This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
File: 9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft (raw, json)
Hash identifier: vT5kA4BGAGzPLZnBCEiajwV+BoLWiBtXlC8c38v0VI0=
Subject key identifier: 98:70:A9:90:34:03:18:8E:2F:9B:F8:34:CB:4C:12:05:86:6E:E9:F1
Authority key identifier: 9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC
Certificate issuer: /CN=9b1e886308f3bca322bd4eecea88267713c5ceac
Certificate serial: 6369E11ACFD6EC546D03A4D8B16ED67D79EE4B69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
Manifest number: B9
Signing time: Sat 06 Dec 2025 02:18:53 +0000
Manifest this update: Sat 06 Dec 2025 02:13:53 +0000
Manifest next update: Sun 07 Dec 2025 03:53:53 +0000
Files and hashes: 1: 9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl (hash: VAoh5yk+6zT9F24hjIKNhYFd9U1UoE25WvpVVhnTIDg=)
2: AS214809.asa (hash: twDSgOmLlkZzcvx0mDRRIi71WRXYCfTsSol/H2pUsYI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl
rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:69:e1:1a:cf:d6:ec:54:6d:03:a4:d8:b1:6e:d6:7d:79:ee:4b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b1e886308f3bca322bd4eecea88267713c5ceac
Validity
Not Before: Dec 6 02:13:53 2025 GMT
Not After : Dec 7 03:53:53 2025 GMT
Subject: CN=9870A9903403188E2F9BF834CB4C1205866EE9F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:56:a9:8c:01:8d:8a:76:40:c1:9a:bd:96:87:
79:e9:0b:6c:85:17:93:f6:a2:08:4c:f3:e6:2c:f3:
d0:2c:ae:85:9f:11:85:8e:48:58:49:d4:8c:0f:b8:
e8:c5:e4:d2:85:40:e7:f1:f8:b2:f8:0c:0f:6e:23:
6d:c8:b8:d7:62:3b:43:f2:68:4b:ac:73:96:bd:27:
84:f4:6c:b8:8b:e7:a9:c4:27:ac:8e:42:33:d8:a3:
7f:ba:c1:30:00:dc:24:e4:22:32:0a:93:19:dc:e5:
30:85:10:57:d0:18:7c:08:c8:b6:76:37:d4:41:7d:
52:90:b6:85:07:a4:1f:db:c9:d7:6c:4d:68:d6:35:
38:5e:33:62:3f:6d:7a:4a:81:50:dd:1d:f0:82:4a:
f2:f5:84:0b:46:58:a9:bc:28:09:14:81:e8:a3:2d:
e2:3b:bf:d0:2c:e4:bc:eb:d0:7d:60:43:7e:ee:51:
e3:ca:ab:4e:7d:15:24:00:75:eb:fb:41:73:db:4b:
40:41:19:0a:59:ff:6e:9a:30:08:7a:c8:66:f7:92:
67:80:c2:c9:99:88:87:2f:ea:ea:fd:a4:56:1c:0d:
55:87:43:04:10:06:d9:a9:1c:47:ca:f2:53:b4:80:
0d:38:95:62:98:d4:2e:29:f9:e4:1e:82:bc:98:7e:
32:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:70:A9:90:34:03:18:8E:2F:9B:F8:34:CB:4C:12:05:86:6E:E9:F1
X509v3 Authority Key Identifier:
keyid:9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:65:18:d0:cf:0d:74:f4:8b:e7:cb:b8:92:23:c2:02:6b:68:
