This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft File: 9fqTbNBbJl9g8zNAqMY952gvw18.mft (raw, json) Hash identifier: 1tcyw0Xn2uuswFd0Ss6VHjonQJzYnuW2V19Hv0Tpcd4= Subject key identifier: 7A:FE:53:A1:F6:2C:47:79:DC:CC:59:1D:63:DC:AF:DA:4E:71:18:84 Authority key identifier: F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F Certificate issuer: /CN=f5fa936cd05b265f60f33340a8c63de7682fc35f Certificate serial: 019AF088C29091E38E642C98C2CC7590E019 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft Manifest number: 074E Signing time: Fri 05 Dec 2025 22:01:25 +0000 Manifest this update: Fri 05 Dec 2025 22:01:25 +0000 Manifest next update: Sat 06 Dec 2025 22:01:25 +0000 Files and hashes: 1: 9fqTbNBbJl9g8zNAqMY952gvw18.crl (hash: qwKNUOpzWINyRU4XodDgmEEswROiakaVpmb1IdrKWW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:c2:90:91:e3:8e:64:2c:98:c2:cc:75:90:e0:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fa936cd05b265f60f33340a8c63de7682fc35f Validity Not Before: Dec 5 22:01:25 2025 GMT Not After : Dec 6 22:01:25 2025 GMT Subject: CN=7afe53a1f62c4779dccc591d63dcafda4e711884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b1:f2:44:4d:22:fd:7f:a9:6a:da:db:76:f7: bc:f7:01:35:9c:6c:94:de:90:7a:3c:d6:d0:3b:ab: b2:d6:5c:f6:aa:95:da:e7:ef:ba:c4:e1:f3:41:fd: c7:f5:21:73:99:d8:6b:ad:9c:30:f4:a2:9e:b8:d8: 4b:eb:79:23:04:4b:7e:87:e0:23:2b:56:99:f2:d3: 1f:61:9b:e9:fb:fd:ab:9b:b6:35:21:10:df:0f:4b: a3:1c:fb:ab:46:28:b0:02:d7:bd:1b:9a:4a:97:1f: dd:e9:0f:fd:5e:30:b3:81:e2:63:a7:a5:f5:e3:f5: 7f:62:70:87:64:83:c3:b8:62:d1:a8:71:5e:e2:26: 9d:74:de:6f:95:f4:f8:68:e6:aa:08:72:c1:5d:1a: 83:79:52:83:cf:5c:90:b7:49:ea:89:4d:62:54:1f: 99:49:a7:91:33:c1:7d:d6:47:ef:65:52:de:95:ab: 58:70:aa:d9:69:2a:ec:52:f6:96:dc:93:fe:66:68: 6d:49:0a:27:7a:03:b3:1d:14:54:72:d3:cb:1d:5e: 5b:9d:6d:53:de:96:fd:d7:85:18:92:d9:a0:c8:fc: 2c:ee:9b:18:50:87:b4:a1:51:bb:58:e3:b3:4a:db: aa:c6:a7:a6:fc:0f:d6:8e:0a:f5:51:42:0e:6d:f5: 88:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:FE:53:A1:F6:2C:47:79:DC:CC:59:1D:63:DC:AF:DA:4E:71:18:84 X509v3 Authority Key Identifier: keyid:F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:b3:a8:6e:ea:92:e5:b7:5f:fd:2e:e1:f4:f3:ae:76:40:19: 36:24:7d:b5:17:04:0b:ef:00:74:e8:09:fe:27:dd:1b:4a:56: 5b:ab:1c:38:07:ad:8e:e9:65:b6:e4:2f:75:4b:32:eb:fd:69: 