This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft File: 91sCopx2blsTs-sXapccEt3h1M4.mft (raw, json) Hash identifier: XeIcPngxdSXIfcEFDzKVFLsCCzjRf8tw+CXmHiKXMGs= Subject key identifier: 01:34:BA:DA:D2:DA:2F:09:3E:67:B2:3C:ED:02:D4:FE:A0:2B:2E:A6 Authority key identifier: F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE Certificate issuer: /CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce Certificate serial: 019B096C48185233D41479AA881FCCC1E84C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft Manifest number: 12F4 Signing time: Wed 10 Dec 2025 18:00:49 +0000 Manifest this update: Wed 10 Dec 2025 18:00:49 +0000 Manifest next update: Thu 11 Dec 2025 18:00:49 +0000 Files and hashes: 1: 91sCopx2blsTs-sXapccEt3h1M4.crl (hash: zjxIx4HoERkPhkrO4Wi5+NOWUmD3HqhUuqZ2gUBJo44=) 2: IKYkPycoZ16me6Kb0OaEhELdyLo.roa (hash: Um/+K1DsE/fHN8bVJfVKmH+mN7B9+NKyvrFzBu4jUT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:6c:48:18:52:33:d4:14:79:aa:88:1f:cc:c1:e8:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce Validity Not Before: Dec 10 18:00:49 2025 GMT Not After : Dec 11 18:00:49 2025 GMT Subject: CN=0134badad2da2f093e67b23ced02d4fea02b2ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:91:a4:43:7a:ab:ec:cc:ac:67:f5:04:71:43: 74:fa:bf:01:77:4b:90:20:1f:54:b4:54:79:22:58: b1:02:d2:eb:2d:d1:2a:40:b8:bc:38:b1:31:d1:76: b9:41:0c:48:9c:14:0c:ad:63:ea:e5:2b:16:bc:47: 33:17:77:1e:28:44:b8:e9:45:16:c1:64:2e:28:34: cc:65:e0:49:c8:3a:5a:02:41:04:6e:38:3b:30:c2: 1e:b3:55:53:f6:7d:3b:b9:3d:a7:9e:79:0f:44:da: 97:8c:fc:cb:4a:7a:a6:2a:3c:95:0c:c1:a6:6d:c6: 1f:0c:fb:e9:4e:71:6b:4a:8b:c5:0d:a7:b6:ce:46: 22:93:5b:68:ce:5d:63:a9:da:fe:a7:fa:48:d3:e9: a0:11:8a:6c:af:cd:7d:ca:6a:fd:7f:25:a5:84:4e: d2:ed:e1:9b:a5:ad:76:c6:02:01:79:1c:32:14:cf: c5:82:15:e4:e6:6b:b3:18:09:d3:09:c6:ab:db:06: 91:1b:7a:a8:64:38:e4:b8:be:11:9e:48:df:be:db: 4c:4d:3c:01:dd:18:0f:3d:c7:98:60:f4:aa:47:50: 9d:2e:02:69:1e:17:86:5a:9d:83:a1:13:f2:a4:20: 03:b2:a9:68:dd:d6:61:9c:ab:fc:61:4a:fe:02:1b: 24:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:34:BA:DA:D2:DA:2F:09:3E:67:B2:3C:ED:02:D4:FE:A0:2B:2E:A6 X509v3 Authority Key Identifier: keyid:F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:64:bd:16:95:5d:fe:60:e0:ad:c9:6e:54:56:da:12:8f:f7: 86:2f:5c:37:69:66:d0:0b:1e:bf:7f:31:57:0f:bf:6d:04:39: 