This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/r9WY8p3VxWKY8usFdd4n_DuiCVE.mft File: r9WY8p3VxWKY8usFdd4n_DuiCVE.mft (raw, json) Hash identifier: heJMqLEeZfIsExJUo2+bAuFmW8zrIQoaPqVPesUGSPE= Subject key identifier: 7F:26:48:C4:CE:62:80:62:99:D7:00:03:CC:8D:4B:7D:97:E4:40:C0 Authority key identifier: AF:D5:98:F2:9D:D5:C5:62:98:F2:EB:05:75:DE:27:FC:3B:A2:09:51 Certificate issuer: /CN=afd598f29dd5c56298f2eb0575de27fc3ba20951 Certificate serial: 019B5977003F47E49F5BB04995E5EB11ACEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9WY8p3VxWKY8usFdd4n_DuiCVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/r9WY8p3VxWKY8usFdd4n_DuiCVE.mft Manifest number: 1C Signing time: Fri 26 Dec 2025 07:02:09 +0000 Manifest this update: Fri 26 Dec 2025 07:02:09 +0000 Manifest next update: Sat 27 Dec 2025 07:02:09 +0000 Files and hashes: 1: r9WY8p3VxWKY8usFdd4n_DuiCVE.crl (hash: sIwHv2KXKZuo9d65IDys7Gw8LvQ4ZwI2NVGx5vKbVJI=) 2: wliZ3Xk4a5dST5lG-0jqVyesff0.roa (hash: cFQjKXKVqiif1PZ4ZLX4VRumIvFEAtMT9pBdOzRqCpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/r9WY8p3VxWKY8usFdd4n_DuiCVE.crl rsync://rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/r9WY8p3VxWKY8usFdd4n_DuiCVE.mft rsync://rpki.ripe.net/repository/DEFAULT/r9WY8p3VxWKY8usFdd4n_DuiCVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:00:3f:47:e4:9f:5b:b0:49:95:e5:eb:11:ac:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afd598f29dd5c56298f2eb0575de27fc3ba20951 Validity Not Before: Dec 26 07:02:09 2025 GMT Not After : Dec 27 07:02:09 2025 GMT Subject: CN=7f2648c4ce62806299d70003cc8d4b7d97e440c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f0:bd:75:93:81:65:a1:73:5d:7e:9f:05:42: 21:b8:11:2f:46:31:81:7f:32:f3:ee:a7:b4:86:8f: e7:d5:94:d6:80:06:f3:db:57:81:ee:a5:d7:e1:7a: 9a:97:21:e8:81:f2:26:17:63:67:b2:f2:a4:0a:91: e7:19:ef:c4:83:2d:d5:bd:59:b8:e1:dc:4b:41:d5: 63:aa:f0:13:98:fe:82:80:f3:0f:78:ac:d2:9c:5d: 72:b9:6a:14:0c:5f:36:fc:60:67:7e:04:0d:54:be: 7c:e8:13:20:60:19:f0:33:cb:ea:78:50:e7:52:04: 0e:1c:f9:89:c5:0d:39:1f:cf:b0:80:40:5f:d8:eb: 5a:31:29:41:70:6d:c9:19:a5:eb:9b:4d:66:93:78: da:7b:ed:32:cd:55:6a:0e:dd:11:9e:fa:ae:12:aa: 53:34:24:e0:b0:5f:0c:e5:00:9d:0e:67:f5:3e:a0: b7:38:45:ee:39:b2:a3:e8:b9:ae:24:00:8d:c9:47: 44:90:fd:c5:0a:04:b8:46:1d:58:d9:57:5f:89:45: 7f:56:ae:4b:c0:9b:7a:9a:9e:b5:51:e4:7e:6a:98: 68:f1:45:d9:5b:00:84:b4:d9:fa:f1:3e:70:26:a0: 2f:df:2d:c0:5a:91:9a:c2:a0:59:cd:19:61:fc:91: aa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:26:48:C4:CE:62:80:62:99:D7:00:03:CC:8D:4B:7D:97:E4:40:C0 X509v3 Authority Key Identifier: keyid:AF:D5:98:F2:9D:D5:C5:62:98:F2:EB:05:75:DE:27:FC:3B:A2:09:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9WY8p3VxWKY8usFdd4n_DuiCVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/r9WY8p3VxWKY8usFdd4n_DuiCVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/r9WY8p3VxWKY8usFdd4n_DuiCVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:bf:c7:31:b1:c8:7c:a9:27:c8:d2:6f:ae:05:4d:2d:52:5d: 6d:3e:a7:37:11:1e:b8:60:df:9c:27:c2:39:eb:4b:79:5a:38: 58:60:3f:00:40:66:47:1a:9b:32:a5:27:e0:c7:5f:96:28:97: b9:a4:04:dc:4f:77:f0:50:96:14:15:2c:db:40:6c:58:61:6b: a4:65:27:72:33:99:ed:34:c2:fd:76:32:09:91:3d:23:97:03: 64:19:7e:91:df:89:09:65:59:45:44:0c:9b:75:d4:ac:7c:62: a9:57:9d:b3:7f:de:19:24:93:90:40:cb:87:20:82:59:87:38: 06:55:4a:4e:7c:5b:01:cd:3f:cb:48:68:85:32:70:a9:a7:f8: 98:d7:21:8e:d5:8c:9f:83:b1:52:ea:7e:87:1e:4b:25:75:c5: 94:ae:f2:83:f2:3b:18:7e:35:05:eb:98:3a:bf:57:b1:4d:f1: 07:74:36:b1:a1:30:7c:97:9a:ac:35:03:f8:70:ba:45:2b:1d: 4c:7b:4f:9b:4c:b5:77:97:1f:1a:25:66:8a:37:01:c4:8f:63: 2c:02:b9:58:4d:f6:2d:4e:18:c9:c9:1f:78:85:20:37:6d:94: 03:98:f1:71:d2:2d:40:2d:b6:27:ba:6c:ff:1b:3c:35:eb:08: 58:cd:dd:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdwA/R+SfW7BJleXrEazuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZDU5OGYyOWRkNWM1NjI5OGYyZWIwNTc1ZGUyN2ZjM2Jh MjA5NTEwHhcNMjUxMjI2MDcwMjA5WhcNMjUxMjI3MDcwMjA5WjAzMTEwLwYDVQQD Eyg3ZjI2NDhjNGNlNjI4MDYyOTlkNzAwMDNjYzhkNGI3ZDk3ZTQ0MGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvC9dZOBZaFzXX6fBUIhuBEvRjGB fzLz7qe0ho/n1ZTWgAbz21eB7qXX4XqalyHogfImF2NnsvKkCpHnGe/Egy3VvVm4 4dxLQdVjqvATmP6CgPMPeKzSnF1yuWoUDF82/GBnfgQNVL586BMgYBnwM8vqeFDn UgQOHPmJxQ05H8+wgEBf2OtaMSlBcG3JGaXrm01mk3jae+0yzVVqDt0RnvquEqpT NCTgsF8M5QCdDmf1PqC3OEXuObKj6LmuJACNyUdEkP3FCgS4Rh1Y2VdfiUV/Vq5L wJt6mp61UeR+apho8UXZWwCEtNn68T5wJqAv3y3AWpGawqBZzRlh/JGqtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH8mSMTOYoBimdcAA8yNS32X5EDAMB8GA1UdIwQY MBaAFK/VmPKd1cVimPLrBXXeJ/w7oglRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjlXWThwM1Z4V0tZOHVzRmRkNG5fRHVpQ1ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9mZmFmZGItODE1YS00N2E4LTk3MWIt YjZhNDY4NGUyNWYwLzEvcjlXWThwM1Z4V0tZOHVzRmRkNG5fRHVpQ1ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9mZmFmZGItODE1YS00N2E4LTk3MWItYjZhNDY4NGUyNWYw LzEvcjlXWThwM1Z4V0tZOHVzRmRkNG5fRHVpQ1ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhb/HMbHI fKknyNJvrgVNLVJdbT6nNxEeuGDfnCfCOetLeVo4WGA/AEBmRxqbMqUn4MdfliiX uaQE3E938FCWFBUs20BsWGFrpGUncjOZ7TTC/XYyCZE9I5cDZBl+kd+JCWVZRUQM m3XUrHxiqVeds3/eGSSTkEDLhyCCWYc4BlVKTnxbAc0/y0hohTJwqaf4mNchjtWM n4OxUup+hx5LJXXFlK7yg/I7GH41BeuYOr9XsU3xB3Q2saEwfJearDUD+HC6RSsd THtPm0y1d5cfGiVmijcBxI9jLAK5WE32LU4YyckfeIUgN22UA5jxcdItQC22J7ps /xs8NesIWM3dXw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:42:25 2025 by rpki-client