This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft File: 9rES1L7bpvNYUoqDcUG3SwkphZM.mft (raw, json) Hash identifier: qkUka9wAG7TuPx8cwKu/omlvo+l6zzyu3EMmZCbZbhQ= Subject key identifier: 94:18:9F:77:C5:1E:00:F4:B6:09:96:12:0D:D7:A1:EE:02:A3:50:0B Authority key identifier: F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93 Certificate issuer: /CN=f6b112d4bedba6f358528a837141b74b09298593 Certificate serial: 019B5117D3B92AF3E09BC5F9AA9155686015 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft Manifest number: 16E2 Signing time: Wed 24 Dec 2025 16:01:14 +0000 Manifest this update: Wed 24 Dec 2025 16:01:14 +0000 Manifest next update: Thu 25 Dec 2025 16:01:14 +0000 Files and hashes: 1: 9rES1L7bpvNYUoqDcUG3SwkphZM.crl (hash: M6hjlTBpG5DW3B77/ZjCNxph75/a5CUh4EXk/iUVmqc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:d3:b9:2a:f3:e0:9b:c5:f9:aa:91:55:68:60:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6b112d4bedba6f358528a837141b74b09298593 Validity Not Before: Dec 24 16:01:14 2025 GMT Not After : Dec 25 16:01:14 2025 GMT Subject: CN=94189f77c51e00f4b60996120dd7a1ee02a3500b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d0:c8:83:31:fb:9e:86:61:2e:3a:7b:e9:d6: 5f:c8:1c:6a:36:38:ed:4d:e6:2b:6f:8a:8d:06:7c: 59:bc:89:b4:48:c0:de:1d:72:3d:f3:62:16:02:2e: 33:38:8e:62:96:f4:b3:65:cb:bf:cc:84:68:60:ed: 37:2c:cd:fa:13:7a:43:a6:d2:72:1d:80:8d:4f:33: 12:92:a8:99:e3:d0:d0:08:2e:e9:e1:d8:be:dc:fe: 33:40:c2:17:ef:67:ec:10:9e:cd:61:f4:d6:d2:01: ec:c2:c7:1e:47:ce:52:4e:bb:7c:b9:ff:79:f7:a4: 0d:66:e4:c1:61:a4:37:fd:77:00:50:ab:eb:91:f7: fe:76:9b:22:83:ea:fc:46:2c:cc:22:9b:15:64:17: 1e:e2:b1:c3:61:6e:be:a1:06:55:3f:f7:29:b8:1a: 60:8f:b6:50:fb:b1:29:a2:3b:5e:80:6e:ca:b0:85: 1c:5a:d6:26:a6:75:55:84:22:ac:1b:84:80:ec:11: 21:76:80:52:44:3b:ea:9d:60:a9:39:eb:c5:5b:b2: 02:21:e7:75:8b:9a:bc:43:ee:f4:d8:e9:62:0c:03: 9d:21:5c:9e:4c:3e:56:00:d2:30:52:38:c3:45:93: 71:d2:80:f6:ca:05:26:70:ac:f8:cb:b3:e0:95:14: 82:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:18:9F:77:C5:1E:00:F4:B6:09:96:12:0D:D7:A1:EE:02:A3:50:0B X509v3 Authority Key Identifier: keyid:F6:B1:12:D4:BE:DB:A6:F3:58:52:8A:83:71:41:B7:4B:09:29:85:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rES1L7bpvNYUoqDcUG3SwkphZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f9167-66ee-453b-9ea0-4c3ef41aed7f/1/9rES1L7bpvNYUoqDcUG3SwkphZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:1c:2a:67:a9:4f:bd:f6:5e:5b:d8:e6:49:28:f3:70:e1:28: 