This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft File: 9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft (raw, json) Hash identifier: oijPy5Cvxgqr26yUxjyymBrRjn0whqfyKdXVgFBp1BM= Subject key identifier: 9C:70:44:9E:C1:5B:CF:7D:42:C4:97:9C:80:66:BA:7F:CB:7F:09:45 Authority key identifier: F6:09:32:C7:B8:94:51:9D:34:62:47:30:2E:B3:65:F5:C4:09:B0:3C Certificate issuer: /CN=f60932c7b894519d346247302eb365f5c409b03c Certificate serial: 019B59ACC353FE50F7F9264AC76588BE4083 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gkyx7iUUZ00YkcwLrNl9cQJsDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft Manifest number: D3 Signing time: Fri 26 Dec 2025 08:00:52 +0000 Manifest this update: Fri 26 Dec 2025 08:00:52 +0000 Manifest next update: Sat 27 Dec 2025 08:00:52 +0000 Files and hashes: 1: 9gkyx7iUUZ00YkcwLrNl9cQJsDw.crl (hash: Q143/x1M4p18GZG7jqhJtDXkCzYrAF+cnq3i5Qxjlmg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft rsync://rpki.ripe.net/repository/DEFAULT/9gkyx7iUUZ00YkcwLrNl9cQJsDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 08:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:c3:53:fe:50:f7:f9:26:4a:c7:65:88:be:40:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60932c7b894519d346247302eb365f5c409b03c Validity Not Before: Dec 26 08:00:52 2025 GMT Not After : Dec 27 08:00:52 2025 GMT Subject: CN=9c70449ec15bcf7d42c4979c8066ba7fcb7f0945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8e:83:39:99:22:66:64:62:0f:ce:a1:28:4d: e4:67:a9:82:a1:ff:0c:84:fa:76:d1:29:d7:66:ad: 5a:0b:b8:78:0b:24:67:f4:cd:af:cb:8b:52:e9:46: 45:78:9d:a2:cc:b7:d3:48:53:b9:13:1e:7c:de:b7: 60:31:3f:1b:49:8d:a1:c9:8b:0c:ac:af:f2:a5:33: 62:2a:be:12:b8:72:a7:9c:c9:33:55:a8:f6:f2:67: a8:c1:19:c5:03:02:fe:44:eb:7c:f2:48:93:f4:a7: 28:05:dc:b8:a3:eb:5c:ec:c5:5f:2c:a8:5e:71:c0: c2:2f:8f:c2:1b:3e:52:41:64:95:e7:f8:ba:e7:33: 1d:d7:62:5f:2f:05:49:bb:03:e8:9e:69:36:03:d1: 24:8c:5e:29:b7:87:1e:e1:ce:e1:f5:49:09:68:cc: 19:1f:8f:6f:ce:6e:f5:14:c7:ee:3e:f3:3e:26:28: a1:bb:c8:18:d6:68:70:70:42:86:18:f9:03:5b:05: 8a:5e:86:f0:ab:c7:21:30:8c:cd:39:da:8d:c0:f0: c3:be:88:02:ae:b4:17:b7:9f:4e:56:96:28:74:50: c9:6d:85:67:cb:88:22:f8:0a:01:08:ac:ed:97:41: 77:d9:e8:34:50:a6:b6:17:f4:a5:bf:98:fe:83:15: 43:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:70:44:9E:C1:5B:CF:7D:42:C4:97:9C:80:66:BA:7F:CB:7F:09:45 X509v3 Authority Key Identifier: keyid:F6:09:32:C7:B8:94:51:9D:34:62:47:30:2E:B3:65:F5:C4:09:B0:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkyx7iUUZ00YkcwLrNl9cQJsDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:4d:e3:57:ff:7c:a1:f8:20:65:d6:fc:74:8c:ce:d0:ab:99: 