This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft File: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft (raw, json) Hash identifier: LQKoAYoH9+iOyrJJC18Sm4rg1MqvD1L8hVAwgVyH/PY= Subject key identifier: 59:B7:CC:21:15:9B:A5:6D:5B:50:C8:44:86:EA:D1:69:F1:03:22:35 Authority key identifier: F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D Certificate issuer: /CN=f6954d0103a7a3e652354a74489f86daf9a1a59d Certificate serial: 019AF2094BED71E0131FD81448F7C51B32F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:01:26 +0000 Manifest this update: Sat 06 Dec 2025 05:01:26 +0000 Manifest next update: Sun 07 Dec 2025 05:01:26 +0000 Files and hashes: 1: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl (hash: ZDnVdUn+8UpnZDY239kzmcOBv+fAfPxxKLs7mWV07p0=) 2: gGwKnYfvhCn5nwp-acIqahsS3nA.roa (hash: Rj4EAnxstBQ29bzxEKAGqDAmg0fXQP5ck4gqOBpaqb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:4b:ed:71:e0:13:1f:d8:14:48:f7:c5:1b:32:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6954d0103a7a3e652354a74489f86daf9a1a59d Validity Not Before: Dec 6 05:01:26 2025 GMT Not After : Dec 7 05:01:26 2025 GMT Subject: CN=59b7cc21159ba56d5b50c84486ead169f1032235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8a:a9:c9:65:46:45:8e:6e:ae:f9:15:96:15: 0a:5d:68:b6:02:12:82:e0:43:7d:d4:6b:e4:03:ab: bd:21:d0:0e:91:f5:64:68:a2:d0:5c:2e:a9:75:8b: 01:48:ef:26:f0:37:eb:85:d8:b3:c5:ea:ad:c5:7c: 53:d4:b4:57:af:b0:91:cc:da:72:2c:b4:fc:e7:d7: ed:f0:8e:78:ba:9e:82:aa:aa:2a:1a:9a:c0:89:37: 47:cb:8c:76:1a:77:6c:74:9f:45:eb:c1:12:5a:02: 4b:37:56:93:3b:15:72:fe:d1:eb:3d:ee:fd:a8:4f: ce:e4:a4:b0:a5:8c:91:08:55:c9:07:c9:4c:78:ba: 4e:4f:43:4c:31:e3:1c:d2:09:a1:66:9b:25:a5:e3: 06:67:07:71:79:2b:aa:90:73:c8:32:a0:8b:51:32: 24:e4:75:1f:5f:a7:32:5e:a3:a7:c7:aa:43:2e:3b: 36:29:b7:8a:09:3b:ca:1b:dc:96:3c:a5:7a:6f:e7: b6:70:db:b6:8f:78:64:62:23:98:c9:68:0d:b0:9f: 15:ec:d9:c4:39:7d:81:be:bd:3a:d0:4c:cd:f6:e8: f1:ff:90:87:11:96:34:b5:1c:c8:d1:4d:b7:6d:64: bc:87:9f:eb:4a:ce:c5:18:c6:ee:84:b9:1f:c0:65: 97:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:B7:CC:21:15:9B:A5:6D:5B:50:C8:44:86:EA:D1:69:F1:03:22:35 X509v3 Authority Key Identifier: keyid:F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:a2:a2:8c:ae:97:ed:f4:41:b5:43:b7:31:87:43:9c:90:4c: 26:c4:a9:62:28:5e:c7:28:08:e5:ce:27:de:a9:e8:c1:b4:5e: c1:f6:35:a6:41:c5:e6:65:d9:39:2f:69:93:c3:c2:fd:b3:23: 16:e4:18:d8:56:f2:78:1b:d2:6b:6e:75:40:9a:c1:c0:5f:2f: ac:01:8c:4a:5d:be:73:28:43:78:54:8c:0d:73:7e:97:ce:f8: 3b:dc:80:a8:aa:97:5c:70:44:0e:27:d8:a1:77:9a:a5:a2:8a: 7c:64:90:30:9a:e2:29:c9:8a:75:89:c0:28:97:9e:c7:6d:49: bf:96:61:30:ae:3f:39:38:a2:da:ae:01:5e:e5:5c:74:4a:bb: 95:c1:6c:b9:4f:db:ca:ca:ef:db:59:be:45:dc:62:97:75:1c: ad:da:eb:fc:70:2c:60:fb:85:b9:e3:85:86:25:09:fa:b9:2c: 34:3d:15:90:2d:7d:66:2a:4d:f5:8f:17:13:a1:4c:ff:fa:c6: 03:99:d6:7c:7b:9a:24:b1:94:ac:c1:8d:bb:6a:dd:17:a8:26: df:1c:a9:af:19:8a:f7:65:3d:2f:06:ea:95:44:28:58:f1:f0: 5f:89:6b:3c:bb:ba:df:ca:b0:e2:24:29:ca:96:b3:c1:e3:ce: 1a:19:10:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUvtceATH9gUSPfFGzL2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OTU0ZDAxMDNhN2EzZTY1MjM1NGE3NDQ4OWY4NmRhZjlh MWE1OWQwHhcNMjUxMjA2MDUwMTI2WhcNMjUxMjA3MDUwMTI2WjAzMTEwLwYDVQQD Eyg1OWI3Y2MyMTE1OWJhNTZkNWI1MGM4NDQ4NmVhZDE2OWYxMDMyMjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4qpyWVGRY5urvkVlhUKXWi2AhKC 4EN91GvkA6u9IdAOkfVkaKLQXC6pdYsBSO8m8DfrhdizxeqtxXxT1LRXr7CRzNpy LLT859ft8I54up6CqqoqGprAiTdHy4x2GndsdJ9F68ESWgJLN1aTOxVy/tHrPe79 qE/O5KSwpYyRCFXJB8lMeLpOT0NMMeMc0gmhZpslpeMGZwdxeSuqkHPIMqCLUTIk 5HUfX6cyXqOnx6pDLjs2KbeKCTvKG9yWPKV6b+e2cNu2j3hkYiOYyWgNsJ8V7NnE OX2Bvr060EzN9ujx/5CHEZY0tRzI0U23bWS8h5/rSs7FGMbuhLkfwGWXrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFm3zCEVm6VtW1DIRIbq0WnxAyI1MB8GA1UdIwQY MBaAFPaVTQEDp6PmUjVKdEifhtr5oaWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXBWTkFRT25vLVpTTlVwMFNKLUcydm1ocFowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NDA1NTAtZGFhYi00YzlkLTg0NDAt ZjhjOWUwOTYyMzU0LzEvOXBWTkFRT25vLVpTTlVwMFNKLUcydm1ocFowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NDA1NTAtZGFhYi00YzlkLTg0NDAtZjhjOWUwOTYyMzU0 LzEvOXBWTkFRT25vLVpTTlVwMFNKLUcydm1ocFowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt6KijK6X 7fRBtUO3MYdDnJBMJsSpYihexygI5c4n3qnowbRewfY1pkHF5mXZOS9pk8PC/bMj FuQY2FbyeBvSa251QJrBwF8vrAGMSl2+cyhDeFSMDXN+l874O9yAqKqXXHBEDifY oXeapaKKfGSQMJriKcmKdYnAKJeex21Jv5ZhMK4/OTii2q4BXuVcdEq7lcFsuU/b ysrv21m+Rdxil3Ucrdrr/HAsYPuFueOFhiUJ+rksND0VkC19ZipN9Y8XE6FM//rG A5nWfHuaJLGUrMGNu2rdF6gm3xyprxmK92U9LwbqlUQoWPHwX4lrPLu638qw4iQp ypazwePOGhkQ4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:42:36 2025 by rpki-client