This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft File: 9keQtSf6QLqj8ts_oqFL-UzSgv8.mft (raw, json) Hash identifier: yiX7Cb3uhVJ1iDM61Y67bjj8p0DT9G0AafIkgxznoxs= Subject key identifier: 9A:E0:47:56:32:F0:23:33:96:17:91:FA:F4:3E:FE:E8:AE:37:4A:BC Authority key identifier: F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF Certificate issuer: /CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff Certificate serial: 019B413715D98ED453BBD928FAD6360A9C20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft Manifest number: 04B3 Signing time: Sun 21 Dec 2025 14:01:27 +0000 Manifest this update: Sun 21 Dec 2025 14:01:27 +0000 Manifest next update: Mon 22 Dec 2025 14:01:27 +0000 Files and hashes: 1: 9keQtSf6QLqj8ts_oqFL-UzSgv8.crl (hash: twMbKJ9a57dVjeC/qX455mbSrRqNjgSNEC4uiSAs5cs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 14:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:37:15:d9:8e:d4:53:bb:d9:28:fa:d6:36:0a:9c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f64790b527fa40baa3f2db3fa2a14bf94cd282ff Validity Not Before: Dec 21 14:01:27 2025 GMT Not After : Dec 22 14:01:27 2025 GMT Subject: CN=9ae0475632f02333961791faf43efee8ae374abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:89:97:a2:ee:e6:c4:8c:3a:d4:7f:3b:40:41: fb:31:f7:2f:83:c0:db:25:ce:85:2f:5a:0a:68:40: c3:69:77:99:df:1d:03:9e:80:21:ee:9c:a0:04:01: 92:14:26:f6:24:60:b8:15:3f:9e:49:36:4f:2b:c6: 0c:6f:df:02:72:b0:54:71:9f:51:71:39:51:e3:50: 50:13:35:b8:d8:99:84:99:f2:4f:33:ce:71:1f:f1: ba:09:9a:16:5e:a4:d8:57:50:8d:a2:21:07:fe:28: 9b:52:98:dc:9e:e7:02:ac:28:3d:c3:82:f5:91:8a: 99:d5:e3:8f:16:33:3d:dc:dd:74:ab:02:8f:b3:01: b6:fb:62:57:c6:f3:bb:58:df:ac:07:de:70:04:8b: d7:d6:23:1f:7d:c7:bb:eb:9c:71:2e:bd:a6:12:de: c1:18:c9:b4:b0:b0:b0:19:9a:4e:51:28:3f:f3:ff: f8:fa:75:84:34:05:17:8a:4e:4e:bb:39:f5:aa:f1: 6f:8e:57:cd:3b:2b:94:76:4f:92:8e:27:dd:90:1c: 89:f4:d9:64:b4:a9:6a:2d:95:90:77:59:84:57:23: 21:ea:08:02:20:18:86:87:af:2a:fa:e7:15:74:09: ae:c3:86:fb:6d:c1:82:66:8d:07:22:e4:96:ef:5a: c1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E0:47:56:32:F0:23:33:96:17:91:FA:F4:3E:FE:E8:AE:37:4A:BC X509v3 Authority Key Identifier: keyid:F6:47:90:B5:27:FA:40:BA:A3:F2:DB:3F:A2:A1:4B:F9:4C:D2:82:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9keQtSf6QLqj8ts_oqFL-UzSgv8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/99db51-68bd-4b5b-a2e2-28d7337c0694/1/9keQtSf6QLqj8ts_oqFL-UzSgv8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:20:76:fb:41:5b:50:bb:45:d6:e6:b8:cc:84:5f:17:c3:ce: 