e3:e5:bb:ba:6e:5b:df:22:37:3b:d7:d3:66:ca:e8:e3:33:c0:
37:80:4d:2d:e3:0b:b8:10:ba:ce:0b:d2:9a:04:d4:da:d5:85:
c6:3d:0c:3b:4a:dd:50:17:f0:54:78:77:a0:b0:5e:5e:1b:25:
ea:fe:3c:7c:a3:9b:a2:05:91:3d:86:4c:f6:5f:90:49:93:af:
38:bf:40:93:05:be:6f:f7:c6:46:dd:5e:55:ce:73:58:1f:28:
d8:a7:30:64:c3:65:86:7b:56:1e:d6:44:b7:a1:c9:87:5f:c3:
0e:88:c3:a8:3c:53:b9:d7:2b:43:3b:c5:f5:1c:44:c5:40:fa:
19:a1:9a:5b:8d:a5:00:15:b7:64:11:ee:67:79:a2:73:9c:f6:
b0:31:4e:93:2e:4f:b9:ab:c5:84:53:85:7e:49:b8:c9:18:b7:
ef:38:14:8c:f2:d5:6e:d9:c1:7e:8a:8f:36:cf:92:2f:a7:57:
94:d5:cf:55:cd:e7:92:2f:73:c5:65:30:cb:24:4f:69:87:36:
a4:06:e4:ff:02:ec:3c:41:5a:1d:4c:e2:55:18:be:af:7e:34:
bd:6e:f3:9c:66:a3:09:c6:e5:38:25:8d:76:27:ef:07:72:04:
47:dc:8e:5e
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUY2nhGs/W7FRtA6TYsW7WfXnuS2kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOWIxZTg4NjMwOGYzYmNhMzIyYmQ0ZWVjZWE4ODI2Nzcx
M2M1Y2VhYzAeFw0yNTEyMDYwMjEzNTNaFw0yNTEyMDcwMzUzNTNaMDMxMTAvBgNV
BAMTKDk4NzBBOTkwMzQwMzE4OEUyRjlCRjgzNENCNEMxMjA1ODY2RUU5RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjVqmMAY2KdkDBmr2Wh3npC2yF
F5P2oghM8+Ys89AsroWfEYWOSFhJ1IwPuOjF5NKFQOfx+LL4DA9uI23IuNdiO0Py
aEusc5a9J4T0bLiL56nEJ6yOQjPYo3+6wTAA3CTkIjIKkxnc5TCFEFfQGHwIyLZ2
N9RBfVKQtoUHpB/byddsTWjWNTheM2I/bXpKgVDdHfCCSvL1hAtGWKm8KAkUgeij
LeI7v9As5Lzr0H1gQ37uUePKq059FSQAdev7QXPbS0BBGQpZ/26aMAh6yGb3kmeA
wsmZiIcv6ur9pFYcDVWHQwQQBtmpHEfK8lO0gA04lWKY1C4p+eQegryYfjIxAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUmHCpkDQDGI4vm/g0y0wSBYZu6fEwHwYDVR0j
BBgwFoAUmx6IYwjzvKMivU7s6ogmdxPFzqwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl
YTA5LzAvOUIxRTg4NjMwOEYzQkNBMzIyQkQ0RUVDRUE4ODI2NzcxM0M1Q0VBQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL214NklZd2p6dktNaXZVN3M2b2dtZHhQ
Rnpxdy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83MTA5OGMyMy1h
OTc3LTRmOWEtOTdjOS1jZDRlNzU5ZGVhMDkvMC85QjFFODg2MzA4RjNCQ0EzMjJC
RDRFRUNFQTg4MjY3NzEzQzVDRUFDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcmUY0M8NdPSL58u4kiPC
Amto4+W7um5b3yI3O9fTZsro4zPAN4BNLeMLuBC6zgvSmgTU2tWFxj0MO0rdUBfw
VHh3oLBeXhsl6v48fKObogWRPYZM9l+QSZOvOL9AkwW+b/fGRt1eVc5zWB8o2Kcw
ZMNlhntWHtZEt6HJh1/DDojDqDxTudcrQzvF9RxExUD6GaGaW42lABW3ZBHuZ3mi
c5z2sDFOky5PuavFhFOFfkm4yRi37zgUjPLVbtnBfoqPNs+SL6dXlNXPVc3nki9z
xWUwyyRPaYc2pAbk/wLsPEFaHUziVRi+r340vW7znGajCcblOCWNdifvB3IER9yO
Xg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 05:51:16 2025 by rpki-client