This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft File: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft (raw, json) Hash identifier: grT6y0S7g0IcDr5tb62g8J326bq8CUd1IjvUHHGDzD4= Subject key identifier: 49:88:8E:B8:C8:53:B4:EC:3E:8F:CC:3B:FD:FA:B6:77:A6:31:32:B4 Authority key identifier: F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9 Certificate issuer: /CN=f52e9a043f3128336e3c97c2542574c8ad929ac9 Certificate serial: 019B0E269BDB7D2B3921502997DBE884C11A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft Manifest number: 07D4 Signing time: Thu 11 Dec 2025 16:02:49 +0000 Manifest this update: Thu 11 Dec 2025 16:02:49 +0000 Manifest next update: Fri 12 Dec 2025 16:02:49 +0000 Files and hashes: 1: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl (hash: UaHhCKe21Y7/tkhp8bEFn67qKFtky9AZIZNz8IxOykE=) 2: OCedJE5LkoowQn54mjjrBJCuPJI.roa (hash: nw4YWjZiCna7KJhUNUrep5sUi3EwU231+kVKK+38ws8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:9b:db:7d:2b:39:21:50:29:97:db:e8:84:c1:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f52e9a043f3128336e3c97c2542574c8ad929ac9 Validity Not Before: Dec 11 16:02:49 2025 GMT Not After : Dec 12 16:02:49 2025 GMT Subject: CN=49888eb8c853b4ec3e8fcc3bfdfab677a63132b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:22:41:6a:18:1d:37:79:ef:05:13:2a:19:1a: db:c8:32:72:db:a7:ae:27:7f:c8:1f:55:b7:c5:f7: a5:2c:df:fe:4b:47:78:9f:47:71:3a:c8:78:15:f4: 34:4d:ba:2d:66:80:22:43:36:35:2c:83:72:b5:ae: 35:e3:95:46:73:52:f6:f5:2e:68:f8:20:eb:73:b6: 2f:0e:e0:3d:7d:97:5d:6a:bf:e9:58:e0:13:40:86: ca:de:67:f3:8d:f1:3b:8d:9e:ed:b2:b1:0f:94:2f: 34:62:b7:17:a6:41:75:ef:47:4f:cf:17:e5:ce:3d: 85:f0:6c:f2:82:be:46:ce:3a:88:e9:5e:23:bf:54: 79:89:a0:27:4b:7c:d1:c2:9a:e8:98:ed:50:b9:d9: a6:f9:74:7e:83:03:8d:8f:9d:a1:c5:67:2e:53:81: 13:07:a7:a3:d9:9e:1a:5a:c7:c9:e6:cb:cb:1d:2a: 28:55:b2:be:7d:51:5e:6b:fc:1d:75:1b:63:96:70: 6b:ef:2d:bf:43:62:37:f2:ac:0a:22:58:ed:94:2f: 7b:84:75:53:c9:fe:36:62:8a:70:4b:3e:7a:95:3b: bc:dd:8f:51:6e:0b:5d:ff:e6:b5:59:e3:50:d7:16: 32:3a:63:a4:20:38:df:3f:4b:e8:fc:50:4d:e2:3b: 09:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:88:8E:B8:C8:53:B4:EC:3E:8F:CC:3B:FD:FA:B6:77:A6:31:32:B4 X509v3 Authority Key Identifier: keyid:F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:f5:4c:dc:cd:bf:12:d9:46:ae:17:25:ae:b9:4b:b4:6c:b4: 61:1b:e0:75:b4:31:ca:aa:8b:6d:b5:7a:f3:fd:28:d4:ab:da: 78:97:b0:5e:39:9c:84:8d:b0:6b:a0:d1:9c:15:1a:25:a1:f5: d3:45:aa:bd:c8:4b:ff:47:20:8e:69:d5:ce:58:d2:26:c6:45: 5a:e0:0c:17:3c:a4:56:e4:36:f9:40:b4:62:0f:a3:55:57:37: 1d:f4:11:2a:9e:c3:68:46:7a:77:52:d0:41:35:f0:a6:68:9e: 13:57:5e:27:dc:dd:fa:a3:e4:dd:27:7f:05:eb:bd:80:41:27: 09:18:c0:7c:a1:3a:98:6a:22:b4:95:18:f6:9e:50:75:17:f3: 6a:5e:68:31:14:be:81:33:35:41:aa:4c:f7:ed:7e:d9:f7:05: 72:e5:32:b9:96:dc:13:61:4d:04:1a:cb:41:70:75:7a:b5:42: 55:b6:8d:e9:6f:7b:23:5a:09:ed:43:c5:45:26:d1:b0:15:a5: 03:b3:09:d0:63:2b:bc:0f:30:26:f4:08:3b:6f:37:a2:7a:20: 9e:57:9d:e5:e0:3e:9b:c7:f4:b3:83:a5:bd:8b:a1:39:c4:51: 85:26:2d:d7:75:49:56:d5:b2:34:c5:3e:34:5d:46:69:b0:55: 58:f5:16:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJpvbfSs5IVApl9vohMEaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MmU5YTA0M2YzMTI4MzM2ZTNjOTdjMjU0MjU3NGM4YWQ5 MjlhYzkwHhcNMjUxMjExMTYwMjQ5WhcNMjUxMjEyMTYwMjQ5WjAzMTEwLwYDVQQD Eyg0OTg4OGViOGM4NTNiNGVjM2U4ZmNjM2JmZGZhYjY3N2E2MzEzMmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSJBahgdN3nvBRMqGRrbyDJy26eu J3/IH1W3xfelLN/+S0d4n0dxOsh4FfQ0TbotZoAiQzY1LINyta4145VGc1L29S5o +CDrc7YvDuA9fZddar/pWOATQIbK3mfzjfE7jZ7tsrEPlC80YrcXpkF170dPzxfl zj2F8Gzygr5GzjqI6V4jv1R5iaAnS3zRwpromO1Qudmm+XR+gwONj52hxWcuU4ET B6ej2Z4aWsfJ5svLHSooVbK+fVFea/wddRtjlnBr7y2/Q2I38qwKIljtlC97hHVT yf42YopwSz56lTu83Y9Rbgtd/+a1WeNQ1xYyOmOkIDjfP0vo/FBN4jsJ6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmIjrjIU7TsPo/MO/36tnemMTK0MB8GA1UdIwQY MBaAFPUumgQ/MSgzbjyXwlQldMitkprJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mYjNlOTgtZDAwZi00NWRkLWJkMTkt ZWZmOGI5NWQyMGM1LzEvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9mYjNlOTgtZDAwZi00NWRkLWJkMTktZWZmOGI5NWQyMGM1 LzEvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/VM3M2/ EtlGrhclrrlLtGy0YRvgdbQxyqqLbbV68/0o1KvaeJewXjmchI2wa6DRnBUaJaH1 00WqvchL/0cgjmnVzljSJsZFWuAMFzykVuQ2+UC0Yg+jVVc3HfQRKp7DaEZ6d1LQ QTXwpmieE1deJ9zd+qPk3Sd/Beu9gEEnCRjAfKE6mGoitJUY9p5QdRfzal5oMRS+ gTM1QapM9+1+2fcFcuUyuZbcE2FNBBrLQXB1erVCVbaN6W97I1oJ7UPFRSbRsBWl A7MJ0GMrvA8wJvQIO283onognled5eA+m8f0s4OlvYuhOcRRhSYt13VJVtWyNMU+ NF1GabBVWPUWKg== -----END CERTIFICATE-----Generated at Thu Dec 11 22:59:59 2025 by rpki-client