This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft File: 9yjCKwJQJ1-m63NLoA55D343pVA.mft (raw, json) Hash identifier: 38MGeRXWt38/7+ZTN2vbK21ho5T7wX23NDfWlBCwMwA= Subject key identifier: 93:92:8F:CB:D6:B8:06:F2:19:0E:3E:58:79:71:05:73:76:73:EF:C9 Authority key identifier: F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50 Certificate issuer: /CN=f728c22b0250275fa6eb734ba00e790f7e37a550 Certificate serial: 019B34C5EBE639E1FB72684DAFEC4FD063A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft Manifest number: 0AB1 Signing time: Fri 19 Dec 2025 04:02:24 +0000 Manifest this update: Fri 19 Dec 2025 04:02:24 +0000 Manifest next update: Sat 20 Dec 2025 04:02:24 +0000 Files and hashes: 1: 9yjCKwJQJ1-m63NLoA55D343pVA.crl (hash: jNLBL6PA6woZBF6NSD/VjnB+sUMDrusgwL1jiNWirF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:eb:e6:39:e1:fb:72:68:4d:af:ec:4f:d0:63:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f728c22b0250275fa6eb734ba00e790f7e37a550 Validity Not Before: Dec 19 04:02:24 2025 GMT Not After : Dec 20 04:02:24 2025 GMT Subject: CN=93928fcbd6b806f2190e3e58797105737673efc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:95:0e:85:15:92:31:ea:9f:ae:97:b1:d2:29: bb:1d:da:77:d5:02:41:f9:fe:df:ee:f1:43:20:01: e8:2f:7a:64:bf:ca:b7:35:78:8d:75:38:b2:20:38: 61:11:9f:2a:b2:39:23:3c:7d:86:68:ec:d0:40:ff: 8d:ac:23:e7:b8:67:d5:1b:03:32:38:f2:f5:86:42: 5b:a5:cd:8e:6f:cb:f6:65:7e:b0:0e:70:0c:98:6b: b5:ed:f1:fa:dc:bd:e3:a9:5d:7b:39:27:4c:59:4a: 14:94:47:c8:b0:c9:6e:88:bb:79:c4:34:eb:61:40: a3:78:b0:53:a7:b9:70:a1:19:86:1d:ce:8a:73:4e: e0:80:19:df:6d:cc:56:83:e5:13:a6:33:a2:12:66: 07:2f:09:87:c8:f3:2c:41:85:47:30:80:92:63:7a: 30:a5:ed:b2:d5:cd:fb:ff:98:a5:b9:ca:5f:9d:2f: 7b:67:e4:b0:7c:b2:f1:f4:f2:46:95:75:88:84:17: 59:e9:5e:92:9e:b3:bf:3b:af:60:d7:28:79:be:92: 6f:04:85:7e:52:0d:c1:95:ab:83:06:b3:5a:a0:61: 55:a7:8d:14:ba:4b:72:4f:60:c8:d3:1a:55:7e:e2: 28:ee:b9:1d:53:9a:54:ea:48:a7:04:26:76:00:49: 20:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:92:8F:CB:D6:B8:06:F2:19:0E:3E:58:79:71:05:73:76:73:EF:C9 X509v3 Authority Key Identifier: keyid:F7:28:C2:2B:02:50:27:5F:A6:EB:73:4B:A0:0E:79:0F:7E:37:A5:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yjCKwJQJ1-m63NLoA55D343pVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c912e6-b39d-4168-8c5f-06f64eb00566/1/9yjCKwJQJ1-m63NLoA55D343pVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:e5:93:cf:16:be:ef:12:91:2e:15:b7:81:dd:07:c4:d3:57: 