This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft File: 9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft (raw, json) Hash identifier: iB9bsPXdjYH43Po2xl9fArygWVH2FgnR69BBbGVBysE= Subject key identifier: AD:1B:86:AD:18:2D:72:C4:5F:1A:73:3D:3A:56:F5:A6:BF:26:AC:72 Authority key identifier: F5:5E:5E:0D:81:58:93:A6:8A:40:00:08:05:A1:8A:E6:B9:F6:03:C0 Certificate issuer: /CN=f55e5e0d815893a68a40000805a18ae6b9f603c0 Certificate serial: 019AF19B417F4FCB4D2B3A261CB44EE87D92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft Manifest number: 16EF Signing time: Sat 06 Dec 2025 03:01:15 +0000 Manifest this update: Sat 06 Dec 2025 03:01:15 +0000 Manifest next update: Sun 07 Dec 2025 03:01:15 +0000 Files and hashes: 1: 9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl (hash: etbHBNDtBekf/TnKbyIhK1vU9LCbtUY/FeKqXgyDWjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:41:7f:4f:cb:4d:2b:3a:26:1c:b4:4e:e8:7d:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f55e5e0d815893a68a40000805a18ae6b9f603c0 Validity Not Before: Dec 6 03:01:15 2025 GMT Not After : Dec 7 03:01:15 2025 GMT Subject: CN=ad1b86ad182d72c45f1a733d3a56f5a6bf26ac72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:17:c7:1b:a7:b2:03:c4:14:fe:f7:25:40:d1: 58:7e:be:f2:f6:34:23:3f:41:a1:8b:6a:c2:ee:2f: bc:f4:7a:4b:38:5b:0a:8b:57:d9:6a:74:3b:5a:d3: 21:60:ec:5d:e0:e1:85:1e:6e:d3:64:e7:09:ed:a4: 59:3f:3b:f2:35:ba:a3:a3:fd:32:b6:19:63:18:f7: a4:aa:e1:ed:98:bb:d4:cb:ec:b2:e6:7d:6a:27:1b: c9:7f:39:b7:66:cb:15:95:c7:58:76:b8:30:ec:c5: d0:4c:a1:5d:93:7d:e0:29:7e:6d:03:62:ba:d4:b0: 81:b2:2f:33:d0:e3:eb:2b:84:ce:d4:72:bc:ca:7f: 68:6a:ed:56:25:4f:5b:06:66:87:01:9a:ce:8e:d8: 60:a1:8d:b4:6b:f1:73:b4:50:bf:80:74:5f:ad:08: a4:e8:80:1f:89:ae:e8:79:fa:ab:2e:dc:5b:6c:d6: 69:45:7b:71:83:fa:44:9a:1f:6a:1a:c4:a4:43:5d: b3:6f:94:0d:00:fc:f0:7a:3c:6c:64:59:b5:2b:6e: 45:15:77:b8:bb:a5:6e:45:4e:cc:79:a6:7a:1c:f1: af:75:a8:ea:a5:3d:be:f1:d0:35:06:05:28:e2:70: d3:01:30:dc:e1:c0:73:52:46:73:16:7f:7e:43:87: 19:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:1B:86:AD:18:2D:72:C4:5F:1A:73:3D:3A:56:F5:A6:BF:26:AC:72 X509v3 Authority Key Identifier: keyid:F5:5E:5E:0D:81:58:93:A6:8A:40:00:08:05:A1:8A:E6:B9:F6:03:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:19:fb:18:f3:da:65:03:c6:49:19:d3:94:81:a4:34:96:6b: 09:4a:c6:f4:aa:d4:de:e1:9b:fc:96:67:fa:b3:a9:14:40:36: 