8c:4c:96:af:2e:37:39:47:62:12:56:ac:f6:46:04:68:20:8d: 8e:65:02:08:5e:74:20:15:f5:38:88:e2:24:c4:0a:76:d0:c2: d0:1a:4b:25:52:92:3e:8d:1b:ba:60:c0:07:a1:14:8b:f1:af: 98:cb:c7:48:86:5f:07:00:bb:eb:c7:0c:90:62:f1:e5:a1:48: 48:2a:5f:10:a8:7c:4a:7d:a2:95:42:2c:92:db:4d:e6:1d:e6: 92:23:3b:25:dc:2b:de:fc:3c:ff:47:e1:fa:2d:f6:40:ab:6a: a5:cf:a7:b4:25:5b:3d:eb:07:f2:22:9c:23:b8:af:63:60:71: 94:d1:a6:cf:47:51:83:41:bf:b3:a5:00:c8:b9:49:eb:6a:01: 67:2c:18:e7:26:77:1c:e9:36:be:25:49:31:8d:9a:3e:75:00: 85:03:2c:b1:3c:46:b4:f4:60:6a:86:dd:72:a6:df:80:e7:45: 1c:f4:af:cd:78:e7:50:8d:cb:6c:23:83:49:cf:7c:dc:31:e2: 40:08:05:b6:7a:de:ad:79:82:3d:ec:73:a6:ca:5c:aa:f1:6b: c9:34:86:f0:d3:c4:4d:01:93:06:f7:c6:b0:87:47:90:14:ef: b8:69:90:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRF9O5KvPgm8X5qpFVaGAVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YjExMmQ0YmVkYmE2ZjM1ODUyOGE4MzcxNDFiNzRiMDky OTg1OTMwHhcNMjUxMjI0MTYwMTE0WhcNMjUxMjI1MTYwMTE0WjAzMTEwLwYDVQQD Eyg5NDE4OWY3N2M1MWUwMGY0YjYwOTk2MTIwZGQ3YTFlZTAyYTM1MDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9DIgzH7noZhLjp76dZfyBxqNjjt TeYrb4qNBnxZvIm0SMDeHXI982IWAi4zOI5ilvSzZcu/zIRoYO03LM36E3pDptJy HYCNTzMSkqiZ49DQCC7p4di+3P4zQMIX72fsEJ7NYfTW0gHswsceR85STrt8uf95 96QNZuTBYaQ3/XcAUKvrkff+dpsig+r8RizMIpsVZBce4rHDYW6+oQZVP/cpuBpg j7ZQ+7EpojtegG7KsIUcWtYmpnVVhCKsG4SA7BEhdoBSRDvqnWCpOevFW7ICIed1 i5q8Q+702OliDAOdIVyeTD5WANIwUjjDRZNx0oD2ygUmcKz4y7PglRSCswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQYn3fFHgD0tgmWEg3Xoe4Co1ALMB8GA1UdIwQY MBaAFPaxEtS+26bzWFKKg3FBt0sJKYWTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXJFUzFMN2Jwdk5ZVW9xRGNVRzNTd2twaFpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjkxNjctNjZlZS00NTNiLTllYTAt NGMzZWY0MWFlZDdmLzEvOXJFUzFMN2Jwdk5ZVW9xRGNVRzNTd2twaFpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8zZjkxNjctNjZlZS00NTNiLTllYTAtNGMzZWY0MWFlZDdm LzEvOXJFUzFMN2Jwdk5ZVW9xRGNVRzNTd2twaFpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqxwqZ6lP vfZeW9jmSSjzcOEojEyWry43OUdiElas9kYEaCCNjmUCCF50IBX1OIjiJMQKdtDC 0BpLJVKSPo0bumDAB6EUi/GvmMvHSIZfBwC768cMkGLx5aFISCpfEKh8Sn2ilUIs kttN5h3mkiM7Jdwr3vw8/0fh+i32QKtqpc+ntCVbPesH8iKcI7ivY2BxlNGmz0dR g0G/s6UAyLlJ62oBZywY5yZ3HOk2viVJMY2aPnUAhQMssTxGtPRgaobdcqbfgOdF HPSvzXjnUI3LbCODSc983DHiQAgFtnrerXmCPexzpspcqvFryTSG8NPETQGTBvfG sIdHkBTvuGmQUA== -----END CERTIFICATE-----Generated at Wed Dec 24 21:47:14 2025 by rpki-client