23:43:2e:1d:e2:8f:b2:79:6e:ec:52:70:14:09:e6:16:64:3c: b7:aa:c4:57:48:cd:f6:5b:b5:eb:e1:1a:47:32:8b:6f:10:71: f8:f7:69:9a:14:9e:30:2a:18:1b:5d:df:fc:c0:e1:6f:77:9f: 42:20:80:c5:09:e8:03:8d:29:fd:87:52:71:d2:b4:71:b7:67: 03:39:da:80:05:f0:71:6f:b7:03:a8:ab:2d:f7:38:d3:ab:3e: f4:52:2d:e8:c8:3d:09:cd:eb:e2:4a:57:f4:63:92:f9:7a:80: 0a:06:dc:99:6b:9e:91:d0:dd:9f:a2:97:28:70:46:93:f1:45: a8:ac:e9:24:34:d1:2d:90:8d:a7:59:89:07:0b:42:fa:17:4d: 99:94:19:50:35:fa:d2:f3:d7:ba:91:e4:d7:1b:f6:0d:1e:8d: c6:13:a3:b9:d8:6e:44:95:0a:d1:e8:ff:b8:58:7f:55:53:f8: 10:2a:6a:24:c1:9e:f5:0e:e4:ac:e6:79:73:c9:52:19:b9:6a: 7b:a7:4d:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiMKQkeOOZCyYwsx1kOAZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmE5MzZjZDA1YjI2NWY2MGYzMzM0MGE4YzYzZGU3Njgy ZmMzNWYwHhcNMjUxMjA1MjIwMTI1WhcNMjUxMjA2MjIwMTI1WjAzMTEwLwYDVQQD Eyg3YWZlNTNhMWY2MmM0Nzc5ZGNjYzU5MWQ2M2RjYWZkYTRlNzExODg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLHyRE0i/X+patrbdve89wE1nGyU 3pB6PNbQO6uy1lz2qpXa5++6xOHzQf3H9SFzmdhrrZww9KKeuNhL63kjBEt+h+Aj K1aZ8tMfYZvp+/2rm7Y1IRDfD0ujHPurRiiwAte9G5pKlx/d6Q/9XjCzgeJjp6X1 4/V/YnCHZIPDuGLRqHFe4iaddN5vlfT4aOaqCHLBXRqDeVKDz1yQt0nqiU1iVB+Z SaeRM8F91kfvZVLelatYcKrZaSrsUvaW3JP+ZmhtSQonegOzHRRUctPLHV5bnW1T 3pb914UYktmgyPws7psYUIe0oVG7WOOzStuqxqem/A/Wjgr1UUIObfWINwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHr+U6H2LEd53MxZHWPcr9pOcRiEMB8GA1UdIwQY MBaAFPX6k2zQWyZfYPMzQKjGPedoL8NfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZxVGJOQmJKbDlnOHpOQXFNWTk1Mmd2dzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82ZTc2NzAtNjMxZC00Nzg3LWFlZGEt ZjE1ODZmYmRlODFhLzEvOWZxVGJOQmJKbDlnOHpOQXFNWTk1Mmd2dzE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC82ZTc2NzAtNjMxZC00Nzg3LWFlZGEtZjE1ODZmYmRlODFh LzEvOWZxVGJOQmJKbDlnOHpOQXFNWTk1Mmd2dzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABrOobuqS 5bdf/S7h9POudkAZNiR9tRcEC+8AdOgJ/ifdG0pWW6scOAetjulltuQvdUsy6/1p I0MuHeKPsnlu7FJwFAnmFmQ8t6rEV0jN9lu16+EaRzKLbxBx+PdpmhSeMCoYG13f /MDhb3efQiCAxQnoA40p/YdScdK0cbdnAznagAXwcW+3A6irLfc406s+9FIt6Mg9 Cc3r4kpX9GOS+XqACgbcmWuekdDdn6KXKHBGk/FFqKzpJDTRLZCNp1mJBwtC+hdN mZQZUDX60vPXupHk1xv2DR6NxhOjudhuRJUK0ej/uFh/VVP4ECpqJMGe9Q7krOZ5 c8lSGblqe6dNrw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:03:00 2025 by rpki-client