4f:ce:fd:46:6e:e7:03:8a:b7:13:fe:18:97:4e:f7:f4:8c:b4: 15:38:ce:d1:a9:fd:8b:04:ea:5b:6a:fc:f9:db:46:67:bc:db: 94:4a:72:18:65:15:20:a8:f3:22:77:db:44:eb:c1:b6:20:87: 6c:e1:af:e0:da:f5:19:c1:b5:b8:f7:18:d6:40:c2:eb:ce:87: ca:8b:f1:cc:4a:10:b5:05:91:ad:d4:7d:3f:47:15:db:94:b6: b5:36:cd:4a:9e:f9:57:8c:b7:ab:e7:9c:a1:ce:53:e4:4e:38: 22:30:80:ef:60:38:32:79:ea:c3:7a:eb:40:b5:3b:58:a5:46: 92:52:c7:97:d1:bb:07:37:b5:70:75:05:1d:67:b6:33:34:26: e5:0c:51:e9:44:39:16:15:8c:10:90:09:1e:14:7f:e0:75:bb: e5:ab:93:2f:65:8c:c4:e4:dc:56:16:4b:36:26:aa:fa:0f:8a: 47:ee:84:d7:19:c9:c7:68:08:69:b0:1b:7c:c0:46:fb:8d:b8: 74:3b:40:7d:a6:8a:ad:87:cb:66:fa:bf:12:ae:1e:90:97:8b: 0a:32:3e:51:25:00:8b:95:16:d5:9c:93:7c:37:b8:d2:b1:71: a9:2a:7c:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xevmOeH7cmhNr+xP0GOmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MjhjMjJiMDI1MDI3NWZhNmViNzM0YmEwMGU3OTBmN2Uz N2E1NTAwHhcNMjUxMjE5MDQwMjI0WhcNMjUxMjIwMDQwMjI0WjAzMTEwLwYDVQQD Eyg5MzkyOGZjYmQ2YjgwNmYyMTkwZTNlNTg3OTcxMDU3Mzc2NzNlZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopUOhRWSMeqfrpex0im7Hdp31QJB +f7f7vFDIAHoL3pkv8q3NXiNdTiyIDhhEZ8qsjkjPH2GaOzQQP+NrCPnuGfVGwMy OPL1hkJbpc2Ob8v2ZX6wDnAMmGu17fH63L3jqV17OSdMWUoUlEfIsMluiLt5xDTr YUCjeLBTp7lwoRmGHc6Kc07ggBnfbcxWg+UTpjOiEmYHLwmHyPMsQYVHMICSY3ow pe2y1c37/5ilucpfnS97Z+SwfLLx9PJGlXWIhBdZ6V6SnrO/O69g1yh5vpJvBIV+ Ug3BlauDBrNaoGFVp40UuktyT2DI0xpVfuIo7rkdU5pU6kinBCZ2AEkgmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOSj8vWuAbyGQ4+WHlxBXN2c+/JMB8GA1UdIwQY MBaAFPcowisCUCdfputzS6AOeQ9+N6VQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXlqQ0t3SlFKMS1tNjNOTG9BNTVEMzQzcFZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9jOTEyZTYtYjM5ZC00MTY4LThjNWYt MDZmNjRlYjAwNTY2LzEvOXlqQ0t3SlFKMS1tNjNOTG9BNTVEMzQzcFZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9jOTEyZTYtYjM5ZC00MTY4LThjNWYtMDZmNjRlYjAwNTY2 LzEvOXlqQ0t3SlFKMS1tNjNOTG9BNTVEMzQzcFZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIeWTzxa+ 7xKRLhW3gd0HxNNXT879Rm7nA4q3E/4Yl0739Iy0FTjO0an9iwTqW2r8+dtGZ7zb lEpyGGUVIKjzInfbROvBtiCHbOGv4Nr1GcG1uPcY1kDC686HyovxzEoQtQWRrdR9 P0cV25S2tTbNSp75V4y3q+ecoc5T5E44IjCA72A4Mnnqw3rrQLU7WKVGklLHl9G7 Bze1cHUFHWe2MzQm5QxR6UQ5FhWMEJAJHhR/4HW75auTL2WMxOTcVhZLNiaq+g+K R+6E1xnJx2gIabAbfMBG+424dDtAfaaKrYfLZvq/Eq4ekJeLCjI+USUAi5UW1ZyT fDe40rFxqSp82w== -----END CERTIFICATE-----Generated at Fri Dec 19 08:42:47 2025 by rpki-client