This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft File: n9mIbi2ycJ2yI2TjNNOeLuSI024.mft (raw, json) Hash identifier: PvSjYXUd+61Mi74RGMzR6HZ8B+OPv+y/3b+RBm6Jb6o= Subject key identifier: ED:BA:EA:94:C8:2E:06:22:50:61:DB:4E:A5:31:14:1E:17:0B:03:F5 Authority key identifier: 9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E Certificate issuer: /CN=9fd9886e2db2709db22364e334d39e2ee488d36e Certificate serial: 019AF50A4570D6DB36A069E1D5D01402A766 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft Manifest number: 0521 Signing time: Sat 06 Dec 2025 19:01:22 +0000 Manifest this update: Sat 06 Dec 2025 19:01:22 +0000 Manifest next update: Sun 07 Dec 2025 19:01:22 +0000 Files and hashes: 1: Rjc45YVuDrAMQdY8qgjKUXqz9To.roa (hash: VkM0hIqEPGBmrXo8E00kzKR2aWKMeDBdfCqKvjZR58E=) 2: n9mIbi2ycJ2yI2TjNNOeLuSI024.crl (hash: 6islNErlH30Wa+l1X2nYRMosLJ7H+xbiBQtcKZASvJE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:45:70:d6:db:36:a0:69:e1:d5:d0:14:02:a7:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fd9886e2db2709db22364e334d39e2ee488d36e Validity Not Before: Dec 6 19:01:22 2025 GMT Not After : Dec 7 19:01:22 2025 GMT Subject: CN=edbaea94c82e06225061db4ea531141e170b03f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:11:73:61:d6:a9:15:70:ff:95:e4:2e:5c:00: 0a:e5:5b:ef:04:e5:ca:49:6e:d9:22:a3:29:07:71: eb:c5:55:45:5e:68:d9:28:70:5c:7c:1d:eb:e5:d7: 28:9c:02:23:6d:48:60:cc:57:6b:10:0a:cd:a2:98: 6a:48:1a:ba:14:84:9a:1a:11:36:1d:5a:ac:25:be: 74:20:18:14:29:1b:b8:80:e8:9a:43:43:06:be:13: c4:59:a8:03:fb:62:14:29:af:e0:e8:05:94:58:c0: 6b:b6:e1:ad:1f:c1:8e:f8:ba:90:17:31:05:43:3a: 6c:98:1c:c2:f0:6c:6b:e3:4d:7c:a2:89:bf:66:ff: ef:a6:7e:b8:6d:db:8f:b2:06:78:3c:bd:2a:02:62: 4e:bd:62:4c:58:75:b7:d1:64:cd:a0:79:97:23:bb: 50:0e:b7:da:50:8c:3a:b4:ee:6b:67:66:f5:2c:81: 2d:dc:b8:c4:e4:7d:31:55:e6:d9:62:33:21:18:f1: df:63:17:ca:9d:f3:da:a5:8c:e7:2d:5d:81:13:68: dc:cb:fa:5f:9b:de:61:fa:6d:f3:ee:7e:ae:ff:6c: 0b:10:45:7d:f2:86:06:aa:91:c7:e6:fe:ed:c2:c8: d6:a0:a8:6c:c7:cf:c8:41:2f:b1:31:45:d3:7e:cc: 27:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:BA:EA:94:C8:2E:06:22:50:61:DB:4E:A5:31:14:1E:17:0B:03:F5 X509v3 Authority Key Identifier: keyid:9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d3:f4:63:0a:81:10:03:fe:d5:d2:0b:f2:73:c1:6a:84:fb: 66:ea:cd:ca:56:0b:22:40:32:eb:a9:bc:02:31:03:8c:d7:c9: