This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft File: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft (raw, json) Hash identifier: bPW5F7IiBUWRDjoAcxU7T0dt1+qZIlNt59xstpxuQ9g= Subject key identifier: D1:6D:65:37:BB:31:1E:61:A6:9C:F8:C4:4E:55:14:A9:D0:C2:15:90 Authority key identifier: 9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4 Certificate issuer: /CN=9bd1eaad0d7e46726b87083914c24a127e059dd4 Certificate serial: 019B6E0F614F4451D4FE4A9AF1E3C9CCD31E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft Manifest number: 0648 Signing time: Tue 30 Dec 2025 07:01:00 +0000 Manifest this update: Tue 30 Dec 2025 07:01:00 +0000 Manifest next update: Wed 31 Dec 2025 07:01:00 +0000 Files and hashes: 1: m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl (hash: op3tYkrA2iAFZpaq/amp7bnlR+6YkVvk8lDqyn2N5mY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:0f:61:4f:44:51:d4:fe:4a:9a:f1:e3:c9:cc:d3:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd1eaad0d7e46726b87083914c24a127e059dd4 Validity Not Before: Dec 30 07:01:00 2025 GMT Not After : Dec 31 07:01:00 2025 GMT Subject: CN=d16d6537bb311e61a69cf8c44e5514a9d0c21590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:10:89:46:87:e0:db:9b:db:8d:b3:6d:69:74: cf:17:e5:d9:ef:3d:9c:a7:d1:a4:ec:f4:d6:c2:35: a7:c1:45:72:55:25:f0:6f:0f:bb:94:4a:49:5f:e3: a9:33:30:99:e9:58:d6:41:b4:cd:27:93:7c:dc:b9: 83:1d:45:67:af:d9:4e:00:6d:26:5a:50:42:6a:69: a8:58:4c:2e:a9:41:e1:96:69:e5:09:df:0b:b9:7c: f4:4a:0c:28:56:c6:f3:e1:81:47:c1:f2:59:72:a6: b4:79:ca:54:be:1a:54:3c:df:20:04:01:f6:c4:00: 01:c5:43:a2:d8:0a:72:1b:61:80:22:17:b8:0c:f0: 06:99:a5:9c:a5:e7:a7:40:88:1e:c3:d8:8b:dc:cf: 53:7b:84:3e:1a:81:4d:ee:e3:04:d2:77:df:75:bc: 46:22:21:9c:27:0c:70:7e:9f:c7:b7:7f:e9:97:72: 62:fb:cb:30:10:29:ec:66:5d:8f:82:f6:92:29:85: ca:03:e8:e4:8f:07:f8:3e:28:38:70:73:c3:1a:24: 0f:16:b4:c9:39:a5:18:c0:e5:08:0f:9e:d4:65:a8: ee:00:b5:9c:83:48:3d:5c:91:e4:c4:57:9a:1d:a5: 5a:db:03:07:56:c1:0b:5d:ce:a6:c2:30:26:6f:a8: be:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:6D:65:37:BB:31:1E:61:A6:9C:F8:C4:4E:55:14:A9:D0:C2:15:90 X509v3 Authority Key Identifier: keyid:9B:D1:EA:AD:0D:7E:46:72:6B:87:08:39:14:C2:4A:12:7E:05:9D:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c34ded-d3d9-4292-9bb7-ef0794531a28/1/m9HqrQ1-RnJrhwg5FMJKEn4FndQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:fc:eb:09:cd:e1:3c:f2:c4:d3:40:6a:77:fc:b0:22:6e:6a: 