This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft File: rrc9JyyxdKRjjbIVZ44-57kin_o.mft (raw, json) Hash identifier: TeBZCJp9k8C1/D2f1dsXgxoerRM2hyiIFGtY9OEx9Hg= Subject key identifier: 98:DC:12:3A:3D:0E:E6:6B:43:6A:13:0A:E8:37:03:B4:36:10:F6:80 Authority key identifier: AE:B7:3D:27:2C:B1:74:A4:63:8D:B2:15:67:8E:3E:E7:B9:22:9F:FA Certificate issuer: /CN=aeb73d272cb174a4638db215678e3ee7b9229ffa Certificate serial: 019B40C889F1DDDA923DA041F4236B771639 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 12:00:42 +0000 Manifest this update: Sun 21 Dec 2025 12:00:42 +0000 Manifest next update: Mon 22 Dec 2025 12:00:42 +0000 Files and hashes: 1: rrc9JyyxdKRjjbIVZ44-57kin_o.crl (hash: WW34vaynrSriokGGnhRspwh+f/GffPv9z5m7j7iswCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:89:f1:dd:da:92:3d:a0:41:f4:23:6b:77:16:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb73d272cb174a4638db215678e3ee7b9229ffa Validity Not Before: Dec 21 12:00:42 2025 GMT Not After : Dec 22 12:00:42 2025 GMT Subject: CN=98dc123a3d0ee66b436a130ae83703b43610f680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9f:2f:df:3a:ce:cc:93:2a:d6:34:3e:77:5f: ec:23:2b:1e:75:53:41:c6:c5:be:bb:13:88:f1:6b: ac:fe:4f:f9:bf:52:da:bb:61:06:f2:6b:8a:dc:e6: 85:e5:59:07:d1:04:76:bd:89:4a:04:a2:75:cc:2b: 01:a2:d9:29:80:00:66:d8:04:13:14:46:c0:f8:2c: 42:34:c1:6a:72:da:e6:46:ea:cc:94:2e:b1:b2:0d: 92:25:69:f7:bf:34:06:47:96:5b:95:94:97:39:54: 6e:21:dd:f4:33:69:7a:de:ee:f2:3c:2f:3c:31:5c: 9d:f8:d8:6f:35:80:2d:49:48:2c:58:18:d5:a3:77: 45:aa:5f:5b:f2:09:74:13:ce:49:02:d2:8d:00:7f: 48:98:1b:bf:68:d1:b8:cb:4b:d6:9d:31:5a:20:8e: 35:d9:b5:53:62:b6:07:33:6b:60:01:04:3a:70:08: 2e:ac:5b:35:6e:6e:89:34:05:a7:a4:1b:12:2c:81: 36:53:f1:01:8a:23:55:62:1b:a4:c4:f3:e3:6e:1d: 99:21:68:bb:2b:09:a4:f9:64:fa:d4:e1:ff:e9:be: 3f:70:90:66:99:95:59:e3:4d:78:f4:c7:d8:f7:a0: 56:11:7e:01:f4:0d:1c:1e:4f:15:00:40:92:e9:14: 8a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:DC:12:3A:3D:0E:E6:6B:43:6A:13:0A:E8:37:03:B4:36:10:F6:80 X509v3 Authority Key Identifier: keyid:AE:B7:3D:27:2C:B1:74:A4:63:8D:B2:15:67:8E:3E:E7:B9:22:9F:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrc9JyyxdKRjjbIVZ44-57kin_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/294613-9019-47d4-b065-5c1ac2af3672/1/rrc9JyyxdKRjjbIVZ44-57kin_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:a7:02:2f:b9:8c:24:46:2b:d3:37:92:13:97:0d:67:38:41: 