This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft File: 9H1LS48bGIg-rDtJnA8EKsomsKk.mft (raw, json) Hash identifier: hlyztVAmH85YmtQoHh81mPYHnDaBqYfO2O0cxjPtEQ4= Subject key identifier: 0D:5A:AA:65:0E:98:65:A7:1F:43:34:4F:5D:2D:53:69:55:F3:29:BE Authority key identifier: F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9 Certificate issuer: /CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9 Certificate serial: 019B34C58F9A96B9B796A36D18E7CAA340C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft Manifest number: 0AB6 Signing time: Fri 19 Dec 2025 04:02:00 +0000 Manifest this update: Fri 19 Dec 2025 04:02:00 +0000 Manifest next update: Sat 20 Dec 2025 04:02:00 +0000 Files and hashes: 1: 9H1LS48bGIg-rDtJnA8EKsomsKk.crl (hash: +QO1yWo/qNgkdS5hVCj3BoUh0I3q2mNztzyTQqmdklc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:8f:9a:96:b9:b7:96:a3:6d:18:e7:ca:a3:40:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9 Validity Not Before: Dec 19 04:02:00 2025 GMT Not After : Dec 20 04:02:00 2025 GMT Subject: CN=0d5aaa650e9865a71f43344f5d2d536955f329be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:df:5d:d7:26:60:de:18:e2:e0:fa:a5:16:cf: 48:5b:4f:98:fb:5e:6b:11:e9:43:77:ef:17:a4:9f: e7:6a:2b:5a:b0:c7:ae:03:72:b5:d9:f3:b0:c5:bb: bc:38:a8:5a:4a:fd:24:c2:fe:cc:94:f5:77:3d:7f: f6:c9:6b:ec:e2:98:a0:bf:eb:7a:49:96:63:03:15: a7:15:e5:2f:32:f7:2e:60:4e:2e:37:7a:cb:c4:4d: 37:6d:06:96:32:af:29:77:d0:45:bc:15:c7:23:4e: a6:d8:a9:b8:fd:cd:6a:06:9b:c1:f0:20:e5:09:df: 14:6f:e4:a7:d4:c9:2a:cc:fe:56:71:79:cb:8e:48: be:58:0c:ce:ed:c3:bf:2f:e2:d4:ff:af:21:1f:04: 87:31:53:4d:9d:83:75:93:27:02:30:92:ca:f3:5a: c7:38:7d:ed:b5:1f:d8:0c:5e:86:31:2a:18:fd:42: 2b:40:5d:95:80:b0:6d:c9:83:a8:2a:d3:ba:92:7e: 56:07:fb:cc:d6:85:5d:4b:ee:7a:c7:1e:bf:20:e0: a8:06:68:42:b0:b9:13:fb:60:5e:7f:92:34:34:84: c4:d4:2b:9f:7b:9d:dd:b3:75:58:cd:6b:2b:d5:09: bf:5a:fc:48:76:f1:f0:a1:59:b5:bd:ca:ed:7d:1e: 4b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5A:AA:65:0E:98:65:A7:1F:43:34:4F:5D:2D:53:69:55:F3:29:BE X509v3 Authority Key Identifier: keyid:F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3d:48:6f:85:84:c5:cd:8b:a5:fc:fa:e8:f5:ac:4b:08:a4: 70:6d:4f:ce:95:2f:9b:81:7e:b7:9a:d8:70:35:67:65:37:a1: e4:8d:f4:97:37:fa:47:d2:ef:fd:b9:e2:33:bb:73:6b:a3:43: 