This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft File: V9minRgOgZpHgvtsbqFtOn0ykQA.mft (raw, json) Hash identifier: AxNcwWBwSCijiLZG6bcJ3zNdwXXcbrYWNAb2W1rp3jM= Subject key identifier: FF:70:42:6F:02:F2:33:9E:A3:2B:E0:3E:94:C6:CA:6C:47:82:D5:61 Authority key identifier: 57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00 Certificate issuer: /CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100 Certificate serial: 019B51BD062BF1D63F7ED1BC372332E29EFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft Manifest number: 09A8 Signing time: Wed 24 Dec 2025 19:01:40 +0000 Manifest this update: Wed 24 Dec 2025 19:01:40 +0000 Manifest next update: Thu 25 Dec 2025 19:01:40 +0000 Files and hashes: 1: V9minRgOgZpHgvtsbqFtOn0ykQA.crl (hash: ToMlHkJMMSRDHFhjCB3uBOeSyWRxzXx/NGQ7/ZDeIMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:06:2b:f1:d6:3f:7e:d1:bc:37:23:32:e2:9e:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57d9a29d180e819a4782fb6c6ea16d3a7d329100 Validity Not Before: Dec 24 19:01:40 2025 GMT Not After : Dec 25 19:01:40 2025 GMT Subject: CN=ff70426f02f2339ea32be03e94c6ca6c4782d561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ae:c8:c1:32:59:2a:ac:84:b4:a0:67:92:49: eb:31:e5:7d:27:32:29:d0:72:32:a9:4b:18:88:de: 0a:57:98:47:5b:c8:dd:89:62:f5:7c:08:5c:24:7f: 10:0c:cf:cf:73:44:1c:4b:13:3c:d4:d7:72:16:9c: 5f:0f:f4:eb:32:02:d9:cc:25:d9:7c:31:92:8c:99: a1:e5:7d:d6:a7:2a:11:6e:8a:a6:94:bb:22:0a:fc: 8e:e3:a1:87:01:fc:28:87:43:bd:e6:2e:24:33:d7: 90:3d:c7:da:33:e1:2f:4c:d5:0c:11:e0:70:5c:5e: 2a:ec:27:00:69:84:3b:b3:bd:04:b1:65:9e:12:a1: 02:b6:a5:82:1e:eb:8f:f5:6f:b9:f3:62:21:90:19: ea:d4:0d:a8:68:89:92:82:3e:06:d3:b7:fa:34:be: f5:3b:71:ac:f1:40:7c:a9:17:4a:0a:6a:5f:b0:a1: 7f:e7:23:32:95:27:2a:2d:84:7f:b6:fe:7d:b5:91: 4d:22:a1:da:4c:51:ce:72:12:f7:0f:11:ee:4b:21: b9:87:27:24:c5:d1:d9:dd:21:aa:4f:6f:a0:0c:35: 4e:bd:7a:1c:8c:da:90:27:cf:e4:bd:ed:0d:f1:ba: a4:2e:d9:af:a0:f0:b8:c3:82:69:91:03:75:f9:e9: 1f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:70:42:6F:02:F2:33:9E:A3:2B:E0:3E:94:C6:CA:6C:47:82:D5:61 X509v3 Authority Key Identifier: keyid:57:D9:A2:9D:18:0E:81:9A:47:82:FB:6C:6E:A1:6D:3A:7D:32:91:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9minRgOgZpHgvtsbqFtOn0ykQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1ab53-ecdd-4f3f-b604-015cf547e447/1/V9minRgOgZpHgvtsbqFtOn0ykQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:79:45:09:11:5c:f1:37:44:01:e5:6f:4c:33:39:22:e5:83: