This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft File: 97LAktArE86qejP_BXqECmjXFSE.mft (raw, json) Hash identifier: k9gBXFYGyuCUSiM9cMvBm9eYmHsGIgNATRkySyHBTzc= Subject key identifier: BD:6D:03:8B:A0:DE:75:E7:A9:42:08:0E:E6:E7:DF:64:7E:BE:BD:7E Authority key identifier: F7:B2:C0:92:D0:2B:13:CE:AA:7A:33:FF:05:7A:84:0A:68:D7:15:21 Certificate issuer: /CN=f7b2c092d02b13ceaa7a33ff057a840a68d71521 Certificate serial: 019B0E25F726CB883B96D0AD9E12F21D21D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft Manifest number: 1191 Signing time: Thu 11 Dec 2025 16:02:07 +0000 Manifest this update: Thu 11 Dec 2025 16:02:07 +0000 Manifest next update: Fri 12 Dec 2025 16:02:07 +0000 Files and hashes: 1: 97LAktArE86qejP_BXqECmjXFSE.crl (hash: rKz0B7lrh/EklCaCi/pzd2T9rO+11ttAe46n2n7oPnM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:f7:26:cb:88:3b:96:d0:ad:9e:12:f2:1d:21:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7b2c092d02b13ceaa7a33ff057a840a68d71521 Validity Not Before: Dec 11 16:02:07 2025 GMT Not After : Dec 12 16:02:07 2025 GMT Subject: CN=bd6d038ba0de75e7a942080ee6e7df647ebebd7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:89:96:49:0f:1f:e2:9f:4d:e9:3e:99:ca:4c: 94:4e:89:bc:f8:43:17:81:d0:d7:31:78:92:73:be: 16:3d:eb:38:65:3d:3d:33:45:21:11:f3:26:ef:d3: 44:0b:76:be:00:93:f8:68:09:8b:b7:55:60:d3:a8: cc:f1:d0:a5:0c:18:4a:b8:96:01:db:42:31:4b:45: 8e:74:b2:b1:d6:f8:6a:df:9b:b5:fb:59:12:ea:28: 62:d8:52:6b:9d:9d:3a:b6:72:52:a2:0e:d5:4d:09: b0:d1:4b:77:cd:23:05:44:fe:63:24:6d:da:ab:4d: 03:6c:6b:c9:94:0d:8a:38:32:b6:e7:a7:66:d8:f1: 46:15:5d:6c:0c:1c:eb:96:19:58:90:3f:e1:fc:29: ce:2f:c3:54:65:5d:3d:d3:e1:1c:b8:26:47:ce:16: 6c:df:25:c2:70:96:ef:24:84:86:4e:3f:8a:5d:d8: b1:1d:c7:a8:de:ac:ac:0e:93:1f:0f:2a:db:84:49: 09:f6:ff:64:44:2b:47:59:9b:82:7c:5a:1d:f2:f0: 06:72:ac:d3:33:4e:96:9b:17:7d:f0:1f:4c:51:89: b4:95:7c:62:f1:23:31:3d:2d:73:73:f5:ad:af:a0: 9a:35:81:79:0d:fc:3a:cb:e4:7b:da:a5:1b:b0:f1: 26:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6D:03:8B:A0:DE:75:E7:A9:42:08:0E:E6:E7:DF:64:7E:BE:BD:7E X509v3 Authority Key Identifier: keyid:F7:B2:C0:92:D0:2B:13:CE:AA:7A:33:FF:05:7A:84:0A:68:D7:15:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97LAktArE86qejP_BXqECmjXFSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cbb67f-bb73-4b6a-b1dd-3f0525719c94/1/97LAktArE86qejP_BXqECmjXFSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:1b:4e:72:b1:d3:89:05:fa:80:5e:76:51:11:f4:b0:95:58: 