This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft File: V9minRgOgZpHgvtsbqFtOn0ykQA.mft (raw, json) Hash identifier: 6jYS+5xwIfCPLfg6xDHpdAJR9QNPU288BZGPVpYhoSQ= Subject key identifier: EE:6C:64:F6:06:5E:2B:16:8C:07:1A:C6:4F:39:92:08:61:84:88:F9 Authority key identifier: 57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00 Certificate issuer: /CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100 Certificate serial: 019B631EE9D39F73F24283167DEF86706A38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft Manifest number: 09B1 Signing time: Sun 28 Dec 2025 04:02:08 +0000 Manifest this update: Sun 28 Dec 2025 04:02:08 +0000 Manifest next update: Mon 29 Dec 2025 04:02:08 +0000 Files and hashes: 1: V9minRgOgZpHgvtsbqFtOn0ykQA.crl (hash: huxEUtUoanA2MzbPVPb+lUpSS8p1hn5hlJQp8XkJRR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1e:e9:d3:9f:73:f2:42:83:16:7d:ef:86:70:6a:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100 Validity Not Before: Dec 28 04:02:08 2025 GMT Not After : Dec 29 04:02:08 2025 GMT Subject: CN=ee6c64f6065e2b168c071ac64f399208618488f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d8:6b:af:24:50:56:54:b8:04:fd:3a:33:32: b7:a2:ea:54:69:4d:6b:2e:45:db:4f:d5:70:71:93: 91:73:c1:c7:1f:c0:67:e5:98:fc:99:48:11:3b:29: 4f:25:bc:48:4e:17:bc:7e:f3:d9:a5:86:15:c6:05: cf:63:cf:0f:64:25:42:c9:2c:f5:30:ab:15:f8:19: af:40:ec:bf:40:01:3c:5c:83:67:75:3b:7e:77:e4: 3c:26:ae:71:5c:cf:49:90:57:06:47:c8:76:dc:0f: eb:29:88:6b:d1:9d:fd:65:92:20:80:5a:70:c0:cf: 62:78:f6:9f:64:e2:55:0f:86:fa:d1:a2:8d:d3:e5: 7d:a8:aa:da:3b:a6:25:5e:33:95:0e:36:26:aa:ef: 4b:c7:72:92:0d:e7:f5:07:a9:a2:1a:3f:d2:ee:c5: ee:0a:2e:a6:1f:eb:2f:de:bd:8b:81:68:c6:23:12: 1b:91:de:48:65:a6:85:4b:78:7f:63:95:b5:95:10: 95:6d:32:a1:c7:38:6c:ea:12:b7:ac:85:37:7b:b4: 7e:ab:3a:12:5d:b1:ee:be:03:ff:9e:1d:86:cd:c6: f6:d1:fc:69:9e:98:06:3c:96:71:44:1f:65:8e:3e: c0:ba:4a:83:a6:5d:e9:4c:d7:a3:bd:5f:c9:ab:f3: 95:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:6C:64:F6:06:5E:2B:16:8C:07:1A:C6:4F:39:92:08:61:84:88:F9 X509v3 Authority Key Identifier: keyid:57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:79:72:bb:5b:73:47:84:d6:13:5d:8d:d9:4c:99:7b:b4:9c: 8e:4a:69:a7:d7:f8:bb:6a:d6:15:00:00:86:65:b0:5f:87:4d: 49:18:ba:35:0a:fb:b3:3d:12:57:64:98:db:09:40:4e:b2:96: 