This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.mft File: 9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.mft (raw, json) Hash identifier: 0ScRzK21oAG8YDPOHnxCnubN77JP5VXIOwmDRDh1Nek= Subject key identifier: 05:C8:B4:E2:A2:45:27:11:FD:52:0A:87:86:75:55:1B:24:94:1F:BB Authority key identifier: F4:7E:52:64:58:49:7C:25:D5:DC:3D:C2:F4:A8:37:4D:4E:44:94:9D Certificate issuer: /CN=f47e526458497c25d5dc3dc2f4a8374d4e44949d Certificate serial: 019B5A1B004D59E0F6701759D5A7F007F630 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.mft Manifest number: 08 Signing time: Fri 26 Dec 2025 10:01:17 +0000 Manifest this update: Fri 26 Dec 2025 10:01:17 +0000 Manifest next update: Sat 27 Dec 2025 10:01:17 +0000 Files and hashes: 1: 9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.crl (hash: BoMC6ULhsZFBiSK+tKzx2vbKULkgru7EfT7+l8wjx8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1b:00:4d:59:e0:f6:70:17:59:d5:a7:f0:07:f6:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f47e526458497c25d5dc3dc2f4a8374d4e44949d Validity Not Before: Dec 26 10:01:17 2025 GMT Not After : Dec 27 10:01:17 2025 GMT Subject: CN=05c8b4e2a2452711fd520a878675551b24941fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:51:0d:be:70:82:4f:3b:1a:75:75:b3:6c:88: e4:bc:ea:f1:72:62:d2:f8:ca:6a:01:a9:2f:a8:db: 0f:d4:1c:cb:e8:a1:25:39:a4:e7:4a:fe:73:77:f4: 79:c6:1f:a9:92:6c:eb:c1:5c:46:21:6a:3e:23:92: 7d:d1:28:d7:4e:72:b3:6b:9c:a7:d4:e7:83:3e:0c: 82:9a:96:46:ec:4e:be:f9:d3:ad:af:c4:39:9c:a9: e5:49:3d:54:60:0c:d5:45:7f:35:19:d2:44:56:f5: bf:86:6e:0a:a9:1b:00:88:40:b9:c4:d4:9b:98:07: 21:86:65:20:c3:3e:1a:15:6d:a2:ee:f9:de:89:ef: bc:c7:b2:23:00:3f:3c:db:09:7a:ee:28:5b:d0:30: 3d:56:0c:58:b4:36:84:48:44:6e:49:1d:4a:d6:66: 31:7d:3f:43:7c:83:ce:58:78:34:2b:d9:c3:6d:ca: 9d:99:6a:fd:f6:24:a8:33:d8:b3:6b:16:41:a0:b3: ec:25:58:39:62:92:b4:47:65:ee:b8:1f:10:71:46: 73:cd:0f:5f:0a:c8:6b:e0:10:ac:df:84:4a:37:c9: 3e:30:64:43:e7:db:06:35:56:fa:f9:da:74:d0:45: f9:40:5e:74:48:c1:34:e2:59:dc:fb:7a:24:5c:0a: 0a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C8:B4:E2:A2:45:27:11:FD:52:0A:87:86:75:55:1B:24:94:1F:BB X509v3 Authority Key Identifier: keyid:F4:7E:52:64:58:49:7C:25:D5:DC:3D:C2:F4:A8:37:4D:4E:44:94:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/206631-f12b-40e3-b818-0cc3b9b6f2e0/1/9H5SZFhJfCXV3D3C9Kg3TU5ElJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:d5:20:49:c5:cd:e5:b9:79:4d:0b:d4:21:bc:d5:b4:35:e6: 