This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft File: 9l50I9P3sbLnrMG6HO4CQLfWedY.mft (raw, json) Hash identifier: iSPnD6Q/mO+cHEXsg/HRdD3/ht+504QwU5K8XDG/tDo= Subject key identifier: 54:0B:98:5E:8E:FA:8C:C7:77:7D:14:E6:67:BD:2C:25:3F:90:76:57 Authority key identifier: F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6 Certificate issuer: /CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6 Certificate serial: 019B341FFE003855888692A2A33C0E5AFB32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 01:01:10 +0000 Manifest this update: Fri 19 Dec 2025 01:01:10 +0000 Manifest next update: Sat 20 Dec 2025 01:01:10 +0000 Files and hashes: 1: 9l50I9P3sbLnrMG6HO4CQLfWedY.crl (hash: MutG/j6CVCW0waP+i62Hz/R6biy82K08T+zVb1wFskM=) 2: FAJKZDo6nLNipexAJT8L9FAGXrE.roa (hash: NVIidy7uobZX7hs2QRQ052g+pZeZGSMOgKQJmZ0nDuw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:fe:00:38:55:88:86:92:a2:a3:3c:0e:5a:fb:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6 Validity Not Before: Dec 19 01:01:10 2025 GMT Not After : Dec 20 01:01:10 2025 GMT Subject: CN=540b985e8efa8cc7777d14e667bd2c253f907657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:67:b4:a3:95:bb:6b:6c:c3:52:53:0a:8c:be: 56:a0:a5:d7:d0:5d:63:6f:65:5c:85:ae:e2:a4:a4: 58:b5:58:dc:65:5d:3f:ca:25:20:03:00:d0:a6:b9: b0:25:52:0c:9d:34:80:8c:a5:94:d0:75:50:37:f4: 56:b7:66:6c:ad:fb:05:d0:75:7c:f2:ae:c8:70:8d: 28:b4:47:fc:ad:eb:b4:6f:8f:e3:d7:f8:16:f1:f7: 31:44:01:92:3d:dd:72:2c:3d:e8:6d:b2:f6:92:13: e7:5d:51:a9:4c:41:33:70:99:e9:34:3e:89:87:e7: 44:e6:b6:e9:05:a0:a3:2d:a0:e8:bf:80:ee:3b:44: 69:7e:4d:13:b7:fc:fc:99:69:f5:40:d9:6b:08:96: 5c:43:a8:4f:e2:d3:11:eb:3b:9c:19:37:11:19:a8: 6e:17:54:44:66:d0:b1:01:a5:3d:75:de:55:9b:e7: 71:a1:26:42:89:e7:e5:27:a3:a6:1a:7f:16:f4:5e: 94:6d:06:1d:12:bf:7c:c4:58:6b:ba:7c:d5:08:f4: 89:9f:e2:ef:42:e9:3b:53:65:56:04:f2:07:92:d0: 74:8d:18:3b:63:97:42:a9:74:cb:2d:fb:1e:49:c0: de:57:59:31:78:90:24:d9:6f:84:83:f6:c3:1a:f3: 51:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0B:98:5E:8E:FA:8C:C7:77:7D:14:E6:67:BD:2C:25:3F:90:76:57 X509v3 Authority Key Identifier: keyid:F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:bd:1e:2c:78:43:51:dc:21:60:3b:fb:9c:60:c4:91:d1:5d: 08:75:b4:5b:ab:51:8b:b6:18:0c:5a:a2:81:f3:c9:dc:24:2d: 52:c9:f1:84:65:20:96:3b:21:78:11:50:8a:33:16:f7:1b:f7: 