This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft File: 9jOGnDZCtefqAii_DgspXO_MTd8.mft (raw, json) Hash identifier: x8Av+7+3fl3Ae5a3bKFWCmRHWP6udyZHHV1E/wDhPwY= Subject key identifier: 0F:29:0E:1D:C0:97:EB:5D:48:7B:F7:42:09:23:01:E0:8F:F3:5E:30 Authority key identifier: F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF Certificate issuer: /CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf Certificate serial: 019AF1D25318E24DAF5AEB3BD7007C8FFB3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft Manifest number: 11D7 Signing time: Sat 06 Dec 2025 04:01:24 +0000 Manifest this update: Sat 06 Dec 2025 04:01:24 +0000 Manifest next update: Sun 07 Dec 2025 04:01:24 +0000 Files and hashes: 1: 9jOGnDZCtefqAii_DgspXO_MTd8.crl (hash: koNyVvlrqjNub/lpQL6f994hKHBe80MS/o3xDv+wdvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:53:18:e2:4d:af:5a:eb:3b:d7:00:7c:8f:fb:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf Validity Not Before: Dec 6 04:01:24 2025 GMT Not After : Dec 7 04:01:24 2025 GMT Subject: CN=0f290e1dc097eb5d487bf742092301e08ff35e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:bc:81:da:25:72:76:b5:ea:4c:e4:3c:e4:f4: 61:08:de:09:ec:1e:69:f6:1b:7d:a7:f7:b2:1d:75: 33:66:71:5c:35:60:9e:30:0e:05:16:45:56:2c:e7: a9:8e:b4:46:85:f6:14:68:77:a0:70:d6:7d:b2:d7: 6f:4c:43:86:7f:81:4a:6a:d9:c9:45:53:99:d8:d6: b8:10:ba:08:4f:a8:83:5b:26:1b:64:72:dc:a9:ac: c1:39:5a:35:55:d6:35:a5:0e:f8:1f:6e:0a:00:8a: 12:5a:30:62:8b:da:7b:5b:f8:91:bb:31:48:1b:c2: 4a:1b:9b:e1:c2:0e:0e:24:67:a1:21:9e:ed:df:c5: 76:d3:63:88:f7:85:38:e5:47:6c:24:49:6a:c5:69: 75:1c:10:95:7b:13:e9:76:6f:31:2a:19:3e:ac:2d: b0:d7:42:43:f2:5a:77:23:9d:50:4d:6e:0b:2b:6e: 68:ac:e2:bc:e4:29:8c:30:a8:ed:36:5e:34:50:19: 2d:d4:62:2d:66:bf:4e:5f:b9:6a:c9:c8:d0:71:41: 3d:bf:74:a3:44:98:8a:bd:09:dd:48:21:80:c0:37: 60:1d:db:29:4d:1e:87:be:23:6e:e5:ad:07:cc:92: a5:bc:29:9b:41:06:e6:e8:91:05:71:88:6a:01:db: 62:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:29:0E:1D:C0:97:EB:5D:48:7B:F7:42:09:23:01:E0:8F:F3:5E:30 X509v3 Authority Key Identifier: keyid:F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ee:d9:14:cd:7e:bc:66:b6:9a:52:9b:3b:df:bf:3b:9c:90: 6e:f8:64:c2:68:42:b6:59:8c:de:c5:a7:6d:f5:62:08:54:63: e6:57:e4:8c:a6:99:06:f8:91:ec:53:74:33:a4:75:cd:71:96: 4a:32:dd:c8:a1:e8:60:c2:9b:8b:c8:eb:60:7d:8f:13:65:2c: 36:61:04:28:e3:ae:24:8c:0e:96:1f:c5:f3:39:40:7b:fb:eb: 7d:6a:57:ce:17:30:01:60:8d:cb:ab:88:f9:6a:df:a5:68:9e: 3e:3a:8e:0b:c0:e0:75:8d:e2:2d:35:0c:c9:1f:e9:ff:3a:fc: 08:bd:b6:18:0f:0d:29:b8:c4:f5:42:d8:aa:2b:00:c6:49:ad: ee:09:69:35:39:05:cc:a1:33:f9:e2:0c:e7:a5:f3:44:2e:5a: d8:d3:ad:a8:b2:de:ef:8d:f9:a9:8e:62:53:1c:38:b1:e0:e2: a4:e2:57:ab:d4:8e:5e:32:5e:35:78:95:66:1f:36:90:ed:a3: 24:14:f1:b6:09:15:27:1b:f3:51:6e:ea:11:3e:9d:c0:9f:8c: 11:2c:30:9b:40:09:56:6d:12:a3:4c:c6:5d:fe:88:27:84:2b: 58:9d:75:11:7d:2b:13:a4:a9:4b:08:3e:80:37:75:28:af:32: b4:ca:e7:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lMY4k2vWus71wB8j/s8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MzM4NjljMzY0MmI1ZTdlYTAyMjhiZjBlMGIyOTVjZWZj YzRkZGYwHhcNMjUxMjA2MDQwMTI0WhcNMjUxMjA3MDQwMTI0WjAzMTEwLwYDVQQD EygwZjI5MGUxZGMwOTdlYjVkNDg3YmY3NDIwOTIzMDFlMDhmZjM1ZTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37yB2iVydrXqTOQ85PRhCN4J7B5p 9ht9p/eyHXUzZnFcNWCeMA4FFkVWLOepjrRGhfYUaHegcNZ9stdvTEOGf4FKatnJ RVOZ2Na4ELoIT6iDWyYbZHLcqazBOVo1VdY1pQ74H24KAIoSWjBii9p7W/iRuzFI G8JKG5vhwg4OJGehIZ7t38V202OI94U45UdsJElqxWl1HBCVexPpdm8xKhk+rC2w 10JD8lp3I51QTW4LK25orOK85CmMMKjtNl40UBkt1GItZr9OX7lqycjQcUE9v3Sj RJiKvQndSCGAwDdgHdspTR6HviNu5a0HzJKlvCmbQQbm6JEFcYhqAdtiuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8pDh3Al+tdSHv3QgkjAeCP814wMB8GA1UdIwQY MBaAFPYzhpw2QrXn6gIovw4LKVzvzE3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWpPR25EWkN0ZWZxQWlpX0Rnc3BYT19NVGQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82ZGE1NjItYTgzNi00OGNjLWFhNTct OGM0YmI0NDg1ZjM0LzEvOWpPR25EWkN0ZWZxQWlpX0Rnc3BYT19NVGQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC82ZGE1NjItYTgzNi00OGNjLWFhNTctOGM0YmI0NDg1ZjM0 LzEvOWpPR25EWkN0ZWZxQWlpX0Rnc3BYT19NVGQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAde7ZFM1+ vGa2mlKbO9+/O5yQbvhkwmhCtlmM3sWnbfViCFRj5lfkjKaZBviR7FN0M6R1zXGW SjLdyKHoYMKbi8jrYH2PE2UsNmEEKOOuJIwOlh/F8zlAe/vrfWpXzhcwAWCNy6uI +WrfpWiePjqOC8DgdY3iLTUMyR/p/zr8CL22GA8NKbjE9ULYqisAxkmt7glpNTkF zKEz+eIM56XzRC5a2NOtqLLe7435qY5iUxw4seDipOJXq9SOXjJeNXiVZh82kO2j JBTxtgkVJxvzUW7qET6dwJ+MESwwm0AJVm0So0zGXf6IJ4QrWJ11EX0rE6SpSwg+ gDd1KK8ytMrnhA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:31:24 2025 by rpki-client