This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft File: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft (raw, json) Hash identifier: x2YAHuw4HDTUdZRCTJR4P0YWkfslV2xbN3IAfwzj6xw= Subject key identifier: A5:1F:A3:A9:A2:4F:8F:2D:13:B2:F4:46:6F:4F:43:67:23:E5:37:27 Authority key identifier: F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E Certificate issuer: /CN=f57766f0726cff8618af968258f5bb229e937c6e Certificate serial: 019B360E37790257E0E4DB2145235EE9C85F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft Manifest number: 0EB1 Signing time: Fri 19 Dec 2025 10:00:59 +0000 Manifest this update: Fri 19 Dec 2025 10:00:59 +0000 Manifest next update: Sat 20 Dec 2025 10:00:59 +0000 Files and hashes: 1: 9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl (hash: JaQ7iLhH4/uO1BxJjkAPI7Ifw3zthHrtNi8MKkDjd1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:37:79:02:57:e0:e4:db:21:45:23:5e:e9:c8:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f57766f0726cff8618af968258f5bb229e937c6e Validity Not Before: Dec 19 10:00:59 2025 GMT Not After : Dec 20 10:00:59 2025 GMT Subject: CN=a51fa3a9a24f8f2d13b2f4466f4f436723e53727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:24:94:4b:ee:46:e1:5c:81:30:fd:ba:7c:91: 2c:53:3d:2d:e5:c3:ea:b3:d2:9d:7a:a0:8e:a2:83: c0:e0:e3:4a:65:ad:9e:f8:a6:e1:af:2a:c1:1c:75: 14:e8:22:2a:0c:b4:95:a4:b3:22:58:b3:96:83:8c: 89:a8:08:67:00:51:b4:12:ed:d3:f0:1c:0f:fd:82: 6f:5e:83:0e:30:64:b4:a5:18:49:27:39:3c:49:03: 75:e7:45:cb:18:b1:6b:5d:9a:86:2f:8b:e4:db:56: 4d:73:8d:c1:34:ed:2f:1a:9e:09:6d:c3:7e:88:3a: af:13:40:2b:24:82:1f:88:68:28:e0:3c:ec:82:f9: a5:93:39:90:a2:a6:3b:ab:49:87:67:99:6e:37:4b: c7:44:1e:7d:06:78:fe:29:38:ae:e3:4f:79:52:b8: 27:87:ef:9d:9b:18:24:16:0e:49:da:c3:09:3f:36: 89:c6:89:db:d9:2f:58:39:e0:07:42:24:2b:ff:6c: be:dd:af:27:96:50:9e:86:0b:97:e2:2a:31:2b:f7: b5:78:25:27:f3:3d:33:08:8f:3e:e5:a3:11:92:63: 2c:ad:8f:ba:f5:3c:5c:8b:d6:8e:a8:92:2d:ea:48: 63:4a:a8:be:89:ab:08:13:4b:9e:6c:0a:6f:67:d3: 42:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:1F:A3:A9:A2:4F:8F:2D:13:B2:F4:46:6F:4F:43:67:23:E5:37:27 X509v3 Authority Key Identifier: keyid:F5:77:66:F0:72:6C:FF:86:18:AF:96:82:58:F5:BB:22:9E:93:7C:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/590b7f-bbd2-4666-b8fc-a80224604f25/1/9Xdm8HJs_4YYr5aCWPW7Ip6TfG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:ea:ac:7a:d6:b5:37:c9:64:f6:a3:e4:ad:d4:56:fc:0e:d5: 