This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft File: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft (raw, json) Hash identifier: 71ooUnAto38EefjUkwXx4Yxdl63rvmbV7hgZW2ULPlY= Subject key identifier: A0:59:9F:B7:F6:6F:76:2E:33:26:0E:24:19:87:87:7F:C2:2A:50:BC Authority key identifier: F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D Certificate issuer: /CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d Certificate serial: 019AF2098EED12D73AE5642DDACEC2DB1907 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft Manifest number: 1333 Signing time: Sat 06 Dec 2025 05:01:43 +0000 Manifest this update: Sat 06 Dec 2025 05:01:43 +0000 Manifest next update: Sun 07 Dec 2025 05:01:43 +0000 Files and hashes: 1: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl (hash: N8jAj8awhLFb6v9LHaD6BZJ0STY+E2gRAzVkRZyqsWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:8e:ed:12:d7:3a:e5:64:2d:da:ce:c2:db:19:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d Validity Not Before: Dec 6 05:01:43 2025 GMT Not After : Dec 7 05:01:43 2025 GMT Subject: CN=a0599fb7f66f762e33260e241987877fc22a50bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cc:81:a0:0d:e1:35:e6:b7:c5:8c:28:28:da: 24:b8:1e:34:4d:de:e5:38:2e:5a:c2:c1:3d:14:fd: ae:e1:a3:b6:70:05:a0:28:c9:90:14:0e:30:d8:36: 8c:42:a3:90:0f:c8:5c:c9:54:0a:d3:60:8d:12:0d: 6d:38:1a:bb:15:59:14:e9:14:88:3e:1a:ae:c2:52: 2f:1c:01:f9:4d:bc:c5:38:e8:4b:16:1b:c9:93:ce: f0:86:54:aa:81:43:32:99:a0:03:52:49:dc:8d:2e: e2:b5:1f:11:31:a0:c0:fe:97:e8:b2:b1:47:7b:f7: 93:f6:fd:c4:f2:43:73:ab:a5:4a:69:0d:75:95:93: 13:c3:ef:aa:d6:52:4f:bf:30:5d:8d:8d:30:71:68: a6:e9:30:9d:0c:29:aa:dd:9f:f9:bc:e2:89:b6:ae: 49:61:b5:2b:0a:77:23:a0:5d:f3:9f:8a:ca:03:08: bd:6c:b9:ca:fa:8d:2d:88:bf:f4:48:86:97:40:c5: 50:1d:03:13:a8:a2:42:5d:1e:76:d4:0f:c7:23:7c: da:46:f5:c0:df:31:67:d4:45:48:67:4c:d3:1b:20: 34:78:6e:61:b9:71:57:43:d4:64:b7:07:e7:78:3c: 39:86:30:c7:a4:37:38:f5:c5:6e:ed:36:51:eb:42: b5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:59:9F:B7:F6:6F:76:2E:33:26:0E:24:19:87:87:7F:C2:2A:50:BC X509v3 Authority Key Identifier: keyid:F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:f5:74:5a:0b:f7:17:0a:b6:61:22:09:21:0d:78:76:b0:fc: 38:1c:be:0d:fc:94:78:84:70:ce:1f:4b:53:f4:a4:8b:ef:b8: 0e:f8:bd:34:2b:dc:90:27:8f:db:56:e2:db:ea:8f:1f:95:c8: a5:19:45:2e:d6:3a:d9:d4:d1:45:29:c5:e8:fe:7c:b8:d3:68: 71:a4:0f:1b:15:4e:f7:64:b4:04:30:85:e9:b7:cb:17:6b:79: 8e:00:22:e4:21:f5:d5:b1:8d:fc:67:92:c6:c1:61:ec:9f:8d: 66:17:ff:14:89:d9:d6:3f:de:3f:26:3b:88:29:d5:37:ec:2b: 64:8c:ef:d2:6f:a7:2c:6d:05:a3:e1:66:e2:0f:00:0d:2a:6e: 8e:75:3a:64:8d:a8:d7:38:6f:93:b8:06:e8:08:56:fc:0d:65: aa:c6:51:66:15:b2:2e:3d:c8:1e:37:90:d2:9c:19:54:2d:5f: 7c:d6:68:f3:50:b5:3b:2a:5d:c1:4a:0f:84:87:03:20:8e:d4: 0b:6f:73:84:5d:ba:1e:bc:47:46:49:aa:b0:5b:0a:02:1d:6f: 52:a3:9e:b6:e5:ff:6b:aa:e9:1f:2e:11:fe:b0:ce:e7:69:02: 35:48:cf:5b:34:29:2e:53:4e:07:f7:8f:eb:e3:45:cf:d9:a0: e6:b6:8c:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCY7tEtc65WQt2s7C2xkHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1N2U0YjFjOTU4NzcyNzEzM2M3ZWUwMGJiYmE4ZWM1NmVh ZTY0MWQwHhcNMjUxMjA2MDUwMTQzWhcNMjUxMjA3MDUwMTQzWjAzMTEwLwYDVQQD EyhhMDU5OWZiN2Y2NmY3NjJlMzMyNjBlMjQxOTg3ODc3ZmMyMmE1MGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8yBoA3hNea3xYwoKNokuB40Td7l OC5awsE9FP2u4aO2cAWgKMmQFA4w2DaMQqOQD8hcyVQK02CNEg1tOBq7FVkU6RSI PhquwlIvHAH5TbzFOOhLFhvJk87whlSqgUMymaADUkncjS7itR8RMaDA/pfosrFH e/eT9v3E8kNzq6VKaQ11lZMTw++q1lJPvzBdjY0wcWim6TCdDCmq3Z/5vOKJtq5J YbUrCncjoF3zn4rKAwi9bLnK+o0tiL/0SIaXQMVQHQMTqKJCXR521A/HI3zaRvXA 3zFn1EVIZ0zTGyA0eG5huXFXQ9RktwfneDw5hjDHpDc49cVu7TZR60K1SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBZn7f2b3YuMyYOJBmHh3/CKlC8MB8GA1UdIwQY MBaAFPV+SxyVh3JxM8fuALu6jsVurmQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVg1TEhKV0hjbkV6eC00QXU3cU94VzZ1WkIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85ZTkxMTktZTVlNi00MDRhLWI1OGEt MTg4YjkxYTllOTkwLzEvOVg1TEhKV0hjbkV6eC00QXU3cU94VzZ1WkIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85ZTkxMTktZTVlNi00MDRhLWI1OGEtMTg4YjkxYTllOTkw LzEvOVg1TEhKV0hjbkV6eC00QXU3cU94VzZ1WkIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPV0Wgv3 Fwq2YSIJIQ14drD8OBy+DfyUeIRwzh9LU/Ski++4Dvi9NCvckCeP21bi2+qPH5XI pRlFLtY62dTRRSnF6P58uNNocaQPGxVO92S0BDCF6bfLF2t5jgAi5CH11bGN/GeS xsFh7J+NZhf/FInZ1j/ePyY7iCnVN+wrZIzv0m+nLG0Fo+Fm4g8ADSpujnU6ZI2o 1zhvk7gG6AhW/A1lqsZRZhWyLj3IHjeQ0pwZVC1ffNZo81C1OypdwUoPhIcDII7U C29zhF26HrxHRkmqsFsKAh1vUqOetuX/a6rpHy4R/rDO52kCNUjPWzQpLlNOB/eP 6+NFz9mg5raMKg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:33:05 2025 by rpki-client