This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft File: 9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft (raw, json) Hash identifier: zXraS5AtvMsIRYK8MNZUndXEgjs8s3aoSvbfPQ3ywng= Subject key identifier: 4D:F5:AF:2D:4E:8E:42:11:3C:DA:5E:DC:68:25:73:73:B9:E5:33:67 Authority key identifier: F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F Certificate issuer: /CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f Certificate serial: 019AF1D1B26E73CDD67FC83BD444D0236D21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft Manifest number: 176D Signing time: Sat 06 Dec 2025 04:00:42 +0000 Manifest this update: Sat 06 Dec 2025 04:00:42 +0000 Manifest next update: Sun 07 Dec 2025 04:00:42 +0000 Files and hashes: 1: 9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl (hash: kga+rTeARPVww+tjAnbwEAOgR8xp8do+Q8I385lE6vM=) 2: ZSBBy6W5L8TTtnlSf_uUrt4Z7AI.roa (hash: jFdtASpUm3buRvq9o0f0zIeX/wlw5jgk9wy5omlh1/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:b2:6e:73:cd:d6:7f:c8:3b:d4:44:d0:23:6d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f Validity Not Before: Dec 6 04:00:42 2025 GMT Not After : Dec 7 04:00:42 2025 GMT Subject: CN=4df5af2d4e8e42113cda5edc68257373b9e53367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:b5:a5:52:70:9d:35:8a:86:b9:28:93:41:a3: bb:1e:57:6e:d7:4b:c0:05:03:1b:0c:f9:f4:82:c3: bd:6c:ba:6d:77:a0:62:28:5f:db:f7:7b:94:e9:79: 0f:6a:50:6c:8d:8f:1f:fc:76:5b:b7:64:58:5b:de: 91:3d:66:bb:0c:f7:43:8f:b0:2d:fd:e3:fa:e2:4c: 84:aa:82:e9:b8:b1:a7:d7:32:9a:fa:92:e4:24:6f: e6:4c:cc:4e:38:f8:08:09:13:e8:de:c1:b4:96:be: 21:b1:e8:a1:b8:ec:90:11:eb:ae:23:55:63:88:49: 23:dc:f3:72:d5:b3:37:e3:e4:58:39:fe:7b:d9:64: b0:5e:25:63:c9:97:bd:ea:b1:c4:b1:75:c1:cb:fc: 74:01:15:22:93:b2:b3:5d:57:63:04:d8:ff:6e:c2: ea:43:cf:01:7c:10:63:0c:d8:1a:e7:85:32:06:73: b5:47:6d:f3:dc:91:8c:53:53:24:70:07:53:d1:fc: ec:e1:28:b7:7d:d5:75:52:ce:7a:65:b7:d4:9c:1b: d7:34:07:7c:2b:77:e5:50:ce:e1:da:6a:c8:99:5a: 48:1d:5a:95:6c:76:fa:15:a0:e4:32:8b:f7:bf:65: d9:10:1f:96:14:b0:ba:02:cf:a3:67:55:f1:72:78: 2c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F5:AF:2D:4E:8E:42:11:3C:DA:5E:DC:68:25:73:73:B9:E5:33:67 X509v3 Authority Key Identifier: keyid:F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:2a:38:d6:8d:0a:a8:b5:c2:d6:65:a0:4a:72:60:1f:6a:44: 62:88:5a:f5:ba:34:81:4a:f9:8a:bf:2b:b0:03:eb:b9:27:74: 