This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft File: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft (raw, json) Hash identifier: BlR+Q9sBH2HozfVXWKDPv8zi1PtIN2jSqAtX2ghXOkg= Subject key identifier: 88:A1:62:40:CE:38:D5:6A:39:C7:FD:EA:69:82:BB:3C:4F:16:E2:B1 Authority key identifier: F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE Certificate issuer: /CN=f587712585947dc5519aa86e0bd1f435df52b5ee Certificate serial: 019B54F43C6CAA0F2E99503A3ED3305E6558 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft Manifest number: 03C9 Signing time: Thu 25 Dec 2025 10:00:50 +0000 Manifest this update: Thu 25 Dec 2025 10:00:50 +0000 Manifest next update: Fri 26 Dec 2025 10:00:50 +0000 Files and hashes: 1: 9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl (hash: 5wdo0GaFog4s8LoM4NRNOArrNijazTQJatNNAMhzBhs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:f4:3c:6c:aa:0f:2e:99:50:3a:3e:d3:30:5e:65:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f587712585947dc5519aa86e0bd1f435df52b5ee Validity Not Before: Dec 25 10:00:50 2025 GMT Not After : Dec 26 10:00:50 2025 GMT Subject: CN=88a16240ce38d56a39c7fdea6982bb3c4f16e2b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:18:b3:2c:8e:aa:d5:f9:ec:cb:84:91:bd:a3: 11:b6:e6:55:e2:9a:74:48:6f:3e:1d:3c:d3:02:c8: 44:11:c4:bf:5e:32:87:a1:b1:f8:45:06:d0:20:16: 1f:41:73:c9:48:f5:56:ae:73:42:c8:a3:58:84:9f: 9f:54:16:5e:1f:50:6e:de:cd:74:03:90:c8:a4:e9: 8f:04:19:40:fd:24:ff:f6:97:00:f0:a3:c8:ff:a1: ac:77:05:31:a5:3e:07:8f:0f:0b:04:74:c3:94:cf: 22:0d:ef:00:d9:d4:b3:f7:d8:a2:51:bd:9b:39:e9: eb:2b:75:81:42:ae:61:75:06:62:bd:0e:10:90:ec: b2:ae:13:9c:38:3b:73:d1:d5:d7:3b:2b:ca:d2:c4: cb:30:f3:ac:ea:5e:ac:16:62:d5:64:66:c5:0a:7a: 52:79:cc:0a:74:84:95:e1:fd:6e:9a:c3:80:9c:19: f6:81:58:05:e3:99:57:70:e6:4c:15:04:2f:42:af: 5f:4a:30:b0:c3:56:c2:d0:08:ea:06:07:1f:44:d7: 35:b7:48:98:0b:5f:7e:46:f3:32:32:1d:22:4e:0d: 4a:0f:50:38:70:97:01:54:78:62:c4:5e:7e:63:55: 09:60:52:81:9d:81:88:b7:46:bc:ae:f3:a6:93:0c: ae:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A1:62:40:CE:38:D5:6A:39:C7:FD:EA:69:82:BB:3C:4F:16:E2:B1 X509v3 Authority Key Identifier: keyid:F5:87:71:25:85:94:7D:C5:51:9A:A8:6E:0B:D1:F4:35:DF:52:B5:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/8a1538-4803-4d70-9c2a-7dc7e6f92ed4/1/9YdxJYWUfcVRmqhuC9H0Nd9Ste4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:c9:84:c0:ee:d6:7e:43:7f:7b:d2:7b:7a:ec:62:e2:e1:7e: 