This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft File: 9pglYdLaF5Avg-_-EySZ-C1S8WM.mft (raw, json) Hash identifier: 5pe0oJKhuyjuLWZxYA5wz2XaLfDXD3ivCQObvhK3nug= Subject key identifier: DD:E3:DE:E0:22:4B:B1:1A:CE:ED:3E:27:C0:1F:1F:5C:D6:C0:7E:39 Authority key identifier: F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63 Certificate issuer: /CN=f6982561d2da17902f83effe132499f82d52f163 Certificate serial: 019AF12DD27ECC6FDCFA5638ACA49FC6C0BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft Manifest number: 151A Signing time: Sat 06 Dec 2025 01:01:43 +0000 Manifest this update: Sat 06 Dec 2025 01:01:43 +0000 Manifest next update: Sun 07 Dec 2025 01:01:43 +0000 Files and hashes: 1: 9ab4gsm8HWV3453txi9GuHhETfI.roa (hash: +RCpHHVjRUNbeQhE7D5a86WvNpwACKkVCiWoO5pNIb0=) 2: 9pglYdLaF5Avg-_-EySZ-C1S8WM.crl (hash: Yzb3iD24CSSLAAXon7raOMh9DG2R8YbQZLJYw3HJjt4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:d2:7e:cc:6f:dc:fa:56:38:ac:a4:9f:c6:c0:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6982561d2da17902f83effe132499f82d52f163 Validity Not Before: Dec 6 01:01:43 2025 GMT Not After : Dec 7 01:01:43 2025 GMT Subject: CN=dde3dee0224bb11aceed3e27c01f1f5cd6c07e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b9:ba:bd:ed:cb:9c:22:eb:bc:51:4d:52:e9: f0:c1:e8:f8:3e:08:62:76:dc:75:71:1b:f3:8b:44: b3:21:65:43:cf:61:97:1f:dd:ed:4c:76:42:3a:d4: 6b:29:9b:89:9b:8c:53:f8:67:e2:41:b2:25:30:a1: e3:3d:08:cd:d3:2a:db:0e:b0:60:69:ea:b1:2b:ad: 30:13:5a:11:61:c5:cd:e6:85:ea:08:df:c4:a8:98: e2:b3:64:4c:30:ae:a2:26:9b:6d:fd:a3:4d:df:d1: e3:03:71:34:6d:fe:40:2c:66:7b:6c:94:6e:85:08: cf:46:ab:5c:0f:0b:2c:f1:df:5e:c8:a4:e0:50:21: bd:0c:60:22:31:89:e2:e7:97:78:83:1d:10:06:96: a1:cf:60:10:3e:36:38:e9:75:ae:e5:ef:8c:f4:0b: 32:1c:a1:11:8b:0f:6d:5f:29:40:f0:83:9d:61:55: 67:c4:d7:68:54:60:66:be:c1:a8:fc:fe:99:48:39: 3b:1f:11:44:6a:1c:4f:7d:92:80:8c:fd:5d:b2:da: 77:1c:a5:44:74:85:bc:26:c2:3f:85:94:be:f8:f3: 58:48:25:a7:7b:8f:83:a9:17:4a:05:7c:26:fe:52: 83:b1:6f:ef:86:be:ca:7e:dc:90:de:3c:bd:12:5a: 87:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E3:DE:E0:22:4B:B1:1A:CE:ED:3E:27:C0:1F:1F:5C:D6:C0:7E:39 X509v3 Authority Key Identifier: keyid:F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:31:0e:69:de:62:69:ed:23:6e:7d:85:44:f4:97:86:c5:80: ca:63:8c:34:c5:de:ba:11:4e:66:16:82:3a:f7:3c:08:a5:84: 