This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft File: 9RKnWcZemEm7fFMtXrtESZpRW_8.mft (raw, json) Hash identifier: svdKHwGrbFdGfpzX3wkwnf/5PZ9YSiDtSXpa2bu5CLs= Subject key identifier: 03:71:5D:C7:D2:B3:98:96:1C:12:DE:C4:E4:CF:74:C3:DF:BC:8F:AA Authority key identifier: F5:12:A7:59:C6:5E:98:49:BB:7C:53:2D:5E:BB:44:49:9A:51:5B:FF Certificate issuer: /CN=f512a759c65e9849bb7c532d5ebb44499a515bff Certificate serial: 019B47A69E34FA7C6A9A6E4770445AF934FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft Manifest number: 075B Signing time: Mon 22 Dec 2025 20:01:00 +0000 Manifest this update: Mon 22 Dec 2025 20:01:00 +0000 Manifest next update: Tue 23 Dec 2025 20:01:00 +0000 Files and hashes: 1: 9RKnWcZemEm7fFMtXrtESZpRW_8.crl (hash: Ee558q0x5bWuOj376Uv5n4/L+Bk5i3IdZfc1q39bMFc=) 2: PHx_cn3cwOP0zIbd-tSOarri2jU.roa (hash: jvXJa9wGshKFR0UvbJd8wg24Fv3g0IRm/OGSnIujd88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:9e:34:fa:7c:6a:9a:6e:47:70:44:5a:f9:34:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f512a759c65e9849bb7c532d5ebb44499a515bff Validity Not Before: Dec 22 20:01:00 2025 GMT Not After : Dec 23 20:01:00 2025 GMT Subject: CN=03715dc7d2b398961c12dec4e4cf74c3dfbc8faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:61:cb:64:06:44:28:33:dd:7a:15:45:56:b7: 68:ef:f6:d2:40:2a:d8:dc:8b:eb:c3:b3:3b:91:a2: 65:e2:4d:14:cd:c8:db:57:77:fa:61:36:b9:98:bd: ee:66:b6:af:de:89:c0:0c:b9:29:47:11:36:03:15: 8e:33:73:51:b5:94:f5:ca:d5:60:2f:d1:4a:dc:10: b0:83:18:f8:46:66:af:16:0e:03:c1:14:73:5f:4a: ce:68:d2:59:01:d7:6f:b7:0f:5d:a4:96:00:97:7e: 7e:f3:64:38:ea:5c:d5:ee:02:93:33:4b:58:f1:1c: a4:28:13:06:4f:48:c6:99:75:ba:54:56:c1:76:d2: fa:77:ee:db:57:83:b5:bc:a1:b8:a9:3b:be:2f:0c: 13:e9:72:f0:75:3e:1e:8f:9c:49:86:e6:77:75:7a: 7f:29:94:04:e6:66:c4:c8:aa:5e:10:ae:f4:28:9e: ce:7f:69:6a:ff:53:3d:2d:7b:f9:a2:60:26:41:97: d4:a6:a9:61:71:ca:54:01:35:99:5a:a0:f7:5b:f0: 1a:60:8a:ee:1b:02:ca:ca:a9:51:4f:40:bb:dd:e0: 2b:9a:46:2a:de:a6:86:0c:6f:86:54:36:75:bb:9d: 79:76:34:01:72:17:ed:c8:2c:60:66:88:76:d7:8c: 17:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:71:5D:C7:D2:B3:98:96:1C:12:DE:C4:E4:CF:74:C3:DF:BC:8F:AA X509v3 Authority Key Identifier: keyid:F5:12:A7:59:C6:5E:98:49:BB:7C:53:2D:5E:BB:44:49:9A:51:5B:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RKnWcZemEm7fFMtXrtESZpRW_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/6e4582-dfe9-4146-8c14-8aadf7a9856b/1/9RKnWcZemEm7fFMtXrtESZpRW_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:19:98:a6:06:fe:08:df:87:e5:45:53:cd:f7:31:c1:a5:39: