This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft File: 9g8GwTqb9lKcSmvQ3uBVggVgz78.mft (raw, json) Hash identifier: Q6DvrHwhtJZTocFG0hSpYUZZ04uzaydbtoWqFKEmTqI= Subject key identifier: 6E:8C:14:74:56:33:CF:1B:14:E8:A0:67:EE:1D:AF:39:77:5E:C9:AC Authority key identifier: F6:0F:06:C1:3A:9B:F6:52:9C:4A:6B:D0:DE:E0:55:82:05:60:CF:BF Certificate issuer: /CN=f60f06c13a9bf6529c4a6bd0dee055820560cfbf Certificate serial: 019AF31C59539FF87EEBFBE70DC7C5A35B2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9g8GwTqb9lKcSmvQ3uBVggVgz78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft Manifest number: 023B Signing time: Sat 06 Dec 2025 10:01:52 +0000 Manifest this update: Sat 06 Dec 2025 10:01:52 +0000 Manifest next update: Sun 07 Dec 2025 10:01:52 +0000 Files and hashes: 1: 9g8GwTqb9lKcSmvQ3uBVggVgz78.crl (hash: n6ZSg8OfuGhKeKF6k29Xk9YM7O5Nrt3pTSsbWfaz5RE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft rsync://rpki.ripe.net/repository/DEFAULT/9g8GwTqb9lKcSmvQ3uBVggVgz78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:59:53:9f:f8:7e:eb:fb:e7:0d:c7:c5:a3:5b:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60f06c13a9bf6529c4a6bd0dee055820560cfbf Validity Not Before: Dec 6 10:01:52 2025 GMT Not After : Dec 7 10:01:52 2025 GMT Subject: CN=6e8c14745633cf1b14e8a067ee1daf39775ec9ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b7:33:fd:b0:86:8b:4a:57:d8:d0:9b:6c:ba: 18:e7:43:a7:69:8b:87:65:80:19:d2:39:43:01:bc: 3e:13:92:b7:69:33:96:e1:84:74:dc:8b:a9:e3:fe: ea:4d:87:90:46:0d:72:e3:2a:4c:06:40:cc:5b:b6: db:a9:28:9b:df:9e:f7:a3:1f:9f:26:e0:b7:13:57: 59:71:d6:c8:7e:4c:88:3e:b6:32:97:97:80:23:b8: 29:e1:6b:b9:27:d6:8a:cb:ca:b9:fa:31:04:8b:49: 55:44:ac:ba:81:e7:02:ac:b2:cc:44:77:83:40:cc: 89:02:36:92:73:a1:b0:ae:6f:7c:50:7a:95:74:ea: 33:5e:a4:00:ac:17:a0:ed:d5:05:a2:47:bb:23:3c: a1:f3:0b:34:47:5a:c3:3e:a1:08:d5:a5:18:41:bc: a0:34:cc:39:26:40:32:92:30:f4:e9:98:55:5e:d2: 1e:69:4b:f2:2a:14:00:e9:72:d7:ed:29:69:0c:12: 17:0c:61:cc:61:8e:54:0d:4d:80:c8:1e:f6:f5:04: 89:d0:55:bb:1a:1b:bb:7e:b2:00:c4:e7:08:98:6d: 8d:b2:23:a3:2b:fd:67:aa:6c:f7:21:62:cb:8a:98: 52:f5:66:35:46:4c:d7:ef:5f:bf:8d:6f:08:37:79: 8c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8C:14:74:56:33:CF:1B:14:E8:A0:67:EE:1D:AF:39:77:5E:C9:AC X509v3 Authority Key Identifier: keyid:F6:0F:06:C1:3A:9B:F6:52:9C:4A:6B:D0:DE:E0:55:82:05:60:CF:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9g8GwTqb9lKcSmvQ3uBVggVgz78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3fb0c6-1af0-4acb-b5eb-3da102cd9127/1/9g8GwTqb9lKcSmvQ3uBVggVgz78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e0:9a:d0:3f:dc:f9:21:2c:e6:d1:4b:e1:34:bc:47:56:b2: 