92:7f:7c:0c:49:42:70:75:fd:c6:81:b2:83:f9:74:bf:52:40: 41:18:ab:03:82:a5:51:c8:27:73:61:cd:87:1f:5d:3a:46:18: 35:04:dc:fa:c7:47:a2:d0:2d:9c:ce:a0:be:0a:c7:1e:92:d9: 59:4c:c9:a6:43:fb:f3:ea:72:db:bb:e1:64:e8:bf:6e:b1:f4: ef:b1:52:97:7e:e5:20:43:d6:06:cc:f7:8e:4e:01:e4:b7:91: 43:3b:8e:09:8f:d4:0e:82:d3:28:37:7b:04:d1:af:59:21:29: cc:f4:81:1a:dd:a1:13:93:d8:a8:99:57:fc:d7:b9:eb:8a:f1: 9e:4d:3c:6f:d2:f2:6a:f4:fa:de:33:8a:56:c8:8f:2f:83:3e: 4d:82:25:7c:e8:f7:a3:52:49:e1:73:92:20:cf:81:5f:80:f2: 96:d7:3f:3d:bd:0b:5f:15:c3:8e:40:f3:f9:6f:53:c9:67:8d: 9b:3f:00:75:73:84:09:66:cf:9b:11:a4:33:a7:d6:c7:95:a4: b1:11:75:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xY+alrm3lqNtGOfKo0DCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0N2Q0YjRiOGYxYjE4ODgzZWFjM2I0OTljMGYwNDJhY2Ey NmIwYTkwHhcNMjUxMjE5MDQwMjAwWhcNMjUxMjIwMDQwMjAwWjAzMTEwLwYDVQQD EygwZDVhYWE2NTBlOTg2NWE3MWY0MzM0NGY1ZDJkNTM2OTU1ZjMyOWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5t9d1yZg3hji4PqlFs9IW0+Y+15r EelDd+8XpJ/naitasMeuA3K12fOwxbu8OKhaSv0kwv7MlPV3PX/2yWvs4pigv+t6 SZZjAxWnFeUvMvcuYE4uN3rLxE03bQaWMq8pd9BFvBXHI06m2Km4/c1qBpvB8CDl Cd8Ub+Sn1MkqzP5WcXnLjki+WAzO7cO/L+LU/68hHwSHMVNNnYN1kycCMJLK81rH OH3ttR/YDF6GMSoY/UIrQF2VgLBtyYOoKtO6kn5WB/vM1oVdS+56xx6/IOCoBmhC sLkT+2Bef5I0NITE1Cufe53ds3VYzWsr1Qm/WvxIdvHwoVm1vcrtfR5LpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1aqmUOmGWnH0M0T10tU2lV8ym+MB8GA1UdIwQY MBaAFPR9S0uPGxiIPqw7SZwPBCrKJrCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUgxTFM0OGJHSWctckR0Sm5BOEVLc29tc0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNzZkMWYtZWVkZi00YTRkLTg5NWIt MjcxNjY3NTNkZjA4LzEvOUgxTFM0OGJHSWctckR0Sm5BOEVLc29tc0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mNzZkMWYtZWVkZi00YTRkLTg5NWItMjcxNjY3NTNkZjA4 LzEvOUgxTFM0OGJHSWctckR0Sm5BOEVLc29tc0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGz1Ib4WE xc2Lpfz66PWsSwikcG1PzpUvm4F+t5rYcDVnZTeh5I30lzf6R9Lv/bniM7tza6ND kn98DElCcHX9xoGyg/l0v1JAQRirA4KlUcgnc2HNhx9dOkYYNQTc+sdHotAtnM6g vgrHHpLZWUzJpkP78+py27vhZOi/brH077FSl37lIEPWBsz3jk4B5LeRQzuOCY/U DoLTKDd7BNGvWSEpzPSBGt2hE5PYqJlX/Ne564rxnk08b9LyavT63jOKVsiPL4M+ TYIlfOj3o1JJ4XOSIM+BX4Dyltc/Pb0LXxXDjkDz+W9TyWeNmz8AdXOECWbPmxGk M6fWx5WksRF1eQ== -----END CERTIFICATE-----Generated at Fri Dec 19 05:46:13 2025 by rpki-client