This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft File: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft (raw, json) Hash identifier: H7pfN5kzrKDfrCnW225lBTrlHl33hjtOBOZ1Lh4k/Nw= Subject key identifier: 93:55:58:C4:3C:47:25:08:1C:B3:8B:DC:4D:30:04:7F:93:2D:AF:4A Authority key identifier: F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6 Certificate issuer: /CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6 Certificate serial: 019AF1D2176B9993BBD8AAB43A85C8CEB15E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft Manifest number: 1268 Signing time: Sat 06 Dec 2025 04:01:08 +0000 Manifest this update: Sat 06 Dec 2025 04:01:08 +0000 Manifest next update: Sun 07 Dec 2025 04:01:08 +0000 Files and hashes: 1: 9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl (hash: 5775Gf3LxSI8n/nRvPf3LtRvK49mOlmtl1t5Q/O5WMw=) 2: DaSMaWZYfnj6ceinzYPrOhJJgQA.roa (hash: tLMLMu2mXxzV//rWf7p3b0LjE6TE93dgy9UoXP39ok8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:17:6b:99:93:bb:d8:aa:b4:3a:85:c8:ce:b1:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4ac99d77a7a1c84dd47f43bb72051aa73b1aad6 Validity Not Before: Dec 6 04:01:08 2025 GMT Not After : Dec 7 04:01:08 2025 GMT Subject: CN=935558c43c4725081cb38bdc4d30047f932daf4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e0:1d:95:a0:a6:a6:12:1d:73:bf:ac:95:7c: ea:32:2a:6b:2e:00:e1:44:90:9e:e0:73:5d:a0:fb: 5f:e4:f8:2d:a9:1b:68:3b:16:92:3d:de:8d:6f:59: ec:93:0e:01:ce:65:b3:6d:46:ff:d2:5a:26:30:07: 9c:aa:6b:c7:79:d4:8b:ea:6f:5d:97:a8:56:f6:75: 89:14:26:31:c9:80:9b:82:13:8e:34:63:30:6b:c6: f2:af:5c:bd:1e:51:1b:42:b4:12:61:52:ee:5d:54: f7:c8:7d:14:71:f3:85:a8:f5:f7:38:ba:0d:8b:70: 9f:a2:d5:87:f1:92:4a:02:c4:5d:dd:e7:09:4b:02: 50:58:0e:1b:f6:4a:2a:3b:3a:15:a0:3f:94:5a:eb: 0a:37:ae:69:59:31:69:49:50:4f:e5:11:ed:98:08: e8:32:b6:7c:6d:52:37:57:87:e9:97:55:73:d4:54: b9:9d:bd:ab:7a:01:e8:8f:59:c3:99:6e:d5:93:ea: ad:91:c5:ac:50:08:0a:b8:36:30:71:0d:b3:4f:af: b8:ad:5a:f4:83:06:24:40:9e:2e:49:2e:84:2e:8d: 44:b5:4a:bc:7a:37:7e:cd:ba:a0:08:5f:94:66:65: a2:d7:c7:4d:13:3c:f8:b6:3b:94:69:93:31:e8:3a: 46:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:55:58:C4:3C:47:25:08:1C:B3:8B:DC:4D:30:04:7F:93:2D:AF:4A X509v3 Authority Key Identifier: keyid:F4:AC:99:D7:7A:7A:1C:84:DD:47:F4:3B:B7:20:51:AA:73:B1:AA:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KyZ13p6HITdR_Q7tyBRqnOxqtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a76445-198a-4f85-bbf8-66cca81e6c07/1/9KyZ13p6HITdR_Q7tyBRqnOxqtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:56:37:29:74:88:46:5b:14:89:4e:4f:b8:98:05:cf:1b:5c: 