bc:63:81:85:df:0f:b2:51:16:44:13:7e:20:0e:a0:02:38:5c: ea:0e:91:7d:a9:0f:ce:81:30:19:7c:63:03:46:7f:72:90:5a: bf:1b:91:4d:e4:20:d0:d4:06:8a:82:6b:cf:45:08:91:f9:87: fe:eb:0f:ef:31:10:c0:44:83:83:e9:28:e9:09:ae:3a:e2:4e: d5:0a:c5:9a:4b:5d:0d:6f:f6:dc:05:81:c3:80:1c:84:52:06: 72:6d:1f:3d:c3:61:7a:8b:ed:81:61:65:6d:1b:ee:60:5c:f1: 40:bf:e2:36:b8:4d:fa:73:e7:0c:42:57:25:ca:00:55:46:30: f6:b8:5d:4a:5d:5b:9f:27:c1:e2:58:ac:04:bc:88:03:7a:11: f2:9c:06:6d:b2:a7:50:a4:8e:c4:69:be:62:3d:3c:0f:51:8d: 47:08:1a:00:7d:f2:f2:5a:0e:03:ff:b5:0b:14:27:e6:60:1e: 36:84:c5:1c:d7:f3:47:4d:ed:37:60:e3:47:c0:79:a1:af:d4: 0e:29:c4:c1:47:6e:30:4d:ea:71:92:f6:7a:59:1e:8e:a1:ba: 87:70:6e:53:3d:bf:8d:f4:3a:ec:2a:a3:73:cb:49:67:ca:82: ca:98:33:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvQYr8dY/ftG8NyMy4p76MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3ZDlhMjlkMTgwZTgxOWE0NzgyZmI2YzZlYTE2ZDNhN2Qz MjkxMDAwHhcNMjUxMjI0MTkwMTQwWhcNMjUxMjI1MTkwMTQwWjAzMTEwLwYDVQQD EyhmZjcwNDI2ZjAyZjIzMzllYTMyYmUwM2U5NGM2Y2E2YzQ3ODJkNTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq7IwTJZKqyEtKBnkknrMeV9JzIp 0HIyqUsYiN4KV5hHW8jdiWL1fAhcJH8QDM/Pc0QcSxM81NdyFpxfD/TrMgLZzCXZ fDGSjJmh5X3WpyoRboqmlLsiCvyO46GHAfwoh0O95i4kM9eQPcfaM+EvTNUMEeBw XF4q7CcAaYQ7s70EsWWeEqECtqWCHuuP9W+582IhkBnq1A2oaImSgj4G07f6NL71 O3Gs8UB8qRdKCmpfsKF/5yMylScqLYR/tv59tZFNIqHaTFHOchL3DxHuSyG5hyck xdHZ3SGqT2+gDDVOvXocjNqQJ8/kve0N8bqkLtmvoPC4w4JpkQN1+ekfxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9wQm8C8jOeoyvgPpTGymxHgtVhMB8GA1UdIwQY MBaAFFfZop0YDoGaR4L7bG6hbTp9MpEAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjltaW5SZ09nWnBIZ3Z0c2JxRnRPbjB5a1FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMWFiNTMtZWNkZC00ZjNmLWI2MDQt MDE1Y2Y1NDdlNDQ3LzEvVjltaW5SZ09nWnBIZ3Z0c2JxRnRPbjB5a1FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9jMWFiNTMtZWNkZC00ZjNmLWI2MDQtMDE1Y2Y1NDdlNDQ3 LzEvVjltaW5SZ09nWnBIZ3Z0c2JxRnRPbjB5a1FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInlFCRFc 8TdEAeVvTDM5IuWDvGOBhd8PslEWRBN+IA6gAjhc6g6RfakPzoEwGXxjA0Z/cpBa vxuRTeQg0NQGioJrz0UIkfmH/usP7zEQwESDg+ko6QmuOuJO1QrFmktdDW/23AWB w4AchFIGcm0fPcNheovtgWFlbRvuYFzxQL/iNrhN+nPnDEJXJcoAVUYw9rhdSl1b nyfB4lisBLyIA3oR8pwGbbKnUKSOxGm+Yj08D1GNRwgaAH3y8loOA/+1CxQn5mAe NoTFHNfzR03tN2DjR8B5oa/UDinEwUduME3qcZL2elkejqG6h3BuUz2/jfQ67Cqj c8tJZ8qCypgzUg== -----END CERTIFICATE-----Generated at Thu Dec 25 03:29:33 2025 by rpki-client