This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft File: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft (raw, json) Hash identifier: KzSgW3A5BytE4tgnUU/py0scjblukGpUNxBdMMDN1X4= Subject key identifier: 91:7C:EF:17:C7:37:47:EE:30:D6:BF:AC:A3:30:CE:A9:80:46:F3:91 Authority key identifier: F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B Certificate issuer: /CN=f4272ac0423fb097583c6872567d84cae410c89b Certificate serial: 019B31C354BA023EEA5AF1718D9415CE1756 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft Manifest number: 0A99 Signing time: Thu 18 Dec 2025 14:00:43 +0000 Manifest this update: Thu 18 Dec 2025 14:00:43 +0000 Manifest next update: Fri 19 Dec 2025 14:00:43 +0000 Files and hashes: 1: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl (hash: nyOKkQncHTOsJVQEcb5yNY/gMgJvYle5C40Tgm/ftDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 14:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:54:ba:02:3e:ea:5a:f1:71:8d:94:15:ce:17:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4272ac0423fb097583c6872567d84cae410c89b Validity Not Before: Dec 18 14:00:43 2025 GMT Not After : Dec 19 14:00:43 2025 GMT Subject: CN=917cef17c73747ee30d6bfaca330cea98046f391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0b:5b:3d:78:73:9c:fb:1a:b2:3c:82:73:02: cb:78:04:6e:0e:f2:20:87:c2:90:a2:3a:37:a5:f5: 20:c1:50:23:5d:63:c1:8c:bb:cf:f5:de:2d:70:d1: 23:16:fd:c6:4e:78:63:2c:ec:0c:52:a3:3c:95:86: 52:33:07:3b:33:ea:1e:01:ff:69:29:b5:bb:db:47: 38:8f:27:37:94:bd:c5:c9:b8:72:af:26:59:55:72: 52:b7:33:d8:fd:57:ce:f3:2c:7d:c7:ea:a7:44:3b: 19:d6:17:8c:80:25:f5:6d:8a:5e:27:ac:fc:2b:8c: 25:d2:0d:c7:2f:94:f4:c2:04:02:d1:7e:6b:d6:38: 10:42:f4:b4:02:8b:78:d7:88:5a:d1:52:61:f2:ac: 2d:b8:d7:61:45:5f:01:56:d4:59:d4:dc:df:3a:09: 27:97:b2:cf:1c:c7:a8:9b:c7:d1:ac:e4:ea:91:8d: 47:ac:90:d2:3a:25:3f:4f:5d:3e:46:8e:1f:37:71: b0:7b:71:82:af:2c:17:5b:09:b1:26:c2:ba:99:4c: b6:ac:bf:6d:7b:91:52:45:e9:d8:23:55:c8:8a:f1: d4:5e:4b:ab:50:ad:84:6f:ab:d9:16:9c:2e:bb:76: 6e:a2:ad:b6:84:21:24:7f:5a:d2:be:76:a3:95:f9: fa:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7C:EF:17:C7:37:47:EE:30:D6:BF:AC:A3:30:CE:A9:80:46:F3:91 X509v3 Authority Key Identifier: keyid:F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:50:94:d0:83:b7:9b:ca:f9:7b:2b:3b:95:8e:ca:7e:be:96: 0c:1c:58:0b:8a:14:ac:36:dc:b1:7b:96:12:31:84:90:ab:fc: 95:5f:eb:9b:d4:51:a4:1d:58:5f:8e:58:5e:b2:c8:03:a3:79: 68:94:bf:d4:28:55:6d:bc:d9:ef:ba:ae:75:0b:6d:59:68:26: b7:20:9d:9b:d9:2f:8c:7c:94:69:50:71:aa:ef:d2:24:97:e2: 88:0f:25:31:0e:f4:fc:d2:a1:bd:d6:b4:e5:68:9d:d0:b9:f3: 74:51:3c:76:c2:6a:cc:3b:4b:5d:3e:51:87:32:58:b6:f3:84: 25:8d:7c:f5:cb:b1:18:71:4e:0a:f8:34:5e:4c:25:8c:94:5b: f2:67:3d:5a:df:f5:52:39:6a:cb:de:31:70:d9:b0:02:46:58: dd:b2:7b:da:6e:3f:b8:eb:b3:d0:ee:12:1f:5f:11:e5:a0:d4: a2:22:65:e8:e7:35:5a:72:c5:3f:63:eb:b6:01:33:6d:77:6f: 59:f2:e9:37:bf:8e:0d:c0:39:ca:2f:fc:67:de:b3:69:2d:42: 1e:05:6a:54:01:53:44:da:2b:01:7c:3a:dc:99:cc:7f:df:d2: 94:a9:71:58:b1:df:70:3c:d4:d1:e0:f0:25:89:57:38:56:a4: 2b:2a:55:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw1S6Aj7qWvFxjZQVzhdWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0MjcyYWMwNDIzZmIwOTc1ODNjNjg3MjU2N2Q4NGNhZTQx MGM4OWIwHhcNMjUxMjE4MTQwMDQzWhcNMjUxMjE5MTQwMDQzWjAzMTEwLwYDVQQD Eyg5MTdjZWYxN2M3Mzc0N2VlMzBkNmJmYWNhMzMwY2VhOTgwNDZmMzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwtbPXhznPsasjyCcwLLeARuDvIg h8KQojo3pfUgwVAjXWPBjLvP9d4tcNEjFv3GTnhjLOwMUqM8lYZSMwc7M+oeAf9p KbW720c4jyc3lL3FybhyryZZVXJStzPY/VfO8yx9x+qnRDsZ1heMgCX1bYpeJ6z8 K4wl0g3HL5T0wgQC0X5r1jgQQvS0Aot414ha0VJh8qwtuNdhRV8BVtRZ1NzfOgkn l7LPHMeom8fRrOTqkY1HrJDSOiU/T10+Ro4fN3Gwe3GCrywXWwmxJsK6mUy2rL9t e5FSRenYI1XIivHUXkurUK2Eb6vZFpwuu3Zuoq22hCEkf1rSvnajlfn6awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJF87xfHN0fuMNa/rKMwzqmARvORMB8GA1UdIwQY MBaAFPQnKsBCP7CXWDxoclZ9hMrkEMibMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUNjcXdFSV9zSmRZUEdoeVZuMkV5dVFReUpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83ZjJjZjItNDI5NC00M2Q2LWEzMjEt NDdlZGRkZTJhMzcyLzEvOUNjcXdFSV9zSmRZUEdoeVZuMkV5dVFReUpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy83ZjJjZjItNDI5NC00M2Q2LWEzMjEtNDdlZGRkZTJhMzcy LzEvOUNjcXdFSV9zSmRZUEdoeVZuMkV5dVFReUpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMlCU0IO3 m8r5eys7lY7Kfr6WDBxYC4oUrDbcsXuWEjGEkKv8lV/rm9RRpB1YX45YXrLIA6N5 aJS/1ChVbbzZ77qudQttWWgmtyCdm9kvjHyUaVBxqu/SJJfiiA8lMQ70/NKhvda0 5Wid0LnzdFE8dsJqzDtLXT5RhzJYtvOEJY189cuxGHFOCvg0XkwljJRb8mc9Wt/1 Ujlqy94xcNmwAkZY3bJ72m4/uOuz0O4SH18R5aDUoiJl6Oc1WnLFP2PrtgEzbXdv WfLpN7+ODcA5yi/8Z96zaS1CHgVqVAFTRNorAXw63JnMf9/SlKlxWLHfcDzU0eDw JYlXOFakKypVSA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:08:53 2025 by rpki-client