This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft File: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft (raw, json) Hash identifier: HMCOv/0jXdHS0yiCZ8BehiqTjR6Xe4AC3HuBm0znkMQ= Subject key identifier: 2F:B5:32:CE:CD:D1:87:9F:B6:99:60:F6:35:BF:0F:DA:D0:B9:80:FD Authority key identifier: D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C Certificate issuer: /CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c Certificate serial: 019B44380AC90D6787504F100287AAA2BE3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft Manifest number: 1788 Signing time: Mon 22 Dec 2025 04:01:21 +0000 Manifest this update: Mon 22 Dec 2025 04:01:21 +0000 Manifest next update: Tue 23 Dec 2025 04:01:21 +0000 Files and hashes: 1: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl (hash: /a3FNVvg+0ykGEVqqvDuQsneKhP1x6xln2I3fretfXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:0a:c9:0d:67:87:50:4f:10:02:87:aa:a2:be:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c Validity Not Before: Dec 22 04:01:21 2025 GMT Not After : Dec 23 04:01:21 2025 GMT Subject: CN=2fb532cecdd1879fb69960f635bf0fdad0b980fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:01:75:d1:a6:6d:d4:41:75:6e:0e:63:40:c9: 39:95:c5:b6:cb:ed:da:fb:50:ab:86:29:11:6e:0f: ca:dc:7e:52:ba:68:e6:70:64:8c:d1:8c:2e:69:94: 71:f5:bb:65:4e:e8:2d:f5:d4:03:40:37:67:2f:07: 75:d4:c0:a8:f1:40:26:d3:61:c5:a8:75:fa:c6:ed: 9e:a8:4b:c9:cb:e3:36:24:42:b9:2f:c9:61:79:a7: b8:e3:d1:fd:e9:80:2b:a6:b1:df:02:35:a3:08:84: c7:f5:1a:18:d8:cf:5f:b7:18:80:fa:bd:73:ce:8b: 1a:ca:7f:3a:b5:6d:90:ef:66:67:c0:f2:c5:72:a6: 09:c7:ba:c2:f8:12:63:e3:de:1c:6b:8d:5d:28:77: e2:3f:4a:5b:f8:08:88:fa:b5:e2:30:fb:ee:cf:2c: 60:e1:fa:7f:c1:3a:f0:35:7b:4b:42:0f:41:79:05: c7:4a:b0:87:16:85:be:ca:9d:6f:5b:36:5b:60:a8: 33:2e:95:7e:73:3d:16:e8:fc:e6:75:bb:ab:07:8a: e2:82:76:1c:25:c4:0b:c9:18:32:59:1c:13:b6:8f: a2:14:63:ec:16:fa:be:ef:29:c3:7c:4d:66:04:ee: 72:1b:b4:e5:f3:bd:79:33:ff:9f:19:e1:8c:e9:73: 13:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B5:32:CE:CD:D1:87:9F:B6:99:60:F6:35:BF:0F:DA:D0:B9:80:FD X509v3 Authority Key Identifier: keyid:D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:2b:04:1c:7a:c9:47:3e:c9:6f:1c:5e:27:19:6e:56:cb:75: 2c:7a:2a:29:21:e5:62:0d:6c:84:03:90:c5:48:ef:aa:31:e7: 14:a9:96:36:e2:23:69:08:50:18:ca:08:e7:23:22:23:1f:14: 0d:a3:dd:f4:b3:92:3b:bf:bf:7b:53:98:a7:41:6a:76:ec:36: 7b:2e:11:c7:60:8f:4d:41:df:b0:dc:00:20:65:07:02:3a:51: bc:d4:71:db:8f:10:3e:ff:b0:50:f6:be:d2:1d:8a:ee:b9:e0: 83:cc:56:53:6f:6f:0e:ad:6d:7b:0c:3a:67:46:41:c3:40:36: 90:47:e4:90:75:36:dc:15:7b:6f:8d:8e:ea:66:09:e9:a4:b5: a8:b9:1a:58:cc:d5:f7:ce:a3:8e:86:7c:8b:5d:cf:56:f0:1d: 47:e6:ce:ec:57:95:52:8f:a1:ab:f4:32:6b:22:89:89:55:c6: 94:d7:f5:7b:6f:9f:01:c8:ab:8e:8f:24:48:7d:54:8a:15:fd: 12:b0:d8:56:cf:0c:4e:6c:2a:e8:c9:00:dd:f5:e2:54:a2:5f: a0:92:c0:7b:cd:fb:92:3f:9a:b0:ab:8d:28:17:1a:40:7c:d2: 26:a6:ce:f5:99:60:80:8c:0d:e5:22:be:4f:0e:59:62:01:ea: b1:ea:b0:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOArJDWeHUE8QAoeqor48MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMmY0MTU5MTIwYWE1MWJiMWNkZjExNmQwNmE0ZmMwMjky ZmY5NmMwHhcNMjUxMjIyMDQwMTIxWhcNMjUxMjIzMDQwMTIxWjAzMTEwLwYDVQQD EygyZmI1MzJjZWNkZDE4NzlmYjY5OTYwZjYzNWJmMGZkYWQwYjk4MGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwF10aZt1EF1bg5jQMk5lcW2y+3a +1CrhikRbg/K3H5SumjmcGSM0YwuaZRx9btlTugt9dQDQDdnLwd11MCo8UAm02HF qHX6xu2eqEvJy+M2JEK5L8lheae449H96YArprHfAjWjCITH9RoY2M9ftxiA+r1z zosayn86tW2Q72ZnwPLFcqYJx7rC+BJj494ca41dKHfiP0pb+AiI+rXiMPvuzyxg 4fp/wTrwNXtLQg9BeQXHSrCHFoW+yp1vWzZbYKgzLpV+cz0W6PzmdburB4rignYc JcQLyRgyWRwTto+iFGPsFvq+7ynDfE1mBO5yG7Tl8715M/+fGeGM6XMTTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+1Ms7N0Yeftplg9jW/D9rQuYD9MB8GA1UdIwQY MBaAFNEvQVkSCqUbsc3xFtBqT8ApL/lsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFM5QldSSUtwUnV4emZFVzBHcFB3Q2t2LVd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ODk2N2EtZDM5Ni00OTIxLWEwOWYt ZmM0YTZhYjc4OGFkLzEvMFM5QldSSUtwUnV4emZFVzBHcFB3Q2t2LVd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85ODk2N2EtZDM5Ni00OTIxLWEwOWYtZmM0YTZhYjc4OGFk LzEvMFM5QldSSUtwUnV4emZFVzBHcFB3Q2t2LVd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCsEHHrJ Rz7JbxxeJxluVst1LHoqKSHlYg1shAOQxUjvqjHnFKmWNuIjaQhQGMoI5yMiIx8U DaPd9LOSO7+/e1OYp0Fqduw2ey4Rx2CPTUHfsNwAIGUHAjpRvNRx248QPv+wUPa+ 0h2K7rngg8xWU29vDq1teww6Z0ZBw0A2kEfkkHU23BV7b42O6mYJ6aS1qLkaWMzV 986jjoZ8i13PVvAdR+bO7FeVUo+hq/QyayKJiVXGlNf1e2+fAcirjo8kSH1UihX9 ErDYVs8MTmwq6MkA3fXiVKJfoJLAe837kj+asKuNKBcaQHzSJqbO9ZlggIwN5SK+ Tw5ZYgHqseqwew== -----END CERTIFICATE-----Generated at Mon Dec 22 05:32:05 2025 by rpki-client