This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft File: 9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft (raw, json) Hash identifier: O7TSEQquuwXLMYcQwkj0paf61uilYL9/nmdclSN9ApI= Subject key identifier: 0F:C7:72:58:DE:37:1F:32:19:7D:93:13:53:33:5A:4A:BE:2A:A7:65 Authority key identifier: F6:E7:D8:11:95:49:93:A9:53:B7:94:8D:D0:67:65:CB:C0:90:DC:F7 Certificate issuer: /CN=f6e7d811954993a953b7948dd06765cbc090dcf7 Certificate serial: 019AF3F8016BA697AC07DF6927EFF50D7BF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft Manifest number: 037A Signing time: Sat 06 Dec 2025 14:01:47 +0000 Manifest this update: Sat 06 Dec 2025 14:01:47 +0000 Manifest next update: Sun 07 Dec 2025 14:01:47 +0000 Files and hashes: 1: 9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl (hash: QKmM26Yr99TPElcexuSnZzsiB103SyPQu96cu0iPpb4=) 2: AnWhlH6XKqUu4_GnJM2nKdO071s.roa (hash: /ulEE3dLzdrGEic+8DMTJn8iVbu0rFN7I+VggC4+dZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f8:01:6b:a6:97:ac:07:df:69:27:ef:f5:0d:7b:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6e7d811954993a953b7948dd06765cbc090dcf7 Validity Not Before: Dec 6 14:01:47 2025 GMT Not After : Dec 7 14:01:47 2025 GMT Subject: CN=0fc77258de371f32197d931353335a4abe2aa765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b0:86:dd:73:5d:85:2a:bc:9d:9a:91:42:ed: 27:c8:ba:00:44:ed:67:9d:61:3e:01:a1:33:97:01: dd:93:d2:30:21:f1:82:e6:dd:a1:10:06:cc:d6:af: 1d:85:08:d7:70:3e:1f:e4:f4:fe:ab:e5:1e:61:c4: c5:99:0e:1d:ae:37:88:37:a6:2d:6a:49:fd:7e:9f: 7a:ea:65:b8:71:75:04:0b:ba:65:f9:4b:bb:62:26: b6:be:04:11:38:04:dd:a6:ca:20:c1:5d:77:87:9e: 8a:78:84:3e:3e:90:13:e3:4c:b7:77:6d:70:2b:f1: a4:b2:c9:7c:6f:aa:a4:5b:5c:c6:97:3e:bd:42:1a: fa:a2:9c:3d:92:57:b8:58:bb:f2:d2:49:ab:ad:4e: 4a:7a:bf:05:01:70:20:0e:f2:d0:43:ae:30:85:35: 50:34:16:95:71:e1:f2:a0:fc:c9:97:ce:0c:cb:bd: be:12:29:5e:ae:01:ca:2e:5d:16:35:be:a0:5b:2c: bb:2d:29:cb:a6:4c:eb:6c:f3:ca:a1:9f:26:a3:f4: fa:00:74:2a:b0:15:b1:08:a7:5e:73:85:8e:01:08: c5:87:cb:c2:c4:31:27:7c:f8:62:54:b3:6d:aa:fa: 4c:06:7f:35:0a:18:35:98:b8:27:57:50:25:28:f1: 78:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C7:72:58:DE:37:1F:32:19:7D:93:13:53:33:5A:4A:BE:2A:A7:65 X509v3 Authority Key Identifier: keyid:F6:E7:D8:11:95:49:93:A9:53:B7:94:8D:D0:67:65:CB:C0:90:DC:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:4b:7f:67:ba:6b:1c:99:eb:74:19:17:14:96:33:41:77:fc: 