This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft File: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft (raw, json) Hash identifier: GHBcAXUdg2DS1CBAre4s1z+pZWoftx4f1lL4ZmGe/M0= Subject key identifier: 9E:45:1B:B5:4D:96:32:95:51:22:71:AC:46:8B:4A:60:1A:78:6A:87 Authority key identifier: F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9 Certificate issuer: /CN=f52e9a043f3128336e3c97c2542574c8ad929ac9 Certificate serial: 019B3E6DE5FB5B0B50C8449272B6BA4254B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft Manifest number: 07ED Signing time: Sun 21 Dec 2025 01:02:28 +0000 Manifest this update: Sun 21 Dec 2025 01:02:28 +0000 Manifest next update: Mon 22 Dec 2025 01:02:28 +0000 Files and hashes: 1: 9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl (hash: jndTb7scaF1draEFbi4S7llhNkta91ilVp+JbxkPTZc=) 2: OCedJE5LkoowQn54mjjrBJCuPJI.roa (hash: nw4YWjZiCna7KJhUNUrep5sUi3EwU231+kVKK+38ws8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:e5:fb:5b:0b:50:c8:44:92:72:b6:ba:42:54:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f52e9a043f3128336e3c97c2542574c8ad929ac9 Validity Not Before: Dec 21 01:02:28 2025 GMT Not After : Dec 22 01:02:28 2025 GMT Subject: CN=9e451bb54d963295512271ac468b4a601a786a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4e:ea:70:52:e9:ca:cb:80:15:a5:31:b5:c5: 51:c1:54:e1:40:f6:8e:cf:c9:29:c4:77:5d:b5:ee: eb:c1:f9:31:ae:6a:4a:3d:39:3c:c6:f1:1c:9c:a7: 3c:e9:22:f8:1a:0c:aa:16:8a:2e:b7:d0:a7:06:56: 7b:fd:53:93:7c:07:a6:68:d1:84:78:f3:b6:7f:81: 1f:d6:43:af:b8:6f:20:cf:37:92:75:a7:d8:3e:49: 2d:d3:2a:f0:8c:a6:ba:25:97:43:10:ec:9a:ef:18: f4:89:7d:4d:3f:20:2d:35:05:f7:b5:f2:ca:6d:71: 39:1a:f8:cc:8a:3e:11:40:db:4f:f9:d7:ab:a6:65: c4:78:f1:05:48:54:be:84:43:31:09:28:97:a9:9c: 56:28:90:a4:65:ab:ac:82:04:a7:90:20:03:33:6d: 5a:de:d0:0a:f1:b6:aa:c7:7b:e9:eb:21:91:58:98: 81:17:a3:d1:52:8d:ce:6c:b0:d9:2d:60:6e:b2:7f: 64:3c:ec:ee:28:58:6c:8f:38:01:06:16:d5:4d:03: ea:ae:a2:38:8b:eb:75:c8:e0:e9:04:71:73:1c:9c: fc:58:ab:0a:11:46:5b:a9:f5:be:c0:46:bd:f4:1e: e1:52:74:d4:d4:94:3c:e7:ca:04:81:10:0f:6d:64: f8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:45:1B:B5:4D:96:32:95:51:22:71:AC:46:8B:4A:60:1A:78:6A:87 X509v3 Authority Key Identifier: keyid:F5:2E:9A:04:3F:31:28:33:6E:3C:97:C2:54:25:74:C8:AD:92:9A:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9S6aBD8xKDNuPJfCVCV0yK2Smsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb3e98-d00f-45dd-bd19-eff8b95d20c5/1/9S6aBD8xKDNuPJfCVCV0yK2Smsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:14:ef:ef:15:97:bb:0e:0a:fd:ef:59:e5:d6:5e:a4:77:8c: 