3GW8cvz6Nfzsxs03XjrFCBxD/9n5iP6DiUZxuYZM26f3l0ONXCsOoK9 VpADZS1oX6c2w+JYa9kQko11t25VN6ITenpKQF5rUKlTUKnUXZxk0wQp3KIA1JTK kHC206RCqzH6Qw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:10 2025 by rpki-client