55:3d:b4:d4:29:b9:42:43:d8:e2:35:e0:95:d3:84:b7:02:90: 89:58:a8:c7:4a:e7:40:5b:6b:aa:86:07:44:13:54:02:ce:d4: db:48:b1:1a:06:d3:9a:0b:d8:ad:f6:d9:b1:31:ef:bf:83:ca: 07:a7:7e:a0:d0:03:a8:02:22:b8:e1:ea:71:cf:68:e1:32:3b: e7:59:e0:a6:e1:82:2e:c7:f0:41:d8:89:06:1b:83:49:06:1f: cd:23:e0:eb:85:bd:75:51:c7:ad:f3:df:b5:90:cb:27:79:c7: 65:53:d4:88:7f:37:53:9f:02:03:dd:99:7c:ed:89:01:0f:60: 0d:71:a7:b5:0e:58:9c:ba:5c:ab:95:f2:15:07:b6:0b:3d:56: a2:27:c0:33:7b:07:52:3c:43:c5:26:d9:ad:e0:63:6c:56:3c: f4:ed:16:7c:a6:06:0f:c1:b8:8f:4c:61:93:1f:22:fd:3b:e6: f5:28:c6:8e:2e:89:fa:f9:c7:a5:32:7f:f0:f3:e0:8e:d6:c9: a8:b5:54:00:9e:cb:0e:1f:c6:d7:27:50:08:8c:88:4a:57:a6: 82:41:86:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsJbEgYUjPUFHmqiB/MwehMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NWIwMmEyOWM3NjZlNWIxM2IzZWIxNzZhOTcxYzEyZGRl MWQ0Y2UwHhcNMjUxMjEwMTgwMDQ5WhcNMjUxMjExMTgwMDQ5WjAzMTEwLwYDVQQD EygwMTM0YmFkYWQyZGEyZjA5M2U2N2IyM2NlZDAyZDRmZWEwMmIyZWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5GkQ3qr7MysZ/UEcUN0+r8Bd0uQ IB9UtFR5IlixAtLrLdEqQLi8OLEx0Xa5QQxInBQMrWPq5SsWvEczF3ceKES46UUW wWQuKDTMZeBJyDpaAkEEbjg7MMIes1VT9n07uT2nnnkPRNqXjPzLSnqmKjyVDMGm bcYfDPvpTnFrSovFDae2zkYik1tozl1jqdr+p/pI0+mgEYpsr819ymr9fyWlhE7S 7eGbpa12xgIBeRwyFM/FghXk5muzGAnTCcar2waRG3qoZDjkuL4RnkjfvttMTTwB 3RgPPceYYPSqR1CdLgJpHheGWp2DoRPypCADsqlo3dZhnKv8YUr+AhskwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAE0utrS2i8JPmeyPO0C1P6gKy6mMB8GA1UdIwQY MBaAFPdbAqKcdm5bE7PrF2qXHBLd4dTOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTFzQ29weDJibHNUcy1zWGFwY2NFdDNoMU00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wYTlmZjItN2RmOC00M2YzLWEzMWYt YmNkYmI1NDJjYjVhLzEvOTFzQ29weDJibHNUcy1zWGFwY2NFdDNoMU00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8wYTlmZjItN2RmOC00M2YzLWEzMWYtYmNkYmI1NDJjYjVh LzEvOTFzQ29weDJibHNUcy1zWGFwY2NFdDNoMU00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWS9FpVd /mDgrcluVFbaEo/3hi9cN2lm0Asev38xVw+/bQQ5VT201Cm5QkPY4jXgldOEtwKQ iViox0rnQFtrqoYHRBNUAs7U20ixGgbTmgvYrfbZsTHvv4PKB6d+oNADqAIiuOHq cc9o4TI751ngpuGCLsfwQdiJBhuDSQYfzSPg64W9dVHHrfPftZDLJ3nHZVPUiH83 U58CA92ZfO2JAQ9gDXGntQ5YnLpcq5XyFQe2Cz1WoifAM3sHUjxDxSbZreBjbFY8 9O0WfKYGD8G4j0xhkx8i/Tvm9SjGji6J+vnHpTJ/8PPgjtbJqLVUAJ7LDh/G1ydQ CIyISlemgkGGVw== -----END CERTIFICATE-----Generated at Wed Dec 10 20:18:15 2025 by rpki-client