3e:65:09:f9:59:ad:89:9f:f7:57:92:ab:34:85:a8:e2:f8:82: 2b:76:d4:f4:20:42:70:9c:1e:c2:09:7d:fa:24:fc:e4:1d:07: b3:e6:ce:b9:67:2a:b0:8f:eb:fb:86:84:fb:b1:dc:eb:4c:99: 4e:b7:cd:d4:b7:3f:34:96:76:11:8f:d6:ef:8b:f9:c6:9a:57: a7:f8:1c:e6:0e:d2:88:06:ba:07:89:fd:d5:f8:bb:0e:8c:03: 72:df:c5:4d:b1:88:e5:07:44:12:62:50:4b:84:f3:78:7f:b2: 56:40:83:12:2c:32:a5:02:f7:3f:85:8d:c8:39:f0:30:43:59: af:c5:11:1d:02:27:4a:69:f4:41:36:37:12:00:22:a0:f7:70: 21:48:81:39:d2:f6:86:78:1b:70:4b:7a:54:2b:10:8e:40:e1: f9:28:92:51:81:f4:a7:58:e8:b6:18:03:22:57:4d:b6:ad:fa: 2f:b0:ec:e7:f7:5a:7c:7c:7a:92:ab:41:5f:6d:7f:08:aa:ca: ea:52:f6:07:a3:03:90:d6:dd:a0:96:15:32:aa:c7:6c:dd:2b: 84:93:e1:ad:dc:a6:7b:69:28:18:9b:44:8f:86:da:b8:12:a0: 41:e6:ac:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJfcmy4g7ltCtnhLyHSHYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YjJjMDkyZDAyYjEzY2VhYTdhMzNmZjA1N2E4NDBhNjhk NzE1MjEwHhcNMjUxMjExMTYwMjA3WhcNMjUxMjEyMTYwMjA3WjAzMTEwLwYDVQQD EyhiZDZkMDM4YmEwZGU3NWU3YTk0MjA4MGVlNmU3ZGY2NDdlYmViZDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoomWSQ8f4p9N6T6ZykyUTom8+EMX gdDXMXiSc74WPes4ZT09M0UhEfMm79NEC3a+AJP4aAmLt1Vg06jM8dClDBhKuJYB 20IxS0WOdLKx1vhq35u1+1kS6ihi2FJrnZ06tnJSog7VTQmw0Ut3zSMFRP5jJG3a q00DbGvJlA2KODK256dm2PFGFV1sDBzrlhlYkD/h/CnOL8NUZV090+EcuCZHzhZs 3yXCcJbvJISGTj+KXdixHceo3qysDpMfDyrbhEkJ9v9kRCtHWZuCfFod8vAGcqzT M06Wmxd98B9MUYm0lXxi8SMxPS1zc/Wtr6CaNYF5Dfw6y+R72qUbsPEm5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1tA4ug3nXnqUIIDubn32R+vr1+MB8GA1UdIwQY MBaAFPeywJLQKxPOqnoz/wV6hApo1xUhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTdMQWt0QXJFODZxZWpQX0JYcUVDbWpYRlNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9jYmI2N2YtYmI3My00YjZhLWIxZGQt M2YwNTI1NzE5Yzk0LzEvOTdMQWt0QXJFODZxZWpQX0JYcUVDbWpYRlNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9jYmI2N2YtYmI3My00YjZhLWIxZGQtM2YwNTI1NzE5Yzk0 LzEvOTdMQWt0QXJFODZxZWpQX0JYcUVDbWpYRlNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxtOcrHT iQX6gF52URH0sJVYPmUJ+VmtiZ/3V5KrNIWo4viCK3bU9CBCcJwewgl9+iT85B0H s+bOuWcqsI/r+4aE+7Hc60yZTrfN1Lc/NJZ2EY/W74v5xppXp/gc5g7SiAa6B4n9 1fi7DowDct/FTbGI5QdEEmJQS4TzeH+yVkCDEiwypQL3P4WNyDnwMENZr8URHQIn Smn0QTY3EgAioPdwIUiBOdL2hngbcEt6VCsQjkDh+SiSUYH0p1jothgDIldNtq36 L7Ds5/dafHx6kqtBX21/CKrK6lL2B6MDkNbdoJYVMqrHbN0rhJPhrdyme2koGJtE j4bauBKgQeasgA== -----END CERTIFICATE-----Generated at Fri Dec 12 01:18:00 2025 by rpki-client