This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft File: 9bJzfl2X4RCOsEmQTemxbzauseA.mft (raw, json) Hash identifier: DHFaf9omHLf653ygNVMmMPooXBP+RHqcd7JbAO0e7Vc= Subject key identifier: F3:89:B9:07:CD:82:7A:4D:EF:65:54:22:A7:C1:2C:6F:8E:20:E6:C7 Authority key identifier: F5:B2:73:7E:5D:97:E1:10:8E:B0:49:90:4D:E9:B1:6F:36:AE:B1:E0 Certificate issuer: /CN=f5b2737e5d97e1108eb049904de9b16f36aeb1e0 Certificate serial: 019B066D14FF59AE51E186F172CD6697BCD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft Manifest number: 176A Signing time: Wed 10 Dec 2025 04:02:50 +0000 Manifest this update: Wed 10 Dec 2025 04:02:50 +0000 Manifest next update: Thu 11 Dec 2025 04:02:50 +0000 Files and hashes: 1: 9bJzfl2X4RCOsEmQTemxbzauseA.crl (hash: xTKZZATxE4YlEBYlaTmGcxHkHgXEoK3kjzLcWaJEFV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:6d:14:ff:59:ae:51:e1:86:f1:72:cd:66:97:bc:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5b2737e5d97e1108eb049904de9b16f36aeb1e0 Validity Not Before: Dec 10 04:02:50 2025 GMT Not After : Dec 11 04:02:50 2025 GMT Subject: CN=f389b907cd827a4def655422a7c12c6f8e20e6c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:96:0d:70:59:ab:b8:ad:3b:20:0f:be:11:85: 5c:10:23:64:b7:68:f4:d1:ce:65:80:d4:61:de:95: 6c:19:68:83:42:97:51:9d:9b:5f:87:cb:65:81:b1: ef:94:72:01:8b:85:32:d0:f1:db:36:32:1b:59:18: 61:8f:69:d8:20:46:00:c3:5b:98:17:42:e6:d7:61: 49:35:2e:ab:c6:a3:9c:7d:42:8e:db:fd:92:d5:ec: c4:a7:55:b2:39:c8:f3:19:6b:d3:35:d4:88:d3:4f: f6:fa:ae:3a:53:54:88:5a:7c:91:06:8b:9d:97:7d: fb:dc:eb:d8:46:32:3e:45:46:68:8e:47:63:87:ff: 99:a0:f6:4a:bd:25:3f:0c:32:8a:35:ac:f1:72:e2: 8a:28:de:83:69:b2:72:6f:d8:1b:52:78:c1:c7:ea: e7:c4:53:05:78:e1:92:33:bc:c5:4b:77:3f:58:e0: 23:8d:1c:a8:67:0e:64:9e:8d:9a:fc:c1:84:03:e1: 8f:53:36:99:e6:e5:64:4c:94:f5:34:e8:e6:cd:a6: de:7c:68:d3:d5:95:b1:9b:4c:ce:6f:19:75:7a:b3: 3c:84:f1:24:b7:06:4b:60:35:03:c2:82:66:0c:0c: 7d:e1:23:f6:ee:78:3f:e8:75:6a:cd:f4:80:75:07: cf:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:89:B9:07:CD:82:7A:4D:EF:65:54:22:A7:C1:2C:6F:8E:20:E6:C7 X509v3 Authority Key Identifier: keyid:F5:B2:73:7E:5D:97:E1:10:8E:B0:49:90:4D:E9:B1:6F:36:AE:B1:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bJzfl2X4RCOsEmQTemxbzauseA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/74fbee-6ee0-4f5a-95ce-ed2dfda7df6a/1/9bJzfl2X4RCOsEmQTemxbzauseA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:98:52:f9:ec:75:14:b9:3b:29:05:3a:e4:d7:14:51:a4:d1: 