54:12:2e:0f:ec:fb:25:8b:b2:9c:a8:3b:52:dc:e3:88:50:f6: a6:57:fa:61:fa:b7:d1:27:15:64:c5:3c:27:56:0d:f2:f7:ab: 29:ba:19:83:01:83:ef:9a:5a:e4:f1:db:fb:e6:b3:05:39:db: 0a:d1:b9:a4:e8:1c:cf:c6:26:be:98:c4:b8:7b:af:c4:61:6c: 10:ab:61:1b:b9:8d:20:36:03:34:83:59:21:0e:58:82:d6:db: f5:fc:1e:cb:0e:34:a0:ef:35:4b:c0:d1:35:8e:bb:9c:1b:0b: 9e:a8:86:eb:93:f4:bf:89:c9:a8:6a:f0:df:c9:33:d1:3d:ef: c1:f6:8d:77:63:00:0b:95:e0:20:7d:f9:cc:27:4c:23:4b:d0: 17:04:15:fa:51:23:f8:ff:6b:27:6b:b4:36:67:f3:6b:c4:24: 19:8a:ba:51:c1:6d:c9:f0:a0:ad:9d:17:10:3d:01:0e:99:e6: e9:33:43:98:96:c7:f7:4f:a0:71:3b:db:af:c7:d2:48:99:76: 77:8c:76:51:b2:98:e2:c1:98:cb:85:d7:80:3e:44:ed:88:d6: fd:53:a1:99:b8:cb:7b:5a:48:1c:1d:ee:07:1b:85:eb:f0:98: de:4d:45:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrMNT/lD3+SZKx2WIvkCDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MDkzMmM3Yjg5NDUxOWQzNDYyNDczMDJlYjM2NWY1YzQw OWIwM2MwHhcNMjUxMjI2MDgwMDUyWhcNMjUxMjI3MDgwMDUyWjAzMTEwLwYDVQQD Eyg5YzcwNDQ5ZWMxNWJjZjdkNDJjNDk3OWM4MDY2YmE3ZmNiN2YwOTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY6DOZkiZmRiD86hKE3kZ6mCof8M hPp20SnXZq1aC7h4CyRn9M2vy4tS6UZFeJ2izLfTSFO5Ex583rdgMT8bSY2hyYsM rK/ypTNiKr4SuHKnnMkzVaj28meowRnFAwL+ROt88kiT9KcoBdy4o+tc7MVfLKhe ccDCL4/CGz5SQWSV5/i65zMd12JfLwVJuwPonmk2A9EkjF4pt4ce4c7h9UkJaMwZ H49vzm71FMfuPvM+Jiihu8gY1mhwcEKGGPkDWwWKXobwq8chMIzNOdqNwPDDvogC rrQXt59OVpYodFDJbYVny4gi+AoBCKztl0F32eg0UKa2F/Slv5j+gxVDwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJxwRJ7BW899QsSXnIBmun/LfwlFMB8GA1UdIwQY MBaAFPYJMse4lFGdNGJHMC6zZfXECbA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWdreXg3aVVVWjAwWWtjd0xyTmw5Y1FKc0R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS81NzBjY2QtZDJhZC00Y2EzLWFmZWYt YmQ1N2UwZWIyOWYwLzEvOWdreXg3aVVVWjAwWWtjd0xyTmw5Y1FKc0R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS81NzBjY2QtZDJhZC00Y2EzLWFmZWYtYmQ1N2UwZWIyOWYw LzEvOWdreXg3aVVVWjAwWWtjd0xyTmw5Y1FKc0R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAE3jV/98 ofggZdb8dIzO0KuZVBIuD+z7JYuynKg7UtzjiFD2plf6Yfq30ScVZMU8J1YN8ver KboZgwGD75pa5PHb++azBTnbCtG5pOgcz8YmvpjEuHuvxGFsEKthG7mNIDYDNINZ IQ5Ygtbb9fweyw40oO81S8DRNY67nBsLnqiG65P0v4nJqGrw38kz0T3vwfaNd2MA C5XgIH35zCdMI0vQFwQV+lEj+P9rJ2u0Nmfza8QkGYq6UcFtyfCgrZ0XED0BDpnm 6TNDmJbH90+gcTvbr8fSSJl2d4x2UbKY4sGYy4XXgD5E7YjW/VOhmbjLe1pIHB3u BxuF6/CY3k1FNg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:23 2025 by rpki-client