6f:a2:15:43:40:15:92:f1:0d:59:2c:51:cc:b6:9d:63:48:41: 52:a5:43:e6:e6:6e:29:2f:6d:62:f1:56:59:ac:4f:f5:89:a0: ad:9f:a2:f8:44:b9:55:b5:30:a9:20:5b:55:23:91:09:eb:bd: 73:bb:9f:3d:23:ee:f9:e4:d7:69:74:42:c6:84:35:b8:f7:c7: c9:95:90:5a:76:7c:83:d2:06:15:b2:6d:b3:5d:e5:42:8e:67: 37:c8:1e:0c:57:3d:ec:a9:81:d2:35:85:b1:9b:95:b5:3f:85: 72:0c:6b:4b:b8:fa:1a:ba:94:35:58:02:b6:10:95:a0:13:7f: 94:3e:02:e3:8d:2c:af:cb:86:a5:de:7b:a3:c5:e1:13:7c:79: b3:48:49:12:6f:c3:61:26:de:60:29:13:ac:d2:b3:dc:11:82: 13:56:0b:3d:64:4d:43:76:53:2e:75:32:87:66:9b:53:c4:32: de:b5:87:2c:c1:df:02:53:0e:d5:d2:82:4c:40:0f:5b:12:2d: 9e:14:e2:76:29:36:38:82:69:91:9c:3e:27:2a:9f:ba:69:a1: dd:56:59:af:7f:f4:17:7d:56:43:df:ab:74:a6:64:b5:8b:f3: 09:9e:36:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtuD2FPRFHU/kqa8ePJzNMeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZDFlYWFkMGQ3ZTQ2NzI2Yjg3MDgzOTE0YzI0YTEyN2Uw NTlkZDQwHhcNMjUxMjMwMDcwMTAwWhcNMjUxMjMxMDcwMTAwWjAzMTEwLwYDVQQD EyhkMTZkNjUzN2JiMzExZTYxYTY5Y2Y4YzQ0ZTU1MTRhOWQwYzIxNTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhCJRofg25vbjbNtaXTPF+XZ7z2c p9Gk7PTWwjWnwUVyVSXwbw+7lEpJX+OpMzCZ6VjWQbTNJ5N83LmDHUVnr9lOAG0m WlBCammoWEwuqUHhlmnlCd8LuXz0SgwoVsbz4YFHwfJZcqa0ecpUvhpUPN8gBAH2 xAABxUOi2ApyG2GAIhe4DPAGmaWcpeenQIgew9iL3M9Te4Q+GoFN7uME0nffdbxG IiGcJwxwfp/Ht3/pl3Ji+8swECnsZl2PgvaSKYXKA+jkjwf4Pig4cHPDGiQPFrTJ OaUYwOUID57UZajuALWcg0g9XJHkxFeaHaVa2wMHVsELXc6mwjAmb6i+owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFtZTe7MR5hppz4xE5VFKnQwhWQMB8GA1UdIwQY MBaAFJvR6q0NfkZya4cIORTCShJ+BZ3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTlIcXJRMS1SbkpyaHdnNUZNSktFbjRGbmRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jMzRkZWQtZDNkOS00MjkyLTliYjct ZWYwNzk0NTMxYTI4LzEvbTlIcXJRMS1SbkpyaHdnNUZNSktFbjRGbmRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9jMzRkZWQtZDNkOS00MjkyLTliYjctZWYwNzk0NTMxYTI4 LzEvbTlIcXJRMS1SbkpyaHdnNUZNSktFbjRGbmRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfzrCc3h PPLE00Bqd/ywIm5qb6IVQ0AVkvENWSxRzLadY0hBUqVD5uZuKS9tYvFWWaxP9Ymg rZ+i+ES5VbUwqSBbVSORCeu9c7ufPSPu+eTXaXRCxoQ1uPfHyZWQWnZ8g9IGFbJt s13lQo5nN8geDFc97KmB0jWFsZuVtT+FcgxrS7j6GrqUNVgCthCVoBN/lD4C440s r8uGpd57o8XhE3x5s0hJEm/DYSbeYCkTrNKz3BGCE1YLPWRNQ3ZTLnUyh2abU8Qy 3rWHLMHfAlMO1dKCTEAPWxItnhTidik2OIJpkZw+Jyqfummh3VZZr3/0F31WQ9+r dKZktYvzCZ424Q== -----END CERTIFICATE-----Generated at Tue Dec 30 08:51:36 2025 by rpki-client