This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft File: 9F55FBEwzuyFchX5u916Vbr0538.mft (raw, json) Hash identifier: mxauijpYwYDdyehWbyXV+e53k6Nr9LazVEmdf/e2r6A= Subject key identifier: F0:DA:4B:3F:3C:E7:39:48:8C:8F:A8:7A:60:58:8A:2A:3A:52:AD:E7 Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F Certificate issuer: /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f Certificate serial: 019AF19AE87F1BD941B92FC2BFC55DE559A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft Manifest number: 0E2D Signing time: Sat 06 Dec 2025 03:00:52 +0000 Manifest this update: Sat 06 Dec 2025 03:00:52 +0000 Manifest next update: Sun 07 Dec 2025 03:00:52 +0000 Files and hashes: 1: 9F55FBEwzuyFchX5u916Vbr0538.crl (hash: MYJnnzFEMCeEfNh6AwFzxuoXKpgqvztLYQSL8CG1aTk=) 2: YyGPwu-_r-eFoNX2ZTx6n9Sl7sU.roa (hash: iag5NIeY+dB9ncpa+rQd04Kk2wb7pISvllYkBby24Kg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e8:7f:1b:d9:41:b9:2f:c2:bf:c5:5d:e5:59:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f Validity Not Before: Dec 6 03:00:52 2025 GMT Not After : Dec 7 03:00:52 2025 GMT Subject: CN=f0da4b3f3ce739488c8fa87a60588a2a3a52ade7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5a:bb:2b:55:2b:91:48:ea:7f:7e:47:82:90: 32:d5:71:61:85:95:46:93:53:3d:a1:84:5c:6b:f9: 33:28:94:be:91:ab:8d:1d:28:a6:2c:5a:6f:f1:10: 85:46:0b:c5:28:2c:95:a8:f9:eb:f2:be:85:e2:b0: 0f:99:d7:96:94:ef:cc:fc:9f:1a:5d:74:d3:66:f8: 31:8c:bb:76:07:1f:3f:ae:1a:35:63:23:84:d3:d5: 77:cd:8b:d7:d5:29:17:93:b8:8d:06:60:b9:c2:8d: b4:b9:2f:0f:3b:81:5b:70:80:a2:02:c2:9e:dc:0f: fa:f7:4e:46:0a:e2:2d:fc:d0:c8:6e:9f:db:26:e2: 5b:3f:e8:ac:69:16:7b:35:f3:ac:b4:63:26:1e:52: ae:d7:74:20:a6:d4:7c:fd:1a:46:54:65:a9:4a:e2: 27:e2:aa:47:e7:0f:bf:a8:3e:f4:15:c4:d9:1a:6a: 03:72:87:d2:f8:d7:22:2a:b9:8f:4e:2c:91:3e:b4: d7:ae:38:f9:2f:81:11:5e:18:68:09:b8:dd:9f:ae: 36:45:f2:b5:15:a0:51:f0:07:cb:cc:e4:d8:77:7e: c4:5c:af:e7:24:be:61:80:0b:6f:a2:03:91:d5:c9: 13:88:63:5e:23:b2:f1:79:3a:d9:b9:79:f6:47:69: 33:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DA:4B:3F:3C:E7:39:48:8C:8F:A8:7A:60:58:8A:2A:3A:52:AD:E7 X509v3 Authority Key Identifier: keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:b7:52:41:6b:4a:8f:f1:6a:f7:f3:9e:e9:c5:b5:7f:07:b9: a0:18:bb:ab:f6:3e:6f:11:5d:fb:8f:57:78:0a:36:94:54:66: a0:1d:c2:e5:15:84:ab:0d:fa:6f:c0:8d:54:62:12:97:bf:a6: 39:91:4e:d6:54:15:6d:6c:ee:72:6e:3f:0e:33:2f:50:3c:9b: 7e:4c:95:b9:40:2c:c6:83:67:2e:8f:b6:23:6c:48:b6:ca:ee: 04:8f:ea:77:48:cd:83:43:e9:9b:dd:8f:4b:06:b9:29:92:3a: ef:64:db:ec:22:a3:17:7e:aa:76:29:fc:df:99:c4:24:4d:57: b5:15:e5:83:d3:99:af:cc:1c:8a:ed:48:18:a0:a8:15:40:63: 0d:bf:21:6d:c1:68:d4:05:7b:a8:12:2f:eb:e3:cb:93:32:dc: 9c:48:e7:4e:52:d7:a9:cf:3e:aa:32:1b:22:ad:54:c7:46:fb: 8b:27:f2:a2:40:42:d6:36:6c:77:50:b1:f6:72:8f:94:c1:02: 5f:78:a1:a9:ac:9f:65:13:14:80:00:a9:95:23:3f:74:d5:6f: 5b:51:26:ff:6c:30:cf:44:e0:ea:a6:5b:24:64:1c:36:84:06: 89:d6:82:38:e1:d1:1b:65:6d:dd:86:da:03:ec:41:1a:9c:13: 24:10:58:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuh/G9lBuS/Cv8Vd5VmnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NWU3OTE0MTEzMGNlZWM4NTcyMTVmOWJiZGQ3YTU1YmFm NGU3N2YwHhcNMjUxMjA2MDMwMDUyWhcNMjUxMjA3MDMwMDUyWjAzMTEwLwYDVQQD EyhmMGRhNGIzZjNjZTczOTQ4OGM4ZmE4N2E2MDU4OGEyYTNhNTJhZGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylq7K1UrkUjqf35HgpAy1XFhhZVG k1M9oYRca/kzKJS+kauNHSimLFpv8RCFRgvFKCyVqPnr8r6F4rAPmdeWlO/M/J8a XXTTZvgxjLt2Bx8/rho1YyOE09V3zYvX1SkXk7iNBmC5wo20uS8PO4FbcICiAsKe 3A/6905GCuIt/NDIbp/bJuJbP+isaRZ7NfOstGMmHlKu13QgptR8/RpGVGWpSuIn 4qpH5w+/qD70FcTZGmoDcofS+NciKrmPTiyRPrTXrjj5L4ERXhhoCbjdn642RfK1 FaBR8AfLzOTYd37EXK/nJL5hgAtvogOR1ckTiGNeI7LxeTrZuXn2R2kztwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDaSz885zlIjI+oemBYiio6Uq3nMB8GA1UdIwQY MBaAFPReeRQRMM7shXIV+bvdelW69Od/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUY1NUZCRXd6dXlGY2hYNXU5MTZWYnIwNTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9lYzFiNTktOWUwYS00YWQzLTk3N2Ut MzNiZDg0MzQ5NWY4LzEvOUY1NUZCRXd6dXlGY2hYNXU5MTZWYnIwNTM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9lYzFiNTktOWUwYS00YWQzLTk3N2UtMzNiZDg0MzQ5NWY4 LzEvOUY1NUZCRXd6dXlGY2hYNXU5MTZWYnIwNTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo7dSQWtK j/Fq9/Oe6cW1fwe5oBi7q/Y+bxFd+49XeAo2lFRmoB3C5RWEqw36b8CNVGISl7+m OZFO1lQVbWzucm4/DjMvUDybfkyVuUAsxoNnLo+2I2xItsruBI/qd0jNg0Ppm92P Swa5KZI672Tb7CKjF36qdin835nEJE1XtRXlg9OZr8wciu1IGKCoFUBjDb8hbcFo 1AV7qBIv6+PLkzLcnEjnTlLXqc8+qjIbIq1Ux0b7iyfyokBC1jZsd1Cx9nKPlMEC X3ihqayfZRMUgACplSM/dNVvW1Em/2wwz0Tg6qZbJGQcNoQGidaCOOHRG2Vt3Yba A+xBGpwTJBBY7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:28 2025 by rpki-client