This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft File: 9PpnFz_1YpCIuXCWGuG-dGldxmE.mft (raw, json) Hash identifier: kVRH762tFa/D8Rb3NMn56mDNq1VK7eiSl8WNsQ3Ly58= Subject key identifier: E6:13:ED:50:1B:D4:58:4A:E9:CB:6C:73:BA:7C:34:6B:8F:ED:49:10 Authority key identifier: F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61 Certificate issuer: /CN=f4fa67173ff5629088b970961ae1be74695dc661 Certificate serial: 019B2EF99FCD0DD9E58E7ADB91EF76F7F0ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft Manifest number: 177D Signing time: Thu 18 Dec 2025 01:01:09 +0000 Manifest this update: Thu 18 Dec 2025 01:01:09 +0000 Manifest next update: Fri 19 Dec 2025 01:01:09 +0000 Files and hashes: 1: 9PpnFz_1YpCIuXCWGuG-dGldxmE.crl (hash: htVwHhaeD7nF0TWtsI/QbcVlBZxiTY7+a7jyN/Bi+6U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:9f:cd:0d:d9:e5:8e:7a:db:91:ef:76:f7:f0:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4fa67173ff5629088b970961ae1be74695dc661 Validity Not Before: Dec 18 01:01:09 2025 GMT Not After : Dec 19 01:01:09 2025 GMT Subject: CN=e613ed501bd4584ae9cb6c73ba7c346b8fed4910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:f4:7c:bb:68:6a:a1:3c:b8:04:77:42:8c:2e: 61:e7:fa:96:03:a1:9f:ff:28:06:88:ac:68:d0:ff: 13:59:6f:19:06:ad:90:93:8b:47:da:08:0c:87:6d: 46:cd:d5:67:fd:4a:4a:1b:dc:cc:4a:21:63:d5:85: 8f:1f:2e:ef:63:20:b0:4c:93:3e:7d:fd:97:71:ff: 23:c5:af:ba:31:fb:35:54:89:cb:db:04:d2:77:86: 84:e3:c1:5f:2b:8f:c3:da:e1:5d:0e:e3:95:e7:ca: 39:b7:51:89:48:33:94:b2:d6:09:6e:46:73:95:19: da:5b:3e:4d:8f:49:1c:71:a6:dd:f5:0c:c9:fd:8c: 0c:aa:8e:6e:b7:40:95:04:8c:e8:a4:42:95:d4:16: c7:1d:3a:3e:56:1e:2d:5d:4a:95:ea:45:a1:52:12: ae:fa:f6:70:7d:0d:dc:3e:5e:4c:2c:b6:f9:68:fc: 3c:03:51:92:e6:7e:af:c8:cf:99:43:59:09:3c:2c: e1:f5:aa:13:86:d4:67:56:ad:65:c4:71:aa:86:43: 90:ed:ce:84:82:4e:a2:16:d0:2d:0b:da:5d:ed:70: dd:69:7a:5d:ff:32:b0:3c:2c:55:d7:c3:e9:b7:d9: c2:51:94:f5:dc:cd:bc:26:b2:36:78:17:91:fb:f4: f2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:13:ED:50:1B:D4:58:4A:E9:CB:6C:73:BA:7C:34:6B:8F:ED:49:10 X509v3 Authority Key Identifier: keyid:F4:FA:67:17:3F:F5:62:90:88:B9:70:96:1A:E1:BE:74:69:5D:C6:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PpnFz_1YpCIuXCWGuG-dGldxmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/684df4-7257-4cca-824e-d85ebc5ea98d/1/9PpnFz_1YpCIuXCWGuG-dGldxmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:05:cc:cf:01:0f:e4:b4:a3:05:79:c1:b6:4f:f9:68:2c:c7: 