This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft File: 9V4Fkwjkaz074E0x_V4Q9U80OQw.mft (raw, json) Hash identifier: itffSyAy4vF57NLANEVVnZ8UyF+dkBRRIDGlr2DKsio= Subject key identifier: 73:2F:62:AF:3F:1C:2E:D9:76:01:F0:F9:96:D9:DA:D5:CF:6F:B7:F0 Authority key identifier: F5:5E:05:93:08:E4:6B:3D:3B:E0:4D:31:FD:5E:10:F5:4F:34:39:0C Certificate issuer: /CN=f55e059308e46b3d3be04d31fd5e10f54f34390c Certificate serial: 019B394650C70E94B9AE3E90988EBC599DA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft Manifest number: 06E2 Signing time: Sat 20 Dec 2025 01:01:07 +0000 Manifest this update: Sat 20 Dec 2025 01:01:07 +0000 Manifest next update: Sun 21 Dec 2025 01:01:07 +0000 Files and hashes: 1: 9V4Fkwjkaz074E0x_V4Q9U80OQw.crl (hash: exMXBJHejxqoYdc5rprp/nNKLpSR/C3xmEfZWLY/WAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.crl rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:50:c7:0e:94:b9:ae:3e:90:98:8e:bc:59:9d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f55e059308e46b3d3be04d31fd5e10f54f34390c Validity Not Before: Dec 20 01:01:07 2025 GMT Not After : Dec 21 01:01:07 2025 GMT Subject: CN=732f62af3f1c2ed97601f0f996d9dad5cf6fb7f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:60:31:8c:fc:98:03:d5:4c:9f:9e:f7:b3:bd: 2d:6f:f1:e0:26:76:0b:1a:a1:b9:1e:4a:2b:55:87: cc:19:a1:ad:5d:f6:dd:55:b2:f9:06:f5:1a:b6:1f: ad:6d:0d:d7:b3:80:3a:2f:0c:dc:19:37:98:4b:0d: a6:c2:3b:e8:d6:28:d6:8e:86:f0:14:c1:2a:b0:67: 80:fd:13:55:fd:49:6e:b4:32:44:03:68:99:44:0a: cc:8b:19:d6:cf:0f:44:49:28:35:c3:cf:dc:6f:6d: 8c:37:9d:f6:6b:11:2e:f2:78:d5:59:90:09:cc:c5: 1d:44:0a:0a:be:87:55:70:4a:59:27:91:01:43:23: 75:2d:d5:2b:5a:35:4b:10:3f:de:ef:12:96:2f:7e: b7:a5:6e:45:ca:ee:6b:74:d3:ad:c0:61:64:7d:19: 27:35:1c:5c:ce:c8:63:ca:5f:59:29:bd:9f:38:d5: 70:06:26:7f:17:9f:f6:c2:de:ff:94:3e:cf:73:3f: e1:82:46:fb:b3:3f:12:20:04:1a:1a:d6:59:2d:96: ac:d7:87:eb:39:76:4f:7e:a5:e3:e3:93:17:a3:a4: 0b:40:46:84:46:46:e6:5c:0c:e4:d3:43:86:3f:16: 96:8a:49:bb:70:99:f0:ec:8b:ad:ae:45:1a:fa:28: 28:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2F:62:AF:3F:1C:2E:D9:76:01:F0:F9:96:D9:DA:D5:CF:6F:B7:F0 X509v3 Authority Key Identifier: keyid:F5:5E:05:93:08:E4:6B:3D:3B:E0:4D:31:FD:5E:10:F5:4F:34:39:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9V4Fkwjkaz074E0x_V4Q9U80OQw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8eeadb-82d1-4b3c-8498-64e56380fbc4/1/9V4Fkwjkaz074E0x_V4Q9U80OQw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:39:34:15:14:4f:48:0c:be:7b:99:24:b2:11:0e:f9:87:61: