This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft File: 91sCopx2blsTs-sXapccEt3h1M4.mft (raw, json) Hash identifier: m/UArX7648ZrdciMDJOBTQE+oR7lsZrmiatqpJ7ip3k= Subject key identifier: 2F:1D:C4:5D:7B:DA:B4:CB:56:5B:72:27:B8:FD:3D:84:03:43:B6:32 Authority key identifier: F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE Certificate issuer: /CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce Certificate serial: 019B3BA231582A5CB3AF19F5967FAA793E14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft Manifest number: 130E Signing time: Sat 20 Dec 2025 12:00:43 +0000 Manifest this update: Sat 20 Dec 2025 12:00:43 +0000 Manifest next update: Sun 21 Dec 2025 12:00:43 +0000 Files and hashes: 1: 91sCopx2blsTs-sXapccEt3h1M4.crl (hash: Hyaakk3PzmEw1CVOSTgjB/UqgFowXKlI4bat2119VR8=) 2: IKYkPycoZ16me6Kb0OaEhELdyLo.roa (hash: Um/+K1DsE/fHN8bVJfVKmH+mN7B9+NKyvrFzBu4jUT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:31:58:2a:5c:b3:af:19:f5:96:7f:aa:79:3e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce Validity Not Before: Dec 20 12:00:43 2025 GMT Not After : Dec 21 12:00:43 2025 GMT Subject: CN=2f1dc45d7bdab4cb565b7227b8fd3d840343b632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:08:43:89:04:a7:ec:5e:0c:ac:84:c2:c7:d7: 53:91:7a:55:87:49:06:2d:e0:cf:b6:bc:76:15:a1: 0b:73:ae:87:01:a3:21:a9:42:ca:d3:27:ea:33:f4: 5c:ac:b3:26:64:f2:9d:ae:85:e2:b2:76:71:46:0b: f7:cf:be:6d:fd:54:d3:89:b0:cf:2b:e0:84:35:f7: 65:3c:68:a2:08:df:b8:90:03:0d:29:1e:96:a1:c7: b1:2b:eb:2e:fa:66:89:c3:ed:32:0e:f6:ac:c9:32: 89:5c:ca:e3:d4:58:bd:01:1a:b4:08:17:dd:8a:d7: 1d:64:50:64:26:f0:46:23:93:13:0c:cb:c9:c6:7a: 59:91:11:64:e0:93:c2:5a:50:84:92:47:07:50:dc: 13:3a:0b:3b:a5:70:02:b7:31:78:9d:af:2a:f8:7e: 53:12:17:03:1b:5e:b2:45:4d:2c:0e:3c:e0:86:4f: b7:98:f4:cf:23:9e:ea:9d:95:92:1a:81:9a:b5:27: 2a:05:13:b7:9c:02:f6:e0:1b:ee:67:cf:76:6a:a8: bb:9c:ca:a9:d1:70:98:e3:a4:8c:3b:9b:be:0b:0b: 44:19:fa:32:5f:64:a2:60:f2:f3:06:cf:4b:0d:ac: 49:9f:ce:b5:13:bd:2b:6d:81:4b:cb:35:77:e0:ee: 75:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:1D:C4:5D:7B:DA:B4:CB:56:5B:72:27:B8:FD:3D:84:03:43:B6:32 X509v3 Authority Key Identifier: keyid:F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:86:8b:3c:96:c0:fd:5c:3d:6c:f2:44:77:f9:71:0d:4a:70: 9b:e5:b7:bf:3b:ba:6a:be:85:c8:86:36:09:9b:f4:87:7d:4b: 