5f:12:ec:23:0f:59:60:07:3d:be:df:eb:70:b9:6d:b7:9d:e8: 94:36:43:d1:17:1e:02:c0:e3:87:91:59:91:13:c6:a8:ff:1e: 62:a5:bc:b0:6e:fe:f4:8a:44:7b:5a:bf:b8:70:38:7d:f1:37: 25:dc:bc:9e:f7:ba:24:ca:c8:06:76:dd:69:3a:3f:04:b5:99: 04:55:a3:d3:ac:a8:53:c3:cf:f2:a9:fc:65:7d:34:b1:8e:f2: b2:0a:f7:f5:f0:98:01:77:02:5f:8a:08:c0:1b:24:8e:35:ec: d0:4a:9a:b0:25:a2:1a:b3:bb:48:70:9f:f1:5d:c2:2b:dd:c0: 34:9c:63:4d:a6:1c:ca:12:e9:03:07:2f:57:fa:c4:e2:00:0d: 0f:2a:3a:d5:77:bf:5e:34:7f:82:0f:f2:21:01:f1:28:79:f4: 38:64:9f:cf:f3:c0:19:be:8f:10:59:c7:b7:f7:39:79:81:18: 8c:54:e3:23:c2:9b:bd:7b:4a:3e:02:09:f2:a4:67:0f:a9:0b: 6d:2b:74:86:62:72:fe:b4:58:18:81:ba:15:6f:b0:23:3c:ad: 54:f7:06:ea:64:49:9a:1e:d9:3b:dd:6b:14:73:c1:5c:79:89: e2:ed:66:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+Z/NDdnljnrbke929/DtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZmE2NzE3M2ZmNTYyOTA4OGI5NzA5NjFhZTFiZTc0Njk1 ZGM2NjEwHhcNMjUxMjE4MDEwMTA5WhcNMjUxMjE5MDEwMTA5WjAzMTEwLwYDVQQD EyhlNjEzZWQ1MDFiZDQ1ODRhZTljYjZjNzNiYTdjMzQ2YjhmZWQ0OTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/R8u2hqoTy4BHdCjC5h5/qWA6Gf /ygGiKxo0P8TWW8ZBq2Qk4tH2ggMh21GzdVn/UpKG9zMSiFj1YWPHy7vYyCwTJM+ ff2Xcf8jxa+6Mfs1VInL2wTSd4aE48FfK4/D2uFdDuOV58o5t1GJSDOUstYJbkZz lRnaWz5Nj0kccabd9QzJ/YwMqo5ut0CVBIzopEKV1BbHHTo+Vh4tXUqV6kWhUhKu +vZwfQ3cPl5MLLb5aPw8A1GS5n6vyM+ZQ1kJPCzh9aoThtRnVq1lxHGqhkOQ7c6E gk6iFtAtC9pd7XDdaXpd/zKwPCxV18Ppt9nCUZT13M28JrI2eBeR+/TyOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYT7VAb1FhK6ctsc7p8NGuP7UkQMB8GA1UdIwQY MBaAFPT6Zxc/9WKQiLlwlhrhvnRpXcZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVBwbkZ6XzFZcENJdVhDV0d1Ry1kR2xkeG1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi82ODRkZjQtNzI1Ny00Y2NhLTgyNGUt ZDg1ZWJjNWVhOThkLzEvOVBwbkZ6XzFZcENJdVhDV0d1Ry1kR2xkeG1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi82ODRkZjQtNzI1Ny00Y2NhLTgyNGUtZDg1ZWJjNWVhOThk LzEvOVBwbkZ6XzFZcENJdVhDV0d1Ry1kR2xkeG1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiAXMzwEP 5LSjBXnBtk/5aCzHXxLsIw9ZYAc9vt/rcLltt53olDZD0RceAsDjh5FZkRPGqP8e YqW8sG7+9IpEe1q/uHA4ffE3Jdy8nve6JMrIBnbdaTo/BLWZBFWj06yoU8PP8qn8 ZX00sY7ysgr39fCYAXcCX4oIwBskjjXs0EqasCWiGrO7SHCf8V3CK93ANJxjTaYc yhLpAwcvV/rE4gANDyo61Xe/XjR/gg/yIQHxKHn0OGSfz/PAGb6PEFnHt/c5eYEY jFTjI8KbvXtKPgIJ8qRnD6kLbSt0hmJy/rRYGIG6FW+wIzytVPcG6mRJmh7ZO91r FHPBXHmJ4u1mgw== -----END CERTIFICATE-----Generated at Thu Dec 18 08:01:48 2025 by rpki-client