This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft File: 9p8HIQsohLT-pQe94id5WyZAYu0.mft (raw, json) Hash identifier: 9bN2FdPkFEmf73s6Qrefb291T0akJBJEAqum3wewk/A= Subject key identifier: 51:4F:21:59:DF:1F:3F:8E:D7:EA:0E:61:42:BD:39:17:6D:27:93:B3 Authority key identifier: F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED Certificate issuer: /CN=f69f07210b2884b4fea507bde227795b264062ed Certificate serial: 019AF54092C397D4EE1F4727D68C09590ABE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft Manifest number: 046E Signing time: Sat 06 Dec 2025 20:00:41 +0000 Manifest this update: Sat 06 Dec 2025 20:00:41 +0000 Manifest next update: Sun 07 Dec 2025 20:00:41 +0000 Files and hashes: 1: 9p8HIQsohLT-pQe94id5WyZAYu0.crl (hash: xmDyWc9v4/wTCm555BGgVXfeno5iTV46Nu3HmsZNOtg=) 2: jYwiLy6C8PrH1zmVRebb5xoCcHg.roa (hash: B/91TwKxBsOKKHQE6s1Ydkjq/nj0hd3T+71Ppy1e7kI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:92:c3:97:d4:ee:1f:47:27:d6:8c:09:59:0a:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69f07210b2884b4fea507bde227795b264062ed Validity Not Before: Dec 6 20:00:41 2025 GMT Not After : Dec 7 20:00:41 2025 GMT Subject: CN=514f2159df1f3f8ed7ea0e6142bd39176d2793b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:71:cd:a8:65:f2:3c:27:fe:40:32:ce:58:27: 24:c7:10:8a:ed:34:b8:e0:e8:43:60:e4:7f:b4:fa: be:47:e2:9e:87:64:03:45:30:a0:a7:27:01:95:49: 6b:c4:72:55:d3:bc:01:49:a4:cc:69:f8:22:23:e8: e9:7d:6a:2c:be:fb:53:10:73:df:3e:45:87:4c:ad: 0d:3b:f4:f9:d7:87:c9:5c:00:09:f5:84:dc:7c:4e: 25:84:38:c3:d2:5d:43:a7:23:71:b3:12:40:ef:54: 36:e4:c4:42:bb:3e:70:af:1e:b5:fb:02:56:e6:95: 96:27:f0:03:3c:7b:d8:9b:5f:fa:60:59:ad:98:26: df:1f:68:d2:6f:bb:2c:6d:73:bb:ec:92:e1:56:e8: e2:93:cb:4b:f1:57:d5:70:d2:fe:1d:13:98:62:1f: 0d:18:5c:e2:35:ed:1f:f8:09:c4:c4:f7:f2:a6:38: 92:be:54:df:ed:37:80:8c:05:f6:45:20:95:65:14: 72:c0:0e:0a:fa:f0:19:4d:08:18:34:fd:42:9a:66: 8a:c9:6a:0f:21:6d:12:e4:30:61:b2:89:fe:56:cc: 35:41:a9:58:77:8d:df:f1:bb:7b:01:30:9c:81:a9: ed:0b:7c:e1:0c:e9:05:d7:24:26:7d:6b:29:8c:e4: e1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:4F:21:59:DF:1F:3F:8E:D7:EA:0E:61:42:BD:39:17:6D:27:93:B3 X509v3 Authority Key Identifier: keyid:F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:02:2f:8a:57:d0:67:7c:c5:6f:7a:a1:90:3f:50:38:42:ad: 5b:38:90:37:1e:c6:38:ed:35:b2:09:2f:fc:5d:70:8e:3c:cd: 