41:ab:b5:dc:43:e1:7f:2d:46:b1:8f:1b:24:4b:1c:32:b9:dd: 92:f7:2d:9b:c6:94:60:0d:3e:0e:67:fb:a6:80:49:fa:7d:a3: 4a:27:7f:c1:8a:9c:c6:08:e0:16:b5:eb:fc:ca:ec:90:73:0d: 98:e1:f0:c3:6a:37:cf:1a:db:0e:66:64:d7:3f:02:f6:46:7c: 5e:d1:7d:e2:b5:6c:23:c1:d1:cc:23:ff:85:2f:95:54:a9:98: b5:8f:e1:51:d4:8f:1d:a8:3b:39:95:c6:5b:27:d0:32:eb:d0: f1:f0:58:cc:39:31:ff:15:14:91:e4:4c:28:57:2b:20:1a:a2: 59:45:d5:9f:7c:ad:45:c5:6d:32:31:ac:e3:d2:4d:b2:34:7d: ba:9b:a7:f6:53:d3:96:79:99:05:9a:ce:63:6e:36:e8:48:eb: 9c:10:58:9c:6d:37:98:96:7d:39:ba:95:0c:7a:2b:7f:f7:12: 93:f9:17:67:6b:90:d5:ab:6c:1c:ea:de:c3:cf:77:1b:cc:75: 78:22:61:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H/4AOFWIhpKiozwOWvsyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NWU3NDIzZDNmN2IxYjJlN2FjYzFiYTFjZWUwMjQwYjdk Njc5ZDYwHhcNMjUxMjE5MDEwMTEwWhcNMjUxMjIwMDEwMTEwWjAzMTEwLwYDVQQD Eyg1NDBiOTg1ZThlZmE4Y2M3Nzc3ZDE0ZTY2N2JkMmMyNTNmOTA3NjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWe0o5W7a2zDUlMKjL5WoKXX0F1j b2Vcha7ipKRYtVjcZV0/yiUgAwDQprmwJVIMnTSAjKWU0HVQN/RWt2ZsrfsF0HV8 8q7IcI0otEf8reu0b4/j1/gW8fcxRAGSPd1yLD3obbL2khPnXVGpTEEzcJnpND6J h+dE5rbpBaCjLaDov4DuO0Rpfk0Tt/z8mWn1QNlrCJZcQ6hP4tMR6zucGTcRGahu F1REZtCxAaU9dd5Vm+dxoSZCieflJ6OmGn8W9F6UbQYdEr98xFhrunzVCPSJn+Lv Quk7U2VWBPIHktB0jRg7Y5dCqXTLLfseScDeV1kxeJAk2W+Eg/bDGvNRHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQLmF6O+ozHd30U5me9LCU/kHZXMB8GA1UdIwQY MBaAFPZedCPT97Gy56zBuhzuAkC31nnWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWw1MEk5UDNzYkxuck1HNkhPNENRTGZXZWRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8wMTMxNTMtYjYzYi00MDc0LWFjNWMt ZjRkZDY2MzlmODc1LzEvOWw1MEk5UDNzYkxuck1HNkhPNENRTGZXZWRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8wMTMxNTMtYjYzYi00MDc0LWFjNWMtZjRkZDY2MzlmODc1 LzEvOWw1MEk5UDNzYkxuck1HNkhPNENRTGZXZWRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdL0eLHhD UdwhYDv7nGDEkdFdCHW0W6tRi7YYDFqigfPJ3CQtUsnxhGUgljsheBFQijMW9xv3 Qau13EPhfy1GsY8bJEscMrndkvctm8aUYA0+Dmf7poBJ+n2jSid/wYqcxgjgFrXr /MrskHMNmOHww2o3zxrbDmZk1z8C9kZ8XtF94rVsI8HRzCP/hS+VVKmYtY/hUdSP Hag7OZXGWyfQMuvQ8fBYzDkx/xUUkeRMKFcrIBqiWUXVn3ytRcVtMjGs49JNsjR9 upun9lPTlnmZBZrOY2426EjrnBBYnG03mJZ9ObqVDHorf/cSk/kXZ2uQ1atsHOre w893G8x1eCJhlg== -----END CERTIFICATE-----Generated at Fri Dec 19 10:37:16 2025 by rpki-client