This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft File: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft (raw, json) Hash identifier: mD6v8Kvj+vxt9YmvaTHEpQ/Qm/rVMfberJVF6j/wR18= Subject key identifier: 5B:F5:19:FD:66:B2:C3:AD:CB:6D:EE:DD:A2:B8:19:C3:34:FC:91:8A Authority key identifier: F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D Certificate issuer: /CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d Certificate serial: 019B5A51AAF5D0B85C1E0D2E056446069ECA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft Manifest number: 1369 Signing time: Fri 26 Dec 2025 11:01:00 +0000 Manifest this update: Fri 26 Dec 2025 11:01:00 +0000 Manifest next update: Sat 27 Dec 2025 11:01:00 +0000 Files and hashes: 1: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl (hash: A+CsSXCOnfIhDbc03cS7CGf7Qm2G3QZ2dS0jkIwNeyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:aa:f5:d0:b8:5c:1e:0d:2e:05:64:46:06:9e:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d Validity Not Before: Dec 26 11:01:00 2025 GMT Not After : Dec 27 11:01:00 2025 GMT Subject: CN=5bf519fd66b2c3adcb6deedda2b819c334fc918a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6d:c3:f7:37:09:70:ee:9e:ec:1e:8d:f0:97: 75:78:e4:fe:16:1b:4a:97:95:e0:fa:f8:06:5e:f0: 03:0c:c6:f6:8f:df:a6:28:9c:59:06:a1:c2:8c:36: 0f:4a:6e:09:a6:d0:b9:38:b7:51:26:f4:25:34:3b: bb:25:c0:79:91:85:13:73:f7:e6:fd:f0:a7:d2:a0: 3d:50:e5:f7:96:ee:5c:f8:73:82:de:d3:bf:de:9c: 8c:a0:6c:21:9e:c8:95:ac:9f:bc:59:34:88:ba:ea: 19:ad:a5:4a:b3:20:1d:c4:18:a9:5a:6d:cb:94:b0: 1b:4e:70:2d:36:2c:5b:ff:ea:28:25:08:bc:f0:a1: 96:d3:d0:2f:b4:e3:13:e6:73:85:2a:62:30:dd:ce: c0:f5:0d:74:95:dd:2c:e1:28:91:9f:c0:5e:0f:54: 1a:56:1c:af:76:de:18:9d:a2:72:e3:1b:59:da:f3: d8:a9:5a:82:db:98:09:23:bd:3b:a3:9f:35:ca:ac: 76:9e:a6:56:3a:9a:10:08:24:aa:a7:34:06:3d:7e: e1:63:99:bb:88:11:70:a4:b8:c8:d0:c8:d8:e2:77: f9:1b:38:5f:fe:98:cb:35:74:01:7e:82:b4:47:c1: 31:af:72:5d:d2:39:93:19:c9:ca:a0:89:98:cc:de: 74:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F5:19:FD:66:B2:C3:AD:CB:6D:EE:DD:A2:B8:19:C3:34:FC:91:8A X509v3 Authority Key Identifier: keyid:F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:6e:cd:31:40:e4:42:0e:f7:c7:67:50:9a:5a:e6:8d:17:bc: 29:1b:7c:2b:f4:c5:24:ea:b3:02:51:ff:98:fb:7a:d0:c8:11: 8a:22:13:7b:cd:37:80:90:4c:0b:c2:5c:86:43:1f:6a:6c:e3: 31:be:08:aa:67:65:9c:b1:30:fc:ba:0b:b9:cf:6c:e9:69:22: 22:5b:c4:8b:16:be:22:86:4f:1f:78:04:44:52:e6:f6:87:0a: 1a:0b:da:ed:59:4e:77:12:29:16:ad:7b:46:77:e2:16:14:24: 23:cd:c9:f1:7e:67:62:c8:74:98:4b:1e:39:85:52:26:ce:62: fa:a5:a8:7f:17:e9:e4:e1:7a:1a:ca:62:11:28:eb:01:67:00: 25:b1:f2:b9:8e:57:3e:27:4b:04:61:81:ac:f7:0d:38:db:aa: cf:b1:72:12:d9:1d:a7:4a:62:9d:39:f7:3f:a6:71:8f:96:e5: c3:4f:11:3d:65:8e:c7:be:fd:e9:b6:9a:8c:20:9b:50:7c:c4: 4a:45:b3:da:fa:f7:16:b5:97:93:e3:20:72:ff:2f:52:f1:1e: da:7c:a1:00:b2:4e:3d:3a:e8:33:fc:a7:ac:5e:8c:71:42:8b: 6c:af:c3:f4:e8:a3:ac:46:9a:6a:af:4d:3a:07:ff:e2:85:60: e3:12:e9:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUar10LhcHg0uBWRGBp7KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1N2U0YjFjOTU4NzcyNzEzM2M3ZWUwMGJiYmE4ZWM1NmVh ZTY0MWQwHhcNMjUxMjI2MTEwMTAwWhcNMjUxMjI3MTEwMTAwWjAzMTEwLwYDVQQD Eyg1YmY1MTlmZDY2YjJjM2FkY2I2ZGVlZGRhMmI4MTljMzM0ZmM5MThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm3D9zcJcO6e7B6N8Jd1eOT+FhtK l5Xg+vgGXvADDMb2j9+mKJxZBqHCjDYPSm4JptC5OLdRJvQlNDu7JcB5kYUTc/fm /fCn0qA9UOX3lu5c+HOC3tO/3pyMoGwhnsiVrJ+8WTSIuuoZraVKsyAdxBipWm3L lLAbTnAtNixb/+ooJQi88KGW09AvtOMT5nOFKmIw3c7A9Q10ld0s4SiRn8BeD1Qa Vhyvdt4YnaJy4xtZ2vPYqVqC25gJI707o581yqx2nqZWOpoQCCSqpzQGPX7hY5m7 iBFwpLjI0MjY4nf5Gzhf/pjLNXQBfoK0R8Exr3Jd0jmTGcnKoImYzN50IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFv1Gf1mssOty23u3aK4GcM0/JGKMB8GA1UdIwQY MBaAFPV+SxyVh3JxM8fuALu6jsVurmQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVg1TEhKV0hjbkV6eC00QXU3cU94VzZ1WkIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85ZTkxMTktZTVlNi00MDRhLWI1OGEt MTg4YjkxYTllOTkwLzEvOVg1TEhKV0hjbkV6eC00QXU3cU94VzZ1WkIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85ZTkxMTktZTVlNi00MDRhLWI1OGEtMTg4YjkxYTllOTkw LzEvOVg1TEhKV0hjbkV6eC00QXU3cU94VzZ1WkIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf27NMUDk Qg73x2dQmlrmjRe8KRt8K/TFJOqzAlH/mPt60MgRiiITe803gJBMC8JchkMfamzj Mb4IqmdlnLEw/LoLuc9s6WkiIlvEixa+IoZPH3gERFLm9ocKGgva7VlOdxIpFq17 RnfiFhQkI83J8X5nYsh0mEseOYVSJs5i+qWofxfp5OF6GspiESjrAWcAJbHyuY5X PidLBGGBrPcNONuqz7FyEtkdp0pinTn3P6Zxj5blw08RPWWOx7796baajCCbUHzE SkWz2vr3FrWXk+Mgcv8vUvEe2nyhALJOPTroM/ynrF6McUKLbK/D9OijrEaaaq9N Ogf/4oVg4xLp9g== -----END CERTIFICATE-----Generated at Fri Dec 26 17:43:29 2025 by rpki-client