This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft File: _c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft (raw, json) Hash identifier: 6QtyiJKQyFG/QoStnmBiLnBGXEn/aBrPEXCucuUQecs= Subject key identifier: CA:24:32:F2:07:71:45:AA:C3:AD:DC:62:C3:20:CF:CE:2D:7E:78:42 Authority key identifier: FD:CF:72:BB:6C:86:87:50:86:28:9D:D2:51:8F:B0:3F:88:22:EE:9D Certificate issuer: /CN=fdcf72bb6c86875086289dd2518fb03f8822ee9d Certificate serial: 019B304307A5F5391225E7967095B5D57F27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft Manifest number: 0E8A Signing time: Thu 18 Dec 2025 07:00:57 +0000 Manifest this update: Thu 18 Dec 2025 07:00:57 +0000 Manifest next update: Fri 19 Dec 2025 07:00:57 +0000 Files and hashes: 1: _c9yu2yGh1CGKJ3SUY-wP4gi7p0.crl (hash: SVeAyPDxzjzdlFTGEHNHJekWz9Dq1ILUMdBPF+3w7rg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.crl rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft rsync://rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:43:07:a5:f5:39:12:25:e7:96:70:95:b5:d5:7f:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdcf72bb6c86875086289dd2518fb03f8822ee9d Validity Not Before: Dec 18 07:00:57 2025 GMT Not After : Dec 19 07:00:57 2025 GMT Subject: CN=ca2432f2077145aac3addc62c320cfce2d7e7842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:28:9c:d4:61:95:fd:3a:a4:fa:46:61:e2:e5: 6a:ff:48:72:cb:48:f1:f3:3a:2e:f0:22:6b:d9:d0: d2:04:f4:4d:48:44:e2:2b:53:38:e1:6b:13:24:58: bf:48:50:63:c4:92:5d:6b:80:61:47:45:87:76:0c: a6:57:af:a0:65:45:85:96:da:14:00:73:8a:b9:1d: 0e:d9:2e:a0:b4:82:43:ab:29:91:44:ac:e6:de:9c: 9e:51:6d:53:da:ac:42:b3:f7:81:53:e7:a6:c4:08: 31:30:81:8d:bd:44:3d:e9:9e:b6:41:3a:4d:66:4c: 60:01:71:22:96:3e:80:ca:7d:b5:7c:00:8b:11:cd: 21:02:9f:e5:33:f2:9d:f3:b4:ef:d2:3d:c7:31:76: 5a:32:46:f1:38:23:fe:41:84:76:3f:ef:d7:fb:7f: d6:9c:5b:79:e3:df:be:2d:b4:a8:c8:4d:d1:cf:bd: 21:69:40:46:b3:02:3f:d4:1d:57:c0:1a:8b:6d:6b: b3:79:cd:90:88:a0:00:ef:e7:9b:f3:65:3c:5f:bb: e8:65:90:7f:ce:4d:88:d6:e3:b9:b8:88:22:26:72: 7a:b3:7e:41:ac:7e:da:1e:06:c6:a6:e5:39:f2:cd: 2e:17:7f:b6:8a:8b:59:8b:8b:c7:65:a8:78:37:4e: 5a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:24:32:F2:07:71:45:AA:C3:AD:DC:62:C3:20:CF:CE:2D:7E:78:42 X509v3 Authority Key Identifier: keyid:FD:CF:72:BB:6C:86:87:50:86:28:9D:D2:51:8F:B0:3F:88:22:EE:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:c4:b8:14:ca:ab:89:67:2e:58:14:cc:00:38:fa:bd:8d:3a: 