41:da:15:38:25:b5:b4:be:49:76:bd:8d:eb:d6:f3:19:0b:1b: ee:ed:2c:83:2c:4f:00:b0:1a:c4:40:61:a8:70:5a:13:a6:ee: f1:be:6a:b8:a2:83:c4:bc:d9:c7:66:47:4a:bc:3f:12:c5:b7: 18:1c:dd:f5:41:72:70:b5:68:a1:f3:0b:8c:66:8a:0e:58:3c: 80:19:a0:c6:d4:4a:a1:d3:e6:72:6f:f9:1f:4f:f6:f6:d2:cb: a0:1c:07:38:0e:42:ef:61:b0:a7:73:7d:11:21:5e:47:f6:72: 2d:48:37:4e:a1:84:16:bc:e4:47:8a:03:4d:ed:7a:a5:3d:a1: 17:b9:e7:3c:70:be:a3:82:1c:be:ba:4f:d7:22:23:8e:e2:28: f8:a3:ae:8b:ed:3b:12:10:b4:8b:90:5a:86:cc:77:de:57:e0: 22:10:75:f3:a0:30:a3:62:42:e0:98:ea:46:59:f7:0c:e7:a3: 3e:8b:a7:ed:3f:0c:30:37:eb:24:e4:a0:59:77:26:a9:d2:a2: dd:34:52:e3:c4:3f:f4:a4:6c:0f:ca:a6:0b:6e:cc:97:13:b4: 60:c9:86:c5:b3:4d:a6:0c:09:bd:da:97:cc:d0:e2:46:ab:7b: 8b:19:42:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+beX7WwtQyESScra6QlS3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MmU5YTA0M2YzMTI4MzM2ZTNjOTdjMjU0MjU3NGM4YWQ5 MjlhYzkwHhcNMjUxMjIxMDEwMjI4WhcNMjUxMjIyMDEwMjI4WjAzMTEwLwYDVQQD Eyg5ZTQ1MWJiNTRkOTYzMjk1NTEyMjcxYWM0NjhiNGE2MDFhNzg2YTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk7qcFLpysuAFaUxtcVRwVThQPaO z8kpxHddte7rwfkxrmpKPTk8xvEcnKc86SL4GgyqFoout9CnBlZ7/VOTfAemaNGE ePO2f4Ef1kOvuG8gzzeSdafYPkkt0yrwjKa6JZdDEOya7xj0iX1NPyAtNQX3tfLK bXE5GvjMij4RQNtP+derpmXEePEFSFS+hEMxCSiXqZxWKJCkZausggSnkCADM21a 3tAK8baqx3vp6yGRWJiBF6PRUo3ObLDZLWBusn9kPOzuKFhsjzgBBhbVTQPqrqI4 i+t1yODpBHFzHJz8WKsKEUZbqfW+wEa99B7hUnTU1JQ858oEgRAPbWT4twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5FG7VNljKVUSJxrEaLSmAaeGqHMB8GA1UdIwQY MBaAFPUumgQ/MSgzbjyXwlQldMitkprJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mYjNlOTgtZDAwZi00NWRkLWJkMTkt ZWZmOGI5NWQyMGM1LzEvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9mYjNlOTgtZDAwZi00NWRkLWJkMTktZWZmOGI5NWQyMGM1 LzEvOVM2YUJEOHhLRE51UEpmQ1ZDVjB5SzJTbXNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARBTv7xWX uw4K/e9Z5dZepHeMQdoVOCW1tL5Jdr2N69bzGQsb7u0sgyxPALAaxEBhqHBaE6bu 8b5quKKDxLzZx2ZHSrw/EsW3GBzd9UFycLVoofMLjGaKDlg8gBmgxtRKodPmcm/5 H0/29tLLoBwHOA5C72Gwp3N9ESFeR/ZyLUg3TqGEFrzkR4oDTe16pT2hF7nnPHC+ o4IcvrpP1yIjjuIo+KOui+07EhC0i5Bahsx33lfgIhB186Awo2JC4JjqRln3DOej Poun7T8MMDfrJOSgWXcmqdKi3TRS48Q/9KRsD8qmC27MlxO0YMmGxbNNpgwJvdqX zNDiRqt7ixlC3Q== -----END CERTIFICATE-----Generated at Sun Dec 21 06:02:35 2025 by rpki-client