This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft File: 9YgvM_dIDcx7h2N66nY2gonXXC0.mft (raw, json) Hash identifier: DXvaAwrcBkqxYPlUwuvnKHjUZqnXvFyW50t+CcYhtBw= Subject key identifier: 4B:C7:A3:D8:F4:0C:9F:17:EF:CE:7C:A9:00:BC:5E:FD:8A:A9:9E:73 Authority key identifier: F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D Certificate issuer: /CN=f5882f33f7480dcc7b87637aea76368289d75c2d Certificate serial: 019B0EC953878DFB2ECEE389D0970C4FB03B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft Manifest number: 0489 Signing time: Thu 11 Dec 2025 19:00:33 +0000 Manifest this update: Thu 11 Dec 2025 19:00:33 +0000 Manifest next update: Fri 12 Dec 2025 19:00:33 +0000 Files and hashes: 1: 9YgvM_dIDcx7h2N66nY2gonXXC0.crl (hash: 7j9HS12F4EzIH9JMyd9Atq904YWD2pKBiG8+ndYUv6A=) 2: QOEcWjHe4NVCZVw1toczwOnDbvg.roa (hash: EaeTTrx2jGMXQlq6vQvVplBMXhi0x7kTgcTmmy7+jJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:53:87:8d:fb:2e:ce:e3:89:d0:97:0c:4f:b0:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5882f33f7480dcc7b87637aea76368289d75c2d Validity Not Before: Dec 11 19:00:33 2025 GMT Not After : Dec 12 19:00:33 2025 GMT Subject: CN=4bc7a3d8f40c9f17efce7ca900bc5efd8aa99e73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7c:f3:21:60:75:ef:2e:ce:a7:ce:fb:6f:94: 74:f1:0e:c1:6f:6f:36:aa:18:6f:79:8b:5c:07:93: 83:cb:2f:93:53:25:d3:7f:dd:da:14:8c:f8:e8:c5: 72:17:71:4d:3e:77:bb:cf:90:74:b7:7d:fd:e2:50: fd:3f:07:43:7d:cf:c3:b4:13:bc:c3:41:c1:2d:1d: f4:d7:f5:20:fe:e6:d4:d1:bb:41:f4:65:1e:89:96: 0c:0f:3c:5f:14:42:db:8c:3e:e1:fd:76:b6:ae:f5: 12:ee:09:72:79:d9:20:fd:a5:d8:52:e7:b0:d3:95: b8:d1:3e:4c:83:7a:d7:83:c9:27:5b:54:d3:2f:48: 7d:f0:e8:95:5a:35:00:cf:18:3c:82:fc:ff:0b:2b: 14:1e:ac:d3:fe:d4:1e:15:a8:f5:14:93:7b:f5:fc: 89:9c:11:b3:38:4e:f5:56:84:24:4c:71:0b:93:5d: 5a:5a:59:21:1b:42:4a:05:b8:a8:35:d3:67:1a:84: 58:2d:51:98:2d:d7:9e:20:b0:ee:cf:f4:64:0c:53: eb:c1:91:00:f4:8d:6c:0b:de:91:44:aa:6f:b7:9c: e3:ee:60:0f:26:88:37:d0:fa:38:dd:6d:e4:9f:a8: 2c:df:ed:cf:87:25:72:44:89:72:4f:93:15:31:b8: 6c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C7:A3:D8:F4:0C:9F:17:EF:CE:7C:A9:00:BC:5E:FD:8A:A9:9E:73 X509v3 Authority Key Identifier: keyid:F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:12:03:e1:ca:74:04:20:14:b2:24:24:91:7d:18:c9:1d:95: cc:6c:64:2a:a6:3f:0c:78:5d:41:7c:45:84:f9:3c:a2:4c:16: 