This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft File: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft (raw, json) Hash identifier: EA74+dqvH24hgAjCdfaRZPSea+cxN+MN9Hxy0WTeWyA= Subject key identifier: 56:B3:CC:6B:17:52:25:37:5E:A8:49:6A:E7:EA:75:41:18:A4:31:6C Authority key identifier: F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24 Certificate issuer: /CN=f57331288d908dd762e4b56f003b448f01881d24 Certificate serial: 019B101330FFF90DDE1977C10328AE3B1F5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft Manifest number: 0BA9 Signing time: Fri 12 Dec 2025 01:00:51 +0000 Manifest this update: Fri 12 Dec 2025 01:00:51 +0000 Manifest next update: Sat 13 Dec 2025 01:00:51 +0000 Files and hashes: 1: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl (hash: 8o0tigwD5scNq8WNSH71/v5Rd6h3MT0PFgQ3GqIAR/w=) 2: g7lGHV-1_6YLUG-EIHcKuVMeEvA.roa (hash: vuw6Cb62Uo/aOsqmXFznBzd1y3zPSLM1hJbb48SnJE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:30:ff:f9:0d:de:19:77:c1:03:28:ae:3b:1f:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f57331288d908dd762e4b56f003b448f01881d24 Validity Not Before: Dec 12 01:00:51 2025 GMT Not After : Dec 13 01:00:51 2025 GMT Subject: CN=56b3cc6b175225375ea8496ae7ea754118a4316c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:46:45:81:f0:00:72:c5:2a:44:fe:d7:f4:07: fa:37:9b:68:97:27:a3:74:df:d2:ac:39:b1:34:4f: b1:a0:d7:86:66:20:8c:85:b9:f3:ef:4f:80:f7:92: 54:85:df:f7:7d:59:ba:a9:4c:8d:23:62:68:2d:4b: 53:f1:4c:53:2e:60:12:2a:da:e6:df:79:00:e3:9a: ab:2f:99:b0:84:60:4b:34:86:34:a7:30:2d:66:a0: 1b:00:82:3d:d7:f7:63:1e:c8:42:a8:3a:e3:6e:12: a5:85:e5:8f:8f:e3:69:4b:f3:30:44:03:91:e1:2f: 38:da:0c:9e:cd:67:d7:a5:69:ba:33:bd:f0:ba:e2: 14:77:60:b4:78:25:dd:f8:21:04:4c:91:38:6c:81: 5b:d8:f4:36:49:19:67:d4:8c:3d:27:f5:7f:9d:a9: c6:08:13:51:b7:bf:7c:e9:5a:e7:a8:b2:0c:62:d2: cb:65:9c:bd:f9:f6:d0:54:42:43:e6:ba:fa:c7:3a: f2:44:42:97:1f:a3:d4:27:76:f6:78:fe:17:c1:86: be:88:fe:71:ba:45:4b:0d:8b:93:f1:cb:d7:8b:24: 0d:07:da:5f:70:08:a8:d3:73:dc:cc:18:fb:8a:1b: 20:b4:7c:a9:90:79:a7:28:99:e1:2f:d0:cf:0d:f9: 9b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B3:CC:6B:17:52:25:37:5E:A8:49:6A:E7:EA:75:41:18:A4:31:6C X509v3 Authority Key Identifier: keyid:F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:34:cf:c3:04:26:ac:f5:8b:5b:a8:05:96:75:96:fc:ea:81: e1:69:56:ae:87:bc:42:2e:10:78:65:5f:b8:81:02:79:b7:f2: 5d:0d:2b:45:ea:85:16:26:24:10:73:cd:f1:b6:c5:7a:8a:42: f9:06:8d:c8:cd:a0:54:70:bf:5c:07:44:0b:7f:e9:c8:23:42: 7e:8d:e3:a2:46:3e:cf:98:a9:f3:31:cf:e2:88:c3:1c:32:41: 89:f0:dc:6e:ee:75:cd:5c:3e:72:b2:e8:3b:35:cf:d5:e8:23: 43:2c:f5:fe:a2:08:78:b1:ca:17:e3:a6:32:50:1c:4c:2c:9c: 4d:94:fd:2d:18:c0:4c:d4:4b:3d:5a:31:2f:3a:67:44:ed:90: 78:1a:a2:c5:40:8b:02:84:fb:6d:f6:55:04:ed:b0:c4:d0:a7: e9:ee:f5:33:63:c6:43:c2:56:ef:f0:40:70:f4:b4:0b:d0:9c: 9a:2f:b8:10:97:94:53:9f:cf:bb:25:af:8a:50:9e:47:4b:62: 1f:b0:d8:f3:b0:79:db:f7:6d:c8:00:6c:b6:b5:0f:32:c2:4f: 04:74:ee:f8:75:66:7f:84:dc:ad:40:35:83:4a:6b:a4:c2:4f: 7c:46:e8:8c:66:63:d3:a7:b4:89:4d:00:e1:bf:98:7c:67:9b: df:58:80:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQEzD/+Q3eGXfBAyiuOx9cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NzMzMTI4OGQ5MDhkZDc2MmU0YjU2ZjAwM2I0NDhmMDE4 ODFkMjQwHhcNMjUxMjEyMDEwMDUxWhcNMjUxMjEzMDEwMDUxWjAzMTEwLwYDVQQD Eyg1NmIzY2M2YjE3NTIyNTM3NWVhODQ5NmFlN2VhNzU0MTE4YTQzMTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUZFgfAAcsUqRP7X9Af6N5tolyej dN/SrDmxNE+xoNeGZiCMhbnz70+A95JUhd/3fVm6qUyNI2JoLUtT8UxTLmASKtrm 33kA45qrL5mwhGBLNIY0pzAtZqAbAII91/djHshCqDrjbhKlheWPj+NpS/MwRAOR 4S842gyezWfXpWm6M73wuuIUd2C0eCXd+CEETJE4bIFb2PQ2SRln1Iw9J/V/nanG CBNRt7986VrnqLIMYtLLZZy9+fbQVEJD5rr6xzryREKXH6PUJ3b2eP4XwYa+iP5x ukVLDYuT8cvXiyQNB9pfcAio03PczBj7ihsgtHypkHmnKJnhL9DPDfmbuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFazzGsXUiU3XqhJaufqdUEYpDFsMB8GA1UdIwQY MBaAFPVzMSiNkI3XYuS1bwA7RI8BiB0kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81YWJiM2EtYjFiNi00ZDcwLWIwOTgt OGFlYTFmNjhiNzliLzEvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy81YWJiM2EtYjFiNi00ZDcwLWIwOTgtOGFlYTFmNjhiNzli LzEvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjTPwwQm rPWLW6gFlnWW/OqB4WlWroe8Qi4QeGVfuIECebfyXQ0rReqFFiYkEHPN8bbFeopC +QaNyM2gVHC/XAdEC3/pyCNCfo3jokY+z5ip8zHP4ojDHDJBifDcbu51zVw+crLo OzXP1egjQyz1/qIIeLHKF+OmMlAcTCycTZT9LRjATNRLPVoxLzpnRO2QeBqixUCL AoT7bfZVBO2wxNCn6e71M2PGQ8JW7/BAcPS0C9Ccmi+4EJeUU5/PuyWvilCeR0ti H7DY87B52/dtyABstrUPMsJPBHTu+HVmf4TcrUA1g0prpMJPfEbojGZj06e0iU0A 4b+YfGeb31iAWA== -----END CERTIFICATE-----Generated at Fri Dec 12 08:02:18 2025 by rpki-client