This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft File: 9RKnWcZemEm7fFMtXrtESZpRW_8.mft (raw, json) Hash identifier: m4er5OZKOl8Le6qxt741qAXVOafutAYoIbTyBTI6RE0= Subject key identifier: B3:9F:85:FD:99:55:7B:97:BB:99:F2:72:A7:AE:1F:5B:F3:9F:32:7A Authority key identifier: F5:12:A7:59:C6:5E:98:49:BB:7C:53:2D:5E:BB:44:49:9A:51:5B:FF Certificate issuer: /CN=f512a759c65e9849bb7c532d5ebb44499a515bff Certificate serial: 019AF2ADC33D87C3A5A18782202B79FA4F7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft Manifest number: 072F Signing time: Sat 06 Dec 2025 08:01:05 +0000 Manifest this update: Sat 06 Dec 2025 08:01:05 +0000 Manifest next update: Sun 07 Dec 2025 08:01:05 +0000 Files and hashes: 1: 9RKnWcZemEm7fFMtXrtESZpRW_8.crl (hash: Yezv5PCEY1N1HQcbBCJrpE4kAVnzSojA9WEriHHRchw=) 2: PHx_cn3cwOP0zIbd-tSOarri2jU.roa (hash: jvXJa9wGshKFR0UvbJd8wg24Fv3g0IRm/OGSnIujd88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:c3:3d:87:c3:a5:a1:87:82:20:2b:79:fa:4f:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f512a759c65e9849bb7c532d5ebb44499a515bff Validity Not Before: Dec 6 08:01:05 2025 GMT Not After : Dec 7 08:01:05 2025 GMT Subject: CN=b39f85fd99557b97bb99f272a7ae1f5bf39f327a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ff:c0:e0:20:d8:2e:e2:58:6e:8f:b3:22:0d: 3f:af:65:9e:3e:27:82:4f:cb:31:74:c6:31:e0:1e: fa:4f:dc:89:ba:0c:e9:8d:c0:d4:44:26:7b:b4:0b: d4:fd:a5:43:0e:45:76:5d:7e:8a:8c:43:47:24:e5: 65:31:5e:72:00:bc:6f:fc:9f:76:a1:9a:13:b6:4a: bb:01:64:20:33:c3:96:03:33:fa:44:fe:83:41:55: 04:a6:87:1a:e1:cb:91:00:78:40:73:c6:26:22:6c: 2b:b4:34:1b:fd:cc:86:0f:0e:9b:dd:e1:1e:18:9c: 3e:b6:23:07:78:2b:58:34:2e:6d:38:cc:4a:6d:d9: 35:f1:63:49:a8:a6:e4:5f:df:4d:d3:75:9b:4a:ba: 5b:9c:ef:a4:53:32:f9:ec:c5:73:ef:c3:6e:2a:c1: 5a:89:df:a1:fc:99:c2:f8:3a:bb:43:63:b5:7e:61: be:a9:47:5f:ec:59:d9:d1:e8:97:cb:9c:50:5e:e4: 03:4e:55:c2:21:93:1a:fa:9d:9d:5a:e5:f0:34:0d: 16:22:2e:22:d0:fa:55:be:84:37:93:ec:be:aa:e9: 4f:0a:01:3f:00:a6:3b:47:cf:93:5f:b4:04:be:82: 6c:ed:24:54:fb:f1:b3:db:f4:af:55:92:1e:35:74: cb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:9F:85:FD:99:55:7B:97:BB:99:F2:72:A7:AE:1F:5B:F3:9F:32:7A X509v3 Authority Key Identifier: keyid:F5:12:A7:59:C6:5E:98:49:BB:7C:53:2D:5E:BB:44:49:9A:51:5B:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:75:70:e0:17:a2:eb:0d:30:23:50:81:84:2e:79:da:71:f1: aa:4b:97:f2:3b:36:44:2b:dd:8c:16:25:d5:b7:d4:48:6e:99: c1:49:4f:55:35:7d:72:c0:a1:61:34:22:ae:31:85:fa:18:c4: 9c:b3:a5:12:df:69:2a:89:22:6b:ca:c1:57:71:98:3c:3f:d6: 2f:02:da:d5:3e:0a:d3:f2:a4:71:56:fc:93:0e:6f:ec:0a:67: f1:b3:e9:76:bb:7b:62:bb:ce:77:ff:0d:66:ca:ef:10:d2:0d: f6:31:f2:11:00:e7:76:f3:96:0c:23:2d:ee:8f:57:49:93:90: 75:5e:22:bb:65:2c:c5:fa:fe:5a:93:64:2c:a8:f1:34:74:70: ec:34:bd:54:3d:d3:42:84:51:2a:1c:c4:2c:00:ed:e1:8e:fd: 84:51:bc:52:09:a2:b9:79:cc:6e:c0:8e:5b:fe:37:a4:1f:20: 67:7e:82:8a:fa:8e:8e:d5:e6:8d:cf:12:f4:bc:1d:4a:ba:b2: 8f:18:73:21:36:2b:85:54:60:92:b9:2e:1c:76:6c:87:4a:cc: 6b:44:44:a8:95:56:f0:21:6a:46:8c:7e:09:ee:41:b7:95:25: b5:08:d6:97:53:d5:fe:91:a6:dd:fa:c4:f4:b9:a1:97:6e:70: 66:d7:af:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrcM9h8OloYeCICt5+k99MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MTJhNzU5YzY1ZTk4NDliYjdjNTMyZDVlYmI0NDQ5OWE1 MTViZmYwHhcNMjUxMjA2MDgwMTA1WhcNMjUxMjA3MDgwMTA1WjAzMTEwLwYDVQQD EyhiMzlmODVmZDk5NTU3Yjk3YmI5OWYyNzJhN2FlMWY1YmYzOWYzMjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf/A4CDYLuJYbo+zIg0/r2WePieC T8sxdMYx4B76T9yJugzpjcDURCZ7tAvU/aVDDkV2XX6KjENHJOVlMV5yALxv/J92 oZoTtkq7AWQgM8OWAzP6RP6DQVUEpoca4cuRAHhAc8YmImwrtDQb/cyGDw6b3eEe GJw+tiMHeCtYNC5tOMxKbdk18WNJqKbkX99N03WbSrpbnO+kUzL57MVz78NuKsFa id+h/JnC+Dq7Q2O1fmG+qUdf7FnZ0eiXy5xQXuQDTlXCIZMa+p2dWuXwNA0WIi4i 0PpVvoQ3k+y+qulPCgE/AKY7R8+TX7QEvoJs7SRU+/Gz2/SvVZIeNXTLzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLOfhf2ZVXuXu5nycqeuH1vznzJ6MB8GA1UdIwQY MBaAFPUSp1nGXphJu3xTLV67REmaUVv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVJLbldjWmVtRW03ZkZNdFhydEVTWnBSV184LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82ZTQ1ODItZGZlOS00MTQ2LThjMTQt OGFhZGY3YTk4NTZiLzEvOVJLbldjWmVtRW03ZkZNdFhydEVTWnBSV184Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS82ZTQ1ODItZGZlOS00MTQ2LThjMTQtOGFhZGY3YTk4NTZi LzEvOVJLbldjWmVtRW03ZkZNdFhydEVTWnBSV184LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbnVw4Bei 6w0wI1CBhC552nHxqkuX8js2RCvdjBYl1bfUSG6ZwUlPVTV9csChYTQirjGF+hjE nLOlEt9pKokia8rBV3GYPD/WLwLa1T4K0/KkcVb8kw5v7Apn8bPpdrt7YrvOd/8N ZsrvENIN9jHyEQDndvOWDCMt7o9XSZOQdV4iu2Usxfr+WpNkLKjxNHRw7DS9VD3T QoRRKhzELADt4Y79hFG8UgmiuXnMbsCOW/43pB8gZ36CivqOjtXmjc8S9LwdSrqy jxhzITYrhVRgkrkuHHZsh0rMa0REqJVW8CFqRox+Ce5Bt5UltQjWl1PV/pGm3frE 9Lmhl25wZtevwg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:17:03 2025 by rpki-client