61:a7:c0:13:a2:65:0c:d8:49:4b:3f:47:1c:65:08:c6:d1:00: f9:13:c2:ef:24:63:44:9a:5b:dc:8a:14:0d:46:86:0e:e6:18: 33:01:8f:ed:eb:12:1c:1b:de:4e:a1:aa:40:14:4b:7e:74:b9: 7b:35:09:f3:46:43:77:6f:41:89:a4:82:81:f9:09:46:33:09: 9b:b0:0f:68:6a:98:c9:7b:55:34:f2:89:0c:f3:84:91:71:05: 8a:c9:65:75:4f:e0:2f:1f:7e:48:2e:23:57:bf:8e:09:5a:78: 6c:31:82:40:f2:f4:c1:0e:5a:2a:60:d4:af:29:39:2a:fb:37: b8:e6:9f:06:8c:47:fe:86:a0:30:58:56:3c:92:e1:c2:f7:1e: c0:86:fd:db:b6:fb:70:23:8f:29:2f:29:08:d2:29:17:f1:e4: 29:5c:2c:74:93:b7:e8:16:c5:1b:5c:d3:f3:29:cf:53:1d:2d: 7f:7b:c9:7c:39:87:26:05:eb:8e:01:ae:2d:b7:28:dd:ff:ea: ed:53:46:5a:63:ce:0c:f8:58:64:86:91:04:fc:2a:83:10:1b: f8:bf:46:7f:a6:29:0a:9f:12:85:99:d2:68:a8:17:d2:c8:8b: bc:89:b3:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQwel9TkSJeeWcJW11X8nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkY2Y3MmJiNmM4Njg3NTA4NjI4OWRkMjUxOGZiMDNmODgy MmVlOWQwHhcNMjUxMjE4MDcwMDU3WhcNMjUxMjE5MDcwMDU3WjAzMTEwLwYDVQQD EyhjYTI0MzJmMjA3NzE0NWFhYzNhZGRjNjJjMzIwY2ZjZTJkN2U3ODQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSic1GGV/Tqk+kZh4uVq/0hyy0jx 8zou8CJr2dDSBPRNSETiK1M44WsTJFi/SFBjxJJda4BhR0WHdgymV6+gZUWFltoU AHOKuR0O2S6gtIJDqymRRKzm3pyeUW1T2qxCs/eBU+emxAgxMIGNvUQ96Z62QTpN ZkxgAXEilj6Ayn21fACLEc0hAp/lM/Kd87Tv0j3HMXZaMkbxOCP+QYR2P+/X+3/W nFt549++LbSoyE3Rz70haUBGswI/1B1XwBqLbWuzec2QiKAA7+eb82U8X7voZZB/ zk2I1uO5uIgiJnJ6s35BrH7aHgbGpuU58s0uF3+2iotZi4vHZah4N05aIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMokMvIHcUWqw63cYsMgz84tfnhCMB8GA1UdIwQY MBaAFP3PcrtshodQhiid0lGPsD+IIu6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2M5eXUyeUdoMUNHS0ozU1VZLXdQNGdpN3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZThmMDYtMGFjMS00ZTFiLWIwN2Yt N2UwMzNiOWRlMjNlLzEvX2M5eXUyeUdoMUNHS0ozU1VZLXdQNGdpN3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81ZThmMDYtMGFjMS00ZTFiLWIwN2YtN2UwMzNiOWRlMjNl LzEvX2M5eXUyeUdoMUNHS0ozU1VZLXdQNGdpN3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUcS4FMqr iWcuWBTMADj6vY06YafAE6JlDNhJSz9HHGUIxtEA+RPC7yRjRJpb3IoUDUaGDuYY MwGP7esSHBveTqGqQBRLfnS5ezUJ80ZDd29BiaSCgfkJRjMJm7APaGqYyXtVNPKJ DPOEkXEFislldU/gLx9+SC4jV7+OCVp4bDGCQPL0wQ5aKmDUryk5Kvs3uOafBoxH /oagMFhWPJLhwvcewIb927b7cCOPKS8pCNIpF/HkKVwsdJO36BbFG1zT8ynPUx0t f3vJfDmHJgXrjgGuLbco3f/q7VNGWmPODPhYZIaRBPwqgxAb+L9Gf6YpCp8ShZnS aKgX0siLvImz4Q== -----END CERTIFICATE-----Generated at Thu Dec 18 09:25:18 2025 by rpki-client