This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft File: 9Y3yxGnJeIlfhFgCTFBugByPsho.mft (raw, json) Hash identifier: SGIfKMTRDvi2fImDkS5uKIbcMWiX98a/5n/dRUbQkHY= Subject key identifier: 50:72:3F:CE:08:5A:09:6F:CA:DA:FA:95:82:66:D4:96:2D:B9:89:F9 Authority key identifier: F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A Certificate issuer: /CN=f58df2c469c978895f8458024c506e801c8fb21a Certificate serial: 019AF208B580AC6F492E460A1104773FB9CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft Manifest number: 14E9 Signing time: Sat 06 Dec 2025 05:00:48 +0000 Manifest this update: Sat 06 Dec 2025 05:00:48 +0000 Manifest next update: Sun 07 Dec 2025 05:00:48 +0000 Files and hashes: 1: 9Y3yxGnJeIlfhFgCTFBugByPsho.crl (hash: zw5YcBOaJ5WOd8eZJtZRWqFxRuZHciBq6Nl7szUDknw=) 2: uTgF90O7aHLO_G7cSzTbj_nzdao.roa (hash: lwZMpyCYU1xDcN6IVFSHMP6G+054GMvXirawB6lbtsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b5:80:ac:6f:49:2e:46:0a:11:04:77:3f:b9:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f58df2c469c978895f8458024c506e801c8fb21a Validity Not Before: Dec 6 05:00:48 2025 GMT Not After : Dec 7 05:00:48 2025 GMT Subject: CN=50723fce085a096fcadafa958266d4962db989f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fb:0c:90:98:3f:bf:a2:f8:e9:25:38:08:72: 5a:7e:7f:54:58:29:5c:43:38:24:a7:0c:2c:bb:81: 5d:32:0f:2c:75:ea:8e:82:f2:64:aa:bd:57:b6:b9: fe:14:cf:a3:4a:e3:b9:e4:49:f3:24:3d:10:38:e6: 24:c1:3a:49:81:3a:12:59:26:95:f4:d0:da:68:71: 58:cd:12:d8:2a:97:e9:99:55:06:0f:03:23:e9:68: 31:0e:8c:9f:8c:cd:ca:85:25:63:55:a6:d8:5f:be: c6:42:16:e4:09:e4:a4:e8:60:38:80:70:d5:23:3c: 5d:49:ec:89:9c:26:53:22:da:c7:3a:42:b6:f3:aa: 9e:90:34:f8:c8:54:05:37:ae:77:11:c8:60:9d:05: 98:47:83:dc:c7:72:06:a5:d1:75:28:e3:a6:87:24: 40:56:73:0d:ed:34:d4:94:60:be:9d:25:dc:ce:27: 57:b2:fa:2c:78:19:4e:e2:1b:62:30:b3:73:1b:0d: 7f:c9:00:59:d6:94:43:30:9f:95:3d:88:9f:8a:a6: f6:b0:b7:c2:5b:41:40:bf:dd:6b:7b:5d:94:44:3d: 8c:d2:05:a4:f5:e2:78:17:2b:06:65:4e:e1:e4:29: 18:0d:e3:b6:67:5e:d7:a4:76:68:37:e0:96:49:0b: 6a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:72:3F:CE:08:5A:09:6F:CA:DA:FA:95:82:66:D4:96:2D:B9:89:F9 X509v3 Authority Key Identifier: keyid:F5:8D:F2:C4:69:C9:78:89:5F:84:58:02:4C:50:6E:80:1C:8F:B2:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y3yxGnJeIlfhFgCTFBugByPsho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1e9621-626e-4032-9b54-76e3349c97c2/1/9Y3yxGnJeIlfhFgCTFBugByPsho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:04:5f:74:85:89:b8:3d:9f:80:2b:10:71:34:b6:5e:bf:54: 