84:42:fe:f7:f2:3d:e6:c8:53:46:11:59:e6:7d:59:bb:ad:61: 93:33:83:e0:d4:f5:73:d5:5f:14:f2:28:32:f4:48:09:fb:58: 1b:db:59:b7:dc:89:b6:eb:92:4f:ce:c1:01:0b:08:ed:ce:ff: c0:76:b5:cf:11:1b:60:c4:cd:5b:ed:95:1a:db:3e:fa:28:93: ae:ec:fd:45:21:a7:5a:6e:a0:44:2b:fa:48:cb:e3:06:cb:88: 90:b2:5c:fc:26:88:c3:6a:9a:01:53:94:59:53:bc:50:1c:fe: 29:4e:4b:81:d2:89:53:37:e9:c1:b9:3b:65:ce:53:46:eb:c5: de:e6:e4:b7:48:c9:10:69:c5:79:81:55:b3:33:62:d7:e1:0c: 35:40:ab:e5:1a:ef:99:a5:d1:07:bc:26:ae:ed:13:26:65:57: ea:76:f7:2e:e9:53:55:cd:39:7c:e6:19:c0:dc:0a:bd:94:6c: 3f:85:c4:a3:26:e6:51:43:52:61:15:12:63:61:02:d0:42:ba: 80:41:4d:0b:e5:ce:53:9f:0b:0f:b0:75:45:b1:4b:14:68:99: 94:b0:73:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyVOHjfsuzuOJ0JcMT7A7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ODgyZjMzZjc0ODBkY2M3Yjg3NjM3YWVhNzYzNjgyODlk NzVjMmQwHhcNMjUxMjExMTkwMDMzWhcNMjUxMjEyMTkwMDMzWjAzMTEwLwYDVQQD Eyg0YmM3YTNkOGY0MGM5ZjE3ZWZjZTdjYTkwMGJjNWVmZDhhYTk5ZTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHzzIWB17y7Op877b5R08Q7Bb282 qhhveYtcB5ODyy+TUyXTf93aFIz46MVyF3FNPne7z5B0t3394lD9PwdDfc/DtBO8 w0HBLR301/Ug/ubU0btB9GUeiZYMDzxfFELbjD7h/Xa2rvUS7glyedkg/aXYUuew 05W40T5Mg3rXg8knW1TTL0h98OiVWjUAzxg8gvz/CysUHqzT/tQeFaj1FJN79fyJ nBGzOE71VoQkTHELk11aWlkhG0JKBbioNdNnGoRYLVGYLdeeILDuz/RkDFPrwZEA 9I1sC96RRKpvt5zj7mAPJog30Po43W3kn6gs3+3PhyVyRIlyT5MVMbhsOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvHo9j0DJ8X7858qQC8Xv2KqZ5zMB8GA1UdIwQY MBaAFPWILzP3SA3Me4djeup2NoKJ11wtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVlndk1fZElEY3g3aDJONjZuWTJnb25YWEMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85MmZmMmEtYTE2YS00YTc4LTk5YjIt YTk1MTA1ZjE2ZTY2LzEvOVlndk1fZElEY3g3aDJONjZuWTJnb25YWEMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85MmZmMmEtYTE2YS00YTc4LTk5YjItYTk1MTA1ZjE2ZTY2 LzEvOVlndk1fZElEY3g3aDJONjZuWTJnb25YWEMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACBID4cp0 BCAUsiQkkX0YyR2VzGxkKqY/DHhdQXxFhPk8okwWhEL+9/I95shTRhFZ5n1Zu61h kzOD4NT1c9VfFPIoMvRICftYG9tZt9yJtuuST87BAQsI7c7/wHa1zxEbYMTNW+2V Gts++iiTruz9RSGnWm6gRCv6SMvjBsuIkLJc/CaIw2qaAVOUWVO8UBz+KU5LgdKJ Uzfpwbk7Zc5TRuvF3ubkt0jJEGnFeYFVszNi1+EMNUCr5RrvmaXRB7wmru0TJmVX 6nb3LulTVc05fOYZwNwKvZRsP4XEoybmUUNSYRUSY2EC0EK6gEFNC+XOU58LD7B1 RbFLFGiZlLBzBw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:13:32 2025 by rpki-client