34:b9:03:1b:cc:7f:ca:34:5c:03:11:52:c5:0c:26:09:f3:65: 33:55:7e:e9:f7:71:7c:09:a1:99:34:80:ca:ba:dd:9c:04:62: b4:4e:9a:01:14:51:14:6f:49:96:a4:81:77:05:60:46:51:5c: b8:7c:23:d9:e0:1c:b5:1f:6b:0b:8c:f3:35:09:87:01:eb:fe: 25:40:b7:01:59:46:81:4a:ad:ca:f8:e4:b9:13:3c:ac:03:2c: c5:31:24:39:ee:54:3a:20:2e:c1:20:bb:e5:6f:8c:09:db:6c: 95:cf:42:f5:4d:e6:e1:de:d1:ad:7d:57:09:3e:ee:08:9f:4d: 3f:80:2d:aa:73:ab:6b:4c:cb:a9:ac:10:40:0d:bc:8d:04:4d: f4:03:21:f6:d2:61:78:e3:5e:58:71:aa:03:f0:24:8c:66:6e: 32:07:42:e2:06:9e:27:4c:bf:fc:6d:b6:51:95:a9:1a:06:2b: e7:21:ea:94:b1:c8:b0:4b:fd:c6:dd:ee:02:cc:74:a9:19:87: 3c:9c:62:0e:68:7f:a0:3d:33:ea:63:d3:19:a9:f9:e4:5e:92: 9c:87:6d:7a:6d:3d:f5:10:12:75:4c:25:31:4e:d1:1b:05:c0: 92:82:36:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNxXZjtRTu9ko+tY2CpwgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NDc5MGI1MjdmYTQwYmFhM2YyZGIzZmEyYTE0YmY5NGNk MjgyZmYwHhcNMjUxMjIxMTQwMTI3WhcNMjUxMjIyMTQwMTI3WjAzMTEwLwYDVQQD Eyg5YWUwNDc1NjMyZjAyMzMzOTYxNzkxZmFmNDNlZmVlOGFlMzc0YWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyImXou7mxIw61H87QEH7Mfcvg8Db Jc6FL1oKaEDDaXeZ3x0DnoAh7pygBAGSFCb2JGC4FT+eSTZPK8YMb98CcrBUcZ9R cTlR41BQEzW42JmEmfJPM85xH/G6CZoWXqTYV1CNoiEH/iibUpjcnucCrCg9w4L1 kYqZ1eOPFjM93N10qwKPswG2+2JXxvO7WN+sB95wBIvX1iMffce765xxLr2mEt7B GMm0sLCwGZpOUSg/8//4+nWENAUXik5Ouzn1qvFvjlfNOyuUdk+SjifdkByJ9Nlk tKlqLZWQd1mEVyMh6ggCIBiGh68q+ucVdAmuw4b7bcGCZo0HIuSW71rBHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrgR1Yy8CMzlheR+vQ+/uiuN0q8MB8GA1UdIwQY MBaAFPZHkLUn+kC6o/LbP6KhS/lM0oL/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWtlUXRTZjZRTHFqOHRzX29xRkwtVXpTZ3Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85OWRiNTEtNjhiZC00YjViLWEyZTIt MjhkNzMzN2MwNjk0LzEvOWtlUXRTZjZRTHFqOHRzX29xRkwtVXpTZ3Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy85OWRiNTEtNjhiZC00YjViLWEyZTItMjhkNzMzN2MwNjk0 LzEvOWtlUXRTZjZRTHFqOHRzX29xRkwtVXpTZ3Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHyB2+0Fb ULtF1ua4zIRfF8PONLkDG8x/yjRcAxFSxQwmCfNlM1V+6fdxfAmhmTSAyrrdnARi tE6aARRRFG9JlqSBdwVgRlFcuHwj2eActR9rC4zzNQmHAev+JUC3AVlGgUqtyvjk uRM8rAMsxTEkOe5UOiAuwSC75W+MCdtslc9C9U3m4d7RrX1XCT7uCJ9NP4AtqnOr a0zLqawQQA28jQRN9AMh9tJheONeWHGqA/AkjGZuMgdC4gaeJ0y//G22UZWpGgYr 5yHqlLHIsEv9xt3uAsx0qRmHPJxiDmh/oD0z6mPTGan55F6SnIdtem099RASdUwl MU7RGwXAkoI2sw== -----END CERTIFICATE-----Generated at Mon Dec 22 00:00:11 2025 by rpki-client