This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft File: ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft (raw, json) Hash identifier: BoeI6ik+QB31MvFHaIX+hsMkFcOYsNHeORcWz24fvUM= Subject key identifier: 9C:01:25:D5:E7:49:78:19:60:60:20:53:5C:4E:72:15:F5:B5:52:DA Authority key identifier: 7D:FF:71:65:5F:DE:58:DB:04:6B:83:5F:39:EC:10:E2:D4:F7:AB:FA Certificate issuer: /CN=7dff71655fde58db046b835f39ec10e2d4f7abfa Certificate serial: 019B32D751D04F7120167D3F3D870E9A1664 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 19:02:10 +0000 Manifest this update: Thu 18 Dec 2025 19:02:10 +0000 Manifest next update: Fri 19 Dec 2025 19:02:10 +0000 Files and hashes: 1: ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl (hash: CKBRsVp7V8ikfYa6Al5imNRtU68UOho94pUR74/HwK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:51:d0:4f:71:20:16:7d:3f:3d:87:0e:9a:16:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dff71655fde58db046b835f39ec10e2d4f7abfa Validity Not Before: Dec 18 19:02:10 2025 GMT Not After : Dec 19 19:02:10 2025 GMT Subject: CN=9c0125d5e7497819606020535c4e7215f5b552da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:de:ec:9d:a3:4d:64:8a:94:21:2a:ee:3c:d8: 04:d7:3d:71:81:75:ca:da:33:cd:c9:aa:39:5e:cc: 7b:cc:e1:5a:4b:40:f8:16:67:a2:dc:c9:76:75:e3: 61:85:8c:07:11:f7:98:47:93:be:23:1e:c2:ce:bc: 99:45:bc:63:30:46:82:8c:ec:81:ea:ce:1b:ef:19: 4b:a7:ee:be:16:08:68:db:05:4b:c7:1a:c6:fc:7e: 16:2b:73:01:7c:cb:6e:fe:d1:cf:26:e1:ef:55:04: fd:6e:7f:1c:b8:1a:77:df:6f:db:2b:65:33:09:71: ff:f6:7e:a6:7a:58:b0:55:24:6e:82:20:17:99:b3: 9b:40:c6:5e:1a:d7:38:92:26:22:9a:fd:c3:e7:fb: 12:61:8c:27:28:11:fd:20:40:18:21:8f:c1:d3:fa: 60:0b:08:ce:ce:4b:61:10:0d:44:ab:06:41:dc:1e: da:e1:8d:ca:af:63:66:be:22:2d:c5:99:80:87:71: 57:f0:eb:9a:9e:c9:f3:07:f8:59:35:8d:e5:05:b2: eb:60:a1:5c:32:0e:fa:2c:30:44:ba:7b:93:36:77: 27:af:4e:f5:72:50:30:2c:a4:16:3a:4b:51:41:96: bb:d6:77:0b:ef:9b:7a:bd:ba:41:bd:90:69:46:d1: 63:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:01:25:D5:E7:49:78:19:60:60:20:53:5C:4E:72:15:F5:B5:52:DA X509v3 Authority Key Identifier: keyid:7D:FF:71:65:5F:DE:58:DB:04:6B:83:5F:39:EC:10:E2:D4:F7:AB:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:28:81:00:eb:73:9a:68:eb:e6:74:4b:81:72:da:3d:c7:94: af:ad:5e:50:6d:c4:39:8d:a6:1d:36:f4:6e:59:b6:24:97:06: d2:ab:df:1a:0c:bf:ba:3d:6a:4b:49:3b:0a:44:ae:42:bf:c6: 04:3a:d2:ca:d3:db:94:65:a9:67:39:fd:99:d5:8f:70:e9:be: 21:52:48:cb:d7:3c:c6:1b:c6:42:64:b0:0d:71:1c:b0:78:7f: e2:79:ea:1d:ef:00:15:59:87:7e:8c:38:37:ad:af:8d:17:a8: 5f:e7:be:da:49:5e:18:2a:ae:4f:7a:f2:91:97:f2:d3:12:7a: 71:a6:1b:bb:0a:54:35:96:e3:44:4b:c2:23:c6:2a:37:a0:2c: 5e:58:74:45:74:e0:54:61:79:b2:cf:2b:5b:cc:a2:21:5b:ce: 93:85:f4:ec:15:a0:23:aa:ae:c5:cc:4c:86:5b:74:b3:71:de: 17:47:e4:2e:6f:c6:5b:3f:0d:1b:bf:c5:80:ba:18:00:10:fd: c2:02:ad:91:04:3e:41:fd:a4:d2:8c:6a:a0:2b:b4:0a:54:d9: 6f:dd:c8:f9:a3:a7:41:f1:b0:e4:5f:43:f2:1c:cd:86:83:c0: 1a:7b:0d:b8:37:f2:86:9e:5c:af:51:c9:fb:ad:1a:65:de:66: d3:53:65:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy11HQT3EgFn0/PYcOmhZkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZmY3MTY1NWZkZTU4ZGIwNDZiODM1ZjM5ZWMxMGUyZDRm N2FiZmEwHhcNMjUxMjE4MTkwMjEwWhcNMjUxMjE5MTkwMjEwWjAzMTEwLwYDVQQD Eyg5YzAxMjVkNWU3NDk3ODE5NjA2MDIwNTM1YzRlNzIxNWY1YjU1MmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt7snaNNZIqUISruPNgE1z1xgXXK 2jPNyao5Xsx7zOFaS0D4Fmei3Ml2deNhhYwHEfeYR5O+Ix7CzryZRbxjMEaCjOyB 6s4b7xlLp+6+Fgho2wVLxxrG/H4WK3MBfMtu/tHPJuHvVQT9bn8cuBp332/bK2Uz CXH/9n6meliwVSRugiAXmbObQMZeGtc4kiYimv3D5/sSYYwnKBH9IEAYIY/B0/pg CwjOzkthEA1EqwZB3B7a4Y3Kr2NmviItxZmAh3FX8OuansnzB/hZNY3lBbLrYKFc Mg76LDBEunuTNncnr071clAwLKQWOktRQZa71ncL75t6vbpBvZBpRtFj6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJwBJdXnSXgZYGAgU1xOchX1tVLaMB8GA1UdIwQY MBaAFH3/cWVf3ljbBGuDXznsEOLU96v6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmY5eFpWX2VXTnNFYTROZk9ld1E0dFQzcV9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9jZDg0YTQtMDczOC00YWMwLWEzMjct YjZmZDg0Y2FiY2RmLzEvZmY5eFpWX2VXTnNFYTROZk9ld1E0dFQzcV9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9jZDg0YTQtMDczOC00YWMwLWEzMjctYjZmZDg0Y2FiY2Rm LzEvZmY5eFpWX2VXTnNFYTROZk9ld1E0dFQzcV9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSiBAOtz mmjr5nRLgXLaPceUr61eUG3EOY2mHTb0blm2JJcG0qvfGgy/uj1qS0k7CkSuQr/G BDrSytPblGWpZzn9mdWPcOm+IVJIy9c8xhvGQmSwDXEcsHh/4nnqHe8AFVmHfow4 N62vjReoX+e+2kleGCquT3rykZfy0xJ6caYbuwpUNZbjREvCI8YqN6AsXlh0RXTg VGF5ss8rW8yiIVvOk4X07BWgI6quxcxMhlt0s3HeF0fkLm/GWz8NG7/FgLoYABD9 wgKtkQQ+Qf2k0oxqoCu0ClTZb93I+aOnQfGw5F9D8hzNhoPAGnsNuDfyhp5cr1HJ +60aZd5m01NleQ== -----END CERTIFICATE-----Generated at Fri Dec 19 01:27:27 2025 by rpki-client