This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft File: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft (raw, json) Hash identifier: cVhg31dS79mMcoHKxIuil7x1fjpmPFM5Lw2W00lYWbU= Subject key identifier: 94:A7:90:CB:89:2E:39:EB:C5:41:D9:12:89:83:EE:0F:A8:B3:1D:7F Authority key identifier: F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC Certificate issuer: /CN=f643f0352adfc98ac8801b94e5a007e7070b07ac Certificate serial: 019B334416992CB5C3DC4F1B585055563EE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft Manifest number: 0E63 Signing time: Thu 18 Dec 2025 21:00:58 +0000 Manifest this update: Thu 18 Dec 2025 21:00:58 +0000 Manifest next update: Fri 19 Dec 2025 21:00:58 +0000 Files and hashes: 1: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl (hash: LCvh2JlRnxxsPPjJb739JIJtK8mY741DPPaF/Iq1Gwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:16:99:2c:b5:c3:dc:4f:1b:58:50:55:56:3e:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f643f0352adfc98ac8801b94e5a007e7070b07ac Validity Not Before: Dec 18 21:00:58 2025 GMT Not After : Dec 19 21:00:58 2025 GMT Subject: CN=94a790cb892e39ebc541d9128983ee0fa8b31d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:d8:51:62:38:55:24:18:33:87:7c:fe:c3:f1: f5:ce:ef:5b:56:53:85:e1:a2:30:51:d4:68:fd:b4: e1:70:11:09:1c:29:d2:ad:72:f5:58:33:24:de:dd: 7c:26:3a:91:18:4c:c8:be:86:6d:36:be:60:03:8f: c6:73:8d:67:e8:5e:2f:f6:31:28:75:0d:9a:66:4e: b8:e6:d8:e6:39:4a:3a:ea:ca:1b:23:cb:fd:74:50: b5:d8:d2:ef:f6:88:89:c5:08:a2:88:9a:d8:dc:0c: 52:80:73:69:93:4f:3e:5f:ea:cc:39:ad:84:33:97: f3:47:07:e7:cc:d3:d1:df:59:a0:46:1a:69:4b:be: b4:91:63:b8:e4:79:09:e6:e6:b2:0f:56:0f:04:b8: cf:37:03:af:fa:cd:7e:ac:fb:5d:f3:1f:ff:72:f9: d1:13:23:11:7f:17:0c:5b:e3:a3:de:1b:73:c1:78: 59:8e:ec:d9:00:8b:e9:a4:3b:e2:ee:05:03:7e:d9: 26:b5:1c:af:e0:e5:92:28:3c:ea:1a:19:59:fe:18: 8c:8f:cc:28:64:0e:b1:7f:7e:79:c0:c1:e9:0d:7f: a1:a7:08:aa:24:03:e3:47:82:3a:71:04:c3:30:a3: dc:71:0e:b4:60:49:5e:ef:42:cd:91:2f:ba:b2:c5: 2b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A7:90:CB:89:2E:39:EB:C5:41:D9:12:89:83:EE:0F:A8:B3:1D:7F X509v3 Authority Key Identifier: keyid:F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:e0:d7:dc:5c:95:73:55:87:46:e7:32:bd:b0:62:a6:4a:74: e3:a0:29:54:78:69:0d:57:2e:39:e9:c5:b0:16:7e:75:13:ec: 28:62:94:de:f6:8f:16:76:dd:a4:69:3c:34:eb:10:11:3e:08: 2b:92:99:ab:20:7d:88:13:14:41:f8:3f:3c:d4:1a:9c:3f:b5: d7:d2:c8:c7:b1:a2:08:4b:63:eb:af:69:6a:ce:77:26:9a:15: 44:0d:35:c3:f6:31:56:df:1c:3d:d2:2a:a7:64:d8:e5:d6:8b: 6e:e9:25:af:e7:11:91:bf:69:61:e7:45:a7:8c:bd:40:27:7e: 4c:95:a8:dd:61:4d:41:09:9f:ec:4f:0a:c0:7e:22:48:d9:ea: 34:67:70:13:3f:73:78:cd:07:f2:24:c3:72:6a:03:1f:fc:c8: 42:01:9b:37:ab:e5:bf:9a:64:eb:91:c7:60:bf:ce:a8:3d:56: e9:1a:fd:ab:d6:ea:94:59:f8:a8:d3:8e:fa:da:c9:ed:dc:02: 8a:45:ce:08:10:71:bc:8d:40:46:45:6e:26:b2:48:28:2b:1e: 59:05:f8:ce:ed:e8:cf:23:fb:03:ec:e6:2a:9c:0c:4a:ac:05: 80:d3:8f:dc:64:0a:51:76:63:e5:cd:e3:ea:95:a6:c2:76:c4: 41:a0:66:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRBaZLLXD3E8bWFBVVj7oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NDNmMDM1MmFkZmM5OGFjODgwMWI5NGU1YTAwN2U3MDcw YjA3YWMwHhcNMjUxMjE4MjEwMDU4WhcNMjUxMjE5MjEwMDU4WjAzMTEwLwYDVQQD Eyg5NGE3OTBjYjg5MmUzOWViYzU0MWQ5MTI4OTgzZWUwZmE4YjMxZDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3thRYjhVJBgzh3z+w/H1zu9bVlOF 4aIwUdRo/bThcBEJHCnSrXL1WDMk3t18JjqRGEzIvoZtNr5gA4/Gc41n6F4v9jEo dQ2aZk645tjmOUo66sobI8v9dFC12NLv9oiJxQiiiJrY3AxSgHNpk08+X+rMOa2E M5fzRwfnzNPR31mgRhppS760kWO45HkJ5uayD1YPBLjPNwOv+s1+rPtd8x//cvnR EyMRfxcMW+Oj3htzwXhZjuzZAIvppDvi7gUDftkmtRyv4OWSKDzqGhlZ/hiMj8wo ZA6xf355wMHpDX+hpwiqJAPjR4I6cQTDMKPccQ60YEle70LNkS+6ssUrHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJSnkMuJLjnrxUHZEomD7g+osx1/MB8GA1UdIwQY MBaAFPZD8DUq38mKyIAblOWgB+cHCwesMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWtQd05TcmZ5WXJJZ0J1VTVhQUg1d2NMQjZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82YWM3N2EtNGE1Zi00ZDM5LThjZmEt MDA1ZmMwN2NlZGM4LzEvOWtQd05TcmZ5WXJJZ0J1VTVhQUg1d2NMQjZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi82YWM3N2EtNGE1Zi00ZDM5LThjZmEtMDA1ZmMwN2NlZGM4 LzEvOWtQd05TcmZ5WXJJZ0J1VTVhQUg1d2NMQjZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcuDX3FyV c1WHRucyvbBipkp046ApVHhpDVcuOenFsBZ+dRPsKGKU3vaPFnbdpGk8NOsQET4I K5KZqyB9iBMUQfg/PNQanD+119LIx7GiCEtj669pas53JpoVRA01w/YxVt8cPdIq p2TY5daLbuklr+cRkb9pYedFp4y9QCd+TJWo3WFNQQmf7E8KwH4iSNnqNGdwEz9z eM0H8iTDcmoDH/zIQgGbN6vlv5pk65HHYL/OqD1W6Rr9q9bqlFn4qNOO+trJ7dwC ikXOCBBxvI1ARkVuJrJIKCseWQX4zu3ozyP7A+zmKpwMSqwFgNOP3GQKUXZj5c3j 6pWmwnbEQaBmHg== -----END CERTIFICATE-----Generated at Thu Dec 18 23:35:55 2025 by rpki-client