8d:f7:32:35:8b:bd:a2:d0:e2:7c:68:03:8e:9a:c8:79:29:de: 08:d8:50:27:66:73:be:a9:c7:bb:e3:e6:d0:3a:eb:b0:d3:94: 41:df:fa:c2:d9:6e:a5:b9:03:ba:79:17:30:4d:d5:75:0e:fc: 95:53:a8:d1:10:ff:42:ef:81:d2:2e:42:b0:ac:aa:14:cf:c7: e8:34:73:1a:92:aa:9c:24:06:19:c8:b3:be:fb:1d:98:00:91: a9:e7:61:7c:6e:76:52:ec:85:8f:64:c9:c1:30:85:bf:25:45: a8:3f:aa:a3:15:32:57:78:b2:05:a2:da:2d:1d:a2:58:e3:70: 58:a2:21:f8:c7:ce:f3:22:e1:dd:91:41:93:91:e1:dd:92:4e: af:4e:01:8a:07:9c:5c:f6:10:44:9f:c9:3c:9e:e8:dd:19:f6: 1a:c0:64:49:06:31:75:4b:14:10:83:1a:f6:7d:d2:00:df:15: cc:78:62:29:11:03:11:47:f8:c9:4a:9a:78:77:af:b5:64:be: 87:b3:ee:dd:c5:f2:f0:02:83:95:72:fc:99:b0:d1:6b:92:b6: 54:9e:a0:89:88:a6:53:0a:cc:01:c3:c3:6c:3b:16:92:5f:21: 71:46:e2:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGwBNWeD2cBdZ1afwB/YwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0N2U1MjY0NTg0OTdjMjVkNWRjM2RjMmY0YTgzNzRkNGU0 NDk0OWQwHhcNMjUxMjI2MTAwMTE3WhcNMjUxMjI3MTAwMTE3WjAzMTEwLwYDVQQD EygwNWM4YjRlMmEyNDUyNzExZmQ1MjBhODc4Njc1NTUxYjI0OTQxZmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21ENvnCCTzsadXWzbIjkvOrxcmLS +MpqAakvqNsP1BzL6KElOaTnSv5zd/R5xh+pkmzrwVxGIWo+I5J90SjXTnKza5yn 1OeDPgyCmpZG7E6++dOtr8Q5nKnlST1UYAzVRX81GdJEVvW/hm4KqRsAiEC5xNSb mAchhmUgwz4aFW2i7vneie+8x7IjAD882wl67ihb0DA9VgxYtDaESERuSR1K1mYx fT9DfIPOWHg0K9nDbcqdmWr99iSoM9izaxZBoLPsJVg5YpK0R2XuuB8QcUZzzQ9f Cshr4BCs34RKN8k+MGRD59sGNVb6+dp00EX5QF50SME04lnc+3okXAoKFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXItOKiRScR/VIKh4Z1VRsklB+7MB8GA1UdIwQY MBaAFPR+UmRYSXwl1dw9wvSoN01ORJSdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUg1U1pGaEpmQ1hWM0QzQzlLZzNUVTVFbEowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yMDY2MzEtZjEyYi00MGUzLWI4MTgt MGNjM2I5YjZmMmUwLzEvOUg1U1pGaEpmQ1hWM0QzQzlLZzNUVTVFbEowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8yMDY2MzEtZjEyYi00MGUzLWI4MTgtMGNjM2I5YjZmMmUw LzEvOUg1U1pGaEpmQ1hWM0QzQzlLZzNUVTVFbEowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArdUgScXN 5bl5TQvUIbzVtDXmjfcyNYu9otDifGgDjprIeSneCNhQJ2ZzvqnHu+Pm0DrrsNOU Qd/6wtlupbkDunkXME3VdQ78lVOo0RD/Qu+B0i5CsKyqFM/H6DRzGpKqnCQGGciz vvsdmACRqedhfG52UuyFj2TJwTCFvyVFqD+qoxUyV3iyBaLaLR2iWONwWKIh+MfO 8yLh3ZFBk5Hh3ZJOr04BigecXPYQRJ/JPJ7o3Rn2GsBkSQYxdUsUEIMa9n3SAN8V zHhiKREDEUf4yUqaeHevtWS+h7Pu3cXy8AKDlXL8mbDRa5K2VJ6giYimUwrMAcPD bDsWkl8hcUbiAw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:34 2025 by rpki-client