This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.mft File: 9I2q8EbhmDbp4poD5DzVNeIXYXY.mft (raw, json) Hash identifier: EM18ysYVoosna5XJ7uwpJ23nuIDKcfdtSpJdzy5CvZM= Subject key identifier: 6B:CB:10:48:65:1B:08:D0:9D:C2:74:34:64:A4:F1:C2:A5:60:B6:E0 Authority key identifier: F4:8D:AA:F0:46:E1:98:36:E9:E2:9A:03:E4:3C:D5:35:E2:17:61:76 Certificate issuer: /CN=f48daaf046e19836e9e29a03e43cd535e2176176 Certificate serial: 019AF0F5F22CF08BB9A6085DA78E70DA55DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9I2q8EbhmDbp4poD5DzVNeIXYXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.mft Manifest number: C2 Signing time: Sat 06 Dec 2025 00:00:41 +0000 Manifest this update: Sat 06 Dec 2025 00:00:41 +0000 Manifest next update: Sun 07 Dec 2025 00:00:41 +0000 Files and hashes: 1: 9I2q8EbhmDbp4poD5DzVNeIXYXY.crl (hash: Fgn0YAf/yNHdmh6+Z0gRwq+zYLzUF/ZpviliRYHvTUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.mft rsync://rpki.ripe.net/repository/DEFAULT/9I2q8EbhmDbp4poD5DzVNeIXYXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:f2:2c:f0:8b:b9:a6:08:5d:a7:8e:70:da:55:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f48daaf046e19836e9e29a03e43cd535e2176176 Validity Not Before: Dec 6 00:00:41 2025 GMT Not After : Dec 7 00:00:41 2025 GMT Subject: CN=6bcb1048651b08d09dc2743464a4f1c2a560b6e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:51:08:67:25:3a:c0:35:2c:0a:31:57:c3:f1: cc:44:aa:67:f6:00:9b:78:0b:f4:98:a0:b4:e7:db: d1:97:79:93:42:3a:11:62:36:18:cc:e6:23:92:20: 6d:21:42:75:7a:1a:87:45:e2:5e:dc:d1:16:05:33: f3:6c:62:59:da:1f:9a:91:82:fc:43:29:9e:f8:91: a1:20:5c:34:e1:ea:08:de:15:ae:f3:06:ca:0f:21: d3:5f:21:e6:fe:3b:c4:6a:c8:ef:ff:1a:d5:b2:30: 38:e1:cc:c8:b4:dd:5c:02:ec:59:9e:d6:26:e1:52: 43:22:36:00:5b:35:50:3b:b2:e6:87:77:fe:e7:6d: b7:9c:63:37:c1:84:55:4e:ad:87:38:cc:e3:73:e1: 1c:16:61:ac:6e:95:9e:a4:ed:c6:e2:e6:c1:3d:4d: 35:74:af:fa:c6:17:35:d0:6c:d9:54:4a:64:1f:ab: c2:4e:d0:fb:a9:b0:b4:c4:60:54:47:d9:dd:7a:b2: 75:a9:5e:50:f0:e3:8b:f0:6b:d6:34:f8:73:68:66: d6:14:8a:54:b2:73:5c:68:5f:10:45:09:70:4b:d2: 3f:48:d1:d1:28:93:77:6e:b0:bb:d4:78:cf:f6:63: c4:a3:45:a4:92:48:01:bb:70:73:94:71:be:fa:bc: d3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CB:10:48:65:1B:08:D0:9D:C2:74:34:64:A4:F1:C2:A5:60:B6:E0 X509v3 Authority Key Identifier: keyid:F4:8D:AA:F0:46:E1:98:36:E9:E2:9A:03:E4:3C:D5:35:E2:17:61:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9I2q8EbhmDbp4poD5DzVNeIXYXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/73c966-3dba-42c5-b55c-d364426577cc/1/9I2q8EbhmDbp4poD5DzVNeIXYXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:e4:45:6a:63:b1:3d:57:77:32:6a:53:47:d8:81:46:1e:30: 