This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft File: 9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft (raw, json) Hash identifier: oCojjknF2lBEWV+ewLvi1BBzmIFEdqo7EzthTiElRIo= Subject key identifier: 73:4C:AE:48:06:FE:FE:1D:12:0D:27:32:FC:AD:7B:93:C0:F8:AF:C9 Authority key identifier: F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36 Certificate issuer: /CN=f6f49bfb2a0b82446060c7fc907810e518705936 Certificate serial: 019B20627D868F2F6C67DD6B28B77F15880C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft Manifest number: 03E0 Signing time: Mon 15 Dec 2025 05:01:24 +0000 Manifest this update: Mon 15 Dec 2025 05:01:24 +0000 Manifest next update: Tue 16 Dec 2025 05:01:24 +0000 Files and hashes: 1: 9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl (hash: K0MpBYQpySG7QBg4AIEZ20JceaOzujWSj6jkPqOZ6pw=) 2: jSx6lr1ClHwvX34A8pMwt0RR9b8.roa (hash: 8qaP26J8XC7Mhz3DA86mgKU6vMfpb43EGZW/j662nEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 05:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:62:7d:86:8f:2f:6c:67:dd:6b:28:b7:7f:15:88:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6f49bfb2a0b82446060c7fc907810e518705936 Validity Not Before: Dec 15 05:01:24 2025 GMT Not After : Dec 16 05:01:24 2025 GMT Subject: CN=734cae4806fefe1d120d2732fcad7b93c0f8afc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f7:ec:97:55:c5:a2:99:d0:74:7b:05:c9:9c: e3:8f:fd:90:8a:88:bd:97:f7:24:e0:57:ad:c2:fa: da:a4:53:d7:69:4f:be:91:82:86:c1:10:3c:ba:ad: 1b:23:30:0d:3d:21:d9:94:37:c0:e6:13:ef:66:ae: d1:66:43:5a:f0:04:76:56:75:b4:b6:51:19:b6:48: 30:ed:f3:d9:0a:40:3e:5d:9e:d0:01:9b:ec:ea:f5: c7:6e:55:4e:20:af:01:2b:89:37:3a:2e:15:ec:9d: b1:dc:41:e0:5f:07:4f:14:bc:71:39:bc:72:29:df: 3e:69:56:6d:88:e7:58:46:80:a0:8f:12:88:95:f6: 26:d3:39:8c:07:64:b7:83:07:2f:ad:66:ea:ae:ce: f2:3d:73:e5:32:48:bd:6b:24:36:b9:2a:88:58:65: cb:cd:4e:66:63:92:96:7c:b3:cd:4a:0c:13:53:2c: 43:9f:56:fe:e1:fa:bc:c5:43:0d:a8:63:92:05:b0: 86:62:c8:de:62:eb:33:93:16:8b:29:82:1c:02:d0: 0a:58:9e:bd:11:71:ff:af:ca:13:12:5b:9d:98:ab: df:da:1a:1e:c8:cd:aa:71:f7:af:6e:9a:02:97:c8: e7:92:d7:5a:67:5d:09:a6:de:9e:22:8e:33:33:6e: ba:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:4C:AE:48:06:FE:FE:1D:12:0D:27:32:FC:AD:7B:93:C0:F8:AF:C9 X509v3 Authority Key Identifier: keyid:F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:b3:49:4e:da:25:4c:b0:67:64:7a:31:47:88:00:89:53:cf: c8:29:70:90:9c:cf:e7:19:e3:a8:35:32:00:5c:5a:e4:c8:48: 7b:06:11:1b:46:f1:b1:81:9f:a2:9c:c6:e8:b0:e3:61:a0:bd: 73:10:62:8e:02:50:07:52:ad:4e:b3:1d:de:56:dc:6e:6c:56: 15:c0:39:60:84:f1:6c:05:18:f8:14:90:9d:24:a7:e4:45:83: 90:0f:1e:94:de:b6:e5:e4:cd:27:d3:4a:55:83:da:9c:f6:ee: 1e:65:de:73:a1:4a:30:58:3d:10:c3:41:55:5a:6b:70:93:24: 6d:ad:21:37:64:14:53:c0:5e:6b:76:ff:b9:7b:d1:0a:2f:5d: 36:6a:84:73:92:54:14:2e:37:e2:09:ab:c6:96:49:26:85:62: fb:e8:21:e9:d0:48:43:39:df:ab:21:e4:28:5d:38:28:cf:9e: 99:54:9b:39:a1:d4:36:89:9d:b5:41:d9:72:cc:9a:d2:6b:0a: cb:95:5a:4a:b9:73:59:83:96:18:a3:66:10:e0:75:1f:b4:59: 44:23:b9:9e:40:c1:fa:2f:ed:53:8b:95:24:4c:76:79:7a:51: 5e:e9:53:13:e1:38:8c:87:65:b4:db:8f:f8:ba:9c:ef:ee:09: 03:d6:f7:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgYn2Gjy9sZ91rKLd/FYgMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ZjQ5YmZiMmEwYjgyNDQ2MDYwYzdmYzkwNzgxMGU1MTg3 MDU5MzYwHhcNMjUxMjE1MDUwMTI0WhcNMjUxMjE2MDUwMTI0WjAzMTEwLwYDVQQD Eyg3MzRjYWU0ODA2ZmVmZTFkMTIwZDI3MzJmY2FkN2I5M2MwZjhhZmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvfsl1XFopnQdHsFyZzjj/2Qioi9 l/ck4FetwvrapFPXaU++kYKGwRA8uq0bIzANPSHZlDfA5hPvZq7RZkNa8AR2VnW0 tlEZtkgw7fPZCkA+XZ7QAZvs6vXHblVOIK8BK4k3Oi4V7J2x3EHgXwdPFLxxObxy Kd8+aVZtiOdYRoCgjxKIlfYm0zmMB2S3gwcvrWbqrs7yPXPlMki9ayQ2uSqIWGXL zU5mY5KWfLPNSgwTUyxDn1b+4fq8xUMNqGOSBbCGYsjeYuszkxaLKYIcAtAKWJ69 EXH/r8oTEludmKvf2hoeyM2qcfevbpoCl8jnktdaZ10Jpt6eIo4zM266VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNMrkgG/v4dEg0nMvyte5PA+K/JMB8GA1UdIwQY MBaAFPb0m/sqC4JEYGDH/JB4EOUYcFk2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXZTYi15b0xna1JnWU1mOGtIZ1E1Umh3V1RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My83NzcyOGQtYWNmZS00NGE0LWJjOTIt MzNhNTZmNDU5YmMwLzEvOXZTYi15b0xna1JnWU1mOGtIZ1E1Umh3V1RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My83NzcyOGQtYWNmZS00NGE0LWJjOTItMzNhNTZmNDU5YmMw LzEvOXZTYi15b0xna1JnWU1mOGtIZ1E1Umh3V1RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACLNJTtol TLBnZHoxR4gAiVPPyClwkJzP5xnjqDUyAFxa5MhIewYRG0bxsYGfopzG6LDjYaC9 cxBijgJQB1KtTrMd3lbcbmxWFcA5YITxbAUY+BSQnSSn5EWDkA8elN625eTNJ9NK VYPanPbuHmXec6FKMFg9EMNBVVprcJMkba0hN2QUU8Bea3b/uXvRCi9dNmqEc5JU FC434gmrxpZJJoVi++gh6dBIQznfqyHkKF04KM+emVSbOaHUNomdtUHZcsya0msK y5VaSrlzWYOWGKNmEOB1H7RZRCO5nkDB+i/tU4uVJEx2eXpRXulTE+E4jIdltNuP +Lqc7+4JA9b3KQ== -----END CERTIFICATE-----Generated at Mon Dec 15 13:21:04 2025 by rpki-client