8b:6c:82:7d:f4:a2:b0:80:7f:20:8a:5d:d0:6b:1b:b3:4e:d1: d8:68:cc:91:d7:a4:e2:01:ae:60:2e:68:c7:22:89:01:52:35: 6d:a1:4f:d1:dd:84:0b:30:0a:dd:49:1b:c0:5b:ed:b4:84:79: 80:06:62:bc:1d:b4:0d:1f:d9:1b:0e:dc:8f:f4:d5:00:d5:d6: bf:e7:48:76:2a:47:5f:37:fb:b6:fb:fb:62:9e:1b:0c:03:cc: b3:12:04:6c:d9:43:17:56:28:37:49:1f:40:80:08:66:a6:0c: e4:76:98:d1:26:6e:29:f0:c5:c4:0e:df:cc:70:a2:07:00:04: da:ad:d9:80:08:aa:35:a2:88:bb:22:4c:96:3a:69:d4:dd:a2: 61:65:f7:b8:df:fa:87:d7:08:d4:6f:04:7d:46:08:9b:45:06: 07:6a:f9:b2:6b:c1:11:bb:e4:07:35:3d:30:c0:3f:57:92:ee: 42:07:c7:0d:40:b1:c6:2b:8b:b4:fa:0f:d2:12:38:af:a1:e6: 83:2d:48:e5:14:0c:ba:f1:b4:3d:cc:ee:90:00:3c:2e:58:54: af:44:88:01:06:c1:bd:e4:76:34:44:ce:43:89:ad:ca:11:8c: bc:d3:a6:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHFlTn/h+6/vnDcfFo1svMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MGYwNmMxM2E5YmY2NTI5YzRhNmJkMGRlZTA1NTgyMDU2 MGNmYmYwHhcNMjUxMjA2MTAwMTUyWhcNMjUxMjA3MTAwMTUyWjAzMTEwLwYDVQQD Eyg2ZThjMTQ3NDU2MzNjZjFiMTRlOGEwNjdlZTFkYWYzOTc3NWVjOWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Lcz/bCGi0pX2NCbbLoY50OnaYuH ZYAZ0jlDAbw+E5K3aTOW4YR03Iup4/7qTYeQRg1y4ypMBkDMW7bbqSib3573ox+f JuC3E1dZcdbIfkyIPrYyl5eAI7gp4Wu5J9aKy8q5+jEEi0lVRKy6gecCrLLMRHeD QMyJAjaSc6Gwrm98UHqVdOozXqQArBeg7dUFoke7Izyh8ws0R1rDPqEI1aUYQbyg NMw5JkAykjD06ZhVXtIeaUvyKhQA6XLX7SlpDBIXDGHMYY5UDU2AyB729QSJ0FW7 Ghu7frIAxOcImG2NsiOjK/1nqmz3IWLLiphS9WY1RkzX71+/jW8IN3mMlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6MFHRWM88bFOigZ+4drzl3XsmsMB8GA1UdIwQY MBaAFPYPBsE6m/ZSnEpr0N7gVYIFYM+/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWc4R3dUcWI5bEtjU212UTN1QlZnZ1Znejc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8zZmIwYzYtMWFmMC00YWNiLWI1ZWIt M2RhMTAyY2Q5MTI3LzEvOWc4R3dUcWI5bEtjU212UTN1QlZnZ1Znejc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8zZmIwYzYtMWFmMC00YWNiLWI1ZWItM2RhMTAyY2Q5MTI3 LzEvOWc4R3dUcWI5bEtjU212UTN1QlZnZ1Znejc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOCa0D/c +SEs5tFL4TS8R1ayi2yCffSisIB/IIpd0Gsbs07R2GjMkdek4gGuYC5oxyKJAVI1 baFP0d2ECzAK3UkbwFvttIR5gAZivB20DR/ZGw7cj/TVANXWv+dIdipHXzf7tvv7 Yp4bDAPMsxIEbNlDF1YoN0kfQIAIZqYM5HaY0SZuKfDFxA7fzHCiBwAE2q3ZgAiq NaKIuyJMljpp1N2iYWX3uN/6h9cI1G8EfUYIm0UGB2r5smvBEbvkBzU9MMA/V5Lu QgfHDUCxxiuLtPoP0hI4r6Hmgy1I5RQMuvG0PczukAA8LlhUr0SIAQbBveR2NETO Q4mtyhGMvNOmCQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:03:54 2025 by rpki-client