This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft File: s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft (raw, json) Hash identifier: 2w625bYz+YcDwRvxNeNOvBYgdbKCUW96EY/aviueI2s= Subject key identifier: 4C:DE:92:12:73:88:7B:EA:97:4F:0D:4F:5B:8A:4F:99:A3:D1:C1:7C Authority key identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA Certificate issuer: /CN=b3d66297c5cdbd36d86849ddeae7985979f450ca Certificate serial: 019AC8A0C67EF2A8C850980AB71B0DF411D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft Manifest number: 1750 Signing time: Fri 28 Nov 2025 04:02:50 +0000 Manifest this update: Fri 28 Nov 2025 04:02:50 +0000 Manifest next update: Sat 29 Nov 2025 04:02:50 +0000 Files and hashes: 1: 4t1UxScYEc1MQQvb1JnztjogsBk.roa (hash: Dr1ii5dB9TFuR2r1BRNQYvLkf66wHtEAs6oE3mutbkk=) 2: XvQSYP0gBwV_2W1TwyZ9q7f08x4.roa (hash: 4KSvLtvpZswpayMP+WjZ+QORjoSpSFJrnConIM4+/0A=) 3: l1XZX1b8reS_-7ZSCMj6Ssj_O6w.roa (hash: RmqK144BBUUebNDsDUz/Y3m99tgJ/EBiLtpE9PQVqL0=) 4: s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl (hash: VAH49P9vdrsk9+p5DsiBrx2UTYqY2kwpL3MxTCEbXYc=) 5: sKWAbqAA__OjcTRSqYb5uv2iH2g.roa (hash: Qi3g/XMjZpErCZOt692v0V5M83CBTDycMOtYB7JuINo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 20:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c8:a0:c6:7e:f2:a8:c8:50:98:0a:b7:1b:0d:f4:11:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d66297c5cdbd36d86849ddeae7985979f450ca Validity Not Before: Nov 28 04:02:50 2025 GMT Not After : Nov 29 04:02:50 2025 GMT Subject: CN=4cde921273887bea974f0d4f5b8a4f99a3d1c17c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cc:10:ff:0c:5d:62:61:0e:a2:a9:d7:f9:54: f5:74:82:77:6f:4b:65:78:af:73:d1:c4:75:a7:9e: 9e:d2:ca:9f:90:5d:0b:d3:01:81:5c:2a:21:f4:6f: 1a:54:09:70:e1:c1:a5:b1:11:52:ed:e3:ca:e9:d9: 80:c2:da:6c:88:26:00:25:ef:c4:c7:e1:dd:f7:23: 30:10:26:c8:bc:c2:0d:ab:51:5d:37:73:a6:e8:37: 9c:28:82:aa:3a:30:7c:b2:49:ef:e2:2e:06:6c:0b: 3a:88:47:57:77:f6:59:c9:d6:c5:8a:07:0d:d3:2f: 5c:83:7f:32:0c:68:7e:7e:bd:aa:e0:4d:f8:55:7f: 1d:55:f4:11:81:e2:3f:9c:6f:cd:35:50:c8:12:1c: 52:4f:53:e0:1c:58:60:d7:73:70:8e:e0:57:bd:a2: c0:8b:86:7a:15:21:3d:eb:2c:eb:96:2b:87:22:0c: 93:72:ce:95:e8:15:a5:c3:4c:8e:34:c3:28:63:72: d6:c1:94:a6:6b:29:24:97:24:11:6a:79:ab:79:40: ff:eb:54:1c:99:70:aa:54:4a:ec:44:83:a4:9a:6d: 65:fb:7a:98:21:ff:ff:07:cc:64:1b:bd:20:f9:2e: 6e:94:6a:fe:b9:4c:25:10:a8:c0:ff:12:16:86:54: 20:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DE:92:12:73:88:7B:EA:97:4F:0D:4F:5B:8A:4F:99:A3:D1:C1:7C X509v3 Authority