This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft File: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft (raw, json) Hash identifier: HD6iyty4yA/9/LASyyb/vE2Ir/VNO4SqR3CuT+iEZ3Y= Subject key identifier: B8:B6:72:76:20:A2:67:12:D6:CA:C5:0A:13:86:43:75:DF:89:65:E7 Authority key identifier: 9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4 Certificate issuer: /CN=9bd1eaad0d7e46726b87083914c24a127e059dd4 Certificate serial: 019AF276A953DFBCF96AD4D0CCAF17B4B2E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft Manifest number: 0608 Signing time: Sat 06 Dec 2025 07:00:53 +0000 Manifest this update: Sat 06 Dec 2025 07:00:53 +0000 Manifest next update: Sun 07 Dec 2025 07:00:53 +0000 Files and hashes: 1: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl (hash: k6+I46DNsTb5Ce4kwNXsToSdz+lvp34lTW9VRpg8TU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:a9:53:df:bc:f9:6a:d4:d0:cc:af:17:b4:b2:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd1eaad0d7e46726b87083914c24a127e059dd4 Validity Not Before: Dec 6 07:00:53 2025 GMT Not After : Dec 7 07:00:53 2025 GMT Subject: CN=b8b6727620a26712d6cac50a13864375df8965e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:98:90:e2:90:1a:7c:12:3d:22:0c:6f:59:09: 7e:97:ea:32:63:0f:bb:e6:8b:4d:51:c5:22:bc:8b: 57:37:24:68:0e:b9:04:ed:6b:46:b4:ef:e0:0d:3d: 20:9a:dd:dd:5b:50:34:98:0a:dc:84:95:3c:be:b7: e8:15:fd:61:36:31:21:ca:42:d8:0a:b8:c0:ce:76: 65:9d:01:ad:bf:6d:4d:3a:51:1d:5a:87:1d:a1:98: f8:81:05:75:b4:62:ea:23:6c:1e:24:67:1a:ed:2b: c8:29:d1:85:8b:dd:34:f2:a8:cd:b7:7a:51:36:2d: 34:a3:09:43:49:93:b5:88:4f:d4:fc:3f:10:0c:79: 94:75:93:ee:e3:9f:c9:4c:8d:75:62:5d:6e:28:7f: ca:3c:52:96:13:49:00:46:96:90:26:9b:42:80:98: 63:ef:05:0c:37:ec:23:0f:a5:9d:01:41:f1:27:a4: a8:9e:6f:ce:62:67:48:17:18:d2:47:f8:80:31:1e: 00:78:0b:6c:a8:b4:56:9e:98:d7:aa:3f:22:cf:e0: 36:51:d9:3b:7b:bc:ed:e4:37:4d:70:86:72:92:23: f0:b4:97:ba:f9:dc:35:ff:d2:2f:62:21:12:65:98: 80:ad:e3:4c:0d:64:4e:38:b0:13:58:5d:8d:18:7b: c8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B6:72:76:20:A2:67:12:D6:CA:C5:0A:13:86:43:75:DF:89:65:E7 X509v3 Authority Key Identifier: keyid:9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:d3:06:52:f4:01:de:fa:22:64:35:d4:a4:fe:c0:ee:ae:c1: 6b:70:7d:52:98:ef:7b:f2:e7:16:1b:90:44:9d:97:18:b4:18: 44:2f:1c:95:26:95:f3:f3:04:eb:23:9f:15:cb:d6:10:d4:56: 6b:1b:61:10:19:6c:94:04:60:0b:0e:a0:d6:44:0d:1a:20:bb: 7c:c5:72:37:fc:b8:63:30:fc:0a:a5:4a:e2:70:44:38:81:d7: c0:20:18:87:f2:25:81:56:45:5d:5e:2f:3d:a8:b1:c6:53:4f: 1a:db:53:ab:39:66:36:e3:57:8a:55:43:3c:48:85:80:5e:67: 06:4a:63:4d:59:54:3f:db:1e:78:03:09:14:41:9a:8e:f8:47: 97:37:5f:3a:4a:e3:5b:29:93:93:c9:54:d1:f9:af:a6:77:0a: 31:37:55:d9:74:69:fb:dc:69:3d:1c:91:bc:96:d7:54:27:39: b6:67:68:25:ea:76:03:34:15:2e:04:a1:cf:28:c2:f8:9f:3b: bd:f6:a3:f2:d4:41:16:17:cc:12:b9:81:eb:18:45:dc:08:8e: d8:f6:e1:66:75:d8:a9:2e:56:ae:5d:92:61:35:d8:55:d5:c5: c9:e9:d6:3a:be:fe:6c:6b:b5:8c:22:d1:b5:77:e8:39:2c:94: 34:14:63:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqlT37z5atTQzK8XtLLoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZDFlYWFkMGQ3ZTQ2NzI2Yjg3MDgzOTE0YzI0YTEyN2Uw NTlkZDQwHhcNMjUxMjA2MDcwMDUzWhcNMjUxMjA3MDcwMDUzWjAzMTEwLwYDVQQD EyhiOGI2NzI3NjIwYTI2NzEyZDZjYWM1MGExMzg2NDM3NWRmODk2NWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZiQ4pAafBI9IgxvWQl+l+oyYw+7 5otNUcUivItXNyRoDrkE7WtGtO/gDT0gmt3dW1A0mArchJU8vrfoFf1hNjEhykLY CrjAznZlnQGtv21NOlEdWocdoZj4gQV1tGLqI2weJGca7SvIKdGFi9008qjNt3pR Ni00owlDSZO1iE/U/D8QDHmUdZPu45/JTI11Yl1uKH/KPFKWE0kARpaQJptCgJhj 7wUMN+wjD6WdAUHxJ6Sonm/OYmdIFxjSR/iAMR4AeAtsqLRWnpjXqj8iz+A2Udk7 e7zt5DdNcIZykiPwtJe6+dw1/9IvYiESZZiAreNMDWROOLATWF2NGHvIywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLi2cnYgomcS1srFChOGQ3XfiWXnMB8GA1UdIwQY MBaAFJvR6q0NfkZya4cIORTCShJ+BZ3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTlIcXJRMS1SbkpyaHdnNUZNSktFbjRGbmRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jMzRkZWQtZDNkOS00MjkyLTliYjct ZWYwNzk0NTMxYTI4LzEvbTlIcXJRMS1SbkpyaHdnNUZNSktFbjRGbmRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9jMzRkZWQtZDNkOS00MjkyLTliYjctZWYwNzk0NTMxYTI4 LzEvbTlIcXJRMS1SbkpyaHdnNUZNSktFbjRGbmRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARtMGUvQB 3voiZDXUpP7A7q7Ba3B9Upjve/LnFhuQRJ2XGLQYRC8clSaV8/ME6yOfFcvWENRW axthEBlslARgCw6g1kQNGiC7fMVyN/y4YzD8CqVK4nBEOIHXwCAYh/IlgVZFXV4v PaixxlNPGttTqzlmNuNXilVDPEiFgF5nBkpjTVlUP9seeAMJFEGajvhHlzdfOkrj WymTk8lU0fmvpncKMTdV2XRp+9xpPRyRvJbXVCc5tmdoJep2AzQVLgShzyjC+J87 vfaj8tRBFhfMErmB6xhF3AiO2PbhZnXYqS5Wrl2SYTXYVdXFyenWOr7+bGu1jCLR tXfoOSyUNBRjcA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:31:02 2025 by rpki-client