This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft File: 9XvH8urwyvppvuX6vmcSK0Nj_nI.mft (raw, json) Hash identifier: u0dANeMq2HVsAwcOds5MgrguUbEeKiTsd34KuByfDnQ= Subject key identifier: CD:5F:96:74:BB:65:75:84:40:E9:BE:86:11:EE:A7:F3:2B:EB:D0:04 Authority key identifier: F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72 Certificate issuer: /CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72 Certificate serial: 019AF16455CE61BE237E029287D593B623A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 02:01:15 +0000 Manifest this update: Sat 06 Dec 2025 02:01:15 +0000 Manifest next update: Sun 07 Dec 2025 02:01:15 +0000 Files and hashes: 1: 9XvH8urwyvppvuX6vmcSK0Nj_nI.crl (hash: rFUwbcDMM0GyZifF+QZktpgNFuJJvHwb9FzJW0pMgDQ=) 2: KNQf97WzItrOYioPwLu-Tdh4fNc.roa (hash: RIjtWc8dl547OecCvbWgp63AohvHeAGZkMZVo9/tFEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:55:ce:61:be:23:7e:02:92:87:d5:93:b6:23:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72 Validity Not Before: Dec 6 02:01:15 2025 GMT Not After : Dec 7 02:01:15 2025 GMT Subject: CN=cd5f9674bb65758440e9be8611eea7f32bebd004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:78:7c:c5:9e:69:16:ce:ae:f2:6c:eb:e9:23: 55:74:e1:29:46:f8:24:fe:2f:f8:b0:6f:f8:ea:0a: b7:70:2d:68:83:e8:1c:0e:5a:08:fd:b7:e3:e0:3c: dc:2c:0b:5e:35:ce:4a:53:06:57:90:82:03:b7:54: 3d:0c:12:aa:cd:78:73:0b:a1:3b:00:7f:5e:8e:3c: 7f:f7:73:63:80:12:f0:b2:db:76:a4:c0:5d:80:95: ee:0c:df:33:db:26:57:56:91:63:d5:93:16:6f:36: b0:f8:36:04:e2:d3:5d:89:a8:5f:54:82:d0:f8:86: 5f:29:bb:46:f5:eb:b2:24:cd:c5:fc:49:69:de:15: cc:a4:d3:b0:5f:e5:53:c7:fc:5a:d7:37:4c:0a:91: 59:70:cd:22:df:ea:e3:45:67:65:ee:d1:05:63:eb: f3:bd:ee:1a:1a:b8:66:01:c1:1d:66:4f:b7:62:89: 10:63:f5:ab:37:3b:34:c5:ee:aa:77:7c:4d:14:28: ca:4c:53:25:aa:ab:91:fa:da:7e:1e:7c:c4:ed:a8: ce:eb:49:d8:8b:f2:44:02:67:5c:6d:e3:32:87:85: 37:2c:78:b8:9c:c9:05:20:7c:82:80:b7:c0:cc:28: c5:89:45:32:d5:15:15:a5:ec:f6:6c:d5:96:9f:b2: 21:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5F:96:74:BB:65:75:84:40:E9:BE:86:11:EE:A7:F3:2B:EB:D0:04 X509v3 Authority Key Identifier: keyid:F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:92:fa:99:70:9c:2f:47:35:22:30:35:98:88:c9:db:12:98: d6:9b:f9:5c:07:29:16:35:81:3f:41:45:10:06:e0:7c:ee:e2: b3:0b:bb:63:96:73:f3:f1:0f:de:c6:6c:b7:eb:3a:a6:76:e9: ac:8c:ce:fb:dd:11:bf:8c:a7:28:96:6a:9b:7d:1f:33:6d:56: d9:9a:f1:b9:8b:96:eb:77:62:02:9d:22:90:28:46:dc:14:22: 0b:13:1e:3e:26:60:91:8a:17:1c:a7:52:60:40:fc:cd:39:33: 81:0e:a8:75:26:ab:60:49:4e:26:47:b8:b5:99:46:03:87:c2: a9:f3:de:f9:21:7d:91:55:cb:24:d3:be:12:57:28:5f:4e:38: b3:c8:b4:fc:83:8d:3b:6e:07:d9:8b:25:09:b9:fd:0d:97:c4: 7b:24:f0:8c:47:f7:a1:43:bc:17:af:cf:e7:61:fb:11:00:34: 0a:cb:84:c9:04:ae:69:e4:fe:bf:17:6c:82:8d:29:41:05:87: 85:3f:49:1a:d8:20:f1:89:65:b7:9f:8d:9a:43:a3:1c:7f:b5: 3f:4a:34:73:a1:17:ba:40:51:1c:9c:b7:a8:7b:02:6a:63:7b: df:06:6e:1a:26:d0:66:10:5d:c2:c5:77:22:c1:25:69:41:79: 97:1b:1d:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFXOYb4jfgKSh9WTtiOhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1N2JjN2YyZWFmMGNhZmE2OWJlZTVmYWJlNjcxMjJiNDM2 M2ZlNzIwHhcNMjUxMjA2MDIwMTE1WhcNMjUxMjA3MDIwMTE1WjAzMTEwLwYDVQQD EyhjZDVmOTY3NGJiNjU3NTg0NDBlOWJlODYxMWVlYTdmMzJiZWJkMDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nh8xZ5pFs6u8mzr6SNVdOEpRvgk /i/4sG/46gq3cC1og+gcDloI/bfj4DzcLAteNc5KUwZXkIIDt1Q9DBKqzXhzC6E7 AH9ejjx/93NjgBLwstt2pMBdgJXuDN8z2yZXVpFj1ZMWbzaw+DYE4tNdiahfVILQ +IZfKbtG9euyJM3F/Elp3hXMpNOwX+VTx/xa1zdMCpFZcM0i3+rjRWdl7tEFY+vz ve4aGrhmAcEdZk+3YokQY/WrNzs0xe6qd3xNFCjKTFMlqquR+tp+HnzE7ajO60nY i/JEAmdcbeMyh4U3LHi4nMkFIHyCgLfAzCjFiUUy1RUVpez2bNWWn7Ih0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1flnS7ZXWEQOm+hhHup/Mr69AEMB8GA1UdIwQY MBaAFPV7x/Lq8Mr6ab7l+r5nEitDY/5yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVh2SDh1cnd5dnBwdnVYNnZtY1NLME5qX25JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80NDQxYjQtZjk4MS00YzI2LTliOTkt MTAxMDQ3M2Y0ZmU4LzEvOVh2SDh1cnd5dnBwdnVYNnZtY1NLME5qX25JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy80NDQxYjQtZjk4MS00YzI2LTliOTktMTAxMDQ3M2Y0ZmU4 LzEvOVh2SDh1cnd5dnBwdnVYNnZtY1NLME5qX25JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZL6mXCc L0c1IjA1mIjJ2xKY1pv5XAcpFjWBP0FFEAbgfO7iswu7Y5Zz8/EP3sZst+s6pnbp rIzO+90Rv4ynKJZqm30fM21W2ZrxuYuW63diAp0ikChG3BQiCxMePiZgkYoXHKdS YED8zTkzgQ6odSarYElOJke4tZlGA4fCqfPe+SF9kVXLJNO+ElcoX044s8i0/ION O24H2YslCbn9DZfEeyTwjEf3oUO8F6/P52H7EQA0CsuEyQSuaeT+vxdsgo0pQQWH hT9JGtgg8Yllt5+NmkOjHH+1P0o0c6EXukBRHJy3qHsCamN73wZuGibQZhBdwsV3 IsElaUF5lxsdKA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:50 2025 by rpki-client