This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft File: 91sCopx2blsTs-sXapccEt3h1M4.mft (raw, json) Hash identifier: nDsrhQbVOwY0xDA1mGylgQhTLVNiF6ALY6XDsr3aC4A= Subject key identifier: 71:31:C4:C3:38:B8:7F:A5:35:EE:94:71:FD:43:8F:08:E6:14:A3:BA Authority key identifier: F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE Certificate issuer: /CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce Certificate serial: 019B1EAA8196DCBE0DBB486AA98F2DBB1A26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft Manifest number: 12FF Signing time: Sun 14 Dec 2025 21:00:49 +0000 Manifest this update: Sun 14 Dec 2025 21:00:49 +0000 Manifest next update: Mon 15 Dec 2025 21:00:49 +0000 Files and hashes: 1: 91sCopx2blsTs-sXapccEt3h1M4.crl (hash: KmXMFG0V8Mxex+JZZIQDpMzRkTIZTqK+OsvqfJhA/DY=) 2: IKYkPycoZ16me6Kb0OaEhELdyLo.roa (hash: Um/+K1DsE/fHN8bVJfVKmH+mN7B9+NKyvrFzBu4jUT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 21:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:aa:81:96:dc:be:0d:bb:48:6a:a9:8f:2d:bb:1a:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce Validity Not Before: Dec 14 21:00:49 2025 GMT Not After : Dec 15 21:00:49 2025 GMT Subject: CN=7131c4c338b87fa535ee9471fd438f08e614a3ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ce:3d:b8:bc:c6:70:27:f6:ea:2f:e6:8b:ac: 26:aa:6d:7e:04:cb:06:55:7d:2a:95:09:dd:27:87: 32:6c:f5:42:4e:0b:46:98:88:6d:b9:02:9a:7c:9b: da:08:68:01:8b:d6:72:7b:2a:4c:07:ca:30:80:7b: c7:e9:0a:03:88:18:12:f8:fe:ea:c7:5c:6b:0f:6f: fc:fb:45:89:cf:87:62:47:4d:34:ca:49:45:b1:d3: 19:2a:74:94:b8:c0:d8:34:48:d1:52:bd:cc:29:54: e7:96:7e:1b:b3:7c:fc:30:49:31:57:77:cb:3f:63: 43:06:68:76:a7:3c:d7:b0:bb:cb:09:23:5c:87:56: 87:46:41:b8:91:a5:88:e8:e3:ba:9b:eb:64:9a:b7: 96:5c:77:cf:8c:68:b2:51:3d:f3:2f:71:7d:0c:e7: f6:32:43:d9:38:d6:d9:40:50:22:01:14:7e:15:a5: 72:0d:8e:cc:89:19:7e:8f:2b:50:ab:47:c0:1e:65: 04:01:ce:c1:e9:80:0c:71:dc:a9:07:5a:76:b4:31: b4:5e:1e:54:c3:32:77:50:0c:ee:7a:af:c9:87:e8: 9d:27:10:a5:f0:9f:a2:18:69:69:a7:49:28:1d:30: f8:c5:79:22:ed:40:48:6c:dd:20:7d:1c:69:8c:32: dc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:31:C4:C3:38:B8:7F:A5:35:EE:94:71:FD:43:8F:08:E6:14:A3:BA X509v3 Authority Key Identifier: keyid:F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:35:a2:e0:e2:be:0f:60:06:d6:42:f6:25:a9:1f:54:ef:00: c5:db:e6:c3:c3:d8:ac:d3:a9:0d:ca:af:fd:45:00:e9:51:98: 