fd:28:5e:74:9c:fa:34:e5:84:b8:75:4f:e5:f4:61:37:e2:ef: f1:bf:16:bf:9f:32:2a:35:da:7f:c6:90:87:c7:ac:eb:25:3c: 90:8e:1a:ac:72:90:2e:f8:af:68:a3:9f:97:ed:0b:05:82:91: d6:42:79:e4:e6:64:58:11:8f:ee:5e:c5:4c:67:7e:c8:10:33: fe:14:93:5d:81:31:c3:d6:45:ad:cd:d0:8b:31:e1:d8:1e:79: 3d:4b:1a:c3:30:3a:3a:74:f4:a0:02:bf:df:02:70:05:f8:8a: 36:f6:53:d3:71:42:95:db:92:09:cd:23:ba:da:9a:ae:e7:6b: 04:b8:99:d7:cd:4e:f2:34:ef:26:ea:2f:e0:c0:8f:6c:2b:3c: 8b:70:d5:48:07:70:aa:ca:03:c0:95:f5:3b:88:82:ac:87:ea: 65:ff:31:83:77:e4:0b:d4:0c:0b:1a:aa:0d:ab:6b:10:d4:0b: 29:6e:d1:21:fe:a4:56:81:5a:d0:9d:3b:d5:d7:46:14:59:dc: 4c:d6:b7:2b:e8:96:4d:cd:97:94:03:19:4e:b1:b5:23:84:20: 65:f8:f1:36:9e:97:f9:d4:3b:8e:1d:7d:fb:5f:27:2f:1a:70: 56:38:70:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHpp40+nxqmm5HcERa+TT+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MTJhNzU5YzY1ZTk4NDliYjdjNTMyZDVlYmI0NDQ5OWE1 MTViZmYwHhcNMjUxMjIyMjAwMTAwWhcNMjUxMjIzMjAwMTAwWjAzMTEwLwYDVQQD EygwMzcxNWRjN2QyYjM5ODk2MWMxMmRlYzRlNGNmNzRjM2RmYmM4ZmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2HLZAZEKDPdehVFVrdo7/bSQCrY 3Ivrw7M7kaJl4k0UzcjbV3f6YTa5mL3uZrav3onADLkpRxE2AxWOM3NRtZT1ytVg L9FK3BCwgxj4RmavFg4DwRRzX0rOaNJZAddvtw9dpJYAl35+82Q46lzV7gKTM0tY 8RykKBMGT0jGmXW6VFbBdtL6d+7bV4O1vKG4qTu+LwwT6XLwdT4ej5xJhuZ3dXp/ KZQE5mbEyKpeEK70KJ7Of2lq/1M9LXv5omAmQZfUpqlhccpUATWZWqD3W/AaYIru GwLKyqlRT0C73eArmkYq3qaGDG+GVDZ1u515djQBchftyCxgZoh214wXywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANxXcfSs5iWHBLexOTPdMPfvI+qMB8GA1UdIwQY MBaAFPUSp1nGXphJu3xTLV67REmaUVv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVJLbldjWmVtRW03ZkZNdFhydEVTWnBSV184LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82ZTQ1ODItZGZlOS00MTQ2LThjMTQt OGFhZGY3YTk4NTZiLzEvOVJLbldjWmVtRW03ZkZNdFhydEVTWnBSV184Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS82ZTQ1ODItZGZlOS00MTQ2LThjMTQtOGFhZGY3YTk4NTZi LzEvOVJLbldjWmVtRW03ZkZNdFhydEVTWnBSV184LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxmYpgb+ CN+H5UVTzfcxwaU5/ShedJz6NOWEuHVP5fRhN+Lv8b8Wv58yKjXaf8aQh8es6yU8 kI4arHKQLvivaKOfl+0LBYKR1kJ55OZkWBGP7l7FTGd+yBAz/hSTXYExw9ZFrc3Q izHh2B55PUsawzA6OnT0oAK/3wJwBfiKNvZT03FClduSCc0jutqarudrBLiZ181O 8jTvJuov4MCPbCs8i3DVSAdwqsoDwJX1O4iCrIfqZf8xg3fkC9QMCxqqDatrENQL KW7RIf6kVoFa0J071ddGFFncTNa3K+iWTc2XlAMZTrG1I4QgZfjxNp6X+dQ7jh19 +18nLxpwVjhwRA== -----END CERTIFICATE-----Generated at Mon Dec 22 22:52:10 2025 by rpki-client