32:71:aa:ef:90:b6:80:df:f1:4f:08:69:c0:e8:2a:a3:fc:89: 51:5a:ec:31:e6:5f:34:cb:0a:31:6e:16:bb:ae:0a:3d:1e:f9: ce:4d:0e:bd:aa:13:63:79:68:d8:9f:55:6f:db:9a:53:c7:d0: cd:7f:77:20:36:1c:a1:a8:75:f3:e5:e1:0c:a6:ef:02:de:ff: 9e:a6:dc:fd:84:9e:d6:f4:d7:be:b8:02:a5:84:0f:a2:f7:4c: 43:c0:16:f4:76:f5:ea:c1:2f:27:83:14:11:36:a6:2d:35:1b: 6f:6d:d5:88:ca:3c:42:49:36:2f:fc:37:ed:a2:eb:f5:be:0c: c8:28:75:b5:9a:b7:fc:f0:c7:31:39:1c:04:7e:bb:3b:fc:c6: 36:03:f9:c4:48:46:2d:3b:5b:d3:f0:24:bf:83:68:26:d1:e0: aa:84:0e:74:c3:49:46:74:6e:e0:9b:a8:27:5e:20:84:c3:2c: 54:d2:e4:ff:04:69:6a:d8:a0:b0:70:77:b7:c8:07:93:92:0f: c5:16:5f:48:3d:c4:28:6b:ec:f7:7b:f0:66:d8:06:dc:ad:a0: 39:ba:0d:70:a8:4c:08:02:c0:12:f6:d7:b0:59:7a:db:7d:a7: a4:31:24:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtU9Dxsqg8umVA6PtMwXmVYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ODc3MTI1ODU5NDdkYzU1MTlhYTg2ZTBiZDFmNDM1ZGY1 MmI1ZWUwHhcNMjUxMjI1MTAwMDUwWhcNMjUxMjI2MTAwMDUwWjAzMTEwLwYDVQQD Eyg4OGExNjI0MGNlMzhkNTZhMzljN2ZkZWE2OTgyYmIzYzRmMTZlMmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBizLI6q1fnsy4SRvaMRtuZV4pp0 SG8+HTzTAshEEcS/XjKHobH4RQbQIBYfQXPJSPVWrnNCyKNYhJ+fVBZeH1Bu3s10 A5DIpOmPBBlA/ST/9pcA8KPI/6GsdwUxpT4Hjw8LBHTDlM8iDe8A2dSz99iiUb2b OenrK3WBQq5hdQZivQ4QkOyyrhOcODtz0dXXOyvK0sTLMPOs6l6sFmLVZGbFCnpS ecwKdISV4f1umsOAnBn2gVgF45lXcOZMFQQvQq9fSjCww1bC0AjqBgcfRNc1t0iY C19+RvMyMh0iTg1KD1A4cJcBVHhixF5+Y1UJYFKBnYGIt0a8rvOmkwyuNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIihYkDOONVqOcf96mmCuzxPFuKxMB8GA1UdIwQY MBaAFPWHcSWFlH3FUZqobgvR9DXfUrXuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVlkeEpZV1VmY1ZSbXFodUM5SDBOZDlTdGU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC84YTE1MzgtNDgwMy00ZDcwLTljMmEt N2RjN2U2ZjkyZWQ0LzEvOVlkeEpZV1VmY1ZSbXFodUM5SDBOZDlTdGU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC84YTE1MzgtNDgwMy00ZDcwLTljMmEtN2RjN2U2ZjkyZWQ0 LzEvOVlkeEpZV1VmY1ZSbXFodUM5SDBOZDlTdGU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqsmEwO7W fkN/e9J7euxi4uF+MnGq75C2gN/xTwhpwOgqo/yJUVrsMeZfNMsKMW4Wu64KPR75 zk0OvaoTY3lo2J9Vb9uaU8fQzX93IDYcoah18+XhDKbvAt7/nqbc/YSe1vTXvrgC pYQPovdMQ8AW9Hb16sEvJ4MUETamLTUbb23ViMo8Qkk2L/w37aLr9b4MyCh1tZq3 /PDHMTkcBH67O/zGNgP5xEhGLTtb0/Akv4NoJtHgqoQOdMNJRnRu4JuoJ14ghMMs VNLk/wRpatigsHB3t8gHk5IPxRZfSD3EKGvs93vwZtgG3K2gOboNcKhMCALAEvbX sFl6232npDEkyw== -----END CERTIFICATE-----Generated at Thu Dec 25 12:47:55 2025 by rpki-client