09:04:cf:e4:40:1a:d6:83:48:ca:e7:1c:26:fa:6d:01:28:d8: 44:56:37:1c:03:2c:85:c4:37:49:e6:74:46:95:36:7f:3f:ec: de:38:bc:e4:8f:03:ba:3e:dc:f2:a1:88:e0:fd:b4:05:67:a7: 84:eb:4e:d4:57:b0:a6:38:1c:c0:2c:c3:8a:25:6f:b2:19:20: 72:65:10:b1:e3:19:32:43:27:1c:4a:48:31:e6:8b:3d:41:10: 78:6a:65:77:d3:cf:f3:aa:35:fd:70:a6:9f:6a:63:09:26:90: 07:31:7d:e2:71:a0:b0:fb:3b:54:90:dc:4d:dc:40:6e:6a:ae: 83:09:79:3d:a9:cb:82:1f:b4:f7:d5:f0:a8:dc:a7:53:77:4f: e3:9a:20:56:dc:d9:7d:a7:05:95:88:95:4b:c6:e8:06:5e:0f: 9c:fe:26:c5:25:6c:85:67:26:21:d7:a5:55:d0:33:4e:ff:60: ca:ec:26:10:26:3f:0b:c7:ef:66:1b:78:82:e8:08:ee:3e:70: 1f:10:3e:76:4e:7d:12:48:11:7c:6e:ff:85:13:ba:40:a4:0f: c1:d4:27:c4:17:be:56:3b:8f:da:a3:7e:ad:8a:a8:3e:8c:4f: e6:54:3b:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLWArG9JLkYKEQR3P7nKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1OGRmMmM0NjljOTc4ODk1Zjg0NTgwMjRjNTA2ZTgwMWM4 ZmIyMWEwHhcNMjUxMjA2MDUwMDQ4WhcNMjUxMjA3MDUwMDQ4WjAzMTEwLwYDVQQD Eyg1MDcyM2ZjZTA4NWEwOTZmY2FkYWZhOTU4MjY2ZDQ5NjJkYjk4OWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPsMkJg/v6L46SU4CHJafn9UWClc Qzgkpwwsu4FdMg8sdeqOgvJkqr1Xtrn+FM+jSuO55EnzJD0QOOYkwTpJgToSWSaV 9NDaaHFYzRLYKpfpmVUGDwMj6WgxDoyfjM3KhSVjVabYX77GQhbkCeSk6GA4gHDV IzxdSeyJnCZTItrHOkK286qekDT4yFQFN653EchgnQWYR4Pcx3IGpdF1KOOmhyRA VnMN7TTUlGC+nSXczidXsvoseBlO4htiMLNzGw1/yQBZ1pRDMJ+VPYifiqb2sLfC W0FAv91re12URD2M0gWk9eJ4FysGZU7h5CkYDeO2Z17XpHZoN+CWSQtqfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFByP84IWglvytr6lYJm1JYtuYn5MB8GA1UdIwQY MBaAFPWN8sRpyXiJX4RYAkxQboAcj7IaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVkzeXhHbkplSWxmaEZnQ1RGQnVnQnlQc2hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xZTk2MjEtNjI2ZS00MDMyLTliNTQt NzZlMzM0OWM5N2MyLzEvOVkzeXhHbkplSWxmaEZnQ1RGQnVnQnlQc2hvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8xZTk2MjEtNjI2ZS00MDMyLTliNTQtNzZlMzM0OWM5N2My LzEvOVkzeXhHbkplSWxmaEZnQ1RGQnVnQnlQc2hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARARfdIWJ uD2fgCsQcTS2Xr9UCQTP5EAa1oNIyuccJvptASjYRFY3HAMshcQ3SeZ0RpU2fz/s 3ji85I8Duj7c8qGI4P20BWenhOtO1FewpjgcwCzDiiVvshkgcmUQseMZMkMnHEpI MeaLPUEQeGpld9PP86o1/XCmn2pjCSaQBzF94nGgsPs7VJDcTdxAbmqugwl5PanL gh+099XwqNynU3dP45ogVtzZfacFlYiVS8boBl4PnP4mxSVshWcmIdelVdAzTv9g yuwmECY/C8fvZht4gugI7j5wHxA+dk59EkgRfG7/hRO6QKQPwdQnxBe+VjuP2qN+ rYqoPoxP5lQ7/w== -----END CERTIFICATE-----Generated at Sat Dec 6 14:55:19 2025 by rpki-client