This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft File: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft (raw, json) Hash identifier: k4CnWks7X87Cth7iNS3Y/vaN2lx+fO1Zddj49rq3bbU= Subject key identifier: 16:3F:2E:89:73:54:E9:34:C7:8B:BB:F6:7B:71:40:0B:63:85:B0:9D Authority key identifier: F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9 Certificate issuer: /CN=f52e9a043f3128336e3c97c2542574c8ad929ac9 Certificate serial: 019AF12EAFE8D6DDCE535B37D922C3FD677B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft Manifest number: 07C5 Signing time: Sat 06 Dec 2025 01:02:39 +0000 Manifest this update: Sat 06 Dec 2025 01:02:39 +0000 Manifest next update: Sun 07 Dec 2025 01:02:39 +0000 Files and hashes: 1: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl (hash: ktPjP7ctJmRQl4FXSH3q+9L0Qd1uooC+fHujvj1/fnY=) 2: OCedJE5LkoowQn54mjjrBJCuPJI.roa (hash: nw4YWjZiCna7KJhUNUrep5sUi3EwU231+kVKK+38ws8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:af:e8:d6:dd:ce:53:5b:37:d9:22:c3:fd:67:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f52e9a043f3128336e3c97c2542574c8ad929ac9 Validity Not Before: Dec 6 01:02:39 2025 GMT Not After : Dec 7 01:02:39 2025 GMT Subject: CN=163f2e897354e934c78bbbf67b71400b6385b09d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7a:0a:5d:a2:47:c5:67:4a:fe:4e:9f:ea:cb: e8:ea:d2:c6:6e:c2:b6:f7:e8:4e:23:91:3a:35:71: 77:62:8f:49:20:42:ed:4d:ad:05:ff:e4:6b:9b:d8: 35:96:32:40:ed:8c:91:c5:7b:21:32:90:0e:fd:43: 85:db:84:e1:27:9f:a9:c3:df:61:03:92:f1:e8:b4: ee:68:8f:fa:01:cd:41:86:8f:1d:28:1e:55:a2:a0: 70:32:17:8d:72:ac:5b:b7:85:78:1d:e2:b9:2c:22: db:51:60:10:e7:30:35:fd:9d:6b:8d:8d:b4:e7:80: b4:28:c2:df:33:19:c9:99:8f:9a:cc:5a:e6:06:e9: 6d:44:3a:0c:f7:5a:f4:b8:8e:57:75:ef:ab:d0:8b: 71:a9:81:ed:de:62:6a:51:62:6d:81:dd:d9:7d:e5: 9d:32:d7:61:26:53:49:77:e6:f6:f5:e6:fe:04:f7: cc:59:a0:39:80:26:b6:91:3a:50:0e:87:fe:cc:46: 18:d7:12:90:bd:8b:51:09:df:cd:4c:0d:73:1c:b3: af:65:0e:c3:5d:72:a9:fc:d0:d5:aa:b4:40:7a:81: 05:75:21:de:67:7a:5e:ef:4a:0e:b9:f5:39:63:64: 29:59:70:de:51:8a:35:e5:4d:c2:75:42:e9:a4:a6: 4e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:3F:2E:89:73:54:E9:34:C7:8B:BB:F6:7B:71:40:0B:63:85:B0:9D X509v3 Authority Key Identifier: keyid:F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:5b:5d:45:88:0d:a9:7b:3c:c6:ad:c8:e7:15:51:b6:96:d9: 30:fa:dc:cf:4c:b3:a0:56:95:ce:37:a3:5d:33:09:c2:6b:61: 2c:86:5c:aa:6c:fc:10:9f:ce:73:9b:40:40:92:03:b1:d3:45: b0:6a:3a:0c:73:20:b6:ef:3b:54:c1:6b:57:98:87:6a:6e:16: 36:a0:08:f6:b6:c6:c9:79:bb:2c:e6:51:4e:01:a0:36:d4:53: 8f:c0:42:cb:46:dd:a3:bd:80:17:85:55:14:cc:d1:a7:c8:4b: 0a:f0:f0:87:d9:7e:74:f8:7d:89:6f:48:bb:ee:40:07:6d:9b: 67:6a:fb:82:ad:f2:8a:ea:e1:2c:07:c9:c0:94:10:c3:c1:f7: 3b:22:4b:41:48:ce:74:50:cc:80:1d:77:2c:b3:44:6a:6d:99: 19:95:d3:0f:46:85:c9:e9:02:28:15:77:ee:e2:65:96:ca:93: b2:3c:8e:9a:53:36:e8:da:ad:e6:70:b6:2b:20:85:6b:1d:42: 3c:86:56:8d:32:f3:1c:14:fd:c7:8a:5c:47:b9:d5:ea:05:5d: 25:85:ae:64:04:db:69:63:b3:c3:db:d4:24:91:c8:bc:b4:90: 86:10:ea:07:01:16:c8:72:22:e9:13:ef:09:0c:83:63:d2:f2: fa:85:58:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLq/o1t3OU1s32SLD/Wd7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MmU5YTA0M2YzMTI4MzM2ZTNjOTdjMjU0MjU3NGM4YWQ5 MjlhYzkwHhcNMjUxMjA2MDEwMjM5WhcNMjUxMjA3MDEwMjM5WjAzMTEwLwYDVQQD EygxNjNmMmU4OTczNTRlOTM0Yzc4YmJiZjY3YjcxNDAwYjYzODViMDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0noKXaJHxWdK/k6f6svo6tLGbsK2 9+hOI5E6NXF3Yo9JIELtTa0F/+Rrm9g1ljJA7YyRxXshMpAO/UOF24ThJ5+pw99h A5Lx6LTuaI/6Ac1Bho8dKB5VoqBwMheNcqxbt4V4HeK5LCLbUWAQ5zA1/Z1rjY20 54C0KMLfMxnJmY+azFrmBultRDoM91r0uI5Xde+r0ItxqYHt3mJqUWJtgd3ZfeWd MtdhJlNJd+b29eb+BPfMWaA5gCa2kTpQDof+zEYY1xKQvYtRCd/NTA1zHLOvZQ7D XXKp/NDVqrRAeoEFdSHeZ3pe70oOufU5Y2QpWXDeUYo15U3CdULppKZOEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBY/LolzVOk0x4u79ntxQAtjhbCdMB8GA1UdIwQY MBaAFPUumgQ/MSgzbjyXwlQldMitkprJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mYjNlOTgtZDAwZi00NWRkLWJkMTkt ZWZmOGI5NWQyMGM1LzEvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9mYjNlOTgtZDAwZi00NWRkLWJkMTktZWZmOGI5NWQyMGM1 LzEvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFtdRYgN qXs8xq3I5xVRtpbZMPrcz0yzoFaVzjejXTMJwmthLIZcqmz8EJ/Oc5tAQJIDsdNF sGo6DHMgtu87VMFrV5iHam4WNqAI9rbGyXm7LOZRTgGgNtRTj8BCy0bdo72AF4VV FMzRp8hLCvDwh9l+dPh9iW9Iu+5AB22bZ2r7gq3yiurhLAfJwJQQw8H3OyJLQUjO dFDMgB13LLNEam2ZGZXTD0aFyekCKBV37uJllsqTsjyOmlM26Nqt5nC2KyCFax1C PIZWjTLzHBT9x4pcR7nV6gVdJYWuZATbaWOzw9vUJJHIvLSQhhDqBwEWyHIi6RPv CQyDY9Ly+oVYgg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:48 2025 by rpki-client