7a:1b:cb:d2:10:77:84:16:8f:21:b4:50:f3:0a:82:0c:1a:5d: b8:c1:a3:b4:b4:39:b1:d9:9a:57:b4:fe:f8:f1:25:b3:40:26: c3:97:81:10:15:e1:4b:65:c7:8a:9e:11:46:fc:da:bc:0e:4d: 5c:fc:13:5a:fd:11:ff:10:6e:a4:8d:7c:c5:f6:0c:9e:7b:50: 96:28:e9:7e:d0:c1:20:31:5c:41:ea:b6:eb:18:61:e6:a1:66: a7:01:71:e5:8a:b7:ca:69:d5:b3:77:90:e2:18:99:6d:ee:da: 62:ce:4f:22:2f:e4:4f:7b:10:15:b4:6e:05:38:87:94:fe:e7: 95:bd:37:b6:60:6c:bb:52:08:df:b8:1b:73:46:de:9e:34:29: a1:52:cf:ed:fb:ca:15:18:29:40:d0:49:7f:eb:f1:ff:eb:ff: 17:9e:21:11:19:30:b0:a2:ce:fb:7f:99:ea:2c:2a:68:d4:a7: ce:63:08:7e:98:ae:61:34:65:74:e8:1c:31:91:ab:1a:9d:5f: 54:14:ea:78:b5:34:a6:1e:7a:d3:b1:26:8e:8c:92:fd:c2:c6: de:eb:41:e8:a4:1e:dc:be:33:75:f2:49:14:b9:72:a6:c1:ad: b9:c9:b8:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGbRT/Wa5R4Ybxcs1ml7zVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1YjI3MzdlNWQ5N2UxMTA4ZWIwNDk5MDRkZTliMTZmMzZh ZWIxZTAwHhcNMjUxMjEwMDQwMjUwWhcNMjUxMjExMDQwMjUwWjAzMTEwLwYDVQQD EyhmMzg5YjkwN2NkODI3YTRkZWY2NTU0MjJhN2MxMmM2ZjhlMjBlNmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5YNcFmruK07IA++EYVcECNkt2j0 0c5lgNRh3pVsGWiDQpdRnZtfh8tlgbHvlHIBi4Uy0PHbNjIbWRhhj2nYIEYAw1uY F0Lm12FJNS6rxqOcfUKO2/2S1ezEp1WyOcjzGWvTNdSI00/2+q46U1SIWnyRBoud l3373OvYRjI+RUZojkdjh/+ZoPZKvSU/DDKKNazxcuKKKN6DabJyb9gbUnjBx+rn xFMFeOGSM7zFS3c/WOAjjRyoZw5kno2a/MGEA+GPUzaZ5uVkTJT1NOjmzabefGjT 1ZWxm0zObxl1erM8hPEktwZLYDUDwoJmDAx94SP27ng/6HVqzfSAdQfPuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPOJuQfNgnpN72VUIqfBLG+OIObHMB8GA1UdIwQY MBaAFPWyc35dl+EQjrBJkE3psW82rrHgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWJKemZsMlg0UkNPc0VtUVRlbXhiemF1c2VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC83NGZiZWUtNmVlMC00ZjVhLTk1Y2Ut ZWQyZGZkYTdkZjZhLzEvOWJKemZsMlg0UkNPc0VtUVRlbXhiemF1c2VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC83NGZiZWUtNmVlMC00ZjVhLTk1Y2UtZWQyZGZkYTdkZjZh LzEvOWJKemZsMlg0UkNPc0VtUVRlbXhiemF1c2VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzJhS+ex1 FLk7KQU65NcUUaTRehvL0hB3hBaPIbRQ8wqCDBpduMGjtLQ5sdmaV7T++PEls0Am w5eBEBXhS2XHip4RRvzavA5NXPwTWv0R/xBupI18xfYMnntQlijpftDBIDFcQeq2 6xhh5qFmpwFx5Yq3ymnVs3eQ4hiZbe7aYs5PIi/kT3sQFbRuBTiHlP7nlb03tmBs u1II37gbc0benjQpoVLP7fvKFRgpQNBJf+vx/+v/F54hERkwsKLO+3+Z6iwqaNSn zmMIfpiuYTRldOgcMZGrGp1fVBTqeLU0ph5607EmjoyS/cLG3utB6KQe3L4zdfJJ FLlypsGtucm4ZQ== -----END CERTIFICATE-----Generated at Wed Dec 10 06:12:18 2025 by rpki-client