4d:43:c0:35:85:00:d5:7f:d4:b2:e8:54:42:89:05:84:c6:bd: d3:95:42:92:09:f4:46:a6:67:31:56:2f:36:1f:07:68:4e:5c: 76:24:e8:d2:e9:40:55:a1:59:27:2c:c0:67:d5:13:d2:85:8f: 30:3a:1a:69:e1:a2:57:7e:e7:36:92:1b:09:21:f9:21:72:50: b1:fc:29:a3:14:dd:66:0b:59:89:e5:45:3d:1f:6c:5c:9f:d7: d5:7c:3d:81:3d:ab:d4:6e:56:f3:24:dc:61:4f:cf:03:98:34: d6:96:8a:c9:18:48:98:be:bd:b9:00:aa:2a:66:ce:ff:9b:3e: b2:c0:1d:0a:c7:4e:76:73:e9:b4:4f:b9:1d:6b:df:39:90:f4: e6:79:eb:9b:2b:d9:0f:61:bd:bf:f5:85:f6:5d:f5:92:5f:fa: 8e:29:a4:2e:76:d6:d8:10:8d:83:6f:06:d0:c8:dc:9d:4f:f3: ad:d9:ca:0f:46:6c:c1:3b:84:50:66:e8:f6:69:f3:9d:7a:db: 5f:3d:2c:aa:8b:39:56:0a:6d:27:5e:de:f9:30:45:21:fc:b3: 65:95:9a:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseqoGW3L4Nu0hqqY8tuxomMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NWIwMmEyOWM3NjZlNWIxM2IzZWIxNzZhOTcxYzEyZGRl MWQ0Y2UwHhcNMjUxMjE0MjEwMDQ5WhcNMjUxMjE1MjEwMDQ5WjAzMTEwLwYDVQQD Eyg3MTMxYzRjMzM4Yjg3ZmE1MzVlZTk0NzFmZDQzOGYwOGU2MTRhM2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM49uLzGcCf26i/mi6wmqm1+BMsG VX0qlQndJ4cybPVCTgtGmIhtuQKafJvaCGgBi9ZyeypMB8owgHvH6QoDiBgS+P7q x1xrD2/8+0WJz4diR000yklFsdMZKnSUuMDYNEjRUr3MKVTnln4bs3z8MEkxV3fL P2NDBmh2pzzXsLvLCSNch1aHRkG4kaWI6OO6m+tkmreWXHfPjGiyUT3zL3F9DOf2 MkPZONbZQFAiARR+FaVyDY7MiRl+jytQq0fAHmUEAc7B6YAMcdypB1p2tDG0Xh5U wzJ3UAzueq/Jh+idJxCl8J+iGGlpp0koHTD4xXki7UBIbN0gfRxpjDLcRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHExxMM4uH+lNe6Ucf1DjwjmFKO6MB8GA1UdIwQY MBaAFPdbAqKcdm5bE7PrF2qXHBLd4dTOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTFzQ29weDJibHNUcy1zWGFwY2NFdDNoMU00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wYTlmZjItN2RmOC00M2YzLWEzMWYt YmNkYmI1NDJjYjVhLzEvOTFzQ29weDJibHNUcy1zWGFwY2NFdDNoMU00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8wYTlmZjItN2RmOC00M2YzLWEzMWYtYmNkYmI1NDJjYjVh LzEvOTFzQ29weDJibHNUcy1zWGFwY2NFdDNoMU00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbzWi4OK+ D2AG1kL2JakfVO8Axdvmw8PYrNOpDcqv/UUA6VGYTUPANYUA1X/UsuhUQokFhMa9 05VCkgn0RqZnMVYvNh8HaE5cdiTo0ulAVaFZJyzAZ9UT0oWPMDoaaeGiV37nNpIb CSH5IXJQsfwpoxTdZgtZieVFPR9sXJ/X1Xw9gT2r1G5W8yTcYU/PA5g01paKyRhI mL69uQCqKmbO/5s+ssAdCsdOdnPptE+5HWvfOZD05nnrmyvZD2G9v/WF9l31kl/6 jimkLnbW2BCNg28G0MjcnU/zrdnKD0ZswTuEUGbo9mnznXrbXz0sqos5VgptJ17e +TBFIfyzZZWafw== -----END CERTIFICATE-----Generated at Mon Dec 15 04:58:45 2025 by rpki-client