This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft File: rrc9JyyxdKRjjbIVZ44-57kin_o.mft (raw, json) Hash identifier: K8mKTVpjJvA+jx86ydYtCSfGp5uL7C16hFll/VECST8= Subject key identifier: B4:74:BF:90:B3:64:0B:42:51:1B:9A:BF:48:7C:62:EE:88:65:B5:F3 Authority key identifier: AE:B7:3D:27:2C:B1:74:A4:63:8D:B2:15:67:8E:3E:E7:B9:22:9F:FA Certificate issuer: /CN=aeb73d272cb174a4638db215678e3ee7b9229ffa Certificate serial: 019B42B6EDF3E76AFF76910B516429312564 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 21:00:43 +0000 Manifest this update: Sun 21 Dec 2025 21:00:43 +0000 Manifest next update: Mon 22 Dec 2025 21:00:43 +0000 Files and hashes: 1: rrc9JyyxdKRjjbIVZ44-57kin_o.crl (hash: k+hRURrIliPduU52Ww+6tzxoA1foh+oOsfYT6APNj30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b6:ed:f3:e7:6a:ff:76:91:0b:51:64:29:31:25:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb73d272cb174a4638db215678e3ee7b9229ffa Validity Not Before: Dec 21 21:00:43 2025 GMT Not After : Dec 22 21:00:43 2025 GMT Subject: CN=b474bf90b3640b42511b9abf487c62ee8865b5f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d2:85:77:86:a6:7c:03:22:f0:a5:35:39:bf: dc:fc:8b:a3:b1:bf:14:ce:83:c6:bb:c4:e8:47:8d: 38:d1:04:f4:99:82:4e:16:60:5f:56:01:55:87:50: 81:4e:0b:f7:ad:f8:2a:ac:3f:21:8e:0c:8d:cf:16: bf:71:70:1d:d9:7f:f9:17:b1:3b:34:d3:15:45:18: 53:6c:1b:71:8a:b8:96:91:dd:b7:41:91:95:e4:57: 25:78:c1:72:3d:50:77:eb:66:6e:36:cb:c2:36:3d: 84:b7:a9:cd:f0:f5:51:55:4c:69:80:53:53:a2:34: ad:ff:8f:1b:b6:5e:2b:5d:9e:0b:ba:e8:de:45:3b: 6b:ad:a2:64:94:47:2e:7c:2c:e0:5d:5f:54:7a:dd: 14:6e:99:46:fd:36:10:da:2a:7a:dc:13:33:69:cf: ee:ef:6b:23:90:e8:cb:ea:32:f5:8d:67:b2:10:33: ae:0a:58:0b:d6:0c:d1:eb:0f:3f:8b:50:f0:26:5a: 44:4d:e0:38:cf:fd:29:b5:ec:ee:ba:c1:f7:ea:30: cc:0e:e3:9d:ca:ab:5d:8f:72:8b:34:e2:39:ea:3d: e7:95:46:f9:0e:aa:26:76:88:5e:e0:d0:fe:3a:b5: 90:e8:15:13:f3:bd:b2:91:b2:fd:3d:82:dd:d4:47: 8b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:74:BF:90:B3:64:0B:42:51:1B:9A:BF:48:7C:62:EE:88:65:B5:F3 X509v3 Authority Key Identifier: keyid:AE:B7:3D:27:2C:B1:74:A4:63:8D:B2:15:67:8E:3E:E7:B9:22:9F:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:9b:fe:cd:81:e3:27:98:b6:94:ab:79:a7:97:e4:2f:5f:77: eb:44:b1:4d:39:e7:ca:18:e2:c8:07:7b:7e:2d:d5:26:f3:12: f7:e9:ba:77:d8:00:46:93:b5:0c:96:f5:12:ae:76:ba:b4:30: fb:66:4f:46:73:27:93:ea:dd:55:e9:53:a4:bd:fe:bd:09:cd: 48:c2:a9:ad:f3:91:f1:f2:19:13:f0:44:75:b1:99:8d:5d:75: a5:52:d0:06:69:dc:05:8e:5c:94:51:05:2b:9a:19:21:34:b2: 33:1f:c6:c9:51:8b:77:ff:e8:e6:77:25:14:f4:40:19:25:18: 4c:8c:c9:c4:99:15:c7:1d:44:a7:54:3b:5b:eb:84:a7:db:98: 4c:22:b9:7e:02:9f:ef:c1:e1:90:ca:71:f9:62:fa:75:e6:1d: 4f:3b:e8:d7:cf:f1:b7:43:62:d3:c7:d3:46:70:a6:f2:50:a7: 0a:ba:9c:60:de:c5:4a:10:cb:6f:eb:1b:43:87:75:34:3d:5d: eb:a9:31:45:32:e6:19:58:54:53:c3:4d:58:04:5a:48:18:e6: 52:da:25:da:4a:ba:6d:59:4a:36:51:f4:b8:9f:b0:5e:2c:b2: 30:73:21:fb:3e:bc:72:13:3c:ab:9d:01:c8:89:45:2f:41:98: 75:43:e1:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtu3z52r/dpELUWQpMSVkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYjczZDI3MmNiMTc0YTQ2MzhkYjIxNTY3OGUzZWU3Yjky MjlmZmEwHhcNMjUxMjIxMjEwMDQzWhcNMjUxMjIyMjEwMDQzWjAzMTEwLwYDVQQD EyhiNDc0YmY5MGIzNjQwYjQyNTExYjlhYmY0ODdjNjJlZTg4NjViNWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdKFd4amfAMi8KU1Ob/c/Iujsb8U zoPGu8ToR4040QT0mYJOFmBfVgFVh1CBTgv3rfgqrD8hjgyNzxa/cXAd2X/5F7E7 NNMVRRhTbBtxiriWkd23QZGV5FcleMFyPVB362ZuNsvCNj2Et6nN8PVRVUxpgFNT ojSt/48btl4rXZ4LuujeRTtrraJklEcufCzgXV9Uet0UbplG/TYQ2ip63BMzac/u 72sjkOjL6jL1jWeyEDOuClgL1gzR6w8/i1DwJlpETeA4z/0ptezuusH36jDMDuOd yqtdj3KLNOI56j3nlUb5Dqomdohe4ND+OrWQ6BUT872ykbL9PYLd1EeLZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLR0v5CzZAtCURuav0h8Yu6IZbXzMB8GA1UdIwQY MBaAFK63PScssXSkY42yFWeOPue5Ip/6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJjOUp5eXhkS1JqamJJVlo0NC01N2tpbl9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yOTQ2MTMtOTAxOS00N2Q0LWIwNjUt NWMxYWMyYWYzNjcyLzEvcnJjOUp5eXhkS1JqamJJVlo0NC01N2tpbl9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8yOTQ2MTMtOTAxOS00N2Q0LWIwNjUtNWMxYWMyYWYzNjcy LzEvcnJjOUp5eXhkS1JqamJJVlo0NC01N2tpbl9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZv+zYHj J5i2lKt5p5fkL19360SxTTnnyhjiyAd7fi3VJvMS9+m6d9gARpO1DJb1Eq52urQw +2ZPRnMnk+rdVelTpL3+vQnNSMKprfOR8fIZE/BEdbGZjV11pVLQBmncBY5clFEF K5oZITSyMx/GyVGLd//o5nclFPRAGSUYTIzJxJkVxx1Ep1Q7W+uEp9uYTCK5fgKf 78HhkMpx+WL6deYdTzvo18/xt0Ni08fTRnCm8lCnCrqcYN7FShDLb+sbQ4d1ND1d 66kxRTLmGVhUU8NNWARaSBjmUtol2kq6bVlKNlH0uJ+wXiyyMHMh+z68chM8q50B yIlFL0GYdUPheQ== -----END CERTIFICATE-----Generated at Mon Dec 22 04:00:47 2025 by rpki-client