This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft File: 9b9MGPes3uTH81jdS65egAmF5ww.mft (raw, json) Hash identifier: sOxD+q6muz66r0Q8HqkwsIbx1+SFYP3yX7nYhaszEes= Subject key identifier: 83:33:C6:DB:26:95:5D:37:96:20:C9:AC:05:C1:B9:C1:C3:F9:8E:0B Authority key identifier: F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C Certificate issuer: /CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c Certificate serial: 019AF50A0D4258C207604CA1324DE21889B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft Manifest number: 07CA Signing time: Sat 06 Dec 2025 19:01:07 +0000 Manifest this update: Sat 06 Dec 2025 19:01:07 +0000 Manifest next update: Sun 07 Dec 2025 19:01:07 +0000 Files and hashes: 1: 9b9MGPes3uTH81jdS65egAmF5ww.crl (hash: u5Ju5A7sqcBzYfhdz9U0RrpGPnG6XPRWOXW3UWTdC7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:0d:42:58:c2:07:60:4c:a1:32:4d:e2:18:89:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c Validity Not Before: Dec 6 19:01:07 2025 GMT Not After : Dec 7 19:01:07 2025 GMT Subject: CN=8333c6db26955d379620c9ac05c1b9c1c3f98e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:38:5c:27:29:5b:4d:c3:4c:27:ec:03:10:9d: b5:2a:6a:1c:27:59:cf:ae:b8:a3:64:9e:0d:a0:48: 3a:ab:46:35:bd:14:7b:bc:59:68:fe:18:7a:2a:f8: b4:02:05:0b:f3:bc:80:88:50:4e:18:9c:f4:2b:27: c4:a9:b3:a3:e1:c7:e7:35:85:7d:43:86:8b:ed:63: 3f:ca:e4:9e:c5:45:9f:eb:10:9b:64:34:19:a9:05: 3e:4a:cb:20:ad:86:95:fa:d5:c3:2f:c2:ab:d9:28: e0:20:45:9f:7a:d6:5a:bc:9c:1b:65:89:ea:99:ff: 0e:b7:f9:df:a3:50:00:52:2c:18:e8:1f:99:75:7f: 2b:cf:7b:31:60:a2:aa:bd:c7:b9:c6:ef:5d:0e:2a: f4:34:17:ac:10:f8:82:b4:ca:b4:c9:ca:74:25:cc: f1:3c:b4:84:b5:dc:2a:81:4b:75:03:9a:1a:7a:7b: ba:63:6f:ee:a4:17:c9:b7:83:d6:4f:2f:61:9a:f3: 88:6a:8e:ac:d0:a4:f1:fa:8d:2c:bb:c0:8b:af:77: 09:68:00:80:ef:bb:b8:58:f8:b9:a4:40:7b:89:d0: b1:2c:b1:e9:17:8e:b6:0e:59:d0:a1:39:3d:9a:6d: bb:14:c3:f1:f2:ea:42:f4:7c:84:7b:a5:70:f5:3d: 2e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:33:C6:DB:26:95:5D:37:96:20:C9:AC:05:C1:B9:C1:C3:F9:8E:0B X509v3 Authority Key Identifier: keyid:F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:16:22:cf:b6:56:39:7c:00:5f:10:2a:72:bf:79:ca:16:41: eb:14:e7:cd:7f:db:bd:f5:3b:c8:c3:aa:a3:2c:de:08:e7:12: 2c:95:b8:74:a2:91:81:27:41:9b:e4:c2:11:c2:ad:de:68:74: 24:d7:e7:ff:6d:6c:74:3f:36:23:b4:74:34:b5:03:48:db:af: d4:43:c0:02:01:47:ef:d1:69:60:88:15:19:da:f8:23:d3:26: b0:99:9e:61:ce:c9:ac:ac:8a:a1:37:fe:21:03:2e:10:f9:16: 62:d0:0b:7d:9f:1a:7c:e8:50:98:af:56:7f:20:e1:c4:84:25: 8c:07:9c:ae:fe:88:51:e9:63:09:f4:48:b0:92:8c:28:f5:6a: c1:bf:2e:a3:3f:79:d6:3c:51:fd:62:78:0b:22:da:07:2b:fe: 54:b9:de:a6:2c:40:3d:7e:b9:f2:ec:02:7e:63:85:a5:b3:00: 32:e7:9a:82:31:8b:7b:73:1f:eb:a6:51:d7:09:72:53:d1:e1: 6c:d3:7f:1a:89:50:e2:c2:07:30:ea:a1:15:18:01:ca:34:89: 3a:ee:2a:ac:c1:70:da:a8:9f:64:29:d2:bc:fe:04:b0:66:84: 00:42:7f:c0:6f:2a:bc:f6:5a:05:6b:4f:2b:4c:d2:e1:98:6c: bc:a2:9e:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cg1CWMIHYEyhMk3iGImzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1YmY0YzE4ZjdhY2RlZTRjN2YzNThkZDRiYWU1ZTgwMDk4 NWU3MGMwHhcNMjUxMjA2MTkwMTA3WhcNMjUxMjA3MTkwMTA3WjAzMTEwLwYDVQQD Eyg4MzMzYzZkYjI2OTU1ZDM3OTYyMGM5YWMwNWMxYjljMWMzZjk4ZTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDhcJylbTcNMJ+wDEJ21KmocJ1nP rrijZJ4NoEg6q0Y1vRR7vFlo/hh6Kvi0AgUL87yAiFBOGJz0KyfEqbOj4cfnNYV9 Q4aL7WM/yuSexUWf6xCbZDQZqQU+SssgrYaV+tXDL8Kr2SjgIEWfetZavJwbZYnq mf8Ot/nfo1AAUiwY6B+ZdX8rz3sxYKKqvce5xu9dDir0NBesEPiCtMq0ycp0Jczx PLSEtdwqgUt1A5oaenu6Y2/upBfJt4PWTy9hmvOIao6s0KTx+o0su8CLr3cJaACA 77u4WPi5pEB7idCxLLHpF462DlnQoTk9mm27FMPx8upC9HyEe6Vw9T0udwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMzxtsmlV03liDJrAXBucHD+Y4LMB8GA1UdIwQY MBaAFPW/TBj3rN7kx/NY3UuuXoAJhecMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWI5TUdQZXMzdVRIODFqZFM2NWVnQW1GNXd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mMDM1MGEtNWQ2Ni00OTcwLTlhNGMt ZDJhYmQzYTkxYzkwLzEvOWI5TUdQZXMzdVRIODFqZFM2NWVnQW1GNXd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9mMDM1MGEtNWQ2Ni00OTcwLTlhNGMtZDJhYmQzYTkxYzkw LzEvOWI5TUdQZXMzdVRIODFqZFM2NWVnQW1GNXd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAghYiz7ZW OXwAXxAqcr95yhZB6xTnzX/bvfU7yMOqoyzeCOcSLJW4dKKRgSdBm+TCEcKt3mh0 JNfn/21sdD82I7R0NLUDSNuv1EPAAgFH79FpYIgVGdr4I9MmsJmeYc7JrKyKoTf+ IQMuEPkWYtALfZ8afOhQmK9WfyDhxIQljAecrv6IUeljCfRIsJKMKPVqwb8uoz95 1jxR/WJ4CyLaByv+VLnepixAPX658uwCfmOFpbMAMueagjGLe3Mf66ZR1wlyU9Hh bNN/GolQ4sIHMOqhFRgByjSJOu4qrMFw2qifZCnSvP4EsGaEAEJ/wG8qvPZaBWtP K0zS4ZhsvKKePA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:34:19 2025 by rpki-client