This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft File: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft (raw, json) Hash identifier: bSxRGRATjFbaNf2ogWncKqNNb4GibBKyTk1ApgZg3ig= Subject key identifier: 8C:42:B3:3C:4B:CE:A3:22:B6:90:53:12:A3:CD:42:B6:93:E6:B4:D4 Authority key identifier: D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C Certificate issuer: /CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c Certificate serial: 019B631EA6A8A7637940104C9046909499C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft Manifest number: 1798 Signing time: Sun 28 Dec 2025 04:01:51 +0000 Manifest this update: Sun 28 Dec 2025 04:01:51 +0000 Manifest next update: Mon 29 Dec 2025 04:01:51 +0000 Files and hashes: 1: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl (hash: QjWUZ3VmJj7ZJqNHyzK6J5ud2ydxR9NVJ7Ken+z6KCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1e:a6:a8:a7:63:79:40:10:4c:90:46:90:94:99:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c Validity Not Before: Dec 28 04:01:51 2025 GMT Not After : Dec 29 04:01:51 2025 GMT Subject: CN=8c42b33c4bcea322b6905312a3cd42b693e6b4d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:51:a8:03:b3:96:09:f9:ca:97:11:a0:a2:14: a1:05:c9:c9:d2:40:2f:e1:1b:21:34:3e:1e:00:51: 5d:95:8d:aa:45:05:fa:79:99:00:bb:fa:18:03:1e: e6:23:0c:aa:c6:3d:f6:aa:df:eb:0e:0e:aa:c8:bf: 80:2a:98:6f:e9:23:9e:d9:d5:2f:ac:75:bb:f6:7e: 5f:5f:07:6a:53:cf:63:e7:20:c0:8d:a7:92:c4:0f: c6:b8:fd:d2:38:b3:c5:4b:f9:49:07:70:70:9d:17: 2f:7e:72:5a:97:99:af:0a:07:56:d0:cb:14:02:08: 60:4f:de:9b:82:b4:90:f0:e2:7e:e1:f6:28:4a:4b: 52:3f:8c:0e:4e:e4:e0:af:ad:52:18:7d:da:bc:4e: 58:e0:6b:7e:64:d3:14:a9:ad:19:5f:cc:7f:9e:7b: c7:08:2d:46:58:ac:c9:8c:04:88:c2:d1:3c:b0:df: b1:49:b6:ea:d2:61:1c:84:36:80:4b:d0:f4:48:ec: 37:ff:8f:50:ef:d3:68:7a:c9:74:3c:51:1f:03:02: 99:89:22:ed:14:6a:63:b0:4f:d7:d8:0e:59:a7:ee: c2:7c:c9:70:97:64:06:e4:95:9c:69:01:6b:5d:0b: 89:7d:52:67:b0:0e:66:33:1a:69:e4:36:cc:2f:f0: 62:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:42:B3:3C:4B:CE:A3:22:B6:90:53:12:A3:CD:42:B6:93:E6:B4:D4 X509v3 Authority Key Identifier: keyid:D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:7e:41:2e:11:b1:96:1e:73:b4:64:af:6e:33:62:5a:26:db: 52:45:6c:a8:6b:29:c7:8e:dc:8a:9f:1a:e5:78:bb:f8:24:8c: ca:10:05:b3:e9:9d:7c:b2:c4:b1:d7:29:02:f4:13:8d:86:7b: 25:99:b4:0d:16:38:61:3c:6c:03:7b:8f:4e:af:1e:f7:61:21: bd:8b:cc:9a:6d:d1:95:15:c1:f1:37:52:7c:25:47:c1:f8:5b: b4:60:72:61:0e:aa:f1:10:8f:09:e4:70:2a:ac:18:2e:62:ac: ae:b6:14:7c:75:f9:83:bc:ee:d7:4c:fc:33:35:c8:7a:66:e9: ee:77:e2:36:e2:ac:d3:61:37:d6:84:f4:e4:cf:ed:66:03:2b: 3f:43:7b:72:7e:47:1e:6d:5d:c1:54:72:f1:25:5d:09:2b:c6: eb:78:5a:e4:34:1c:66:c0:1a:b7:0a:b4:3d:c4:f1:5a:94:f1: 0f:df:02:3b:1e:12:4a:eb:f0:bc:31:03:c9:29:ea:fa:b7:a7: 0b:b3:66:17:41:d1:df:e7:49:44:4e:c7:25:1f:fb:d9:b3:b4: c0:08:49:08:13:77:bf:70:c9:b3:2e:5c:5e:1e:1a:64:95:ba: a3:df:8a:a6:bd:03:1c:ed:36:40:12:81:a7:20:71:7a:31:5a: 14:43:1b:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHqaop2N5QBBMkEaQlJnGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMmY0MTU5MTIwYWE1MWJiMWNkZjExNmQwNmE0ZmMwMjky ZmY5NmMwHhcNMjUxMjI4MDQwMTUxWhcNMjUxMjI5MDQwMTUxWjAzMTEwLwYDVQQD Eyg4YzQyYjMzYzRiY2VhMzIyYjY5MDUzMTJhM2NkNDJiNjkzZTZiNGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1GoA7OWCfnKlxGgohShBcnJ0kAv 4RshND4eAFFdlY2qRQX6eZkAu/oYAx7mIwyqxj32qt/rDg6qyL+AKphv6SOe2dUv rHW79n5fXwdqU89j5yDAjaeSxA/GuP3SOLPFS/lJB3BwnRcvfnJal5mvCgdW0MsU AghgT96bgrSQ8OJ+4fYoSktSP4wOTuTgr61SGH3avE5Y4Gt+ZNMUqa0ZX8x/nnvH CC1GWKzJjASIwtE8sN+xSbbq0mEchDaAS9D0SOw3/49Q79Noesl0PFEfAwKZiSLt FGpjsE/X2A5Zp+7CfMlwl2QG5JWcaQFrXQuJfVJnsA5mMxpp5DbML/BipwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxCszxLzqMitpBTEqPNQraT5rTUMB8GA1UdIwQY MBaAFNEvQVkSCqUbsc3xFtBqT8ApL/lsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFM5QldSSUtwUnV4emZFVzBHcFB3Q2t2LVd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85ODk2N2EtZDM5Ni00OTIxLWEwOWYt ZmM0YTZhYjc4OGFkLzEvMFM5QldSSUtwUnV4emZFVzBHcFB3Q2t2LVd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85ODk2N2EtZDM5Ni00OTIxLWEwOWYtZmM0YTZhYjc4OGFk LzEvMFM5QldSSUtwUnV4emZFVzBHcFB3Q2t2LVd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQH5BLhGx lh5ztGSvbjNiWibbUkVsqGspx47cip8a5Xi7+CSMyhAFs+mdfLLEsdcpAvQTjYZ7 JZm0DRY4YTxsA3uPTq8e92EhvYvMmm3RlRXB8TdSfCVHwfhbtGByYQ6q8RCPCeRw KqwYLmKsrrYUfHX5g7zu10z8MzXIembp7nfiNuKs02E31oT05M/tZgMrP0N7cn5H Hm1dwVRy8SVdCSvG63ha5DQcZsAatwq0PcTxWpTxD98COx4SSuvwvDEDySnq+ren C7NmF0HR3+dJRE7HJR/72bO0wAhJCBN3v3DJsy5cXh4aZJW6o9+Kpr0DHO02QBKB pyBxejFaFEMbKA== -----END CERTIFICATE-----Generated at Sun Dec 28 07:32:26 2025 by rpki-client