This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft File: 9H1LS48bGIg-rDtJnA8EKsomsKk.mft (raw, json) Hash identifier: i5jEBLBLPYYgjsdRIdVoSUSJJweJPj2M13lPeobrYhQ= Subject key identifier: B8:D4:20:ED:A8:CE:E5:B2:E2:66:75:13:EA:EA:FF:C0:91:07:EC:47 Authority key identifier: F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9 Certificate issuer: /CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9 Certificate serial: 019B32D6B04EAD366FEE928309212C668C32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft Manifest number: 0AB5 Signing time: Thu 18 Dec 2025 19:01:29 +0000 Manifest this update: Thu 18 Dec 2025 19:01:29 +0000 Manifest next update: Fri 19 Dec 2025 19:01:29 +0000 Files and hashes: 1: 9H1LS48bGIg-rDtJnA8EKsomsKk.crl (hash: VR25p+rDB6mCn3epz8Gdb+naMWW2Vxsn77KBcLuuaSM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:b0:4e:ad:36:6f:ee:92:83:09:21:2c:66:8c:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9 Validity Not Before: Dec 18 19:01:29 2025 GMT Not After : Dec 19 19:01:29 2025 GMT Subject: CN=b8d420eda8cee5b2e2667513eaeaffc09107ec47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e2:2b:29:b3:77:b2:b9:73:eb:97:ab:ff:ff: 73:16:5d:be:d2:3c:28:06:0a:70:2c:f8:95:b9:7c: f9:ac:88:36:d3:d8:2a:37:a9:36:cd:f4:81:5f:b3: 30:7f:bc:e2:f5:44:ff:52:82:23:ed:ac:70:83:37: 1d:4d:fd:f4:5d:13:5f:4d:fc:99:45:2d:80:cd:ae: d8:1c:58:16:37:48:c5:4f:90:2f:7f:46:d3:49:f4: 13:14:4f:a0:f4:c7:06:25:40:91:b5:1c:a4:6d:be: 6c:5c:e4:cc:18:a8:c4:69:2c:1e:50:77:bf:59:d4: f4:dd:8a:6a:a8:62:1e:4c:63:5b:d2:b6:ec:1e:ca: 04:de:a0:40:2d:32:1b:b7:5c:f2:72:19:4c:bb:29: 57:f2:9c:3e:45:d1:29:d4:49:78:af:b0:d4:b3:37: 0d:b8:20:7a:c2:29:0e:72:db:84:d4:93:25:40:cd: f8:48:bb:d7:2b:3d:6c:a6:5a:a9:39:89:f9:6a:b7: 2f:ac:98:d7:04:c4:56:4e:0b:d9:92:0f:75:41:78: bb:7c:5e:b5:9d:f3:cd:1a:f7:f5:66:e2:82:3d:07: 5c:92:7c:d2:74:48:9e:3f:50:3a:c0:de:b9:da:5e: ce:8e:8f:e1:cc:af:93:63:25:53:2f:88:60:bd:51: e0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D4:20:ED:A8:CE:E5:B2:E2:66:75:13:EA:EA:FF:C0:91:07:EC:47 X509v3 Authority Key Identifier: keyid:F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:ad:db:b6:ac:c5:bd:32:6c:50:2c:c8:d7:5a:5b:27:cf:27: 53:2f:32:10:0b:4f:18:fd:80:e6:60:c1:38:ab:17:13:77:38: 9f:98:5c:ef:d6:82:1b:2b:59:05:98:06:a1:35:4c:bd:a3:05: d5:ce:f6:5d:3c:9a:3d:35:fd:21:f6:4c:50:a5:4c:70:fe:c2: 66:f9:14:86:56:13:db:91:d3:ac:c7:98:3f:fb:1e:dd:36:6d: ef:c0:20:de:c2:b7:c1:bd:07:94:b2:68:93:b3:ad:1e:3e:d1: cb:b8:a7:2e:68:c5:b0:ba:fc:e6:bd:97:e3:b2:f1:9d:f4:01: 4e:93:a2:88:fa:55:87:fd:81:4a:b3:ec:fb:47:ff:33:ba:5f: 5b:e5:60:c0:6d:82:c1:04:83:4d:a0:80:1e:ae:ca:6a:15:67: e8:c4:0a:df:5c:55:64:48:3f:9a:09:1e:63:be:5e:b3:3e:0f: 23:b0:02:e8:5c:09:c7:18:2d:6c:0d:60:84:40:ae:2b:60:6b: 4d:ae:be:60:30:1c:c5:d1:fd:b0:9e:da:67:9a:af:0d:76:67: 9f:d0:45:96:c1:9b:8b:e4:45:75:31:7a:6d:40:eb:6c:e4:bc: ed:72:9f:03:08:f6:17:95:1c:de:14:60:7d:bd:f6:46:dc:c7: b2:8b:1e:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1rBOrTZv7pKDCSEsZowyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0N2Q0YjRiOGYxYjE4ODgzZWFjM2I0OTljMGYwNDJhY2Ey NmIwYTkwHhcNMjUxMjE4MTkwMTI5WhcNMjUxMjE5MTkwMTI5WjAzMTEwLwYDVQQD EyhiOGQ0MjBlZGE4Y2VlNWIyZTI2Njc1MTNlYWVhZmZjMDkxMDdlYzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+IrKbN3srlz65er//9zFl2+0jwo BgpwLPiVuXz5rIg209gqN6k2zfSBX7Mwf7zi9UT/UoIj7axwgzcdTf30XRNfTfyZ RS2Aza7YHFgWN0jFT5Avf0bTSfQTFE+g9McGJUCRtRykbb5sXOTMGKjEaSweUHe/ WdT03YpqqGIeTGNb0rbsHsoE3qBALTIbt1zychlMuylX8pw+RdEp1El4r7DUszcN uCB6wikOctuE1JMlQM34SLvXKz1splqpOYn5arcvrJjXBMRWTgvZkg91QXi7fF61 nfPNGvf1ZuKCPQdcknzSdEieP1A6wN652l7Ojo/hzK+TYyVTL4hgvVHg+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjUIO2ozuWy4mZ1E+rq/8CRB+xHMB8GA1UdIwQY MBaAFPR9S0uPGxiIPqw7SZwPBCrKJrCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUgxTFM0OGJHSWctckR0Sm5BOEVLc29tc0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNzZkMWYtZWVkZi00YTRkLTg5NWIt MjcxNjY3NTNkZjA4LzEvOUgxTFM0OGJHSWctckR0Sm5BOEVLc29tc0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mNzZkMWYtZWVkZi00YTRkLTg5NWItMjcxNjY3NTNkZjA4 LzEvOUgxTFM0OGJHSWctckR0Sm5BOEVLc29tc0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJa3btqzF vTJsUCzI11pbJ88nUy8yEAtPGP2A5mDBOKsXE3c4n5hc79aCGytZBZgGoTVMvaMF 1c72XTyaPTX9IfZMUKVMcP7CZvkUhlYT25HTrMeYP/se3TZt78Ag3sK3wb0HlLJo k7OtHj7Ry7inLmjFsLr85r2X47LxnfQBTpOiiPpVh/2BSrPs+0f/M7pfW+VgwG2C wQSDTaCAHq7KahVn6MQK31xVZEg/mgkeY75esz4PI7AC6FwJxxgtbA1ghECuK2Br Ta6+YDAcxdH9sJ7aZ5qvDXZnn9BFlsGbi+RFdTF6bUDrbOS87XKfAwj2F5Uc3hRg fb32RtzHsoseEQ== -----END CERTIFICATE-----Generated at Fri Dec 19 00:13:15 2025 by rpki-client