This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft File: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft (raw, json) Hash identifier: SFBEQI95P4GDDa5HNi5kxEXvST7Riawch9slXeDaKL4= Subject key identifier: 08:CB:9B:A5:42:BE:E6:57:77:DF:BE:7A:BC:35:77:86:7A:C8:51:08 Authority key identifier: 9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4 Certificate issuer: /CN=9bd1eaad0d7e46726b87083914c24a127e059dd4 Certificate serial: 019B3BD9BCD8E5210A358FED085298644BA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft Manifest number: 062E Signing time: Sat 20 Dec 2025 13:01:23 +0000 Manifest this update: Sat 20 Dec 2025 13:01:23 +0000 Manifest next update: Sun 21 Dec 2025 13:01:23 +0000 Files and hashes: 1: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl (hash: rcH9aAHDRq+cNGDhkVxcrzXukBAYwZe7bJy6nHqg5iA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:bc:d8:e5:21:0a:35:8f:ed:08:52:98:64:4b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd1eaad0d7e46726b87083914c24a127e059dd4 Validity Not Before: Dec 20 13:01:23 2025 GMT Not After : Dec 21 13:01:23 2025 GMT Subject: CN=08cb9ba542bee65777dfbe7abc3577867ac85108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fc:4f:eb:09:a0:37:88:93:31:fa:64:59:8f: e6:fa:1a:18:8d:23:ff:4c:d1:29:92:b9:b8:27:d2: 22:bb:2c:05:f4:59:3e:4f:cc:da:c1:e1:7f:a3:d3: 36:c6:38:8e:ea:e2:f8:9d:aa:05:2d:7c:98:3c:24: 41:4c:39:12:1b:e4:36:73:aa:70:b2:c2:31:f7:30: f7:2b:60:05:d5:5a:97:31:0e:5e:75:0b:25:c5:7e: 9b:8f:b7:b5:bf:e7:63:4f:c3:c3:2d:43:a1:14:2a: 7b:96:d9:fd:90:79:00:ba:f9:49:5a:c1:50:01:e0: f6:f8:cc:ba:57:58:e2:1e:65:f2:c9:5e:e5:f6:f5: fd:03:f7:60:8f:0d:a7:33:42:87:a3:b2:fa:99:4b: f0:d5:a2:7c:a9:92:8f:ea:29:3e:1f:7b:da:d9:f8: dc:8d:e1:a2:b8:aa:d9:be:7a:1b:e7:79:16:57:27: 1d:1e:b4:09:ae:4e:d1:a7:37:2b:e4:b0:7a:42:e3: d5:5c:5f:7d:99:1a:43:0f:d4:58:a0:61:33:16:b6: 63:86:40:55:82:71:29:64:c4:c5:41:60:87:b0:2b: 62:02:dc:bf:a2:09:d3:9c:90:0d:63:3a:4a:5f:db: 5f:41:61:6e:da:68:4b:82:50:d2:67:71:0c:fb:f1: e5:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:CB:9B:A5:42:BE:E6:57:77:DF:BE:7A:BC:35:77:86:7A:C8:51:08 X509v3 Authority Key Identifier: keyid:9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:a9:cc:24:16:d6:b9:9f:f0:58:9c:8f:bc:17:07:80:15:9b: 18:9d:36:3b:cc:62:55:05:a9:19:2e:96:40:6f:3f:94:21:5f: ae:d4:fa:62:6c:cf:c4:7d:db:c4:d7:f5:06:e3:41:90:92:7a: 0a:c9:f3:05:61:98:d9:fd:08:2c:d0:5e:a0:8c:d6:19:5c:1a: 7a:37:5f:7a:a2:85:bd:09:71:a3:6e:8e:54:fd:6f:9f:04:2b: e7:3b:df:1e:c6:fe:da:99:3f:05:d7:a7:75:d9:aa:ae:21:c6: a0:35:dd:26:8c:be:1d:36:6d:c4:30:a4:6c:ec:9d:28:17:9c: e5:34:89:04:0f:c1:b3:fb:70:8f:9c:a6:34:53:de:7a:c5:f3: b0:45:32:62:50:f8:a9:73:e7:9c:ec:2f:d3:60:58:d9:69:04: d8:5f:32:b8:f2:51:05:e2:bb:c3:b1:ca:47:7e:f8:e5:59:c1: 3d:cb:12:33:0e:ca:b5:ac:f1:4c:97:27:45:e3:a6:39:8b:b9: af:aa:83:bf:85:f0:d0:bb:d4:86:24:0f:dd:42:cf:d7:71:07: 6e:c1:f1:a0:5c:b1:db:07:3e:b4:83:ba:7f:73:49:52:9c:8b: 76:9e:6f:f2:6f:c4:33:f5:62:00:4f:9c:b8:8a:6e:11:e1:0d: 6c:70:34:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72bzY5SEKNY/tCFKYZEumMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZDFlYWFkMGQ3ZTQ2NzI2Yjg3MDgzOTE0YzI0YTEyN2Uw NTlkZDQwHhcNMjUxMjIwMTMwMTIzWhcNMjUxMjIxMTMwMTIzWjAzMTEwLwYDVQQD EygwOGNiOWJhNTQyYmVlNjU3NzdkZmJlN2FiYzM1Nzc4NjdhYzg1MTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfxP6wmgN4iTMfpkWY/m+hoYjSP/ TNEpkrm4J9IiuywF9Fk+T8zaweF/o9M2xjiO6uL4naoFLXyYPCRBTDkSG+Q2c6pw ssIx9zD3K2AF1VqXMQ5edQslxX6bj7e1v+djT8PDLUOhFCp7ltn9kHkAuvlJWsFQ AeD2+My6V1jiHmXyyV7l9vX9A/dgjw2nM0KHo7L6mUvw1aJ8qZKP6ik+H3va2fjc jeGiuKrZvnob53kWVycdHrQJrk7Rpzcr5LB6QuPVXF99mRpDD9RYoGEzFrZjhkBV gnEpZMTFQWCHsCtiAty/ognTnJANYzpKX9tfQWFu2mhLglDSZ3EM+/HlDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjLm6VCvuZXd9++erw1d4Z6yFEIMB8GA1UdIwQY MBaAFJvR6q0NfkZya4cIORTCShJ+BZ3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTlIcXJRMS1SbkpyaHdnNUZNSktFbjRGbmRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jMzRkZWQtZDNkOS00MjkyLTliYjct ZWYwNzk0NTMxYTI4LzEvbTlIcXJRMS1SbkpyaHdnNUZNSktFbjRGbmRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9jMzRkZWQtZDNkOS00MjkyLTliYjctZWYwNzk0NTMxYTI4 LzEvbTlIcXJRMS1SbkpyaHdnNUZNSktFbjRGbmRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp6nMJBbW uZ/wWJyPvBcHgBWbGJ02O8xiVQWpGS6WQG8/lCFfrtT6YmzPxH3bxNf1BuNBkJJ6 CsnzBWGY2f0ILNBeoIzWGVwaejdfeqKFvQlxo26OVP1vnwQr5zvfHsb+2pk/Bden ddmqriHGoDXdJoy+HTZtxDCkbOydKBec5TSJBA/Bs/twj5ymNFPeesXzsEUyYlD4 qXPnnOwv02BY2WkE2F8yuPJRBeK7w7HKR3745VnBPcsSMw7KtazxTJcnReOmOYu5 r6qDv4Xw0LvUhiQP3ULP13EHbsHxoFyx2wc+tIO6f3NJUpyLdp5v8m/EM/ViAE+c uIpuEeENbHA0mw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:24:01 2025 by rpki-client