fb:e4:10:18:97:cb:95:b8:1e:9e:5d:94:42:af:cc:ba:69:0a: a3:73:82:74:a9:93:58:fb:0a:02:4f:3b:65:cb:14:71:d8:6f: db:77:b7:40:8a:f9:82:a7:b6:67:a6:db:ee:3e:24:e5:9a:09: 62:2d:b5:bf:06:bf:97:85:15:37:d9:c6:40:ea:dc:ff:e7:b3: 99:24:39:88:d4:29:26:34:d8:ec:ee:ea:72:78:d9:4d:b0:32: 27:62:b5:cd:7c:81:5d:07:6f:2f:81:d6:98:57:5a:b3:f4:73: 58:a0:2b:ad:05:d8:0d:88:e9:8b:87:e4:33:d1:60:9c:44:a8: 03:ff:1b:fc:4f:46:ee:b7:36:c4:01:b5:2a:a5:16:31:15:74: 0e:d1:f0:d1:33:ab:4e:6f:3c:a4:04:34:c0:49:31:2a:c8:7c: 7c:d8:3a:ae:22:3e:b1:41:88:78:f3:da:b6:f5:2c:d2:f0:4c: 81:d2:94:42:4f:62:5f:4b:39:bb:d7:e7:5f:38:e7:c8:7f:fb: 52:50:91:47:98:34:f0:6f:67:cb:65:52:15:0e:4c:06:b0:49: 14:07:c1:18:5b:aa:5c:7b:05:c2:33:72:94:ff:23:a8:32:35: 8d:f0:66:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RlDHDpS5rj6QmI68WZ2oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NWUwNTkzMDhlNDZiM2QzYmUwNGQzMWZkNWUxMGY1NGYz NDM5MGMwHhcNMjUxMjIwMDEwMTA3WhcNMjUxMjIxMDEwMTA3WjAzMTEwLwYDVQQD Eyg3MzJmNjJhZjNmMWMyZWQ5NzYwMWYwZjk5NmQ5ZGFkNWNmNmZiN2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWAxjPyYA9VMn573s70tb/HgJnYL GqG5HkorVYfMGaGtXfbdVbL5BvUath+tbQ3Xs4A6LwzcGTeYSw2mwjvo1ijWjobw FMEqsGeA/RNV/UlutDJEA2iZRArMixnWzw9ESSg1w8/cb22MN532axEu8njVWZAJ zMUdRAoKvodVcEpZJ5EBQyN1LdUrWjVLED/e7xKWL363pW5Fyu5rdNOtwGFkfRkn NRxczshjyl9ZKb2fONVwBiZ/F5/2wt7/lD7Pcz/hgkb7sz8SIAQaGtZZLZas14fr OXZPfqXj45MXo6QLQEaERkbmXAzk00OGPxaWikm7cJnw7IutrkUa+igo0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMvYq8/HC7ZdgHw+ZbZ2tXPb7fwMB8GA1UdIwQY MBaAFPVeBZMI5Gs9O+BNMf1eEPVPNDkMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVY0Rmt3amthejA3NEUweF9WNFE5VTgwT1F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84ZWVhZGItODJkMS00YjNjLTg0OTgt NjRlNTYzODBmYmM0LzEvOVY0Rmt3amthejA3NEUweF9WNFE5VTgwT1F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84ZWVhZGItODJkMS00YjNjLTg0OTgtNjRlNTYzODBmYmM0 LzEvOVY0Rmt3amthejA3NEUweF9WNFE5VTgwT1F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDk0FRRP SAy+e5kkshEO+Ydh++QQGJfLlbgenl2UQq/MumkKo3OCdKmTWPsKAk87ZcsUcdhv 23e3QIr5gqe2Z6bb7j4k5ZoJYi21vwa/l4UVN9nGQOrc/+ezmSQ5iNQpJjTY7O7q cnjZTbAyJ2K1zXyBXQdvL4HWmFdas/RzWKArrQXYDYjpi4fkM9FgnESoA/8b/E9G 7rc2xAG1KqUWMRV0DtHw0TOrTm88pAQ0wEkxKsh8fNg6riI+sUGIePPatvUs0vBM gdKUQk9iX0s5u9fnXzjnyH/7UlCRR5g08G9ny2VSFQ5MBrBJFAfBGFuqXHsFwjNy lP8jqDI1jfBmGg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:18:08 2025 by rpki-client