This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft File: RN9Py46lHhjSkIBcj1Dw30NA29U.mft (raw, json) Hash identifier: 4UolLSLwzTh/4WIiprgViB/bt4GHzY9xapO9xPar0RI= Subject key identifier: B5:3C:03:FA:BE:A6:84:5F:82:A8:0F:6E:4D:64:40:23:D0:64:DF:04 Authority key identifier: 44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5 Certificate issuer: /CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5 Certificate serial: 019AF163E7E580CE941CC090D793B623C520 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft Manifest number: 05BC Signing time: Sat 06 Dec 2025 02:00:47 +0000 Manifest this update: Sat 06 Dec 2025 02:00:47 +0000 Manifest next update: Sun 07 Dec 2025 02:00:47 +0000 Files and hashes: 1: Blmy2f8OWilx5iyKeJl19yxz130.roa (hash: hBJbqMLATjqE7T1aEx82BrgYKE+8rAT6ZSYbo8s5Glc=) 2: RN9Py46lHhjSkIBcj1Dw30NA29U.crl (hash: 2gKIepEJZmcwBreVmuvJGzVkMGwWuT0ZsS+ncVaukXU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:e7:e5:80:ce:94:1c:c0:90:d7:93:b6:23:c5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5 Validity Not Before: Dec 6 02:00:47 2025 GMT Not After : Dec 7 02:00:47 2025 GMT Subject: CN=b53c03fabea6845f82a80f6e4d644023d064df04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f1:92:24:7e:e5:8a:25:1b:56:85:88:06:15: 29:1a:89:d3:b7:a6:35:b0:0f:b5:54:e7:4e:f3:01: 87:fd:e6:fd:da:24:65:48:b6:1a:ad:17:e4:f4:49: e3:fb:d5:56:c8:be:39:3c:df:52:2a:be:da:ed:21: b1:4a:16:1e:88:3e:ee:28:e8:6c:b8:e3:da:90:c4: 9a:fd:be:22:a3:1f:4d:ae:17:b9:1c:e0:f4:b5:cd: a7:0c:60:de:0e:09:02:45:86:77:1f:ec:c8:64:e5: 57:1f:b8:c4:8d:d0:23:fd:dc:84:ca:95:cd:43:c3: d8:7e:1b:08:90:5b:7c:19:91:6e:36:06:ee:86:04: a7:c9:82:75:2f:05:dc:46:41:e4:87:40:29:19:98: 5c:89:19:0d:25:95:cf:1d:e7:87:f5:78:82:fa:e0: 27:41:b3:44:d0:14:29:ea:45:eb:47:fe:64:67:82: 12:53:29:51:1c:29:71:0b:97:69:51:e6:e6:c9:d6: df:fe:08:45:65:e4:3a:cf:e4:cd:4a:5c:b6:f0:aa: 6d:62:d4:7c:68:fa:e2:8b:ec:89:ae:d8:18:c2:6d: 8a:4e:6e:fb:6a:5d:af:04:b7:a4:60:6c:2c:0f:3a: 46:0d:fd:0f:51:83:11:f1:36:d3:6c:26:ed:5a:cf: 81:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:3C:03:FA:BE:A6:84:5F:82:A8:0F:6E:4D:64:40:23:D0:64:DF:04 X509v3 Authority Key Identifier: keyid:44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:93:fe:28:81:fc:c9:b3:bf:ac:37:5e:fc:42:45:98:0b:ac: e3:2e:65:d8:c9:bf:d0:eb:ca:71:d9:00:76:cd:20:5e:f7:77: bc:ae:99:96:bd:75:44:61:5d:58:c3:7c:b9:9c:9f:29:ac:6b: 50:18:d1:0c:f3:13:84:85:c2:2b:04:f7:9b:d4:b6:8e:3a:b5: d0:c9:3a:67:0f:82:d0:9a:4b:f3:86:b8:6e:5d:a7:7e:1c:29: c9:c9:7f:72:be:e9:56:40:61:13:9d:3c:08:1e:93:87:b3:58: db:47:f4:10:f9:0b:ad:fa:3b:4f:b9:c7:fd:18:f1:8c:95:c1: df:04:e9:fc:16:e2:68:eb:91:8b:a5:70:f2:0b:1b:73:b0:b8: e6:d3:21:a3:3b:c7:c6:51:70:62:68:e0:84:cf:fc:06:20:38: 02:b0:bd:81:c7:a6:81:26:eb:29:b8:56:0f:4d:91:c8:e1:bc: 7e:a6:30:71:31:7c:4f:93:2b:98:0f:3f:30:b8:b7:7c:5e:c9: 61:b3:bd:c1:66:30:7c:61:53:0c:ec:12:4d:85:bd:cd:b0:b6: 61:17:e9:c0:5e:dd:d0:b2:62:66:5d:eb:95:84:ea:77:36:7d: 84:6a:95:e1:41:94:64:2e:d5:17:28:fe:98:9b:f7:eb:b3:6b: aa:a4:69:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+flgM6UHMCQ15O2I8UgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZGY0ZmNiOGVhNTFlMThkMjkwODA1YzhmNTBmMGRmNDM0 MGRiZDUwHhcNMjUxMjA2MDIwMDQ3WhcNMjUxMjA3MDIwMDQ3WjAzMTEwLwYDVQQD EyhiNTNjMDNmYWJlYTY4NDVmODJhODBmNmU0ZDY0NDAyM2QwNjRkZjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvGSJH7liiUbVoWIBhUpGonTt6Y1 sA+1VOdO8wGH/eb92iRlSLYarRfk9Enj+9VWyL45PN9SKr7a7SGxShYeiD7uKOhs uOPakMSa/b4iox9Nrhe5HOD0tc2nDGDeDgkCRYZ3H+zIZOVXH7jEjdAj/dyEypXN Q8PYfhsIkFt8GZFuNgbuhgSnyYJ1LwXcRkHkh0ApGZhciRkNJZXPHeeH9XiC+uAn QbNE0BQp6kXrR/5kZ4ISUylRHClxC5dpUebmydbf/ghFZeQ6z+TNSly28KptYtR8 aPrii+yJrtgYwm2KTm77al2vBLekYGwsDzpGDf0PUYMR8TbTbCbtWs+B9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLU8A/q+poRfgqgPbk1kQCPQZN8EMB8GA1UdIwQY MBaAFETfT8uOpR4Y0pCAXI9Q8N9DQNvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk45UHk0NmxIaGpTa0lCY2oxRHczME5BMjlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83Y2MxODMtZWJhNS00NzQ3LThiMTAt ZjM4Yzc0OWI2ZTM5LzEvUk45UHk0NmxIaGpTa0lCY2oxRHczME5BMjlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS83Y2MxODMtZWJhNS00NzQ3LThiMTAtZjM4Yzc0OWI2ZTM5 LzEvUk45UHk0NmxIaGpTa0lCY2oxRHczME5BMjlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5P+KIH8 ybO/rDde/EJFmAus4y5l2Mm/0OvKcdkAds0gXvd3vK6Zlr11RGFdWMN8uZyfKaxr UBjRDPMThIXCKwT3m9S2jjq10Mk6Zw+C0JpL84a4bl2nfhwpycl/cr7pVkBhE508 CB6Th7NY20f0EPkLrfo7T7nH/RjxjJXB3wTp/BbiaOuRi6Vw8gsbc7C45tMhozvH xlFwYmjghM/8BiA4ArC9gcemgSbrKbhWD02RyOG8fqYwcTF8T5MrmA8/MLi3fF7J YbO9wWYwfGFTDOwSTYW9zbC2YRfpwF7d0LJiZl3rlYTqdzZ9hGqV4UGUZC7VFyj+ mJv367NrqqRpvQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:10:34 2025 by rpki-client