07:8f:87:50:b5:be:66:88:6d:2b:2e:c7:88:85:8c:45:7a:6e: 8d:a8:d0:34:27:e1:6f:ac:1b:fe:e0:5a:0d:2e:12:72:fa:79: 1f:b2:ff:b9:96:66:74:28:c9:04:06:df:92:b9:76:ae:63:7f: 98:67:07:17:d3:23:eb:ed:14:c2:0b:56:21:3e:97:c6:19:03: 20:20:9c:65:eb:69:c5:f0:06:8a:b9:8c:0f:47:cd:a3:98:48: 54:f7:57:17:6f:a0:af:b5:e2:aa:f2:4d:02:86:cc:f9:fa:68: 51:eb:ca:15:e0:3a:ab:0a:56:fd:8d:0d:a4:12:bb:3e:2b:7d: 5b:83:7a:f1:72:9c:27:10:91:b1:4f:a9:25:2a:25:4d:45:2b: 6a:a7:1e:4c:70:77:bf:85:70:80:4d:e3:d1:22:7b:c0:e3:c9: 41:f9:b5:ff:c9:e4:7b:8c:07:ac:f1:b7:de:3d:9a:ba:92:01: 63:5a:e4:14:23:d2:4f:9a:67:da:b0:e0:2b:62:28:41:09:2f: b9:e7:32:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHunTn3PyQoMWfe+GcGo4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3ZDlhMjlkMTgwZTgxOWE0NzgyZmI2YzZlYTE2ZDNhN2Qz MjkxMDAwHhcNMjUxMjI4MDQwMjA4WhcNMjUxMjI5MDQwMjA4WjAzMTEwLwYDVQQD EyhlZTZjNjRmNjA2NWUyYjE2OGMwNzFhYzY0ZjM5OTIwODYxODQ4OGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuthrryRQVlS4BP06MzK3oupUaU1r LkXbT9VwcZORc8HHH8Bn5Zj8mUgROylPJbxIThe8fvPZpYYVxgXPY88PZCVCySz1 MKsV+BmvQOy/QAE8XINndTt+d+Q8Jq5xXM9JkFcGR8h23A/rKYhr0Z39ZZIggFpw wM9iePafZOJVD4b60aKN0+V9qKraO6YlXjOVDjYmqu9Lx3KSDef1B6miGj/S7sXu Ci6mH+sv3r2LgWjGIxIbkd5IZaaFS3h/Y5W1lRCVbTKhxzhs6hK3rIU3e7R+qzoS XbHuvgP/nh2Gzcb20fxpnpgGPJZxRB9ljj7AukqDpl3pTNejvV/Jq/OVxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5sZPYGXisWjAcaxk85kghhhIj5MB8GA1UdIwQY MBaAFFfZop0YDoGaR4L7bG6hbTp9MpEAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjltaW5SZ09nWnBIZ3Z0c2JxRnRPbjB5a1FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMWFiNTMtZWNkZC00ZjNmLWI2MDQt MDE1Y2Y1NDdlNDQ3LzEvVjltaW5SZ09nWnBIZ3Z0c2JxRnRPbjB5a1FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9jMWFiNTMtZWNkZC00ZjNmLWI2MDQtMDE1Y2Y1NDdlNDQ3 LzEvVjltaW5SZ09nWnBIZ3Z0c2JxRnRPbjB5a1FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlXlyu1tz R4TWE12N2UyZe7Scjkppp9f4u2rWFQAAhmWwX4dNSRi6NQr7sz0SV2SY2wlATrKW B4+HULW+ZohtKy7HiIWMRXpujajQNCfhb6wb/uBaDS4Scvp5H7L/uZZmdCjJBAbf krl2rmN/mGcHF9Mj6+0UwgtWIT6XxhkDICCcZetpxfAGirmMD0fNo5hIVPdXF2+g r7XiqvJNAobM+fpoUevKFeA6qwpW/Y0NpBK7Pit9W4N68XKcJxCRsU+pJSolTUUr aqceTHB3v4VwgE3j0SJ7wOPJQfm1/8nke4wHrPG33j2aupIBY1rkFCPST5pn2rDg K2IoQQkvuecyeQ== -----END CERTIFICATE-----Generated at Sun Dec 28 06:21:56 2025 by rpki-client