61:ad:44:0c:64:91:ed:9f:0b:ad:2a:de:9b:34:70:ac:79:69: f1:da:c1:f7:24:cd:82:88:1e:22:96:6d:71:f4:9a:d2:c3:a9: bb:02:c7:a8:59:c8:ba:96:dc:35:d5:2d:d1:b8:06:6b:87:5c: 8c:ad:9d:54:95:c8:ce:40:5a:12:75:da:bc:e5:0b:fb:a9:cb: 3b:df:a1:9d:4c:6c:1d:fd:bd:4c:fc:4e:47:4f:d4:7e:6c:bf: ef:d3:3b:af:2e:b9:3c:cf:d2:46:9d:96:ba:f1:0e:26:79:1a: 55:b9:ca:c4:b4:86:91:c9:ae:47:98:6f:3a:97:83:ff:f9:01: 8a:68:11:20:2a:b6:fa:4c:d9:32:75:4c:e5:0a:90:4e:85:6f: 39:ab:4a:bb:8d:90:94:df:e5:d9:61:d8:f9:db:50:10:44:e3: 8f:80:eb:60:8f:b8:22:6e:0e:7b:eb:bb:7c:49:0a:76:a5:1f: 2c:05:3c:49:23:8e:f1:69:2c:8f:85:a2:c5:53:b0:8e:7b:c4: 61:b6:7c:d7:24:a2:d9:05:6a:f3:70:0d:1e:43:70:6d:3a:9a: 56:c6:94:54:73:2a:1b:27:c0:ba:07:91:53:f5:56:be:9d:44: 30:56:f8:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyInx3dqSPaBB9CNrdxY5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYjczZDI3MmNiMTc0YTQ2MzhkYjIxNTY3OGUzZWU3Yjky MjlmZmEwHhcNMjUxMjIxMTIwMDQyWhcNMjUxMjIyMTIwMDQyWjAzMTEwLwYDVQQD Eyg5OGRjMTIzYTNkMGVlNjZiNDM2YTEzMGFlODM3MDNiNDM2MTBmNjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx58v3zrOzJMq1jQ+d1/sIysedVNB xsW+uxOI8Wus/k/5v1Lau2EG8muK3OaF5VkH0QR2vYlKBKJ1zCsBotkpgABm2AQT FEbA+CxCNMFqctrmRurMlC6xsg2SJWn3vzQGR5ZblZSXOVRuId30M2l63u7yPC88 MVyd+NhvNYAtSUgsWBjVo3dFql9b8gl0E85JAtKNAH9ImBu/aNG4y0vWnTFaII41 2bVTYrYHM2tgAQQ6cAgurFs1bm6JNAWnpBsSLIE2U/EBiiNVYhukxPPjbh2ZIWi7 Kwmk+WT61OH/6b4/cJBmmZVZ40149MfY96BWEX4B9A0cHk8VAECS6RSKYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjcEjo9DuZrQ2oTCug3A7Q2EPaAMB8GA1UdIwQY MBaAFK63PScssXSkY42yFWeOPue5Ip/6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJjOUp5eXhkS1JqamJJVlo0NC01N2tpbl9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yOTQ2MTMtOTAxOS00N2Q0LWIwNjUt NWMxYWMyYWYzNjcyLzEvcnJjOUp5eXhkS1JqamJJVlo0NC01N2tpbl9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8yOTQ2MTMtOTAxOS00N2Q0LWIwNjUtNWMxYWMyYWYzNjcy LzEvcnJjOUp5eXhkS1JqamJJVlo0NC01N2tpbl9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU6cCL7mM JEYr0zeSE5cNZzhBYa1EDGSR7Z8LrSremzRwrHlp8drB9yTNgogeIpZtcfSa0sOp uwLHqFnIupbcNdUt0bgGa4dcjK2dVJXIzkBaEnXavOUL+6nLO9+hnUxsHf29TPxO R0/Ufmy/79M7ry65PM/SRp2WuvEOJnkaVbnKxLSGkcmuR5hvOpeD//kBimgRICq2 +kzZMnVM5QqQToVvOatKu42QlN/l2WHY+dtQEETjj4DrYI+4Im4Oe+u7fEkKdqUf LAU8SSOO8Wksj4WixVOwjnvEYbZ81ySi2QVq83ANHkNwbTqaVsaUVHMqGyfAugeR U/VWvp1EMFb4SA== -----END CERTIFICATE-----Generated at Sun Dec 21 19:32:33 2025 by rpki-client