This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft File: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft (raw, json) Hash identifier: GA5EX0E1u4cT0v60a7USTYrcNM60ODjjaQImHoUmiDQ= Subject key identifier: 20:71:FF:4D:8D:DF:3E:09:32:4B:49:19:A9:DE:BE:72:56:C1:EE:BC Authority key identifier: A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C Certificate issuer: /CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c Certificate serial: 019AF3520A9A82F55A7C5ED67B185C86C026 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 11:00:31 +0000 Manifest this update: Sat 06 Dec 2025 11:00:31 +0000 Manifest next update: Sun 07 Dec 2025 11:00:31 +0000 Files and hashes: 1: d9zp6AZxGUIdUrJzz8idXxXqkvw.roa (hash: FfoXAw9lK5hBRkyqnfyBrRUYHwvSIXzUheL45ZXlndI=) 2: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl (hash: YzAnEE7fy1e8kgtZCxegmAWAikVRPQx/eQ+7wsdSKUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:0a:9a:82:f5:5a:7c:5e:d6:7b:18:5c:86:c0:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c Validity Not Before: Dec 6 11:00:31 2025 GMT Not After : Dec 7 11:00:31 2025 GMT Subject: CN=2071ff4d8ddf3e09324b4919a9debe7256c1eebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:af:82:8d:64:5f:e7:36:13:d1:d3:2c:53:7a: 28:87:53:8b:11:f5:39:aa:05:54:b4:99:99:52:54: 6d:e2:d8:01:d2:97:0b:a8:bf:1c:6c:33:e0:3a:d0: 72:59:6e:c8:7f:07:ff:22:40:9d:64:5e:c8:81:19: 4e:a4:2e:2b:24:6b:5a:e4:c7:3e:5a:73:a9:cd:98: 7e:c6:92:a7:99:fe:92:3c:a2:a7:15:86:f4:17:c9: 74:c5:96:2d:f0:0e:80:c9:d1:9c:17:8e:82:f8:af: 21:44:cf:0e:49:b6:03:a1:f8:6d:e7:61:25:3f:c3: 4d:a4:f7:73:5b:63:86:57:9c:b5:22:45:10:17:a1: 51:06:e7:c8:90:c7:3e:35:e3:5b:85:af:d4:01:e5: 98:f0:b3:ed:1e:4f:6b:ca:dc:37:eb:dd:35:a8:ba: 51:0e:12:16:57:bd:32:01:eb:c8:94:37:f6:0b:eb: 23:f8:59:d6:2f:0b:e5:79:00:65:6b:7a:da:e9:2f: c6:8a:85:94:28:42:c4:eb:1a:c2:22:9c:6d:cf:b1: 60:1f:42:39:e2:9a:6e:80:69:94:b1:2f:4c:8f:4a: 18:b1:70:cf:64:a8:6f:b3:c4:3a:a0:af:c5:1a:57: 9c:44:cf:dc:39:50:25:71:f2:93:f6:77:2f:a6:ce: 89:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:71:FF:4D:8D:DF:3E:09:32:4B:49:19:A9:DE:BE:72:56:C1:EE:BC X509v3 Authority Key Identifier: keyid:A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:26:41:54:d8:50:b4:3a:a2:b9:62:3b:b6:6e:cf:32:a0:77: 6e:73:2b:ed:63:87:66:0d:41:7f:6b:1a:be:9d:45:5b:fe:3a: 58:0e:76:e3:46:c1:30:53:a3:e2:cb:76:31:76:b3:0e:98:8e: 37:4d:72:80:05:5e:47:1b:5f:d4:3e:f9:72:0e:72:0c:95:f6: cb:17:a0:d0:91:16:b6:68:ca:d6:a7:48:15:7f:3c:b6:47:d7: dd:35:6b:ac:fe:b1:88:57:37:88:30:87:76:89:ac:b3:73:68: eb:93:09:55:a5:86:05:00:2a:50:27:f3:bf:46:8c:17:40:dd: 6f:e7:b8:42:06:72:ed:2d:fc:29:65:10:02:c0:9e:ab:dd:b6: 93:67:55:43:73:a4:47:c5:dd:5f:93:ca:cf:b3:7d:70:57:64: 75:03:ae:32:3d:d0:d7:fe:86:1e:13:88:95:ac:01:28:f0:39: 00:91:18:cb:cf:0e:8f:c5:c0:4d:ff:4e:e8:48:0e:07:c2:5f: 58:70:0a:b4:1e:9d:68:b6:4b:58:93:ab:50:44:d0:4f:eb:c8: 0f:48:42:3b:17:96:61:16:33:bc:42:a2:be:9b:ca:51:2f:0e: c5:f2:2d:d3:3b:a2:bb:b1:a3:f2:80:d2:14:44:ac:c2:79:0d: b5:b1:12:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUgqagvVafF7WexhchsAmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MmY2NTI0MDg1ZmExMGU4YzA5OGFjMmI1ODI4YTFmODhj NjkxM2MwHhcNMjUxMjA2MTEwMDMxWhcNMjUxMjA3MTEwMDMxWjAzMTEwLwYDVQQD EygyMDcxZmY0ZDhkZGYzZTA5MzI0YjQ5MTlhOWRlYmU3MjU2YzFlZWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAka+CjWRf5zYT0dMsU3ooh1OLEfU5 qgVUtJmZUlRt4tgB0pcLqL8cbDPgOtByWW7Ifwf/IkCdZF7IgRlOpC4rJGta5Mc+ WnOpzZh+xpKnmf6SPKKnFYb0F8l0xZYt8A6AydGcF46C+K8hRM8OSbYDofht52El P8NNpPdzW2OGV5y1IkUQF6FRBufIkMc+NeNbha/UAeWY8LPtHk9rytw36901qLpR DhIWV70yAevIlDf2C+sj+FnWLwvleQBla3ra6S/GioWUKELE6xrCIpxtz7FgH0I5 4ppugGmUsS9Mj0oYsXDPZKhvs8Q6oK/FGlecRM/cOVAlcfKT9ncvps6JOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBx/02N3z4JMktJGanevnJWwe68MB8GA1UdIwQY MBaAFKUvZSQIX6EOjAmKwrWCih+IxpE8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFM5bEpBaGZvUTZNQ1lyQ3RZS0tINGpHa1R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wZTQ1MDYtMTc0Zi00NDBhLWEzMWMt YmZmZjUxNDIwNTNmLzEvcFM5bEpBaGZvUTZNQ1lyQ3RZS0tINGpHa1R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8wZTQ1MDYtMTc0Zi00NDBhLWEzMWMtYmZmZjUxNDIwNTNm LzEvcFM5bEpBaGZvUTZNQ1lyQ3RZS0tINGpHa1R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQCZBVNhQ tDqiuWI7tm7PMqB3bnMr7WOHZg1Bf2savp1FW/46WA5240bBMFOj4st2MXazDpiO N01ygAVeRxtf1D75cg5yDJX2yxeg0JEWtmjK1qdIFX88tkfX3TVrrP6xiFc3iDCH domss3No65MJVaWGBQAqUCfzv0aMF0Ddb+e4QgZy7S38KWUQAsCeq922k2dVQ3Ok R8XdX5PKz7N9cFdkdQOuMj3Q1/6GHhOIlawBKPA5AJEYy88Oj8XATf9O6EgOB8Jf WHAKtB6daLZLWJOrUETQT+vID0hCOxeWYRYzvEKivpvKUS8OxfIt0zuiu7Gj8oDS FESswnkNtbESYg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:50:55 2025 by rpki-client