05:69:24:81:e6:13:40:47:a9:ee:a8:59:9e:27:32:c3:bb:54: 59:3e:5f:51:51:82:4e:93:5a:22:cf:a9:56:aa:7a:bc:d5:16: 99:5c:6f:b4:41:0f:20:2c:8a:b9:31:76:5f:9f:ac:0c:8a:f9: a1:fd:02:79:dc:53:c6:76:5b:72:3f:ed:f9:ea:45:02:7f:44: 53:37:03:7b:7f:01:8a:c3:89:b7:f2:52:37:f3:c1:5e:00:72: b9:93:0f:1f:e6:a4:2e:b4:50:de:cc:5c:09:1d:73:aa:97:1d: 27:5b:83:8e:ab:83:04:7a:fc:dc:a4:e5:c4:33:88:87:3c:7a: 2c:bc:cb:01:eb:93:f6:d0:e8:7f:83:58:da:62:7d:6a:0f:d3: 5f:ef:22:53:6d:73:b6:a8:7e:08:dc:e2:4e:59:58:a0:81:8f: 55:10:26:22:18:7d:21:66:a2:20:d2:17:18:02:13:b4:21:6a: e0:57:68:9d:d7:f8:62:63:e4:90:63:bd:2c:90:6b:be:43:c3: 05:05:16:30:45:1d:c1:8b:a1:b4:db:30:f2:3c:5f:dc:91:58: cd:54:58:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdJ+zG/c+lY4rKSfxsC7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OTgyNTYxZDJkYTE3OTAyZjgzZWZmZTEzMjQ5OWY4MmQ1 MmYxNjMwHhcNMjUxMjA2MDEwMTQzWhcNMjUxMjA3MDEwMTQzWjAzMTEwLwYDVQQD EyhkZGUzZGVlMDIyNGJiMTFhY2VlZDNlMjdjMDFmMWY1Y2Q2YzA3ZTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbm6ve3LnCLrvFFNUunwwej4Pghi dtx1cRvzi0SzIWVDz2GXH93tTHZCOtRrKZuJm4xT+GfiQbIlMKHjPQjN0yrbDrBg aeqxK60wE1oRYcXN5oXqCN/EqJjis2RMMK6iJptt/aNN39HjA3E0bf5ALGZ7bJRu hQjPRqtcDwss8d9eyKTgUCG9DGAiMYni55d4gx0QBpahz2AQPjY46XWu5e+M9Asy HKERiw9tXylA8IOdYVVnxNdoVGBmvsGo/P6ZSDk7HxFEahxPfZKAjP1dstp3HKVE dIW8JsI/hZS++PNYSCWne4+DqRdKBXwm/lKDsW/vhr7KftyQ3jy9ElqHcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3j3uAiS7Eazu0+J8AfH1zWwH45MB8GA1UdIwQY MBaAFPaYJWHS2heQL4Pv/hMkmfgtUvFjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXBnbFlkTGFGNUF2Zy1fLUV5U1otQzFTOFdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wZDJiZTktZGEwYi00NjcyLTliMTQt ODczMTRkZjdkZWI0LzEvOXBnbFlkTGFGNUF2Zy1fLUV5U1otQzFTOFdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8wZDJiZTktZGEwYi00NjcyLTliMTQtODczMTRkZjdkZWI0 LzEvOXBnbFlkTGFGNUF2Zy1fLUV5U1otQzFTOFdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEzEOad5i ae0jbn2FRPSXhsWAymOMNMXeuhFOZhaCOvc8CKWEBWkkgeYTQEep7qhZnicyw7tU WT5fUVGCTpNaIs+pVqp6vNUWmVxvtEEPICyKuTF2X5+sDIr5of0CedxTxnZbcj/t +epFAn9EUzcDe38BisOJt/JSN/PBXgByuZMPH+akLrRQ3sxcCR1zqpcdJ1uDjquD BHr83KTlxDOIhzx6LLzLAeuT9tDof4NY2mJ9ag/TX+8iU21ztqh+CNziTllYoIGP VRAmIhh9IWaiINIXGAITtCFq4Fdondf4YmPkkGO9LJBrvkPDBQUWMEUdwYuhtNsw 8jxf3JFYzVRYGw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:31:59 2025 by rpki-client