82:93:26:0b:8c:b8:cd:b0:45:62:f9:f7:e3:25:48:13:d3:8d: 67:d4:9d:76:8d:cd:d4:0a:4f:df:f5:d9:e9:3d:e0:fb:df:25: 14:81:9d:a0:4c:13:b4:c4:7d:2f:b7:14:61:49:cb:ab:17:5d: 95:1d:00:f1:9d:85:d2:42:58:6b:c6:a7:82:83:f7:17:0c:7a: 03:57:0b:0a:b7:26:2f:b5:65:56:25:7f:79:6f:de:90:e6:af: 96:0f:14:fa:8e:27:1e:35:22:f0:c5:f0:e1:7f:91:3a:c7:02: 75:71:e6:65:b7:f4:cd:4b:61:1e:3a:79:b5:ad:7a:91:59:8d: fe:d6:02:71:dd:00:ae:4b:fc:dc:32:ef:96:bf:8d:6c:4a:ef: f9:69:15:59:b5:ee:6a:94:60:43:72:6e:e7:8c:f5:d7:d9:c4: 82:20:9f:51:2a:33:2e:18:5a:e2:e4:8e:98:5d:d3:27:9f:b0: 2a:5c:48:09:39:ab:72:59:bb:9a:9f:c4:b8:6d:8e:22:88:4c: 43:34:c8:89:16:13:6f:77:c2:6c:3a:47:38:8e:69:7a:1b:a6: 40:ac:46:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ojFYKlyzrxn1ln+qeT4UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NWIwMmEyOWM3NjZlNWIxM2IzZWIxNzZhOTcxYzEyZGRl MWQ0Y2UwHhcNMjUxMjIwMTIwMDQzWhcNMjUxMjIxMTIwMDQzWjAzMTEwLwYDVQQD EygyZjFkYzQ1ZDdiZGFiNGNiNTY1YjcyMjdiOGZkM2Q4NDAzNDNiNjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswhDiQSn7F4MrITCx9dTkXpVh0kG LeDPtrx2FaELc66HAaMhqULK0yfqM/RcrLMmZPKdroXisnZxRgv3z75t/VTTibDP K+CENfdlPGiiCN+4kAMNKR6WocexK+su+maJw+0yDvasyTKJXMrj1Fi9ARq0CBfd itcdZFBkJvBGI5MTDMvJxnpZkRFk4JPCWlCEkkcHUNwTOgs7pXACtzF4na8q+H5T EhcDG16yRU0sDjzghk+3mPTPI57qnZWSGoGatScqBRO3nAL24BvuZ892aqi7nMqp 0XCY46SMO5u+CwtEGfoyX2SiYPLzBs9LDaxJn861E70rbYFLyzV34O51XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8dxF172rTLVltyJ7j9PYQDQ7YyMB8GA1UdIwQY MBaAFPdbAqKcdm5bE7PrF2qXHBLd4dTOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTFzQ29weDJibHNUcy1zWGFwY2NFdDNoMU00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wYTlmZjItN2RmOC00M2YzLWEzMWYt YmNkYmI1NDJjYjVhLzEvOTFzQ29weDJibHNUcy1zWGFwY2NFdDNoMU00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8wYTlmZjItN2RmOC00M2YzLWEzMWYtYmNkYmI1NDJjYjVh LzEvOTFzQ29weDJibHNUcy1zWGFwY2NFdDNoMU00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHoaLPJbA /Vw9bPJEd/lxDUpwm+W3vzu6ar6FyIY2CZv0h31LgpMmC4y4zbBFYvn34yVIE9ON Z9Sddo3N1ApP3/XZ6T3g+98lFIGdoEwTtMR9L7cUYUnLqxddlR0A8Z2F0kJYa8an goP3Fwx6A1cLCrcmL7VlViV/eW/ekOavlg8U+o4nHjUi8MXw4X+ROscCdXHmZbf0 zUthHjp5ta16kVmN/tYCcd0Arkv83DLvlr+NbErv+WkVWbXuapRgQ3Ju54z119nE giCfUSozLhha4uSOmF3TJ5+wKlxICTmrclm7mp/EuG2OIohMQzTIiRYTb3fCbDpH OI5pehumQKxGSQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:46:18 2025 by rpki-client