This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft File: 9WPabrO3oH_cRSWIMASXDWQLA2s.mft (raw, json) Hash identifier: cUNvp0wrAuuwHyRhLfa6+Lnm80he3/5G5A+A4NRHDbE= Subject key identifier: 10:E9:1C:50:E6:95:B6:B1:39:B8:BC:B5:F0:C9:70:D0:60:54:8D:D3 Authority key identifier: F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B Certificate issuer: /CN=f563da6eb3b7a07fdc4525883004970d640b036b Certificate serial: 019B0BC8F2CE9D6F768F4BC0F0B0EB8CF0AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft Manifest number: 1777 Signing time: Thu 11 Dec 2025 05:01:17 +0000 Manifest this update: Thu 11 Dec 2025 05:01:17 +0000 Manifest next update: Fri 12 Dec 2025 05:01:17 +0000 Files and hashes: 1: 9WPabrO3oH_cRSWIMASXDWQLA2s.crl (hash: XFPByyc8g4Ntcc51Qu2jiSNdk7LJrhtNN8SHX5S0Rxs=) 2: h04E6GUTfk7g-nszYeXV5v59Z7g.roa (hash: D0nODnBLfeAlBTbUkjxGcmmT4S/QYeiGnt9Aow5Sjx0=) 3: xJetAjXRbPTX957PRc-ZRikOCag.roa (hash: zIdEISxA+75bDRZATAE0MJ7G/Gr2I74NP3sEuTFZFW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0b:c8:f2:ce:9d:6f:76:8f:4b:c0:f0:b0:eb:8c:f0:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f563da6eb3b7a07fdc4525883004970d640b036b Validity Not Before: Dec 11 05:01:17 2025 GMT Not After : Dec 12 05:01:17 2025 GMT Subject: CN=10e91c50e695b6b139b8bcb5f0c970d060548dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:12:90:56:53:df:06:73:cf:65:41:12:dc:a3: 10:5a:d9:57:ea:49:f6:d9:09:6f:f5:50:c3:21:0b: 38:b0:51:cc:0f:cc:8b:03:da:a0:a1:cb:3d:58:dd: 00:f4:c1:9b:b7:cb:b3:f7:28:eb:6d:69:96:91:43: 80:f3:d1:49:6f:db:63:70:e8:56:b9:f9:f1:1d:a3: fa:8d:ea:8d:ac:b1:5f:96:8d:23:7a:ad:53:c5:6c: 7f:d7:fe:7c:04:cf:a6:12:8b:e5:d9:f6:88:20:72: 78:a5:f5:a3:26:d3:2a:2e:a9:a8:29:1f:c9:a2:2e: 77:47:ac:04:f7:fd:cc:e6:fd:2d:6e:3b:a9:2e:91: ae:b8:1b:b8:c1:47:e7:2b:c0:70:8a:17:b2:54:bb: 58:28:56:6c:d9:8e:12:fc:41:21:ad:ad:51:8e:82: 3c:51:cc:96:c0:6f:dc:2f:8b:b0:2d:ca:16:bf:1d: 74:8e:6b:48:ac:36:50:6e:f9:59:dd:75:66:fb:db: a0:77:b4:67:16:e5:43:e4:7c:ce:53:91:f2:34:e4: c6:07:3d:bf:e4:cb:b5:76:b6:ac:a4:66:6c:2b:ee: c2:ee:74:ab:6d:da:54:30:13:21:45:e6:b7:cb:29: c3:18:82:2c:8f:da:86:0d:60:ce:8b:a2:d7:46:6e: 41:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E9:1C:50:E6:95:B6:B1:39:B8:BC:B5:F0:C9:70:D0:60:54:8D:D3 X509v3 Authority Key Identifier: keyid:F5:63:DA:6E:B3:B7:A0:7F:DC:45:25:88:30:04:97:0D:64:0B:03:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WPabrO3oH_cRSWIMASXDWQLA2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/63564f-aca1-463d-be1e-e5520aa7ba37/1/9WPabrO3oH_cRSWIMASXDWQLA2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d5:6b:16:9d:de:88:f7:1f:b3:5f:52:b9:29:57:e0:86:23: 