8e:13:af:dd:7f:08:25:09:2f:1d:13:f0:9a:f0:4f:55:57:49: 2b:54:ca:da:8d:60:11:18:07:d5:38:bf:1d:1a:51:cb:6b:9f: ee:f4:8f:d0:f6:05:aa:c2:b7:d0:05:e6:cb:84:a8:f2:ed:d0: 1d:1c:fe:eb:b7:c4:b0:41:1d:15:2b:f5:50:e6:23:2b:5f:d6: 49:1e:b3:a7:04:b1:35:2a:d1:f9:43:38:5a:7a:d8:7b:12:81: 3b:4b:6a:bf:46:0c:c9:15:9d:a6:90:e9:1a:38:b0:38:c5:bb: 28:fe:b0:12:6c:06:c0:90:e1:c8:c2:73:90:32:35:c1:1f:eb: 43:b4:69:45:90:42:75:f3:69:ce:86:1a:98:f0:cd:c3:c5:a2: 50:8b:3e:87:2d:2d:5d:46:50:e6:79:95:de:93:51:9b:7e:b0: 50:12:97:6c:cd:65:74:7c:be:39:54:9f:00:98:ea:f5:d4:f0: e9:cd:e9:d4:52:ab:0c:19:96:b4:26:c8:8a:51:5b:ae:46:d4: 53:54:c3:d9:22:94:ba:7c:d6:ac:6d:34:ef:c1:29:84:61:9f: 18:b5:f3:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0F/T8tNKzomHLRO6H2SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NWU1ZTBkODE1ODkzYTY4YTQwMDAwODA1YTE4YWU2Yjlm NjAzYzAwHhcNMjUxMjA2MDMwMTE1WhcNMjUxMjA3MDMwMTE1WjAzMTEwLwYDVQQD EyhhZDFiODZhZDE4MmQ3MmM0NWYxYTczM2QzYTU2ZjVhNmJmMjZhYzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxfHG6eyA8QU/vclQNFYfr7y9jQj P0Ghi2rC7i+89HpLOFsKi1fZanQ7WtMhYOxd4OGFHm7TZOcJ7aRZPzvyNbqjo/0y thljGPekquHtmLvUy+yy5n1qJxvJfzm3ZssVlcdYdrgw7MXQTKFdk33gKX5tA2K6 1LCBsi8z0OPrK4TO1HK8yn9oau1WJU9bBmaHAZrOjthgoY20a/FztFC/gHRfrQik 6IAfia7oefqrLtxbbNZpRXtxg/pEmh9qGsSkQ12zb5QNAPzwejxsZFm1K25FFXe4 u6VuRU7MeaZ6HPGvdajqpT2+8dA1BgUo4nDTATDc4cBzUkZzFn9+Q4cZ0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0bhq0YLXLEXxpzPTpW9aa/JqxyMB8GA1UdIwQY MBaAFPVeXg2BWJOmikAACAWhiua59gPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVY1ZURZRllrNmFLUUFBSUJhR0s1cm4yQThBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8yOWY3MDctNDhlMC00MGU0LTk0Y2Et OGZjYjUwY2FkODQwLzEvOVY1ZURZRllrNmFLUUFBSUJhR0s1cm4yQThBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8yOWY3MDctNDhlMC00MGU0LTk0Y2EtOGZjYjUwY2FkODQw LzEvOVY1ZURZRllrNmFLUUFBSUJhR0s1cm4yQThBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvBn7GPPa ZQPGSRnTlIGkNJZrCUrG9KrU3uGb/JZn+rOpFEA2jhOv3X8IJQkvHRPwmvBPVVdJ K1TK2o1gERgH1Ti/HRpRy2uf7vSP0PYFqsK30AXmy4So8u3QHRz+67fEsEEdFSv1 UOYjK1/WSR6zpwSxNSrR+UM4WnrYexKBO0tqv0YMyRWdppDpGjiwOMW7KP6wEmwG wJDhyMJzkDI1wR/rQ7RpRZBCdfNpzoYamPDNw8WiUIs+hy0tXUZQ5nmV3pNRm36w UBKXbM1ldHy+OVSfAJjq9dTw6c3p1FKrDBmWtCbIilFbrkbUU1TD2SKUunzWrG00 78EphGGfGLXzmg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:18:33 2025 by rpki-client