This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft File: 9iwrcwAEBoJN-8euOIbreGf47G4.mft (raw, json) Hash identifier: fjsrM1KQaxOsKcR/OHLHJ/oA/ZSDArPGevsfdiTANoM= Subject key identifier: D2:25:8D:27:D9:FB:3D:55:5D:17:4F:CB:2C:64:40:75:94:06:2D:76 Authority key identifier: F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E Certificate issuer: /CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e Certificate serial: 019AF1D2282FA26EB1273B0FA7AC84B311D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 04:01:13 +0000 Manifest this update: Sat 06 Dec 2025 04:01:13 +0000 Manifest next update: Sun 07 Dec 2025 04:01:13 +0000 Files and hashes: 1: 9iwrcwAEBoJN-8euOIbreGf47G4.crl (hash: b/HbkbZBXZKXqxM3kZVhsTg8KnIo+TqzYUq/fK1SaSI=) 2: ceDg72YenqK4_dFvq8QBAcGglOc.roa (hash: Zws7AOUBGinLUnjZoVBw7x3JkyX35Jt03arL9swrd5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:28:2f:a2:6e:b1:27:3b:0f:a7:ac:84:b3:11:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e Validity Not Before: Dec 6 04:01:13 2025 GMT Not After : Dec 7 04:01:13 2025 GMT Subject: CN=d2258d27d9fb3d555d174fcb2c64407594062d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:61:ba:09:e0:35:f8:39:43:e7:49:94:a4:6f: f5:57:ee:44:92:be:7d:33:dc:79:d5:27:8a:3d:f3: a2:92:1d:05:0c:e4:13:d5:0b:c8:cf:3f:63:ba:4e: 69:85:27:92:b2:d8:56:01:a5:10:0c:35:6e:8d:c7: 2e:7d:be:48:67:55:45:2e:2c:70:cc:97:ad:3d:7b: b0:06:4f:9c:0b:cf:36:06:3d:d4:cb:08:5c:c4:1c: 5a:b3:7b:2f:b0:a1:69:40:d0:3b:89:4f:5d:af:dd: 72:59:50:fe:10:9d:6b:eb:24:16:69:ed:a1:34:2e: 44:81:61:96:02:da:16:ed:2f:92:e2:06:a7:cd:6e: 76:ec:75:2e:ee:1f:81:92:2e:56:2b:23:b1:59:cd: fd:d2:98:43:0d:56:57:4b:4a:09:3f:99:91:f2:ef: 63:9d:5f:eb:be:f1:b3:a5:61:45:bd:a0:5a:44:fb: b6:8e:54:e6:f5:31:7d:88:6a:3d:06:69:26:21:6b: ad:ab:ae:14:2b:33:49:b6:8d:93:2b:cb:c1:1b:98: a0:35:9a:0e:2e:c5:b9:53:e0:29:4a:f8:7a:67:6f: 8f:2a:34:c0:59:c6:73:88:e6:8d:d2:2e:f2:83:f4: b9:10:c8:4c:81:c2:4a:62:40:b5:71:04:1d:ec:ca: 46:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:25:8D:27:D9:FB:3D:55:5D:17:4F:CB:2C:64:40:75:94:06:2D:76 X509v3 Authority Key Identifier: keyid:F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:6b:df:ef:a2:e2:31:7e:56:63:2b:02:34:65:82:a4:8e:25: 88:9c:a2:fc:c0:d4:20:f4:a9:0a:83:b5:4d:b1:7d:a7:21:9e: 42:c4:c9:39:b1:48:c4:7c:75:7d:0c:53:fe:a4:2d:db:9f:bf: c3:8c:9a:b3:3e:f4:8d:5e:6b:22:aa:51:f3:15:a4:78:40:ef: d1:43:ce:bb:d1:12:f5:95:72:da:b1:73:3e:18:ce:49:ed:82: 08:f5:94:30:0c:9e:f9:de:3f:fc:26:19:03:ee:78:7c:ef:e5: d3:cc:70:7a:49:26:2c:b4:b4:81:4d:b4:1b:26:8b:0b:00:8d: 31:d8:4d:c2:2b:d9:37:b2:43:44:9c:bf:3c:a8:9a:41:0f:9b: e7:99:3b:42:2e:ef:0f:0c:9c:d3:c7:4e:2f:19:26:45:aa:14: bf:56:2d:16:cd:0f:84:0c:8e:40:38:f6:8d:16:b5:21:e3:59: 62:5a:48:01:7c:f8:a0:e1:c7:43:05:a5:2b:35:e6:03:4f:16: f5:44:86:7d:88:72:5e:d2:82:a6:fd:0b:fc:c5:87:0d:59:c3: 05:7c:d1:6e:da:8a:e0:b8:3d:b5:9b:19:9c:a0:ab:4a:8e:ad: 1c:25:f5:f0:e9:18:ca:49:61:01:49:c0:9d:91:4b:3b:6e:70: 9b:9e:f9:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0igvom6xJzsPp6yEsxHQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MmMyYjczMDAwNDA2ODI0ZGZiYzdhZTM4ODZlYjc4Njdm OGVjNmUwHhcNMjUxMjA2MDQwMTEzWhcNMjUxMjA3MDQwMTEzWjAzMTEwLwYDVQQD EyhkMjI1OGQyN2Q5ZmIzZDU1NWQxNzRmY2IyYzY0NDA3NTk0MDYyZDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2G6CeA1+DlD50mUpG/1V+5Ekr59 M9x51SeKPfOikh0FDOQT1QvIzz9juk5phSeSsthWAaUQDDVujccufb5IZ1VFLixw zJetPXuwBk+cC882Bj3UywhcxBxas3svsKFpQNA7iU9dr91yWVD+EJ1r6yQWae2h NC5EgWGWAtoW7S+S4ganzW527HUu7h+Bki5WKyOxWc390phDDVZXS0oJP5mR8u9j nV/rvvGzpWFFvaBaRPu2jlTm9TF9iGo9BmkmIWutq64UKzNJto2TK8vBG5igNZoO LsW5U+ApSvh6Z2+PKjTAWcZziOaN0i7yg/S5EMhMgcJKYkC1cQQd7MpGEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNIljSfZ+z1VXRdPyyxkQHWUBi12MB8GA1UdIwQY MBaAFPYsK3MABAaCTfvHrjiG63hn+OxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWl3cmN3QUVCb0pOLThldU9JYnJlR2Y0N0c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82ODI5YWEtMTFhNS00MmU3LTlmOTYt NTZlYmY4MjlkNmIyLzEvOWl3cmN3QUVCb0pOLThldU9JYnJlR2Y0N0c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82ODI5YWEtMTFhNS00MmU3LTlmOTYtNTZlYmY4MjlkNmIy LzEvOWl3cmN3QUVCb0pOLThldU9JYnJlR2Y0N0c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADGvf76Li MX5WYysCNGWCpI4liJyi/MDUIPSpCoO1TbF9pyGeQsTJObFIxHx1fQxT/qQt25+/ w4yasz70jV5rIqpR8xWkeEDv0UPOu9ES9ZVy2rFzPhjOSe2CCPWUMAye+d4//CYZ A+54fO/l08xwekkmLLS0gU20GyaLCwCNMdhNwivZN7JDRJy/PKiaQQ+b55k7Qi7v Dwyc08dOLxkmRaoUv1YtFs0PhAyOQDj2jRa1IeNZYlpIAXz4oOHHQwWlKzXmA08W 9USGfYhyXtKCpv0L/MWHDVnDBXzRbtqK4Lg9tZsZnKCrSo6tHCX18OkYyklhAUnA nZFLO25wm575jg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:24:51 2025 by rpki-client