This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft File: 9jOGnDZCtefqAii_DgspXO_MTd8.mft (raw, json) Hash identifier: EgSjnFSmCU1BCMXieWmJNk/RijqN22ufd+g5z+uXSMo= Subject key identifier: 39:54:87:8E:31:2E:6A:72:AF:F2:25:3F:4E:5B:97:46:4E:16:B8:05 Authority key identifier: F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF Certificate issuer: /CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf Certificate serial: 019B3569B25282200C465D03587DCA860F8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft Manifest number: 11FA Signing time: Fri 19 Dec 2025 07:01:17 +0000 Manifest this update: Fri 19 Dec 2025 07:01:17 +0000 Manifest next update: Sat 20 Dec 2025 07:01:17 +0000 Files and hashes: 1: 9jOGnDZCtefqAii_DgspXO_MTd8.crl (hash: 48OlOlKd+YklOuH9t10OA8hkS9Q2NoENc6cPkVTw6bM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:b2:52:82:20:0c:46:5d:03:58:7d:ca:86:0f:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f633869c3642b5e7ea0228bf0e0b295cefcc4ddf Validity Not Before: Dec 19 07:01:17 2025 GMT Not After : Dec 20 07:01:17 2025 GMT Subject: CN=3954878e312e6a72aff2253f4e5b97464e16b805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1e:2e:e4:da:02:59:70:f6:89:c9:2e:5a:90: 57:59:57:e4:5e:05:20:cc:21:16:bd:45:70:9e:fe: 44:d2:d9:c8:02:92:fd:d5:d3:a3:e7:6e:69:ed:0d: 78:ee:3b:3e:52:2b:d8:c2:72:bc:22:1e:35:fe:6b: 43:51:f9:9f:a4:2c:90:e9:b8:71:de:fe:7f:a7:7b: d3:62:7e:fd:46:ed:cb:ea:65:56:2b:85:c4:2e:66: 05:b4:ef:bd:71:59:36:02:14:76:cf:11:c4:9f:0b: 41:85:00:06:8f:03:17:54:f0:54:81:7d:fe:92:b7: a1:df:1c:02:28:64:df:9f:04:49:41:c7:d4:18:52: 19:ea:cb:97:28:69:b2:f4:c2:f9:00:99:ed:1e:ca: 6a:55:2a:d2:2e:f9:7a:2e:7f:a6:d3:31:38:67:16: 0b:66:00:c4:e7:75:5f:b3:d3:a5:4c:ba:4c:ed:95: 30:93:50:2e:22:9f:11:4f:00:93:cb:c5:1b:de:51: 75:a7:9e:ab:fe:f2:91:3c:6f:fe:a4:eb:fa:35:ac: 12:d7:16:4d:e2:02:23:b4:5a:43:88:0e:16:c0:f3: 38:70:d7:b8:a9:7d:a8:cd:89:98:a6:69:8e:ba:00: 7f:b6:99:c5:68:da:82:37:1d:d8:79:0a:9d:72:f0: 5b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:54:87:8E:31:2E:6A:72:AF:F2:25:3F:4E:5B:97:46:4E:16:B8:05 X509v3 Authority Key Identifier: keyid:F6:33:86:9C:36:42:B5:E7:EA:02:28:BF:0E:0B:29:5C:EF:CC:4D:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jOGnDZCtefqAii_DgspXO_MTd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6da562-a836-48cc-aa57-8c4bb4485f34/1/9jOGnDZCtefqAii_DgspXO_MTd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:07:53:6b:b4:51:7a:83:62:a6:0b:2c:bf:64:8b:25:88:98: f9:5d:0d:17:4e:c4:71:42:87:67:07:99:2d:1e:d0:d2:72:90: b1:93:38:a9:fe:30:a1:d8:66:4f:5e:0a:05:91:63:0d:50:42: e3:a9:23:2c:ae:44:13:33:01:52:83:04:b1:e1:a2:b1:2a:f8: bd:91:10:08:19:5a:bb:84:3d:06:c8:a9:fe:ad:1a:70:3e:08: 05:e8:46:93:d5:ec:8d:a5:be:6a:eb:f7:d5:b9:19:47:11:d3: b6:d8:e4:ca:6a:db:c6:9b:cf:e1:a5:fd:aa:bd:0e:99:8e:5e: ca:70:e1:da:04:2d:0a:02:99:e5:09:92:28:d2:eb:ae:65:f6: 52:31:19:1c:ec:23:dc:2a:02:77:c5:25:26:fc:1f:ee:5d:7e: 48:06:3c:45:86:50:f1:6a:ef:ee:a1:d2:56:01:f8:62:f7:b2: 0b:fd:04:a6:24:f5:91:65:e8:53:3c:1d:4c:32:fc:9a:ab:c1: 00:67:ae:a2:70:3b:2a:ab:60:69:d9:a2:53:82:09:9e:9f:20: 67:78:ce:cc:09:57:06:e5:64:3e:6f:9c:fe:6e:04:78:a6:8b: c5:ff:a6:6e:40:ea:44:04:aa:1d:e2:7d:e4:54:a5:23:0e:7a: 79:5a:14:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1abJSgiAMRl0DWH3Khg+NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MzM4NjljMzY0MmI1ZTdlYTAyMjhiZjBlMGIyOTVjZWZj YzRkZGYwHhcNMjUxMjE5MDcwMTE3WhcNMjUxMjIwMDcwMTE3WjAzMTEwLwYDVQQD EygzOTU0ODc4ZTMxMmU2YTcyYWZmMjI1M2Y0ZTViOTc0NjRlMTZiODA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzx4u5NoCWXD2ickuWpBXWVfkXgUg zCEWvUVwnv5E0tnIApL91dOj525p7Q147js+UivYwnK8Ih41/mtDUfmfpCyQ6bhx 3v5/p3vTYn79Ru3L6mVWK4XELmYFtO+9cVk2AhR2zxHEnwtBhQAGjwMXVPBUgX3+ kreh3xwCKGTfnwRJQcfUGFIZ6suXKGmy9ML5AJntHspqVSrSLvl6Ln+m0zE4ZxYL ZgDE53Vfs9OlTLpM7ZUwk1AuIp8RTwCTy8Ub3lF1p56r/vKRPG/+pOv6NawS1xZN 4gIjtFpDiA4WwPM4cNe4qX2ozYmYpmmOugB/tpnFaNqCNx3YeQqdcvBbsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDlUh44xLmpyr/IlP05bl0ZOFrgFMB8GA1UdIwQY MBaAFPYzhpw2QrXn6gIovw4LKVzvzE3fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWpPR25EWkN0ZWZxQWlpX0Rnc3BYT19NVGQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82ZGE1NjItYTgzNi00OGNjLWFhNTct OGM0YmI0NDg1ZjM0LzEvOWpPR25EWkN0ZWZxQWlpX0Rnc3BYT19NVGQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC82ZGE1NjItYTgzNi00OGNjLWFhNTctOGM0YmI0NDg1ZjM0 LzEvOWpPR25EWkN0ZWZxQWlpX0Rnc3BYT19NVGQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgdTa7RR eoNipgssv2SLJYiY+V0NF07EcUKHZweZLR7Q0nKQsZM4qf4wodhmT14KBZFjDVBC 46kjLK5EEzMBUoMEseGisSr4vZEQCBlau4Q9Bsip/q0acD4IBehGk9XsjaW+auv3 1bkZRxHTttjkymrbxpvP4aX9qr0OmY5eynDh2gQtCgKZ5QmSKNLrrmX2UjEZHOwj 3CoCd8UlJvwf7l1+SAY8RYZQ8Wrv7qHSVgH4YveyC/0EpiT1kWXoUzwdTDL8mqvB AGeuonA7KqtgadmiU4IJnp8gZ3jOzAlXBuVkPm+c/m4EeKaLxf+mbkDqRASqHeJ9 5FSlIw56eVoUrw== -----END CERTIFICATE-----Generated at Fri Dec 19 10:37:21 2025 by rpki-client