This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft File: 0R9tkk1vbMDpQIN9kwH85zIGV3E.mft (raw, json) Hash identifier: KNW7y6BwgnAr6Gu5r3Do0TxukjOp5dxab72Ii697Ak8= Subject key identifier: F4:A9:82:DD:EA:56:60:0B:44:4B:FC:D1:8E:E8:E7:77:06:92:A3:7D Authority key identifier: D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71 Certificate issuer: /CN=d11f6d924d6f6cc0e940837d9301fce732065771 Certificate serial: 019AF23F9B5083519A5427D97B81433F6C95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft Manifest number: 05BA Signing time: Sat 06 Dec 2025 06:00:46 +0000 Manifest this update: Sat 06 Dec 2025 06:00:46 +0000 Manifest next update: Sun 07 Dec 2025 06:00:46 +0000 Files and hashes: 1: 0R9tkk1vbMDpQIN9kwH85zIGV3E.crl (hash: Pa/NlOpqhxjvEQWUoCqu6QiI551XT1yXlzYN4SpPhXU=) 2: iJSQx0f1nTa0-CmNbadm7Gos7IA.roa (hash: LXabEDWzH1fx8QmFW8g5Pa/8Oh8pnxFijMUOQc1WwTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:9b:50:83:51:9a:54:27:d9:7b:81:43:3f:6c:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d11f6d924d6f6cc0e940837d9301fce732065771 Validity Not Before: Dec 6 06:00:46 2025 GMT Not After : Dec 7 06:00:46 2025 GMT Subject: CN=f4a982ddea56600b444bfcd18ee8e7770692a37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9b:b4:f6:f2:19:96:fd:93:56:4e:fc:3f:90: a7:66:c1:9f:d5:4d:c1:1c:fa:b1:d5:c7:60:bf:80: 86:e0:16:3e:2b:da:ea:66:2a:97:d3:33:af:5e:7d: dd:e7:16:5f:a1:c5:e6:8d:41:f8:1d:dd:0f:a0:9d: ef:be:03:93:90:29:f6:88:b2:2a:29:f3:bc:16:7a: b7:7e:f0:93:16:26:fb:b5:1f:37:08:ed:9c:c2:fc: 94:d7:13:1a:9d:dd:2d:e4:08:31:b2:8b:08:c5:2b: fa:dc:6b:86:25:7b:f9:c9:f2:10:eb:5c:9c:43:3e: 36:2b:35:b3:6a:5f:83:a9:18:4a:f9:c5:01:11:8b: e5:d8:14:74:4b:52:41:bb:f1:96:bf:88:d4:09:89: 12:98:3b:a0:59:ef:11:d6:1d:db:ba:21:e9:20:c4: 02:bf:a4:c4:dc:df:f0:7c:0d:9d:b6:c2:d5:e1:bf: 23:26:ad:2f:a2:11:b1:ae:e5:76:9d:6b:0c:a1:00: 68:7f:66:a1:a0:26:f5:98:4f:39:8f:01:90:92:4d: a7:cd:72:b2:9e:9a:de:eb:4f:51:69:0b:d1:94:dc: 8f:ca:33:9b:31:47:15:9d:55:9b:eb:51:f6:16:aa: f0:96:2b:ec:df:e9:bf:e1:2f:d7:dd:59:dd:f9:01: e6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A9:82:DD:EA:56:60:0B:44:4B:FC:D1:8E:E8:E7:77:06:92:A3:7D X509v3 Authority Key Identifier: keyid:D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3b:4a:f1:00:fe:dc:90:71:9f:16:1a:7f:47:21:1c:65:b9: fa:5a:70:8b:95:f7:e1:4c:4c:76:4c:6f:32:30:3d:33:42:ba: 