80:f2:d3:7d:41:82:40:fa:d9:2c:d2:14:e5:3f:b7:18:13:f3: 8a:68:1e:71:2d:1b:5b:f6:b6:c7:4d:99:71:85:9a:92:0f:0e: 89:53:c5:d9:9a:31:c2:ce:d9:77:cb:e0:08:ef:17:df:04:81: 40:58:0c:8f:1a:c6:29:74:d5:8f:f1:14:e0:20:a7:de:d8:e4: 2a:a3:39:e9:0a:66:b4:9e:5a:d6:93:03:58:c1:57:b2:8e:64: 36:76:6e:95:09:86:ec:5c:35:42:90:fb:48:62:e7:06:8b:ec: 3b:ac:04:88:30:cb:5f:5d:15:23:2d:6b:f6:cd:ac:b6:55:92: d3:6a:82:f8:83:7a:2f:3e:64:f2:cd:41:4c:f2:c4:96:50:6f: b5:b3:93:d4:4a:61:52:67:3a:b1:ef:8d:a3:79:1e:2c:ba:51: 1d:a1:81:d3:02:2b:93:8c:97:45:76:36:40:87:a4:4b:e8:c3: 02:67:5a:0e:86:d8:70:06:f3:d8:94:fa:c0:6b:6c:0c:54:96: b5:44:f4:41:c9:33:dc:21:4d:fe:d7:8b:e4:1c:83:e1:3a:3f: d0:42:48:1c:53:0d:f3:9b:6b:7f:e3:7d:b6:16:7f:04:96:9c: 7d:f3:99:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2Djd5Alfg5NshRSNe6chfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1Nzc2NmYwNzI2Y2ZmODYxOGFmOTY4MjU4ZjViYjIyOWU5 MzdjNmUwHhcNMjUxMjE5MTAwMDU5WhcNMjUxMjIwMTAwMDU5WjAzMTEwLwYDVQQD EyhhNTFmYTNhOWEyNGY4ZjJkMTNiMmY0NDY2ZjRmNDM2NzIzZTUzNzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySSUS+5G4VyBMP26fJEsUz0t5cPq s9KdeqCOooPA4ONKZa2e+KbhryrBHHUU6CIqDLSVpLMiWLOWg4yJqAhnAFG0Eu3T 8BwP/YJvXoMOMGS0pRhJJzk8SQN150XLGLFrXZqGL4vk21ZNc43BNO0vGp4JbcN+ iDqvE0ArJIIfiGgo4DzsgvmlkzmQoqY7q0mHZ5luN0vHRB59Bnj+KTiu4095Urgn h++dmxgkFg5J2sMJPzaJxonb2S9YOeAHQiQr/2y+3a8nllCehguX4ioxK/e1eCUn 8z0zCI8+5aMRkmMsrY+69Txci9aOqJIt6khjSqi+iasIE0uebApvZ9NCdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUfo6miT48tE7L0Rm9PQ2cj5TcnMB8GA1UdIwQY MBaAFPV3ZvBybP+GGK+Wglj1uyKek3xuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVhkbThISnNfNFlZcjVhQ1dQVzdJcDZUZkc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81OTBiN2YtYmJkMi00NjY2LWI4ZmMt YTgwMjI0NjA0ZjI1LzEvOVhkbThISnNfNFlZcjVhQ1dQVzdJcDZUZkc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC81OTBiN2YtYmJkMi00NjY2LWI4ZmMtYTgwMjI0NjA0ZjI1 LzEvOVhkbThISnNfNFlZcjVhQ1dQVzdJcDZUZkc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKeqseta1 N8lk9qPkrdRW/A7VgPLTfUGCQPrZLNIU5T+3GBPzimgecS0bW/a2x02ZcYWakg8O iVPF2Zoxws7Zd8vgCO8X3wSBQFgMjxrGKXTVj/EU4CCn3tjkKqM56QpmtJ5a1pMD WMFXso5kNnZulQmG7Fw1QpD7SGLnBovsO6wEiDDLX10VIy1r9s2stlWS02qC+IN6 Lz5k8s1BTPLEllBvtbOT1EphUmc6se+No3keLLpRHaGB0wIrk4yXRXY2QIekS+jD AmdaDobYcAbz2JT6wGtsDFSWtUT0Qckz3CFN/teL5ByD4To/0EJIHFMN85trf+N9 thZ/BJacffOZew== -----END CERTIFICATE-----Generated at Fri Dec 19 15:58:29 2025 by rpki-client