57:2f:eb:b3:e5:c6:8d:2e:fb:da:e3:64:23:3b:e5:9c:f1:72: 0f:02:d0:12:cf:98:ba:0b:e6:66:64:5d:14:06:ed:7b:c0:1e: 74:12:47:ce:c7:a1:10:8a:cc:b9:95:2a:9d:c3:6c:41:e5:9e: 56:a3:91:34:5c:b3:57:18:c4:f9:fa:cf:f2:61:30:a8:d9:6e: 1b:e1:a7:82:99:35:7c:0d:1d:04:84:88:43:4e:e4:4a:6a:d7: 62:48:ba:8c:6f:05:ec:19:5f:9c:76:d5:84:74:33:2a:3a:0f: 15:70:58:83:ea:45:e2:05:21:e2:30:85:db:4b:a6:45:d9:e3: 29:5f:ef:06:90:e0:bc:d7:e6:1e:26:76:e4:35:26:9f:26:c9: b6:80:77:d7:e0:d9:e0:5d:63:7b:f1:23:52:18:05:a4:0a:1a: ff:20:cb:88:3e:f7:73:bc:7d:7c:2a:bf:7d:45:7c:c8:5f:50: 43:02:8f:ef:ee:a0:4f:3a:19:d8:49:06:bf:cc:a6:d4:4a:56: 59:d0:a2:c0:a9:c4:0c:62:76:b3:ee:0b:9a:64:4b:53:fc:24: 12:f3:38:72:2b:53:ff:ce:7d:4a:51:8f:22:21:49:87:a5:84: f9:9b:a1:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsLyPLOnW92j0vA8LDrjPCrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NjNkYTZlYjNiN2EwN2ZkYzQ1MjU4ODMwMDQ5NzBkNjQw YjAzNmIwHhcNMjUxMjExMDUwMTE3WhcNMjUxMjEyMDUwMTE3WjAzMTEwLwYDVQQD EygxMGU5MWM1MGU2OTViNmIxMzliOGJjYjVmMGM5NzBkMDYwNTQ4ZGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRKQVlPfBnPPZUES3KMQWtlX6kn2 2Qlv9VDDIQs4sFHMD8yLA9qgocs9WN0A9MGbt8uz9yjrbWmWkUOA89FJb9tjcOhW ufnxHaP6jeqNrLFflo0jeq1TxWx/1/58BM+mEovl2faIIHJ4pfWjJtMqLqmoKR/J oi53R6wE9/3M5v0tbjupLpGuuBu4wUfnK8BwiheyVLtYKFZs2Y4S/EEhra1RjoI8 UcyWwG/cL4uwLcoWvx10jmtIrDZQbvlZ3XVm+9ugd7RnFuVD5HzOU5HyNOTGBz2/ 5Mu1draspGZsK+7C7nSrbdpUMBMhRea3yynDGIIsj9qGDWDOi6LXRm5BhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDpHFDmlbaxObi8tfDJcNBgVI3TMB8GA1UdIwQY MBaAFPVj2m6zt6B/3EUliDAElw1kCwNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVdQYWJyTzNvSF9jUlNXSU1BU1hEV1FMQTJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy82MzU2NGYtYWNhMS00NjNkLWJlMWUt ZTU1MjBhYTdiYTM3LzEvOVdQYWJyTzNvSF9jUlNXSU1BU1hEV1FMQTJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy82MzU2NGYtYWNhMS00NjNkLWJlMWUtZTU1MjBhYTdiYTM3 LzEvOVdQYWJyTzNvSF9jUlNXSU1BU1hEV1FMQTJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNVrFp3e iPcfs19SuSlX4IYjVy/rs+XGjS772uNkIzvlnPFyDwLQEs+YugvmZmRdFAbte8Ae dBJHzsehEIrMuZUqncNsQeWeVqORNFyzVxjE+frP8mEwqNluG+Gngpk1fA0dBISI Q07kSmrXYki6jG8F7BlfnHbVhHQzKjoPFXBYg+pF4gUh4jCF20umRdnjKV/vBpDg vNfmHiZ25DUmnybJtoB31+DZ4F1je/EjUhgFpAoa/yDLiD73c7x9fCq/fUV8yF9Q QwKP7+6gTzoZ2EkGv8ym1EpWWdCiwKnEDGJ2s+4LmmRLU/wkEvM4citT/859SlGP IiFJh6WE+ZuhQw== -----END CERTIFICATE-----Generated at Thu Dec 11 12:13:41 2025 by rpki-client