This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft File: 9yR1sGTeionxUD6u_H1yrczzihY.mft (raw, json) Hash identifier: mZKaiyJO+RTZX10IT6wW1D+wd2eLOnFtPXl5NeA9sdo= Subject key identifier: 46:8F:D8:3E:12:B4:53:46:B0:4C:36:8C:55:73:69:77:04:F0:20:62 Authority key identifier: F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16 Certificate issuer: /CN=f72475b064de8a89f1503eaefc7d72adccf38a16 Certificate serial: 019B439317EDB89B3FA89E754D3F7325D52F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft Manifest number: 1787 Signing time: Mon 22 Dec 2025 01:01:11 +0000 Manifest this update: Mon 22 Dec 2025 01:01:11 +0000 Manifest next update: Tue 23 Dec 2025 01:01:11 +0000 Files and hashes: 1: 9yR1sGTeionxUD6u_H1yrczzihY.crl (hash: Dkacc2qWJSuuCdE3MhddzqGs/odsRx9czEzOBqQFagU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:93:17:ed:b8:9b:3f:a8:9e:75:4d:3f:73:25:d5:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f72475b064de8a89f1503eaefc7d72adccf38a16 Validity Not Before: Dec 22 01:01:11 2025 GMT Not After : Dec 23 01:01:11 2025 GMT Subject: CN=468fd83e12b45346b04c368c5573697704f02062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3a:c4:ee:aa:f8:bd:56:aa:e8:2c:a1:13:22: df:e1:c4:c0:5e:57:ad:33:3d:44:de:18:9a:07:1c: a2:cc:68:18:5b:3f:aa:a8:9d:ae:be:c6:80:f6:99: c8:be:9c:4d:63:78:fe:eb:9f:0b:fd:fd:29:02:b6: 32:5d:15:65:5c:b6:99:4f:0c:67:54:0e:b2:c2:4a: ef:ac:1c:4f:62:38:7c:91:b7:5c:47:5c:c1:da:60: ab:21:fb:0b:8f:a1:b8:43:b3:e8:4e:57:93:f6:e2: 2c:61:b2:fd:ba:49:40:2d:40:db:f8:cc:4e:7d:5a: ef:02:14:aa:44:b9:33:8d:ab:42:a6:ae:54:ae:1a: 70:33:c1:12:3e:3d:41:3e:11:a2:82:08:08:af:db: 68:ba:8c:b1:d1:43:22:b1:89:af:05:b9:e1:1a:99: 0a:42:ff:5a:ff:c7:7c:4b:d3:b9:02:b7:f6:c8:05: c9:d8:65:db:42:f6:ec:66:fd:6c:39:53:9f:81:70: 49:93:63:cd:30:38:07:4f:33:1b:39:19:bd:6c:bd: cb:11:68:f6:81:79:6f:02:a8:01:e1:f4:33:31:7d: e4:c0:41:fc:d4:b2:d8:7a:46:9b:33:fd:f4:a6:26: cd:ba:d2:db:71:bc:8a:31:5b:8f:17:a7:26:98:c4: 00:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:8F:D8:3E:12:B4:53:46:B0:4C:36:8C:55:73:69:77:04:F0:20:62 X509v3 Authority Key Identifier: keyid:F7:24:75:B0:64:DE:8A:89:F1:50:3E:AE:FC:7D:72:AD:CC:F3:8A:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yR1sGTeionxUD6u_H1yrczzihY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/90f36e-d38f-4ee9-aceb-28320a5c077b/1/9yR1sGTeionxUD6u_H1yrczzihY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d3:9a:89:5f:06:46:a2:5c:fc:56:bf:1a:e6:5e:94:9f:f9: d0:9f:80:8b:66:f0:44:f3:4d:dc:c2:38:15:53:15:2d:26:a2: 42:76:33:34:2b:e8:0f:bf:00:83:5a:4d:a5:12:32:b5:65:35: 4b:c9:2c:ad:33:a3:01:ce:3e:b3:69:84:29:f4:48:2a:8c:7d: b4:37:60:0b:be:85:06:0f:09:68:54:dc:fc:2f:f4:1f:3f:d0: 1b:24:1d:0e:06:2b:7e:8f:61:6b:4c:cc:3e:10:c1:48:c2:99: ae:f5:d9:53:ee:32:d8:e8:4a:20:d1:e1:00:50:87:89:36:0b: 5f:29:7c:ff:2c:05:f8:60:9e:c0:c3:1e:76:29:1d:9b:46:93: 7e:5b:3f:8c:c1:df:f2:a4:41:58:02:13:6f:79:43:01:ad:c8: 43:0a:5e:8f:85:07:c6:49:85:90:c1:3a:c7:c9:b5:6a:5c:1a: 9f:08:ba:3a:d7:b7:82:30:1f:68:75:d4:df:28:e0:dc:d8:fa: ea:79:31:85:40:cd:4d:39:10:37:81:3f:4d:0c:20:63:f7:6b: 5e:92:c2:ef:02:fb:8f:ff:17:d0:43:ca:13:be:ce:fc:e8:55: 5f:d2:ba:68:14:68:a6:9b:c6:30:7e:bf:b5:b0:71:50:ce:07: 61:2b:ff:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkxftuJs/qJ51TT9zJdUvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MjQ3NWIwNjRkZThhODlmMTUwM2VhZWZjN2Q3MmFkY2Nm MzhhMTYwHhcNMjUxMjIyMDEwMTExWhcNMjUxMjIzMDEwMTExWjAzMTEwLwYDVQQD Eyg0NjhmZDgzZTEyYjQ1MzQ2YjA0YzM2OGM1NTczNjk3NzA0ZjAyMDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzrE7qr4vVaq6CyhEyLf4cTAXlet Mz1E3hiaBxyizGgYWz+qqJ2uvsaA9pnIvpxNY3j+658L/f0pArYyXRVlXLaZTwxn VA6ywkrvrBxPYjh8kbdcR1zB2mCrIfsLj6G4Q7PoTleT9uIsYbL9uklALUDb+MxO fVrvAhSqRLkzjatCpq5UrhpwM8ESPj1BPhGigggIr9touoyx0UMisYmvBbnhGpkK Qv9a/8d8S9O5Arf2yAXJ2GXbQvbsZv1sOVOfgXBJk2PNMDgHTzMbORm9bL3LEWj2 gXlvAqgB4fQzMX3kwEH81LLYekabM/30pibNutLbcbyKMVuPF6cmmMQAPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEaP2D4StFNGsEw2jFVzaXcE8CBiMB8GA1UdIwQY MBaAFPckdbBk3oqJ8VA+rvx9cq3M84oWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXlSMXNHVGVpb254VUQ2dV9IMXlyY3p6aWhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy85MGYzNmUtZDM4Zi00ZWU5LWFjZWIt MjgzMjBhNWMwNzdiLzEvOXlSMXNHVGVpb254VUQ2dV9IMXlyY3p6aWhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy85MGYzNmUtZDM4Zi00ZWU5LWFjZWItMjgzMjBhNWMwNzdi LzEvOXlSMXNHVGVpb254VUQ2dV9IMXlyY3p6aWhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXtOaiV8G RqJc/Fa/GuZelJ/50J+Ai2bwRPNN3MI4FVMVLSaiQnYzNCvoD78Ag1pNpRIytWU1 S8ksrTOjAc4+s2mEKfRIKox9tDdgC76FBg8JaFTc/C/0Hz/QGyQdDgYrfo9ha0zM PhDBSMKZrvXZU+4y2OhKINHhAFCHiTYLXyl8/ywF+GCewMMedikdm0aTfls/jMHf 8qRBWAITb3lDAa3IQwpej4UHxkmFkME6x8m1alwanwi6Ote3gjAfaHXU3yjg3Nj6 6nkxhUDNTTkQN4E/TQwgY/drXpLC7wL7j/8X0EPKE77O/OhVX9K6aBRoppvGMH6/ tbBxUM4HYSv/RQ== -----END CERTIFICATE-----Generated at Mon Dec 22 04:20:37 2025 by rpki-client