This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft File: d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft (raw, json) Hash identifier: 0l6iwCnQVH90iUjILJIvdLSlYcYFTqOuqfH0uEWSiDY= Subject key identifier: 8E:9A:D2:B9:DE:D2:8F:1F:F7:EA:2E:72:DC:98:17:56:0F:77:2F:23 Authority key identifier: 77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2 Certificate issuer: /CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2 Certificate serial: 019AF209A0E319FEE14616190D35B47BEA52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft Manifest number: 1033 Signing time: Sat 06 Dec 2025 05:01:48 +0000 Manifest this update: Sat 06 Dec 2025 05:01:48 +0000 Manifest next update: Sun 07 Dec 2025 05:01:48 +0000 Files and hashes: 1: cV_xuUl9XuNAw2Is6z6ZV4oiM48.roa (hash: +2riVPNmAsQH9xrBeRoOTXvYeuCg2sjzB0s7i/rn9hw=) 2: d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl (hash: lQs2CF3bGUdWHNpxR0EcEIWsoL3am5cI6HqdwdAa7Cg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:a0:e3:19:fe:e1:46:16:19:0d:35:b4:7b:ea:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2 Validity Not Before: Dec 6 05:01:48 2025 GMT Not After : Dec 7 05:01:48 2025 GMT Subject: CN=8e9ad2b9ded28f1ff7ea2e72dc9817560f772f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:57:5b:3c:97:16:41:03:41:69:92:c8:09:f0: 1f:bd:a6:1f:e9:a9:fb:a2:f9:20:cf:f7:dd:52:0a: 4d:45:46:ac:f1:50:bf:aa:a5:01:de:e4:40:6c:82: 12:80:4e:67:50:63:1a:1d:10:46:f4:dc:46:ec:4f: 74:b1:6b:c3:58:14:d8:0a:38:2b:d3:74:74:9a:45: f5:cd:46:2d:cf:7a:0c:bc:76:1d:c5:91:a7:a0:3b: 04:be:19:8a:4e:96:19:40:54:78:81:ca:6b:66:e4: 57:a4:7b:2d:dd:9e:e3:1c:a1:f1:5d:7b:23:0a:8a: 7d:76:ab:ae:6d:b8:06:14:c1:4c:0a:24:6b:e7:59: d7:fa:42:c7:a8:71:50:49:ce:00:dd:c6:ac:c2:4f: 57:77:69:12:a5:10:0d:5e:24:2c:ce:eb:ff:92:fe: 70:36:e3:d6:6b:65:b5:26:82:9b:44:2b:a1:2e:02: 8c:03:b4:58:63:09:93:fa:7c:ca:0c:05:70:90:23: 6a:13:ec:6f:de:e2:34:61:01:bd:90:ac:d0:94:93: 5e:7e:67:cf:9e:e3:4e:e9:ba:23:68:ee:7e:ef:30: fc:82:6e:17:a6:11:4a:88:a7:ee:b3:60:3e:ce:ed: c5:b0:87:05:f6:26:ab:fb:30:9f:fd:40:c1:fd:46: 2d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9A:D2:B9:DE:D2:8F:1F:F7:EA:2E:72:DC:98:17:56:0F:77:2F:23 X509v3 Authority Key Identifier: keyid:77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:50:46:6b:a0:b5:39:95:4a:16:d8:5d:b9:95:fd:a4:2d:f9: c0:6d:70:91:3b:67:b0:a6:5b:c8:55:a5:75:9d:94:1c:ae:e5: d5:28:27:1b:bc:65:0a:4e:39:f0:93:14:c9:d0:40:02:df:f3: c6:f4:8a:d3:fb:73:93:c6:0b:fa:d2:17:ed:1e:d7:14:fd:54: be:69:87:35:74:48:02:38:29:b8:1e:33:1c:34:7f:1f:5a:94: 4a:ef:87:6b:a7:2f:81:47:4d:3d:75:9c:fd:10:19:91:03:41: 43:d1:2c:d1:0b:00:c6:e5:1d:86:a3:7d:04:63:49:d3:8e:b0: 4b:0f:de:d9:26:d4:31:ab:0e:db:c2:0c:47:83:b1:a0:ff:9c: 86:bd:5a:21:0f:98:5e:c7:07:05:32:47:7f:af:a7:df:3d:a4: 9d:03:c6:6c:01:25:5f:84:e1:fb:12:ed:5c:47:bf:92:d4:75: 3d:e9:e6:b2:ec:c3:61:16:03:f2:d8:e0:56:4d:4d:d9:1f:93: 42:6a:7d:04:1d:df:29:48:3b:cb:9d:45:6a:67:40:8e:73:d8: a1:12:4c:97:05:a0:cd:8f:48:1c:19:cc:60:0d:6b:cd:dd:94: a1:25:c3:9d:3c:82:24:e3:57:c8:64:33:8e:0c:4d:05:4d:24: 85:b6:bc:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCaDjGf7hRhYZDTW0e+pSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZDE4YjBmNjUzNWZjYmJiNDkyZjYwNmNiODgwYmU3YTI2 ZWZjYzIwHhcNMjUxMjA2MDUwMTQ4WhcNMjUxMjA3MDUwMTQ4WjAzMTEwLwYDVQQD Eyg4ZTlhZDJiOWRlZDI4ZjFmZjdlYTJlNzJkYzk4MTc1NjBmNzcyZjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01dbPJcWQQNBaZLICfAfvaYf6an7 ovkgz/fdUgpNRUas8VC/qqUB3uRAbIISgE5nUGMaHRBG9NxG7E90sWvDWBTYCjgr 03R0mkX1zUYtz3oMvHYdxZGnoDsEvhmKTpYZQFR4gcprZuRXpHst3Z7jHKHxXXsj Cop9dquubbgGFMFMCiRr51nX+kLHqHFQSc4A3caswk9Xd2kSpRANXiQszuv/kv5w NuPWa2W1JoKbRCuhLgKMA7RYYwmT+nzKDAVwkCNqE+xv3uI0YQG9kKzQlJNefmfP nuNO6bojaO5+7zD8gm4XphFKiKfus2A+zu3FsIcF9iar+zCf/UDB/UYt2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6a0rne0o8f9+ouctyYF1YPdy8jMB8GA1UdIwQY MBaAFHfRiw9lNfy7tJL2BsuIC+eibvzCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDlHTEQyVTFfTHUwa3ZZR3k0Z0w1Nkp1X01JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iNzg3M2UtMjQ3NS00NzFkLWIwMzkt MThlY2QwNGE3YjVlLzEvZDlHTEQyVTFfTHUwa3ZZR3k0Z0w1Nkp1X01JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9iNzg3M2UtMjQ3NS00NzFkLWIwMzktMThlY2QwNGE3YjVl LzEvZDlHTEQyVTFfTHUwa3ZZR3k0Z0w1Nkp1X01JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuFBGa6C1 OZVKFthduZX9pC35wG1wkTtnsKZbyFWldZ2UHK7l1SgnG7xlCk458JMUydBAAt/z xvSK0/tzk8YL+tIX7R7XFP1UvmmHNXRIAjgpuB4zHDR/H1qUSu+Ha6cvgUdNPXWc /RAZkQNBQ9Es0QsAxuUdhqN9BGNJ046wSw/e2SbUMasO28IMR4OxoP+chr1aIQ+Y XscHBTJHf6+n3z2knQPGbAElX4Th+xLtXEe/ktR1PenmsuzDYRYD8tjgVk1N2R+T Qmp9BB3fKUg7y51FamdAjnPYoRJMlwWgzY9IHBnMYA1rzd2UoSXDnTyCJONXyGQz jgxNBU0khba80A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:43:54 2025 by rpki-client