This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft File: 9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft (raw, json) Hash identifier: mvK2rkkmAdlu7tmceEK6wm4g/ewcAWQWjhJcZeOkgwk= Subject key identifier: 76:00:88:C2:8E:F7:9A:1F:A3:25:F0:5D:BE:DE:F8:F1:A6:C1:6E:1F Authority key identifier: F6:9F:8B:CF:2A:2E:C1:0F:9E:4B:63:02:E1:B3:50:9F:3D:03:36:EE Certificate issuer: /CN=f69f8bcf2a2ec10f9e4b6302e1b3509f3d0336ee Certificate serial: 019AF1D21E2FB13F81520C1BEF120BBF6B2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft Manifest number: 1326 Signing time: Sat 06 Dec 2025 04:01:10 +0000 Manifest this update: Sat 06 Dec 2025 04:01:10 +0000 Manifest next update: Sun 07 Dec 2025 04:01:10 +0000 Files and hashes: 1: 9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl (hash: EKj9SL5uYiSSEXbcwel6h6PrAVE+1dRyxPreN75KGKI=) 2: NdVRxEIMNBunZfZP9qXNSfaySc4.roa (hash: KRJlcuUveV33SEu3V+UuJaoqvZJ1ZgJGxVWpQ++tEBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:1e:2f:b1:3f:81:52:0c:1b:ef:12:0b:bf:6b:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69f8bcf2a2ec10f9e4b6302e1b3509f3d0336ee Validity Not Before: Dec 6 04:01:10 2025 GMT Not After : Dec 7 04:01:10 2025 GMT Subject: CN=760088c28ef79a1fa325f05dbedef8f1a6c16e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b5:28:5f:50:39:a0:60:91:85:77:32:e8:b1: a7:48:0f:56:65:4e:7f:0a:1a:9f:4d:2c:92:82:20: f5:b9:a6:85:ee:4e:d5:31:f9:d6:9d:96:8a:e3:2e: 51:58:3e:44:60:c1:ce:96:8c:56:54:53:ef:a6:db: 61:e7:19:10:a4:91:99:0f:89:91:f6:e6:92:c7:2d: 08:3b:5e:53:4b:e6:0d:85:24:bf:85:da:32:ce:61: 44:69:bf:17:58:1e:a9:69:31:87:c0:03:e6:10:15: 75:05:43:81:7c:fd:b8:4d:89:3f:d6:08:e0:55:88: 1d:71:5d:55:5f:04:e0:9d:08:df:ce:59:ad:ed:66: ca:b9:ad:5e:79:aa:ef:60:78:b7:99:1c:42:c5:7d: a8:5b:3a:3f:73:51:8b:cb:51:17:f5:0c:83:a2:b1: a9:2e:1a:d3:80:30:08:8d:37:b2:8d:21:1a:41:5d: 36:9c:8b:a0:e7:99:3d:73:a8:be:76:19:d7:1a:f8: 75:c7:45:86:51:88:56:7e:b6:da:ba:7e:b2:41:ce: 7d:68:1b:79:78:e4:d7:2e:ba:45:f9:69:15:e5:50: 28:a0:59:aa:f3:33:bd:37:48:c6:1f:f0:9e:2c:f9: 1a:28:3b:e0:ac:f7:0b:a4:ab:92:88:f3:59:2c:07: 37:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:00:88:C2:8E:F7:9A:1F:A3:25:F0:5D:BE:DE:F8:F1:A6:C1:6E:1F X509v3 Authority Key Identifier: keyid:F6:9F:8B:CF:2A:2E:C1:0F:9E:4B:63:02:E1:B3:50:9F:3D:03:36:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:98:72:7f:3f:0c:6e:2d:c7:d6:de:f1:25:6a:09:ab:af:82: e0:d6:0a:39:a1:56:bb:81:85:a9:f6:b6:d2:b5:07:8b:77:92: 4e:7a:1b:d0:86:3d:b6:e3:49:e7:91:1a:39:52:d5:ec:5e:1a: 00:b3:48:8b:3e:d4:18:72:aa:88:b3:21:ae:18:0b:9d:1a:e7: 35:d3:2e:58:81:f2:8d:f8:b5:0c:7f:b0:20:9c:c0:91:ae:d1: 40:7a:96:26:80:79:fa:73:4a:12:62:75:ef:7a:61:53:7d:ca: ab:9f:5d:d6:b0:1d:ed:14:9e:2d:18:6f:0e:f5:c3:83:cd:2c: da:27:c5:e3:3e:b8:27:12:1f:71:39:99:71:a6:ea:e0:30:a7: 1f:d2:be:07:19:e1:a6:a1:40:9e:a0:2d:f0:7b:fe:95:a6:65: 63:0b:28:78:b2:d9:dc:81:7a:13:11:6c:ff:37:01:91:b5:11: e8:c6:5d:51:2b:e0:24:f9:ec:c7:8e:18:d2:37:b3:5c:8c:85: 01:fd:82:c2:b8:4b:b1:bd:f9:3e:8b:f4:f6:06:ca:dd:1a:0f: b5:3d:ab:d8:be:76:3e:68:e2:f7:84:47:dd:d2:c9:cb:e7:8e: 46:a4:b8:9a:05:2a:02:d9:87:eb:08:6a:54:95:69:9c:09:b2: 94:a3:02:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0h4vsT+BUgwb7xILv2sqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OWY4YmNmMmEyZWMxMGY5ZTRiNjMwMmUxYjM1MDlmM2Qw MzM2ZWUwHhcNMjUxMjA2MDQwMTEwWhcNMjUxMjA3MDQwMTEwWjAzMTEwLwYDVQQD Eyg3NjAwODhjMjhlZjc5YTFmYTMyNWYwNWRiZWRlZjhmMWE2YzE2ZTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbUoX1A5oGCRhXcy6LGnSA9WZU5/ ChqfTSySgiD1uaaF7k7VMfnWnZaK4y5RWD5EYMHOloxWVFPvptth5xkQpJGZD4mR 9uaSxy0IO15TS+YNhSS/hdoyzmFEab8XWB6paTGHwAPmEBV1BUOBfP24TYk/1gjg VYgdcV1VXwTgnQjfzlmt7WbKua1eearvYHi3mRxCxX2oWzo/c1GLy1EX9QyDorGp LhrTgDAIjTeyjSEaQV02nIug55k9c6i+dhnXGvh1x0WGUYhWfrbaun6yQc59aBt5 eOTXLrpF+WkV5VAooFmq8zO9N0jGH/CeLPkaKDvgrPcLpKuSiPNZLAc3mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYAiMKO95ofoyXwXb7e+PGmwW4fMB8GA1UdIwQY MBaAFPafi88qLsEPnktjAuGzUJ89AzbuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXAtTHp5b3V3US1lUzJNQzRiTlFuejBETnU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85YzhiYTEtODQwNy00YzJhLTkxMmEt MDBhNzcwNDc3NGUxLzEvOXAtTHp5b3V3US1lUzJNQzRiTlFuejBETnU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi85YzhiYTEtODQwNy00YzJhLTkxMmEtMDBhNzcwNDc3NGUx LzEvOXAtTHp5b3V3US1lUzJNQzRiTlFuejBETnU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJhyfz8M bi3H1t7xJWoJq6+C4NYKOaFWu4GFqfa20rUHi3eSTnob0IY9tuNJ55EaOVLV7F4a ALNIiz7UGHKqiLMhrhgLnRrnNdMuWIHyjfi1DH+wIJzAka7RQHqWJoB5+nNKEmJ1 73phU33Kq59d1rAd7RSeLRhvDvXDg80s2ifF4z64JxIfcTmZcabq4DCnH9K+Bxnh pqFAnqAt8Hv+laZlYwsoeLLZ3IF6ExFs/zcBkbUR6MZdUSvgJPnsx44Y0jezXIyF Af2CwrhLsb35Pov09gbK3RoPtT2r2L52Pmji94RH3dLJy+eORqS4mgUqAtmH6whq VJVpnAmylKMCPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:43:22 2025 by rpki-client