6a:64:84:0e:11:56:d2:9d:e9:e2:95:eb:78:84:77:4a:61:9e: 34:9a:1d:05:5c:f3:9f:03:b8:0b:a0:6e:bb:a7:4e:f9:52:59: 13:a1:f5:68:4f:80:87:49:ad:c3:2a:b3:eb:50:70:a5:60:89: 61:51:5c:10:cb:8d:be:6f:de:c9:d7:2c:5f:b9:9b:e9:47:0e: 2b:84:6f:c3:4e:36:1a:c5:53:36:d2:51:d1:2a:c6:61:2b:c0: f9:df:22:80:f7:65:2d:11:fe:53:4c:25:9f:eb:6c:08:8d:f9: 45:64:30:8b:33:fa:67:2b:e7:b1:57:c1:54:47:23:79:e1:7b: 68:34:4c:50:85:30:08:d5:21:aa:8a:30:ef:35:bd:20:04:51: 3b:b4:e3:c7:e1:80:56:1b:1d:07:b1:92:f7:da:82:76:f3:e8: 6e:1f:8c:bd:17:52:07:5d:28:1c:58:9b:49:8b:93:fd:33:11: b0:ec:50:e9:51:ce:fe:c3:da:d2:4d:ef:c0:ce:2b:33:ec:3f: c0:02:32:d5:f0:df:ee:a9:80:15:de:dd:e3:ff:09:8e:29:29: 03:e7:0e:3a:07:d9:07:70:a2:21:ca:86:69:6f:fb:55:05:d4: 5d:70:d1:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9fIs8Iu5pghdp45w2lXbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0OGRhYWYwNDZlMTk4MzZlOWUyOWEwM2U0M2NkNTM1ZTIx NzYxNzYwHhcNMjUxMjA2MDAwMDQxWhcNMjUxMjA3MDAwMDQxWjAzMTEwLwYDVQQD Eyg2YmNiMTA0ODY1MWIwOGQwOWRjMjc0MzQ2NGE0ZjFjMmE1NjBiNmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVEIZyU6wDUsCjFXw/HMRKpn9gCb eAv0mKC059vRl3mTQjoRYjYYzOYjkiBtIUJ1ehqHReJe3NEWBTPzbGJZ2h+akYL8 Qyme+JGhIFw04eoI3hWu8wbKDyHTXyHm/jvEasjv/xrVsjA44czItN1cAuxZntYm 4VJDIjYAWzVQO7Lmh3f+5223nGM3wYRVTq2HOMzjc+EcFmGsbpWepO3G4ubBPU01 dK/6xhc10GzZVEpkH6vCTtD7qbC0xGBUR9nderJ1qV5Q8OOL8GvWNPhzaGbWFIpU snNcaF8QRQlwS9I/SNHRKJN3brC71HjP9mPEo0WkkkgBu3BzlHG++rzTowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvLEEhlGwjQncJ0NGSk8cKlYLbgMB8GA1UdIwQY MBaAFPSNqvBG4Zg26eKaA+Q81TXiF2F2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUkycThFYmhtRGJwNHBvRDVEelZOZUlYWVhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83M2M5NjYtM2RiYS00MmM1LWI1NWMt ZDM2NDQyNjU3N2NjLzEvOUkycThFYmhtRGJwNHBvRDVEelZOZUlYWVhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83M2M5NjYtM2RiYS00MmM1LWI1NWMtZDM2NDQyNjU3N2Nj LzEvOUkycThFYmhtRGJwNHBvRDVEelZOZUlYWVhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+RFamOx PVd3MmpTR9iBRh4wamSEDhFW0p3p4pXreIR3SmGeNJodBVzznwO4C6Buu6dO+VJZ E6H1aE+Ah0mtwyqz61BwpWCJYVFcEMuNvm/eydcsX7mb6UcOK4Rvw042GsVTNtJR 0SrGYSvA+d8igPdlLRH+U0wln+tsCI35RWQwizP6ZyvnsVfBVEcjeeF7aDRMUIUw CNUhqoow7zW9IARRO7Tjx+GAVhsdB7GS99qCdvPobh+MvRdSB10oHFibSYuT/TMR sOxQ6VHO/sPa0k3vwM4rM+w/wAIy1fDf7qmAFd7d4/8JjikpA+cOOgfZB3CiIcqG aW/7VQXUXXDRsw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:18 2025 by rpki-client