This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.mft File: 9hUWPY_cRSP7uCJN89wgese94ck.mft (raw, json) Hash identifier: sleJBqMr8oSc4pD/jrgCM5kJ089ikxHllI7bP51XZbo= Subject key identifier: 49:05:25:F5:4A:C4:2C:69:60:96:2C:9C:5C:00:64:DD:52:F7:8D:19 Authority key identifier: F6:15:16:3D:8F:DC:45:23:FB:B8:22:4D:F3:DC:20:7A:C7:BD:E1:C9 Certificate issuer: /CN=f615163d8fdc4523fbb8224df3dc207ac7bde1c9 Certificate serial: 019AF0F5DC642FAA771A87DE2D1C5884E7E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hUWPY_cRSP7uCJN89wgese94ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.mft Manifest number: 74 Signing time: Sat 06 Dec 2025 00:00:35 +0000 Manifest this update: Sat 06 Dec 2025 00:00:35 +0000 Manifest next update: Sun 07 Dec 2025 00:00:35 +0000 Files and hashes: 1: 9hUWPY_cRSP7uCJN89wgese94ck.crl (hash: Q0xm61vg+mlrjyUdNMb6z5TJFKKTEcIjcCJWL86RWYc=) 2: RlIkcF8LuODaxIujEnNWDk02pSo.roa (hash: kY34QFN9p9fQ3/mWC+xr3JVSNAC8iRBd/0Q4LhkJ0WQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.mft rsync://rpki.ripe.net/repository/DEFAULT/9hUWPY_cRSP7uCJN89wgese94ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:dc:64:2f:aa:77:1a:87:de:2d:1c:58:84:e7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f615163d8fdc4523fbb8224df3dc207ac7bde1c9 Validity Not Before: Dec 6 00:00:35 2025 GMT Not After : Dec 7 00:00:35 2025 GMT Subject: CN=490525f54ac42c6960962c9c5c0064dd52f78d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cf:62:81:c7:38:7b:a5:88:f6:d8:f2:1b:0f: 01:37:e1:05:90:b9:42:e9:b8:5c:f5:28:d8:33:d4: d1:1d:f9:84:f5:e2:97:7b:cb:6f:10:0e:87:f7:ae: d6:4b:4f:ce:91:c7:a7:6a:a1:e5:31:a0:dd:61:c7: 9e:a0:81:13:35:9a:7c:de:f0:a1:0f:5e:11:fe:e7: a1:a1:4c:97:21:6b:e9:c2:d3:a4:52:3c:3c:5a:a6: a6:4f:8e:91:b6:cb:33:90:24:86:e4:d7:f4:c2:01: 6a:53:3e:e1:3f:fe:a2:70:82:a7:3f:7e:03:5b:a3: db:32:c7:ce:1e:d7:bb:61:8b:ba:e1:ab:b6:3c:bf: 2b:4c:78:90:94:8e:64:27:be:4c:93:69:7a:49:54: 3b:8d:8b:25:73:95:af:e4:82:ba:fa:0d:c9:26:66: 93:ca:a4:0f:6e:dc:28:60:1e:c8:5d:90:d4:7d:2f: 42:09:a9:08:22:97:55:2c:6f:b2:30:ff:78:c6:8a: d7:54:be:21:a7:fd:45:91:b4:dd:62:0c:69:eb:8a: e1:04:8c:a4:53:de:f6:f9:e2:f3:ba:ac:cb:e3:72: 6c:dd:72:6c:85:87:bd:2f:85:e8:6e:f6:fb:32:86: 00:1d:a5:e5:ef:49:dc:70:42:00:9e:a2:86:32:e7: 47:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:05:25:F5:4A:C4:2C:69:60:96:2C:9C:5C:00:64:DD:52:F7:8D:19 X509v3 Authority Key Identifier: keyid:F6:15:16:3D:8F:DC:45:23:FB:B8:22:4D:F3:DC:20:7A:C7:BD:E1:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hUWPY_cRSP7uCJN89wgese94ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/05b659-d19b-43cd-9fcc-d539857e2e2f/1/9hUWPY_cRSP7uCJN89wgese94ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:13:4d:bd:f6:d3:63:d9:47:79:82:86:9b:4f:94:34:eb:7c: a2:75:bf:80:f7:27:ef:28:0b:93:b4:30:7f:e7:43:72:ee:aa: 10:fe:84:37:3d:be:ad:00:75:29:96:a5:27:8f:3f:d2:7b:63: 4c:d8:b7:df:94:9c:04:fa:04:d4:8d:13:28:29:3a:27:10:a0: cf:49:6e:46:1b:7f:1f:2f:e4:85:c9:cf:77:49:b2:29:0a:2d: 81:30:c4:ef:23:56:dd:76:23:8c:d8:22:15:6d:51:92:f5:33: a4:4d:34:06:51:f0:37:ba:d5:fb:4b:67:c5:44:9a:ae:ed:8b: 7b:ab:45:59:d3:42:5d:e3:b0:3b:28:8d:26:df:5d:c5:75:65: 15:bf:3b:48:8d:89:ea:c1:d9:72:a4:05:f1:04:b0:ef:73:a3: f9:da:f2:43:c6:90:c1:52:f4:6b:52:ad:8e:48:1a:31:ee:f5: 31:17:05:0c:22:76:8b:21:ce:f9:28:6a:15:95:2d:33:7a:8a: b5:17:94:08:6d:96:36:fc:56:a2:53:dc:0b:07:39:11:53:be: 29:70:ba:fa:bc:ac:d2:25:64:2e:82:95:c5:aa:b9:c4:e1:6e: 5c:2d:d2:7c:74:b1:30:b0:19:6c:09:a3:06:e0:b5:dc:80:1d: 27:18:6f:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9dxkL6p3GofeLRxYhOfgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MTUxNjNkOGZkYzQ1MjNmYmI4MjI0ZGYzZGMyMDdhYzdi ZGUxYzkwHhcNMjUxMjA2MDAwMDM1WhcNMjUxMjA3MDAwMDM1WjAzMTEwLwYDVQQD Eyg0OTA1MjVmNTRhYzQyYzY5NjA5NjJjOWM1YzAwNjRkZDUyZjc4ZDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyM9igcc4e6WI9tjyGw8BN+EFkLlC 6bhc9SjYM9TRHfmE9eKXe8tvEA6H967WS0/OkcenaqHlMaDdYceeoIETNZp83vCh D14R/uehoUyXIWvpwtOkUjw8WqamT46RtsszkCSG5Nf0wgFqUz7hP/6icIKnP34D W6PbMsfOHte7YYu64au2PL8rTHiQlI5kJ75Mk2l6SVQ7jYslc5Wv5IK6+g3JJmaT yqQPbtwoYB7IXZDUfS9CCakIIpdVLG+yMP94xorXVL4hp/1FkbTdYgxp64rhBIyk U972+eLzuqzL43Js3XJshYe9L4Xobvb7MoYAHaXl70nccEIAnqKGMudHiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEkFJfVKxCxpYJYsnFwAZN1S940ZMB8GA1UdIwQY MBaAFPYVFj2P3EUj+7giTfPcIHrHveHJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWhVV1BZX2NSU1A3dUNKTjg5d2dlc2U5NGNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wNWI2NTktZDE5Yi00M2NkLTlmY2Mt ZDUzOTg1N2UyZTJmLzEvOWhVV1BZX2NSU1A3dUNKTjg5d2dlc2U5NGNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8wNWI2NTktZDE5Yi00M2NkLTlmY2MtZDUzOTg1N2UyZTJm LzEvOWhVV1BZX2NSU1A3dUNKTjg5d2dlc2U5NGNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhNNvfbT Y9lHeYKGm0+UNOt8onW/gPcn7ygLk7Qwf+dDcu6qEP6ENz2+rQB1KZalJ48/0ntj TNi335ScBPoE1I0TKCk6JxCgz0luRht/Hy/khcnPd0myKQotgTDE7yNW3XYjjNgi FW1RkvUzpE00BlHwN7rV+0tnxUSaru2Le6tFWdNCXeOwOyiNJt9dxXVlFb87SI2J 6sHZcqQF8QSw73Oj+dryQ8aQwVL0a1KtjkgaMe71MRcFDCJ2iyHO+ShqFZUtM3qK tReUCG2WNvxWolPcCwc5EVO+KXC6+rys0iVkLoKVxaq5xOFuXC3SfHSxMLAZbAmj BuC13IAdJxhvow== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:47 2025 by rpki-client