c4:54:4c:a6:29:ac:5e:0a:0d:bb:d0:15:fa:db:0b:aa:e0:82: 34:16:fb:0e:db:91:cf:cf:69:a4:29:6e:e2:7e:70:7d:84:1b: 0e:9f:ca:ae:90:4f:af:81:d7:26:af:3c:9d:dd:0b:2f:8c:9f: fe:00:12:41:d1:43:99:ff:a7:ff:28:56:4e:f4:26:79:86:db: 64:47:87:03:c5:7c:b9:bf:24:93:bd:16:cb:2f:2c:53:0a:2e: 63:7e:a8:67:ca:d3:15:53:c8:ea:ab:5a:cd:32:cd:d9:78:76: 35:d2:12:ef:94:69:77:f4:04:c0:33:65:33:8e:b1:27:12:f9: 89:48:17:e1:de:e3:41:d9:56:ec:db:00:19:cb:7f:db:66:60: 60:d0:1e:59:42:78:19:c1:19:3b:bf:59:f4:07:30:79:33:7b: 92:90:97:50:ed:05:0e:ae:76:c6:53:66:f1:6f:f6:2f:17:a0: 2f:da:39:78:de:f7:6b:20:91:b7:77:ec:32:34:08:c5:58:c3: 87:8b:bb:4f:14:64:ec:02:c8:15:d9:4b:df:47:00:10:5c:43: ea:7a:3b:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CkVw1ts2oGnh1dAUAqdmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZDk4ODZlMmRiMjcwOWRiMjIzNjRlMzM0ZDM5ZTJlZTQ4 OGQzNmUwHhcNMjUxMjA2MTkwMTIyWhcNMjUxMjA3MTkwMTIyWjAzMTEwLwYDVQQD EyhlZGJhZWE5NGM4MmUwNjIyNTA2MWRiNGVhNTMxMTQxZTE3MGIwM2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxFzYdapFXD/leQuXAAK5VvvBOXK SW7ZIqMpB3HrxVVFXmjZKHBcfB3r5dconAIjbUhgzFdrEArNophqSBq6FISaGhE2 HVqsJb50IBgUKRu4gOiaQ0MGvhPEWagD+2IUKa/g6AWUWMBrtuGtH8GO+LqQFzEF QzpsmBzC8Gxr4018oom/Zv/vpn64bduPsgZ4PL0qAmJOvWJMWHW30WTNoHmXI7tQ DrfaUIw6tO5rZ2b1LIEt3LjE5H0xVebZYjMhGPHfYxfKnfPapYznLV2BE2jcy/pf m95h+m3z7n6u/2wLEEV98oYGqpHH5v7twsjWoKhsx8/IQS+xMUXTfswnHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO266pTILgYiUGHbTqUxFB4XCwP1MB8GA1UdIwQY MBaAFJ/ZiG4tsnCdsiNk4zTTni7kiNNuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjltSWJpMnljSjJ5STJUak5OT2VMdVNJMDI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS85ZjY4NzItNTgxYi00ZDQ3LWJjNmEt ZWJhMGNkNTdjMDIwLzEvbjltSWJpMnljSjJ5STJUak5OT2VMdVNJMDI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS85ZjY4NzItNTgxYi00ZDQ3LWJjNmEtZWJhMGNkNTdjMDIw LzEvbjltSWJpMnljSjJ5STJUak5OT2VMdVNJMDI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbdP0YwqB EAP+1dIL8nPBaoT7ZurNylYLIkAy66m8AjEDjNfJxFRMpimsXgoNu9AV+tsLquCC NBb7DtuRz89ppClu4n5wfYQbDp/KrpBPr4HXJq88nd0LL4yf/gASQdFDmf+n/yhW TvQmeYbbZEeHA8V8ub8kk70Wyy8sUwouY36oZ8rTFVPI6qtazTLN2Xh2NdIS75Rp d/QEwDNlM46xJxL5iUgX4d7jQdlW7NsAGct/22ZgYNAeWUJ4GcEZO79Z9AcweTN7 kpCXUO0FDq52xlNm8W/2LxegL9o5eN73ayCRt3fsMjQIxVjDh4u7TxRk7ALIFdlL 30cAEFxD6no7eg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:07:07 2025 by rpki-client