22:4e:16:c9:05:2d:7a:84:0b:d9:2f:91:96:8b:7a:cc:bd:b4: ba:7f:c9:21:e0:2c:84:ac:5b:da:3c:39:31:04:e9:f1:0c:58: e4:58:3d:f7:53:66:2f:85:1d:36:35:73:2e:54:5c:01:96:fd: 58:26:a0:4c:16:0a:3a:ce:b7:ea:0b:61:f6:6b:df:57:03:fa: 58:94:30:95:95:87:f2:11:0d:9b:81:8b:11:60:8a:ad:df:b4: ef:26:8a:25:3c:26:ba:57:cb:1d:e3:63:8d:2a:36:6f:8b:5c: 00:47:aa:a7:4b:53:c0:a0:ed:25:5a:ef:72:2b:04:30:62:c9: 3e:19:1b:fd:ad:57:05:c0:6e:e4:69:65:24:0b:62:48:7b:ab: 4e:24:5f:cf:ca:82:c8:cf:f7:39:ff:fa:62:cd:98:9c:c5:45: 62:e2:36:18:8d:09:e1:5c:55:b9:e1:f9:77:6d:25:2b:df:e2: 2f:d5:b7:5a:1d:5b:80:51:0e:be:50:0c:2b:95:9f:8c:53:9c: d9:a7:7f:74:62:8d:cd:c8:35:28:60:89:b3:cd:f2:3d:8f:54: 29:ec:aa:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0bJuc83Wf8g71ETQI20hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZGFmMGJhMjFlOTAyMDI1OTdlZTQ3ZTA5ZjY4NzdmZTIz YzJhOWYwHhcNMjUxMjA2MDQwMDQyWhcNMjUxMjA3MDQwMDQyWjAzMTEwLwYDVQQD Eyg0ZGY1YWYyZDRlOGU0MjExM2NkYTVlZGM2ODI1NzM3M2I5ZTUzMzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9rWlUnCdNYqGuSiTQaO7Hldu10vA BQMbDPn0gsO9bLptd6BiKF/b93uU6XkPalBsjY8f/HZbt2RYW96RPWa7DPdDj7At /eP64kyEqoLpuLGn1zKa+pLkJG/mTMxOOPgICRPo3sG0lr4hseihuOyQEeuuI1Vj iEkj3PNy1bM34+RYOf572WSwXiVjyZe96rHEsXXBy/x0ARUik7KzXVdjBNj/bsLq Q88BfBBjDNga54UyBnO1R23z3JGMU1MkcAdT0fzs4Si3fdV1Us56ZbfUnBvXNAd8 K3flUM7h2mrImVpIHVqVbHb6FaDkMov3v2XZEB+WFLC6As+jZ1XxcngsjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE31ry1OjkIRPNpe3Gglc3O55TNnMB8GA1UdIwQY MBaAFPXa8Loh6QICWX7kfgn2h3/iPCqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWRyd3VpSHBBZ0paZnVSLUNmYUhmLUk4S3A4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85MDY4YTUtNzk3OS00ZjhjLWJmODIt Y2ZlMmE5NjU3YzI2LzEvOWRyd3VpSHBBZ0paZnVSLUNmYUhmLUk4S3A4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS85MDY4YTUtNzk3OS00ZjhjLWJmODItY2ZlMmE5NjU3YzI2 LzEvOWRyd3VpSHBBZ0paZnVSLUNmYUhmLUk4S3A4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbio41o0K qLXC1mWgSnJgH2pEYoha9bo0gUr5ir8rsAPruSd0Ik4WyQUteoQL2S+Rlot6zL20 un/JIeAshKxb2jw5MQTp8QxY5Fg991NmL4UdNjVzLlRcAZb9WCagTBYKOs636gth 9mvfVwP6WJQwlZWH8hENm4GLEWCKrd+07yaKJTwmulfLHeNjjSo2b4tcAEeqp0tT wKDtJVrvcisEMGLJPhkb/a1XBcBu5GllJAtiSHurTiRfz8qCyM/3Of/6Ys2YnMVF YuI2GI0J4VxVueH5d20lK9/iL9W3Wh1bgFEOvlAMK5WfjFOc2ad/dGKNzcg1KGCJ s83yPY9UKeyqjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:15:55 2025 by rpki-client