9b:98:03:42:1e:11:31:b2:b5:1b:cf:10:49:60:dd:b4:10:94: 9f:1c:10:ad:bb:28:a3:f7:e2:17:00:c6:39:3e:04:27:e6:05: 25:cf:cc:8d:c5:33:cd:e9:04:06:68:5c:f5:b7:d7:53:1b:b2: 62:4d:0f:f7:44:c9:71:62:fb:df:5e:19:21:3a:cf:36:48:04: e8:79:dd:64:9a:98:43:ae:30:97:ff:66:80:71:6f:61:44:00: be:77:93:b5:06:d7:93:25:21:49:8e:15:8c:82:c0:52:0f:6d: 10:54:c4:90:80:94:35:90:4b:9b:13:14:59:de:fd:86:10:aa: d6:00:8c:4b:55:14:09:e7:89:f8:7f:ee:c8:da:08:d5:17:b3: 0e:4b:ec:af:61:e1:3b:44:f2:a2:3b:b5:f9:c8:53:69:9e:f0: 41:7f:df:db:60:6f:ac:03:5a:da:4a:71:8b:76:6e:d0:3a:97: 7d:bc:57:c7:de:da:ff:2e:36:17:c2:8c:7f:ea:32:ad:52:7a: a8:cf:cd:96:79:ea:fe:8b:5d:4b:a7:61:33:a4:0a:d0:0a:e9: 8b:1a:6e:2c:ec:4d:16:23:83:c0:54:ef:49:5f:ed:18:5c:5d: ee:34:d6:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz+AFrppesB99pJ+/1DXvzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ZTdkODExOTU0OTkzYTk1M2I3OTQ4ZGQwNjc2NWNiYzA5 MGRjZjcwHhcNMjUxMjA2MTQwMTQ3WhcNMjUxMjA3MTQwMTQ3WjAzMTEwLwYDVQQD EygwZmM3NzI1OGRlMzcxZjMyMTk3ZDkzMTM1MzMzNWE0YWJlMmFhNzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubCG3XNdhSq8nZqRQu0nyLoARO1n nWE+AaEzlwHdk9IwIfGC5t2hEAbM1q8dhQjXcD4f5PT+q+UeYcTFmQ4drjeIN6Yt akn9fp966mW4cXUEC7pl+Uu7Yia2vgQROATdpsogwV13h56KeIQ+PpAT40y3d21w K/Gkssl8b6qkW1zGlz69Qhr6opw9kle4WLvy0kmrrU5Ker8FAXAgDvLQQ64whTVQ NBaVceHyoPzJl84My72+EilergHKLl0WNb6gWyy7LSnLpkzrbPPKoZ8mo/T6AHQq sBWxCKdec4WOAQjFh8vCxDEnfPhiVLNtqvpMBn81Chg1mLgnV1AlKPF4qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/HcljeNx8yGX2TE1MzWkq+KqdlMB8GA1UdIwQY MBaAFPbn2BGVSZOpU7eUjdBnZcvAkNz3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXVmWUVaVkprNmxUdDVTTjBHZGx5OENRM1BjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85NjI5N2QtYzYyNy00NjZkLTllYmEt MTA3ODkwODAxMjEzLzEvOXVmWUVaVkprNmxUdDVTTjBHZGx5OENRM1BjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi85NjI5N2QtYzYyNy00NjZkLTllYmEtMTA3ODkwODAxMjEz LzEvOXVmWUVaVkprNmxUdDVTTjBHZGx5OENRM1BjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoUt/Z7pr HJnrdBkXFJYzQXf8m5gDQh4RMbK1G88QSWDdtBCUnxwQrbsoo/fiFwDGOT4EJ+YF Jc/MjcUzzekEBmhc9bfXUxuyYk0P90TJcWL7314ZITrPNkgE6HndZJqYQ64wl/9m gHFvYUQAvneTtQbXkyUhSY4VjILAUg9tEFTEkICUNZBLmxMUWd79hhCq1gCMS1UU CeeJ+H/uyNoI1RezDkvsr2HhO0Tyoju1+chTaZ7wQX/f22BvrANa2kpxi3Zu0DqX fbxXx97a/y42F8KMf+oyrVJ6qM/Nlnnq/otdS6dhM6QK0ArpixpuLOxNFiODwFTv SV/tGFxd7jTWcA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:30:43 2025 by rpki-client