Key Identifier: keyid:B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:f6:df:12:20:ea:ad:38:e1:7c:25:e2:35:89:20:7c:2a:12: 8c:3b:5d:2a:9a:ac:9e:9b:b2:b3:b3:a4:dd:ce:c5:f0:6b:56: c6:2f:f3:41:e9:0e:9d:e8:3c:06:8f:7b:6b:f0:96:01:47:19: 3d:46:8f:6d:16:e1:00:02:eb:32:45:40:30:8d:02:f9:a0:96: d9:3e:36:32:73:3e:41:fe:95:61:1b:ea:79:cd:65:51:11:d2: 12:cf:7b:60:41:a5:79:76:c8:d4:a3:b3:d2:f6:2b:68:9a:93: 09:8e:3e:f0:cf:4b:eb:68:e9:29:55:20:0b:ba:3b:07:47:2a: 42:97:7f:10:1f:25:79:e0:07:de:5d:a5:40:e8:60:02:29:05: 06:52:cb:0d:1d:d3:09:02:2a:c1:57:2b:5f:c4:22:46:e1:fc: 85:9d:e1:73:f5:49:c9:7d:67:29:aa:33:f3:26:37:b2:f9:59: a5:94:2b:46:14:d3:4d:ce:01:90:75:b2:f6:c3:b3:0a:9d:3f: dd:b6:cf:5f:c6:24:ea:af:88:10:4b:98:c2:bd:8f:49:6f:df: 8c:63:76:e5:31:a5:d8:07:34:51:47:d6:87:ae:0e:eb:81:ff: 0f:d0:3a:0e:68:9b:da:ba:0f:50:de:92:06:fa:57:04:ea:0c: d1:49:fa:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrIoMZ+8qjIUJgKtxsN9BHRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZDY2Mjk3YzVjZGJkMzZkODY4NDlkZGVhZTc5ODU5Nzlm NDUwY2EwHhcNMjUxMTI4MDQwMjUwWhcNMjUxMTI5MDQwMjUwWjAzMTEwLwYDVQQD Eyg0Y2RlOTIxMjczODg3YmVhOTc0ZjBkNGY1YjhhNGY5OWEzZDFjMTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8wQ/wxdYmEOoqnX+VT1dIJ3b0tl eK9z0cR1p56e0sqfkF0L0wGBXCoh9G8aVAlw4cGlsRFS7ePK6dmAwtpsiCYAJe/E x+Hd9yMwECbIvMINq1FdN3Om6DecKIKqOjB8sknv4i4GbAs6iEdXd/ZZydbFigcN 0y9cg38yDGh+fr2q4E34VX8dVfQRgeI/nG/NNVDIEhxST1PgHFhg13NwjuBXvaLA i4Z6FSE96yzrliuHIgyTcs6V6BWlw0yONMMoY3LWwZSmaykklyQRanmreUD/61Qc mXCqVErsRIOkmm1l+3qYIf//B8xkG70g+S5ulGr+uUwlEKjA/xIWhlQg5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzekhJziHvql08NT1uKT5mj0cF8MB8GA1UdIwQY MBaAFLPWYpfFzb022GhJ3ernmFl59FDKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczlaaWw4WE52VGJZYUVuZDZ1ZVlXWG4wVU1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS85MmMxY2YtNWEyMi00NTNjLTkwN2Yt ZWIxZjg3MTVlZWMwLzEvczlaaWw4WE52VGJZYUVuZDZ1ZVlXWG4wVU1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS85MmMxY2YtNWEyMi00NTNjLTkwN2YtZWIxZjg3MTVlZWMw LzEvczlaaWw4WE52VGJZYUVuZDZ1ZVlXWG4wVU1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPbfEiDq rTjhfCXiNYkgfCoSjDtdKpqsnpuys7Ok3c7F8GtWxi/zQekOneg8Bo97a/CWAUcZ PUaPbRbhAALrMkVAMI0C+aCW2T42MnM+Qf6VYRvqec1lURHSEs97YEGleXbI1KOz 0vYraJqTCY4+8M9L62jpKVUgC7o7B0cqQpd/EB8leeAH3l2lQOhgAikFBlLLDR3T CQIqwVcrX8QiRuH8hZ3hc/VJyX1nKaoz8yY3svlZpZQrRhTTTc4BkHWy9sOzCp0/ 3bbPX8Yk6q+IEEuYwr2PSW/fjGN25TGl2Ac0UUfWh64O64H/D9A6Dmib2roPUN6S BvpXBOoM0Un6nQ== -----END CERTIFICATE-----Generated at Fri Nov 28 05:41:49 2025 by rpki-client