This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft File: 9rES1L7bpvNYUoqDcUG3SwkphZM.mft (raw, json) Hash identifier: dhSunarI2SHXQO9ET+m6aTTKYL3ppvPKMq2cgAKJD4s= Subject key identifier: 22:79:09:F9:AF:FE:CC:1B:0B:2C:ED:99:D8:44:CE:99:0D:C1:2E:FC Authority key identifier: F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93 Certificate issuer: /CN=f6b112d4bedba6f358528a837141b74b09298593 Certificate serial: 019B5ABF7D67657214C45B02EACD32A13224 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft Manifest number: 16E7 Signing time: Fri 26 Dec 2025 13:00:57 +0000 Manifest this update: Fri 26 Dec 2025 13:00:57 +0000 Manifest next update: Sat 27 Dec 2025 13:00:57 +0000 Files and hashes: 1: 9rES1L7bpvNYUoqDcUG3SwkphZM.crl (hash: Ij49b0XWPlqrWRTo91vTo5HlsB4n1XCn0PgrnNaOd+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:7d:67:65:72:14:c4:5b:02:ea:cd:32:a1:32:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6b112d4bedba6f358528a837141b74b09298593 Validity Not Before: Dec 26 13:00:57 2025 GMT Not After : Dec 27 13:00:57 2025 GMT Subject: CN=227909f9affecc1b0b2ced99d844ce990dc12efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e1:43:52:2c:c4:7e:4a:1e:91:d3:d4:c4:5c: 24:c9:1e:b4:16:4b:24:cc:18:7a:13:a7:ce:ac:dc: 13:3a:24:98:68:bf:b9:5b:fc:c5:3a:7f:d8:5f:e5: 22:55:6f:57:d8:c6:99:75:72:56:1b:5c:3a:59:03: a5:7e:76:57:d6:ff:e1:09:07:39:11:d7:ea:95:40: ce:72:55:af:e7:4a:b9:02:af:01:e5:21:56:cb:28: 28:f1:a4:55:85:95:49:7e:a5:a9:83:3e:a2:0f:75: 3b:a8:63:c8:16:9b:a9:72:6a:53:ec:a2:12:21:53: 7b:e4:26:b1:42:06:35:69:c4:d2:1d:0b:d2:59:3c: e6:5b:cc:93:10:8f:f9:3f:b8:2e:ad:df:af:54:17: 4c:71:18:00:be:cf:e4:0f:d4:f7:2d:57:54:65:20: d5:ad:96:9e:6d:71:06:7f:df:cb:f8:d7:e5:1e:26: 96:0c:28:4c:74:70:17:ad:5b:2a:7f:41:2a:bd:7e: b2:0f:f7:54:23:6f:f2:99:90:45:50:19:de:86:87: 6f:1b:c5:ab:b4:a4:12:40:42:dc:75:1a:9c:07:c9: fe:3e:fd:48:3d:c2:02:16:a5:d9:90:19:9a:d9:da: 9c:08:54:36:81:a4:91:85:e1:21:66:52:e3:ad:8b: 3d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:79:09:F9:AF:FE:CC:1B:0B:2C:ED:99:D8:44:CE:99:0D:C1:2E:FC X509v3 Authority Key Identifier: keyid:F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:5b:e2:e2:f1:fc:02:ea:a7:d9:5b:e6:1c:5c:ff:b2:6e:2f: 42:fa:47:e1:77:23:74:9d:8f:58:6b:d8:4c:ff:fb:bd:45:42: b1:5c:91:92:ef:55:e0:fb:9e:fc:51:dd:40:fa:db:6b:3e:45: 86:81:61:ab:f9:c7:94:75:db:da:ab:9a:6f:2d:fd:f4:89:92: 47:d8:a7:8c:ae:af:4e:62:ca:65:1b:c7:a5:e8:6f:97:da:79: 9d:cc:60:91:ac:a2:a7:ec:58:ab:13:13:3e:34:83:81:10:59: dd:6f:9a:b4:c3:11:39:b3:c3:58:b2:51:1d:eb:c9:7f:ca:ec: 21:dd:6d:80:a6:fb:4a:7d:e8:a2:99:35:eb:bf:97:89:aa:73: 4f:05:7c:3a:21:1d:1f:4a:42:17:6c:92:24:4e:b2:76:f4:60: a8:51:64:3c:2a:b6:6b:16:c7:64:97:8d:b8:39:a7:27:ee:64: bd:15:0b:97:06:ef:71:36:1d:91:5c:dd:1a:e0:dc:64:76:bc: 59:d3:a3:43:7b:9e:28:c5:69:b4:e6:46:35:2a:e7:ea:d9:5a: ef:b9:7d:25:39:99:e5:44:3e:df:65:6b:ea:5d:2d:31:33:87: 5f:63:af:99:46:14:78:db:31:ec:81:33:b5:b1:b8:26:1d:79: 79:46:43:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav31nZXIUxFsC6s0yoTIkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YjExMmQ0YmVkYmE2ZjM1ODUyOGE4MzcxNDFiNzRiMDky OTg1OTMwHhcNMjUxMjI2MTMwMDU3WhcNMjUxMjI3MTMwMDU3WjAzMTEwLwYDVQQD EygyMjc5MDlmOWFmZmVjYzFiMGIyY2VkOTlkODQ0Y2U5OTBkYzEyZWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuFDUizEfkoekdPUxFwkyR60Fksk zBh6E6fOrNwTOiSYaL+5W/zFOn/YX+UiVW9X2MaZdXJWG1w6WQOlfnZX1v/hCQc5 EdfqlUDOclWv50q5Aq8B5SFWyygo8aRVhZVJfqWpgz6iD3U7qGPIFpupcmpT7KIS IVN75CaxQgY1acTSHQvSWTzmW8yTEI/5P7gurd+vVBdMcRgAvs/kD9T3LVdUZSDV rZaebXEGf9/L+NflHiaWDChMdHAXrVsqf0EqvX6yD/dUI2/ymZBFUBnehodvG8Wr tKQSQELcdRqcB8n+Pv1IPcICFqXZkBma2dqcCFQ2gaSRheEhZlLjrYs9WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJ5Cfmv/swbCyztmdhEzpkNwS78MB8GA1UdIwQY MBaAFPaxEtS+26bzWFKKg3FBt0sJKYWTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXJFUzFMN2Jwdk5ZVW9xRGNVRzNTd2twaFpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjkxNjctNjZlZS00NTNiLTllYTAt NGMzZWY0MWFlZDdmLzEvOXJFUzFMN2Jwdk5ZVW9xRGNVRzNTd2twaFpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8zZjkxNjctNjZlZS00NTNiLTllYTAtNGMzZWY0MWFlZDdm LzEvOXJFUzFMN2Jwdk5ZVW9xRGNVRzNTd2twaFpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPVvi4vH8 Auqn2VvmHFz/sm4vQvpH4XcjdJ2PWGvYTP/7vUVCsVyRku9V4Pue/FHdQPrbaz5F hoFhq/nHlHXb2quaby399ImSR9injK6vTmLKZRvHpehvl9p5ncxgkayip+xYqxMT PjSDgRBZ3W+atMMRObPDWLJRHevJf8rsId1tgKb7Sn3oopk167+XiapzTwV8OiEd H0pCF2ySJE6ydvRgqFFkPCq2axbHZJeNuDmnJ+5kvRULlwbvcTYdkVzdGuDcZHa8 WdOjQ3ueKMVptOZGNSrn6tla77l9JTmZ5UQ+32Vr6l0tMTOHX2OvmUYUeNsx7IEz tbG4Jh15eUZDog== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:04 2025 by rpki-client