This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft File: 1-V9aNXOMMini9DlFAMMiyCdal6I.mft (raw, json) Hash identifier: pKlIVb8UDy0QlQuxq06/KLQ5l7wwaMT0iFatq9KcL44= Subject key identifier: 5C:E5:46:F2:72:8D:35:F6:4B:0E:25:12:2A:1A:EC:BA:CF:F3:FC:9E Authority key identifier: F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2 Certificate issuer: /CN=f95f5a35738c3229e2f4394500c322c8275a97a2 Certificate serial: 019AF19B408CF467444F5F1767170130BE8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft Manifest number: 1496 Signing time: Sat 06 Dec 2025 03:01:14 +0000 Manifest this update: Sat 06 Dec 2025 03:01:14 +0000 Manifest next update: Sun 07 Dec 2025 03:01:14 +0000 Files and hashes: 1: 1-V9aNXOMMini9DlFAMMiyCdal6I.crl (hash: M4hSkf46tQD2a27Zuv35w0/Xf/1ruhWFHjedN/V53C0=) 2: k_l8rtQi2P6fa9dQhkQ5j5jaCYE.roa (hash: sMo/6l6OJgyWFVqU8cFbnDYPktbERaDpmId+0GVplIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:40:8c:f4:67:44:4f:5f:17:67:17:01:30:be:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f95f5a35738c3229e2f4394500c322c8275a97a2 Validity Not Before: Dec 6 03:01:14 2025 GMT Not After : Dec 7 03:01:14 2025 GMT Subject: CN=5ce546f2728d35f64b0e25122a1aecbacff3fc9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2a:95:bd:2d:56:ce:dc:b9:4f:c7:9e:03:5e: 5d:69:0c:a9:47:8e:e2:9c:6f:0f:0f:45:b2:5c:d0: 78:e4:7a:30:27:f7:0c:28:2a:e4:cc:25:c7:f3:c8: 88:65:4f:f7:33:c5:a6:6c:11:68:1b:a5:d2:38:46: c6:21:e3:68:72:8d:79:87:98:73:f1:b9:fe:55:bf: 0d:6e:f1:e1:79:eb:27:73:ef:ee:75:5c:f7:57:81: 4b:37:55:e2:94:35:e8:a0:00:5a:d8:94:4d:35:a2: 5e:38:67:09:ec:cb:f3:36:7b:88:a9:22:16:d1:93: 36:c6:69:34:b4:62:26:6a:a5:b1:ff:82:bd:2e:2b: 75:57:9c:c4:5c:fd:c7:73:8b:07:e8:fa:7a:01:84: 35:de:7e:4e:1b:8f:ac:41:4c:26:a5:09:7d:23:4c: 4e:e3:54:f0:ed:f9:20:e0:4f:28:09:f7:7c:1b:99: f9:d0:d0:94:7a:20:b0:f3:88:f5:06:ab:af:69:3a: 82:49:45:4e:e2:4e:7e:96:51:e5:76:a8:cf:fc:4c: b0:97:4a:46:f2:7b:1e:d8:da:68:d9:76:61:d1:2a: a3:61:8b:13:ad:f1:29:06:a4:7a:eb:68:f5:cd:e9: 88:be:b0:7a:9e:25:56:dc:01:05:25:1c:84:bd:bb: 16:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E5:46:F2:72:8D:35:F6:4B:0E:25:12:2A:1A:EC:BA:CF:F3:FC:9E X509v3 Authority Key Identifier: keyid:F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:f0:37:a8:98:58:34:f0:20:ed:7a:bd:b7:c9:5e:0e:92:db: b0:e8:1f:f6:fe:5c:56:88:cd:ee:95:05:e5:db:60:c0:2a:99: c5:76:e0:bb:c7:a0:ab:bc:ae:ee:00:21:97:e6:e5:36:a5:58: cf:5c:21:5b:66:61:e4:5b:f2:ce:94:28:42:89:9f:a7:f9:0a: fb:9a:75:2d:45:00:b7:90:43:45:86:59:00:cc:b3:0f:5c:04: f4:0f:83:45:a5:a3:d7:7b:d4:52:29:87:11:0d:76:31:b4:c7: ff:ec:c8:41:b4:96:8a:31:a5:be:21:2e:de:f2:df:61:6f:71: 5e:b6:de:aa:cb:f9:2e:29:dd:a2:7c:07:43:ee:76:e3:b1:6b: 4e:75:31:5b:26:b6:37:fd:c7:71:1a:06:a5:a0:fc:44:ad:c4: 13:7a:10:f1:0e:48:ec:7c:42:56:2b:ab:dd:50:06:5c:3e:f3: 26:ff:8b:ab:7c:2c:56:07:e8:9b:98:6f:59:ae:7d:74:d1:ff: de:c4:56:4e:d0:42:83:bb:55:2e:11:74:a5:71:9e:d6:49:03: 50:ae:d4:1e:a5:4f:9a:96:66:c4:9b:14:db:f2:df:76:2c:2a: b0:2d:44:1c:d9:fc:7f:86:c3:c2:ad:bf:52:c7:a0:fc:0a:f8: 74:18:d6:14 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrxm0CM9GdET18XZxcBML6PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NWY1YTM1NzM4YzMyMjllMmY0Mzk0NTAwYzMyMmM4Mjc1 YTk3YTIwHhcNMjUxMjA2MDMwMTE0WhcNMjUxMjA3MDMwMTE0WjAzMTEwLwYDVQQD Eyg1Y2U1NDZmMjcyOGQzNWY2NGIwZTI1MTIyYTFhZWNiYWNmZjNmYzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCqVvS1Wzty5T8eeA15daQypR47i nG8PD0WyXNB45HowJ/cMKCrkzCXH88iIZU/3M8WmbBFoG6XSOEbGIeNoco15h5hz 8bn+Vb8NbvHheesnc+/udVz3V4FLN1XilDXooABa2JRNNaJeOGcJ7MvzNnuIqSIW 0ZM2xmk0tGImaqWx/4K9Lit1V5zEXP3Hc4sH6Pp6AYQ13n5OG4+sQUwmpQl9I0xO 41Tw7fkg4E8oCfd8G5n50NCUeiCw84j1BquvaTqCSUVO4k5+llHldqjP/Eywl0pG 8nse2Npo2XZh0SqjYYsTrfEpBqR662j1zemIvrB6niVW3AEFJRyEvbsWFwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFzlRvJyjTX2Sw4lEioa7LrP8/yeMB8GA1UdIwQY MBaAFPlfWjVzjDIp4vQ5RQDDIsgnWpeiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1WOWFOWE9NTWluaTlEbEZBTU1peUNkYWw2SS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvZDQ5YzIxLWRlYWQtNGRjNC05NDc4 LWExMGI3Y2M5OGJjOC8xLzEtVjlhTlhPTU1pbmk5RGxGQU1NaXlDZGFsNkkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2QxL2Q0OWMyMS1kZWFkLTRkYzQtOTQ3OC1hMTBiN2NjOThi YzgvMS8xLVY5YU5YT01NaW5pOURsRkFNTWl5Q2RhbDZJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkfA3 qJhYNPAg7Xq9t8leDpLbsOgf9v5cVojN7pUF5dtgwCqZxXbgu8egq7yu7gAhl+bl NqVYz1whW2Zh5FvyzpQoQomfp/kK+5p1LUUAt5BDRYZZAMyzD1wE9A+DRaWj13vU UimHEQ12MbTH/+zIQbSWijGlviEu3vLfYW9xXrbeqsv5LindonwHQ+5247FrTnUx Wya2N/3HcRoGpaD8RK3EE3oQ8Q5I7HxCViur3VAGXD7zJv+Lq3wsVgfom5hvWa59 dNH/3sRWTtBCg7tVLhF0pXGe1kkDUK7UHqVPmpZmxJsU2/LfdiwqsC1EHNn8f4bD wq2/Useg/Ar4dBjWFA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:34 2025 by rpki-client