This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft File: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft (raw, json) Hash identifier: eNci7hPweyFPbAElLhlQQH8M9AHGdOURu5O1hbhr2wQ= Subject key identifier: FA:9C:5B:C6:C9:36:70:02:25:87:00:03:28:79:53:B6:7B:60:CA:B2 Authority key identifier: F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2 Certificate issuer: /CN=f71b99831d44b0bf7c00c50977f60b1844349cf2 Certificate serial: 019AF19B0273FFABA80FF6108585068B6D1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft Manifest number: 0E42 Signing time: Sat 06 Dec 2025 03:00:58 +0000 Manifest this update: Sat 06 Dec 2025 03:00:58 +0000 Manifest next update: Sun 07 Dec 2025 03:00:58 +0000 Files and hashes: 1: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl (hash: Di6KN7n5p5W7zm2N1dX7Bb6hmGI9VRiB4s1YTCedwoM=) 2: lTwG7fexEhfG1KlVMWVQwuwbbtc.roa (hash: bfD7+ofvPCOaA8CmUpbLhJtSVYv9giSBukJUfQkg6wo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:02:73:ff:ab:a8:0f:f6:10:85:85:06:8b:6d:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f71b99831d44b0bf7c00c50977f60b1844349cf2 Validity Not Before: Dec 6 03:00:58 2025 GMT Not After : Dec 7 03:00:58 2025 GMT Subject: CN=fa9c5bc6c936700225870003287953b67b60cab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:96:53:42:f7:e7:d7:6a:8d:f2:64:dc:24:e1: 6c:7d:16:28:31:4b:f0:ba:5f:72:35:e1:8d:a6:2e: dc:5f:44:74:ff:65:f2:4e:ce:fe:bf:2b:ee:1f:29: 8e:ca:8e:dd:aa:50:bc:63:fc:53:0e:dd:0b:62:2f: 44:50:fe:1f:9a:0c:99:83:94:99:98:dd:79:a6:11: cb:25:15:0f:20:04:a2:08:9a:62:65:3c:29:6a:55: 54:60:ce:18:c6:4b:33:26:32:f2:a7:76:43:ec:7b: eb:90:29:81:0a:11:b4:d7:52:72:74:3b:b9:76:66: 83:32:95:4b:d6:4d:2c:b6:7a:40:2a:f4:5e:18:bf: 3e:63:39:3f:4f:80:24:a5:65:64:1b:71:e6:d0:cc: 19:55:60:3b:7e:75:0f:13:98:f3:5e:0a:9d:31:b7: a1:97:4f:d3:aa:b2:64:32:88:c3:45:b0:e3:93:a6: 67:31:09:03:cb:81:d1:15:7b:59:b2:a6:8e:03:4b: bb:53:38:36:05:ec:ce:44:4d:00:73:41:97:8e:94: 07:5f:a9:71:e6:43:fe:a0:94:51:d8:bf:aa:51:d2: eb:56:ab:cc:33:d0:2d:74:6e:9e:8a:c8:ec:5b:d2: ff:d5:95:89:11:fb:35:52:68:21:08:22:2a:15:6d: 9c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9C:5B:C6:C9:36:70:02:25:87:00:03:28:79:53:B6:7B:60:CA:B2 X509v3 Authority Key Identifier: keyid:F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:78:59:a9:bd:bb:b7:d5:4e:4d:4c:58:74:11:cc:e0:88:52: af:2e:b7:cd:18:3a:a5:04:e2:99:30:14:24:e6:e7:e2:00:49: 78:fa:d7:a4:66:09:b6:4c:38:70:09:d0:08:e2:44:1e:d6:fd: cc:42:70:0f:07:4d:3a:1c:fd:e1:2d:74:f8:01:70:8f:91:31: 04:6f:5a:ca:1a:bc:7a:83:ee:92:00:6a:50:94:31:cf:fa:ed: bd:27:4a:33:0e:e4:b8:0c:36:64:95:18:0e:bc:93:58:0f:0b: 61:77:36:cf:ab:a0:f5:b2:3a:97:ff:6e:89:cb:92:3f:d0:e3: 19:f6:d7:1f:b4:35:51:2e:15:cd:87:98:1d:32:47:d8:bb:22: 56:a5:24:91:dd:a3:cc:7a:d0:ec:f5:d8:62:81:c1:6c:74:2a: 40:38:31:43:ba:25:58:aa:72:f0:7c:50:23:91:69:44:2c:3d: a1:8b:04:e4:29:14:2b:51:4d:8a:f4:11:d3:03:3c:c6:c9:35: b8:96:d0:6c:99:2f:08:1c:54:90:d7:7d:10:d1:db:bb:1c:bf: 6b:6a:b0:a4:8c:00:3b:5c:4b:ba:64:b3:4a:ed:0c:e4:13:37: 86:96:6e:3e:0a:4f:4d:21:f1:42:52:46:e6:a2:04:30:af:5d: 8a:bd:5d:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwJz/6uoD/YQhYUGi20eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MWI5OTgzMWQ0NGIwYmY3YzAwYzUwOTc3ZjYwYjE4NDQz NDljZjIwHhcNMjUxMjA2MDMwMDU4WhcNMjUxMjA3MDMwMDU4WjAzMTEwLwYDVQQD EyhmYTljNWJjNmM5MzY3MDAyMjU4NzAwMDMyODc5NTNiNjdiNjBjYWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZZTQvfn12qN8mTcJOFsfRYoMUvw ul9yNeGNpi7cX0R0/2XyTs7+vyvuHymOyo7dqlC8Y/xTDt0LYi9EUP4fmgyZg5SZ mN15phHLJRUPIASiCJpiZTwpalVUYM4YxkszJjLyp3ZD7HvrkCmBChG011JydDu5 dmaDMpVL1k0stnpAKvReGL8+Yzk/T4AkpWVkG3Hm0MwZVWA7fnUPE5jzXgqdMbeh l0/TqrJkMojDRbDjk6ZnMQkDy4HRFXtZsqaOA0u7Uzg2BezORE0Ac0GXjpQHX6lx 5kP+oJRR2L+qUdLrVqvMM9AtdG6eisjsW9L/1ZWJEfs1UmghCCIqFW2cMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPqcW8bJNnACJYcAAyh5U7Z7YMqyMB8GA1UdIwQY MBaAFPcbmYMdRLC/fADFCXf2CxhENJzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXh1Wmd4MUVzTDk4QU1VSmRfWUxHRVEwblBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC82ZTYxNzUtNjM1YS00Y2M2LTk0ZWQt MGRjZjQ1YTVhZjNkLzEvOXh1Wmd4MUVzTDk4QU1VSmRfWUxHRVEwblBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC82ZTYxNzUtNjM1YS00Y2M2LTk0ZWQtMGRjZjQ1YTVhZjNk LzEvOXh1Wmd4MUVzTDk4QU1VSmRfWUxHRVEwblBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwXhZqb27 t9VOTUxYdBHM4IhSry63zRg6pQTimTAUJObn4gBJePrXpGYJtkw4cAnQCOJEHtb9 zEJwDwdNOhz94S10+AFwj5ExBG9ayhq8eoPukgBqUJQxz/rtvSdKMw7kuAw2ZJUY DryTWA8LYXc2z6ug9bI6l/9uicuSP9DjGfbXH7Q1US4VzYeYHTJH2LsiVqUkkd2j zHrQ7PXYYoHBbHQqQDgxQ7olWKpy8HxQI5FpRCw9oYsE5CkUK1FNivQR0wM8xsk1 uJbQbJkvCBxUkNd9ENHbuxy/a2qwpIwAO1xLumSzSu0M5BM3hpZuPgpPTSHxQlJG 5qIEMK9dir1dPg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:51:38 2025 by rpki-client