80:65:5c:b3:93:83:95:69:a5:1c:90:96:d0:cb:f8:36:82:53: a1:12:b3:08:69:d0:ed:23:7b:6e:61:18:29:81:a3:c0:86:5d: 9c:f6:4c:61:58:ba:ae:e3:09:f8:9f:88:1f:f9:64:c4:9b:aa: 24:8d:a5:d5:cd:c7:63:ef:2b:8a:7c:52:d6:7b:6e:79:4e:89: 22:0d:ac:32:14:fd:f7:e3:5d:44:2a:b1:7c:3f:34:53:bf:37: f1:95:7d:82:60:e8:cb:1b:aa:0d:bb:81:03:8a:70:9b:ef:fb: fe:9b:40:6b:8a:80:a9:28:2c:4b:11:a6:f9:57:0b:fc:4b:e9: 54:24:35:93:f8:b4:d7:f9:53:30:d6:3c:53:5a:fc:ed:b5:3c: 8f:be:3d:d1:f3:69:67:40:03:63:62:ad:72:57:96:f2:62:11: 55:f9:96:55:d1:99:fb:d1:0d:0b:7d:2f:b3:1f:1b:7f:d5:2c: be:84:92:64:99:f2:95:fe:79:84:6f:b7:d7:6a:22:94:45:57: 8f:87:cd:36:29:e8:8b:f7:ef:98:65:21:06:2e:03:28:99:a0: 2c:6b:d8:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QJLDl9TuH0cn1owJWQq+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OWYwNzIxMGIyODg0YjRmZWE1MDdiZGUyMjc3OTViMjY0 MDYyZWQwHhcNMjUxMjA2MjAwMDQxWhcNMjUxMjA3MjAwMDQxWjAzMTEwLwYDVQQD Eyg1MTRmMjE1OWRmMWYzZjhlZDdlYTBlNjE0MmJkMzkxNzZkMjc5M2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHHNqGXyPCf+QDLOWCckxxCK7TS4 4OhDYOR/tPq+R+Keh2QDRTCgpycBlUlrxHJV07wBSaTMafgiI+jpfWosvvtTEHPf PkWHTK0NO/T514fJXAAJ9YTcfE4lhDjD0l1DpyNxsxJA71Q25MRCuz5wrx61+wJW 5pWWJ/ADPHvYm1/6YFmtmCbfH2jSb7ssbXO77JLhVujik8tL8VfVcNL+HROYYh8N GFziNe0f+AnExPfypjiSvlTf7TeAjAX2RSCVZRRywA4K+vAZTQgYNP1CmmaKyWoP IW0S5DBhson+Vsw1QalYd43f8bt7ATCcgantC3zhDOkF1yQmfWspjOTheQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFPIVnfHz+O1+oOYUK9ORdtJ5OzMB8GA1UdIwQY MBaAFPafByELKIS0/qUHveIneVsmQGLtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXA4SElRc29oTFQtcFFlOTRpZDVXeVpBWXUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82YmY1MjgtYmQzNC00MGVlLWIwZGMt NDVmNjBmNDE0ZmY3LzEvOXA4SElRc29oTFQtcFFlOTRpZDVXeVpBWXUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82YmY1MjgtYmQzNC00MGVlLWIwZGMtNDVmNjBmNDE0ZmY3 LzEvOXA4SElRc29oTFQtcFFlOTRpZDVXeVpBWXUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQIvilfQ Z3zFb3qhkD9QOEKtWziQNx7GOO01sgkv/F1wjjzNgGVcs5ODlWmlHJCW0Mv4NoJT oRKzCGnQ7SN7bmEYKYGjwIZdnPZMYVi6ruMJ+J+IH/lkxJuqJI2l1c3HY+8rinxS 1ntueU6JIg2sMhT99+NdRCqxfD80U7838ZV9gmDoyxuqDbuBA4pwm+/7/ptAa4qA qSgsSxGm+VcL/EvpVCQ1k/i01/lTMNY8U1r87bU8j7490fNpZ0ADY2KtcleW8mIR VfmWVdGZ+9ENC30vsx8bf9UsvoSSZJnylf55hG+312oilEVXj4fNNinoi/fvmGUh Bi4DKJmgLGvYSw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:40:34 2025 by rpki-client