This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/r9WY8p3VxWKY8usFdd4n_DuiCVE.mft File: r9WY8p3VxWKY8usFdd4n_DuiCVE.mft (raw, json) Hash identifier: NRJXeX9lLTCyPOL6r68RsFPcofO+aFdAx8l1aETq8n4= Subject key identifier: 33:25:1F:92:67:0A:15:47:5A:BB:23:C8:56:B7:CE:5F:FE:28:C8:3B Authority key identifier: AF:D5:98:F2:9D:D5:C5:62:98:F2:EB:05:75:DE:27:FC:3B:A2:09:51 Certificate issuer: /CN=afd598f29dd5c56298f2eb0575de27fc3ba20951 Certificate serial: 019B3A90E00B452CA1E8EBF0FC4C304228CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9WY8p3VxWKY8usFdd4n_DuiCVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/r9WY8p3VxWKY8usFdd4n_DuiCVE.mft Manifest number: 0C Signing time: Sat 20 Dec 2025 07:02:11 +0000 Manifest this update: Sat 20 Dec 2025 07:02:11 +0000 Manifest next update: Sun 21 Dec 2025 07:02:11 +0000 Files and hashes: 1: r9WY8p3VxWKY8usFdd4n_DuiCVE.crl (hash: LyyyIjMVQDymv6BaQqjcW/8l7gAIl2jEo9NSoUL39UM=) 2: wliZ3Xk4a5dST5lG-0jqVyesff0.roa (hash: cFQjKXKVqiif1PZ4ZLX4VRumIvFEAtMT9pBdOzRqCpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/r9WY8p3VxWKY8usFdd4n_DuiCVE.crl rsync://rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/r9WY8p3VxWKY8usFdd4n_DuiCVE.mft rsync://rpki.ripe.net/repository/DEFAULT/r9WY8p3VxWKY8usFdd4n_DuiCVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:e0:0b:45:2c:a1:e8:eb:f0:fc:4c:30:42:28:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afd598f29dd5c56298f2eb0575de27fc3ba20951 Validity Not Before: Dec 20 07:02:11 2025 GMT Not After : Dec 21 07:02:11 2025 GMT Subject: CN=33251f92670a15475abb23c856b7ce5ffe28c83b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:89:ec:5d:eb:4a:22:ae:02:e6:dd:46:72:46: 65:fd:c6:e7:84:9b:2f:79:d6:66:a6:fa:70:5e:ec: 07:d9:92:e5:a5:94:4b:cd:2c:d0:56:5d:4d:ac:45: 88:21:9d:92:0b:83:37:a1:2e:95:69:30:c9:72:a0: 49:74:41:8e:47:cb:8e:56:43:95:b5:87:a1:71:4f: f8:10:ce:14:d1:2e:7e:de:c0:84:97:b5:4c:30:78: c0:83:9c:ce:45:a3:ab:31:33:b4:07:a7:01:d1:d2: 98:2b:be:af:f6:a5:33:64:9e:9f:bc:a9:41:01:07: 11:ab:e0:95:96:ca:e0:5f:d1:7b:eb:33:8f:48:7e: 51:06:2a:67:8a:d4:38:2f:2f:e9:2d:4d:99:31:6c: 25:39:a5:17:e9:b4:fd:ed:51:b6:6e:90:13:79:26: 98:30:86:61:f1:ba:63:2b:15:e2:66:d4:b1:cd:63: f0:a3:6f:23:ad:b5:4e:b8:28:1f:a6:2e:b4:ca:43: 1f:d3:32:38:f1:9b:56:12:80:80:55:74:b8:26:8f: bd:bb:d9:73:cf:53:6e:49:49:9e:80:30:5b:88:21: 37:5f:f9:98:ce:2c:b8:fb:02:f2:de:5c:e7:e7:ea: 37:44:a1:0a:b8:e4:40:72:30:ff:8a:38:fb:69:d3: 0a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:25:1F:92:67:0A:15:47:5A:BB:23:C8:56:B7:CE:5F:FE:28:C8:3B X509v3 Authority Key Identifier: keyid:AF:D5:98:F2:9D:D5:C5:62:98:F2:EB:05:75:DE:27:FC:3B:A2:09:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9WY8p3VxWKY8usFdd4n_DuiCVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/r9WY8p3VxWKY8usFdd4n_DuiCVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ffafdb-815a-47a8-971b-b6a4684e25f0/1/r9WY8p3VxWKY8usFdd4n_DuiCVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:16:fa:6e:65:71:2e:c1:6e:aa:8e:29:5f:72:4d:be:b1:e1: 7c:cb:93:f6:41:f2:65:fb:b4:5d:50:5d:5b:9b:ee:8c:e4:82: 00:60:86:58:0c:46:61:d2:d3:25:2a:75:bf:66:b2:41:e0:fa: 45:fc:a6:99:16:cf:5e:f5:a3:90:c7:15:7d:fc:22:86:67:af: fc:c0:7e:56:b8:c4:47:ea:d2:88:bd:8d:6e:31:3f:aa:a5:a7: 8d:96:59:de:cf:dd:30:cd:4d:59:db:1b:9f:9f:ae:c3:63:06: c3:e0:f0:09:18:f5:0a:62:be:fb:34:2e:2c:c5:87:da:c8:64: 90:44:cb:41:9a:f9:d2:bc:7b:ec:68:90:10:3a:f8:fd:03:8a: 74:75:36:da:88:89:57:ae:0c:c0:31:d5:5d:50:96:62:37:38: 43:5d:19:70:da:14:17:88:19:41:68:ac:26:97:c5:47:4e:16: 7e:31:b3:a3:27:68:b7:c4:67:74:75:02:e2:4f:37:2b:0a:ba: c2:89:62:04:30:00:ad:03:e9:3e:ad:ce:ae:92:3c:e9:2c:c8: c8:69:67:f2:aa:47:d0:bf:c3:dc:75:2d:c7:4e:ba:64:11:31: c3:60:12:67:2b:b8:a4:52:7d:c7:9c:7c:9e:92:78:ef:fb:be: b5:7c:24:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kOALRSyh6Ovw/EwwQijOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZDU5OGYyOWRkNWM1NjI5OGYyZWIwNTc1ZGUyN2ZjM2Jh MjA5NTEwHhcNMjUxMjIwMDcwMjExWhcNMjUxMjIxMDcwMjExWjAzMTEwLwYDVQQD EygzMzI1MWY5MjY3MGExNTQ3NWFiYjIzYzg1NmI3Y2U1ZmZlMjhjODNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4nsXetKIq4C5t1GckZl/cbnhJsv edZmpvpwXuwH2ZLlpZRLzSzQVl1NrEWIIZ2SC4M3oS6VaTDJcqBJdEGOR8uOVkOV tYehcU/4EM4U0S5+3sCEl7VMMHjAg5zORaOrMTO0B6cB0dKYK76v9qUzZJ6fvKlB AQcRq+CVlsrgX9F76zOPSH5RBipnitQ4Ly/pLU2ZMWwlOaUX6bT97VG2bpATeSaY MIZh8bpjKxXiZtSxzWPwo28jrbVOuCgfpi60ykMf0zI48ZtWEoCAVXS4Jo+9u9lz z1NuSUmegDBbiCE3X/mYziy4+wLy3lzn5+o3RKEKuORAcjD/ijj7adMK5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMlH5JnChVHWrsjyFa3zl/+KMg7MB8GA1UdIwQY MBaAFK/VmPKd1cVimPLrBXXeJ/w7oglRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjlXWThwM1Z4V0tZOHVzRmRkNG5fRHVpQ1ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9mZmFmZGItODE1YS00N2E4LTk3MWIt YjZhNDY4NGUyNWYwLzEvcjlXWThwM1Z4V0tZOHVzRmRkNG5fRHVpQ1ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9mZmFmZGItODE1YS00N2E4LTk3MWItYjZhNDY4NGUyNWYw LzEvcjlXWThwM1Z4V0tZOHVzRmRkNG5fRHVpQ1ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRb6bmVx LsFuqo4pX3JNvrHhfMuT9kHyZfu0XVBdW5vujOSCAGCGWAxGYdLTJSp1v2ayQeD6 RfymmRbPXvWjkMcVffwihmev/MB+VrjER+rSiL2NbjE/qqWnjZZZ3s/dMM1NWdsb n5+uw2MGw+DwCRj1CmK++zQuLMWH2shkkETLQZr50rx77GiQEDr4/QOKdHU22oiJ V64MwDHVXVCWYjc4Q10ZcNoUF4gZQWisJpfFR04WfjGzoydot8RndHUC4k83Kwq6 woliBDAArQPpPq3OrpI86SzIyGln8qpH0L/D3HUtx066ZBExw2ASZyu4pFJ9x5x8 npJ47/u+tXwkEw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:01:44 2025 by rpki-client