6c:1f:43:2e:13:6b:0d:9a:39:39:57:de:11:58:ab:63:f7:5e: bf:ed:a1:51:f8:13:f6:8d:dc:b5:5c:09:a3:02:bf:9d:04:72: 33:47:83:55:32:fe:a9:16:d3:32:94:fb:d0:74:fb:22:89:57: 12:da:de:5e:a3:07:a6:65:ef:e1:d5:11:65:7e:42:fe:86:6d: be:fa:74:fb:16:18:fc:c2:1b:db:86:ca:a8:23:1e:88:da:5b: 8d:89:20:c2:f4:c8:c2:a6:21:7a:0d:a6:88:dd:84:33:2d:1d: 8d:dc:00:9e:3f:92:1b:14:7e:f2:73:db:5b:29:0a:8a:a5:45: 7b:a2:ae:a7:4e:5d:f7:75:e9:a6:a2:16:09:8e:cb:c7:16:72: e2:5e:e7:fd:e1:e2:17:9b:60:27:8c:92:8e:7a:13:5d:3a:1a: 55:86:83:48:e1:43:87:82:af:ed:37:b0:af:c9:cc:2e:83:fc: 50:16:24:9d:4f:40:2d:4b:1b:c7:99:b7:64:14:5d:6d:2c:f7: 91:f6:3c:65:42:23:ac:bf:60:68:06:3d:26:c2:59:53:c6:38: 89:1d:2e:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5tQg1GaVCfZe4FDP2yVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMWY2ZDkyNGQ2ZjZjYzBlOTQwODM3ZDkzMDFmY2U3MzIw NjU3NzEwHhcNMjUxMjA2MDYwMDQ2WhcNMjUxMjA3MDYwMDQ2WjAzMTEwLwYDVQQD EyhmNGE5ODJkZGVhNTY2MDBiNDQ0YmZjZDE4ZWU4ZTc3NzA2OTJhMzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZu09vIZlv2TVk78P5CnZsGf1U3B HPqx1cdgv4CG4BY+K9rqZiqX0zOvXn3d5xZfocXmjUH4Hd0PoJ3vvgOTkCn2iLIq KfO8Fnq3fvCTFib7tR83CO2cwvyU1xMand0t5AgxsosIxSv63GuGJXv5yfIQ61yc Qz42KzWzal+DqRhK+cUBEYvl2BR0S1JBu/GWv4jUCYkSmDugWe8R1h3buiHpIMQC v6TE3N/wfA2dtsLV4b8jJq0vohGxruV2nWsMoQBof2ahoCb1mE85jwGQkk2nzXKy npre609RaQvRlNyPyjObMUcVnVWb61H2Fqrwlivs3+m/4S/X3Vnd+QHmfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSpgt3qVmALREv80Y7o53cGkqN9MB8GA1UdIwQY MBaAFNEfbZJNb2zA6UCDfZMB/OcyBldxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFI5dGtrMXZiTURwUUlOOWt3SDg1eklHVjNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84M2M5YjktYTFhYy00NTE2LWFiZTgt OWVkOTcxMGQ2ZWEyLzEvMFI5dGtrMXZiTURwUUlOOWt3SDg1eklHVjNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS84M2M5YjktYTFhYy00NTE2LWFiZTgtOWVkOTcxMGQ2ZWEy LzEvMFI5dGtrMXZiTURwUUlOOWt3SDg1eklHVjNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGztK8QD+ 3JBxnxYaf0chHGW5+lpwi5X34UxMdkxvMjA9M0K6bB9DLhNrDZo5OVfeEVirY/de v+2hUfgT9o3ctVwJowK/nQRyM0eDVTL+qRbTMpT70HT7IolXEtreXqMHpmXv4dUR ZX5C/oZtvvp0+xYY/MIb24bKqCMeiNpbjYkgwvTIwqYheg2miN2EMy0djdwAnj+S GxR+8nPbWykKiqVFe6Kup05d93XppqIWCY7LxxZy4l7n/eHiF5tgJ4ySjnoTXToa VYaDSOFDh4Kv7Tewr8nMLoP8UBYknU9ALUsbx5m3ZBRdbSz3kfY8ZUIjrL9gaAY9 JsJZU8Y4iR0uzA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:37 2025 by rpki-client