43:d5:11:04:c4:39:2e:68:b9:d0:81:1d:ad:36:c8:e1:27:6f: 1d:88:f0:e1:a6:6a:aa:33:59:24:18:58:de:87:95:9f:33:5f: fd:51:4a:ec:6f:62:72:a6:3e:b3:03:70:2a:a3:98:7c:13:50: 26:0c:84:8e:13:34:ad:60:e9:2c:60:07:d0:7c:53:e4:f4:c1: 15:95:f9:f7:b5:06:06:c8:7a:9f:b3:8d:31:e0:06:d0:ba:c4: 76:da:60:3a:1a:b6:8d:5a:8c:fb:c2:02:59:97:05:7d:44:2d: 5b:d3:6d:e9:8f:98:3d:99:7c:c1:ff:01:7d:12:32:03:b5:d5: a1:b4:f1:a0:ac:ce:80:a8:41:5a:ea:a6:5b:de:62:a9:3d:d7: 64:92:69:79:32:25:29:6e:93:03:d5:e1:6b:48:d0:87:1d:b9: b4:75:ae:cb:4e:99:7c:6d:1e:67:8e:9b:cd:89:73:5c:0a:c8: 77:0e:02:2e:2e:41:2a:fb:ea:97:aa:67:66:c6:cb:cd:40:e6: 8a:c7:d1:fd:04:31:c7:b6:7d:31:9b:41:05:ff:32:db:3b:35: ff:00:4b:62:6d:f1:d9:82:98:a6:e4:1d:5d:14:21:76:64:86: 9c:d6:b3:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hdrmZO72Kq0OoXIzrFeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YWM5OWQ3N2E3YTFjODRkZDQ3ZjQzYmI3MjA1MWFhNzNi MWFhZDYwHhcNMjUxMjA2MDQwMTA4WhcNMjUxMjA3MDQwMTA4WjAzMTEwLwYDVQQD Eyg5MzU1NThjNDNjNDcyNTA4MWNiMzhiZGM0ZDMwMDQ3ZjkzMmRhZjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuAdlaCmphIdc7+slXzqMiprLgDh RJCe4HNdoPtf5PgtqRtoOxaSPd6Nb1nskw4BzmWzbUb/0lomMAecqmvHedSL6m9d l6hW9nWJFCYxyYCbghOONGMwa8byr1y9HlEbQrQSYVLuXVT3yH0UcfOFqPX3OLoN i3CfotWH8ZJKAsRd3ecJSwJQWA4b9koqOzoVoD+UWusKN65pWTFpSVBP5RHtmAjo MrZ8bVI3V4fpl1Vz1FS5nb2regHoj1nDmW7Vk+qtkcWsUAgKuDYwcQ2zT6+4rVr0 gwYkQJ4uSS6ELo1EtUq8ejd+zbqgCF+UZmWi18dNEzz4tjuUaZMx6DpGNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNVWMQ8RyUIHLOL3E0wBH+TLa9KMB8GA1UdIwQY MBaAFPSsmdd6ehyE3Uf0O7cgUapzsarWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUt5WjEzcDZISVRkUl9RN3R5QlJxbk94cXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNzY0NDUtMTk4YS00Zjg1LWJiZjgt NjZjY2E4MWU2YzA3LzEvOUt5WjEzcDZISVRkUl9RN3R5QlJxbk94cXRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNzY0NDUtMTk4YS00Zjg1LWJiZjgtNjZjY2E4MWU2YzA3 LzEvOUt5WjEzcDZISVRkUl9RN3R5QlJxbk94cXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI1Y3KXSI RlsUiU5PuJgFzxtcQ9URBMQ5Lmi50IEdrTbI4SdvHYjw4aZqqjNZJBhY3oeVnzNf /VFK7G9icqY+swNwKqOYfBNQJgyEjhM0rWDpLGAH0HxT5PTBFZX597UGBsh6n7ON MeAG0LrEdtpgOhq2jVqM+8ICWZcFfUQtW9Nt6Y+YPZl8wf8BfRIyA7XVobTxoKzO gKhBWuqmW95iqT3XZJJpeTIlKW6TA9Xha0jQhx25tHWuy06ZfG0eZ46bzYlzXArI dw4CLi5BKvvql6pnZsbLzUDmisfR/QQxx7Z9MZtBBf8y2zs1/wBLYm3x2YKYpuQd XRQhdmSGnNazTA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:40:29 2025 by rpki-client