This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft File: 9q7W1c5BV5fBKF9-9v0EPGRm594.mft (raw, json) Hash identifier: JXccKMDkyLc7UPKMtgNw8FGoniID3G/3U8uHyyDAoqM= Subject key identifier: 52:4B:B8:4F:EC:C8:D4:C6:93:1B:C4:77:B8:A3:A7:DA:D7:D4:27:73 Authority key identifier: F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE Certificate issuer: /CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de Certificate serial: 019B2EF9B5F33FE6FB29954A61B90B4DDF69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft Manifest number: 0C75 Signing time: Thu 18 Dec 2025 01:01:15 +0000 Manifest this update: Thu 18 Dec 2025 01:01:15 +0000 Manifest next update: Fri 19 Dec 2025 01:01:15 +0000 Files and hashes: 1: 9q7W1c5BV5fBKF9-9v0EPGRm594.crl (hash: m2/XQmH7dJ8dapeXipHjB7ytJ2SgPtOFdCde+PwUcDo=) 2: ziQt4Au1b87EcX3IQE4F3MWkDm8.roa (hash: KUoOZI3FZormf07wPCHQ5jctubRO3hNmnfHFtLKB4fQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:b5:f3:3f:e6:fb:29:95:4a:61:b9:0b:4d:df:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de Validity Not Before: Dec 18 01:01:15 2025 GMT Not After : Dec 19 01:01:15 2025 GMT Subject: CN=524bb84fecc8d4c6931bc477b8a3a7dad7d42773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d0:69:50:4d:29:c3:ec:ee:c7:ac:b5:a3:b8: a6:7e:5f:2f:89:42:05:c8:fd:9d:36:cd:3b:35:b5: 1d:48:dd:b5:97:41:e7:aa:f2:10:78:ae:da:c2:e3: c1:ec:7f:b4:b5:84:a1:79:97:be:42:6a:09:91:6d: 63:2b:19:dc:9c:35:e8:a3:46:2a:6b:e5:d2:cb:97: 2d:55:75:ec:13:15:28:b6:df:7e:21:d2:d9:6d:aa: a6:ef:c1:7b:f0:7d:39:7d:36:f6:9b:3a:6b:f4:20: 3f:04:a9:9f:4c:5b:74:72:99:24:33:a7:13:a4:6b: be:c9:49:d0:ae:a6:59:a1:82:c6:7f:bd:5e:7c:ac: b1:3c:5a:ae:17:cb:2e:ba:54:75:07:e2:ce:60:c5: ac:a1:10:ee:e9:bb:dc:15:bf:a2:63:e9:12:b8:bd: 9d:2a:fe:c7:a8:38:d6:9a:b8:5c:57:e4:7d:b8:1b: 95:64:7e:64:49:35:59:fb:8f:76:78:f6:66:07:25: e6:58:52:28:0f:b8:6a:f7:29:7c:9f:6a:3c:ca:8e: 09:ed:7e:bf:19:fb:a5:1e:cb:aa:57:e6:12:cc:17: e9:de:58:f8:b8:dc:e0:8a:7d:19:31:af:b4:8c:3b: 92:a0:e7:48:f5:9e:8f:a8:08:f4:30:d5:e6:e4:c2: 71:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4B:B8:4F:EC:C8:D4:C6:93:1B:C4:77:B8:A3:A7:DA:D7:D4:27:73 X509v3 Authority Key Identifier: keyid:F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:ab:48:7c:f6:73:26:ca:73:84:eb:86:ff:6d:3b:58:b5:e6: 11:db:9c:22:ee:64:a9:5e:83:4a:89:9a:36:ea:77:14:ff:1c: aa:05:a3:e3:bb:0c:65:58:bc:eb:e4:e7:85:c6:32:d4:65:21: f0:00:a3:d0:bc:8c:f6:2a:dc:e8:5b:5d:98:10:70:9b:0c:69: a9:02:37:c7:ae:bd:12:b2:84:03:0e:bc:e6:92:76:a0:c3:68: 0c:6b:d5:0d:3e:16:e2:7e:f1:e1:eb:3d:fe:7e:17:c0:a2:5b: 85:7f:cf:67:aa:19:a8:94:ab:40:11:02:46:72:d3:f2:d3:4e: e8:ed:87:f8:88:58:a5:68:34:65:c5:d4:7d:d8:49:78:1a:9c: d3:0c:11:9d:81:57:61:71:ac:e8:a7:7b:7b:e1:2d:5b:99:76: 73:e6:95:a5:5d:76:92:00:8a:93:d3:b9:a3:69:a8:11:dc:97: 25:12:84:bb:62:a0:41:21:b0:4f:1d:e0:d6:3b:40:bc:d0:b0: ed:ba:70:17:ed:5c:de:10:6c:fb:03:ed:e5:8c:89:d6:c8:48: d2:13:90:09:da:ee:f9:18:18:76:5e:75:6c:44:46:f0:f1:b6: 72:27:0e:7f:00:75:a5:75:7f:a9:31:90:d7:6a:e9:2f:91:2b: a3:e8:57:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+bXzP+b7KZVKYbkLTd9pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YWVkNmQ1Y2U0MTU3OTdjMTI4NWY3ZWY2ZmQwNDNjNjQ2 NmU3ZGUwHhcNMjUxMjE4MDEwMTE1WhcNMjUxMjE5MDEwMTE1WjAzMTEwLwYDVQQD Eyg1MjRiYjg0ZmVjYzhkNGM2OTMxYmM0NzdiOGEzYTdkYWQ3ZDQyNzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NBpUE0pw+zux6y1o7imfl8viUIF yP2dNs07NbUdSN21l0HnqvIQeK7awuPB7H+0tYSheZe+QmoJkW1jKxncnDXoo0Yq a+XSy5ctVXXsExUott9+IdLZbaqm78F78H05fTb2mzpr9CA/BKmfTFt0cpkkM6cT pGu+yUnQrqZZoYLGf71efKyxPFquF8suulR1B+LOYMWsoRDu6bvcFb+iY+kSuL2d Kv7HqDjWmrhcV+R9uBuVZH5kSTVZ+492ePZmByXmWFIoD7hq9yl8n2o8yo4J7X6/ GfulHsuqV+YSzBfp3lj4uNzgin0ZMa+0jDuSoOdI9Z6PqAj0MNXm5MJxQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJLuE/syNTGkxvEd7ijp9rX1CdzMB8GA1UdIwQY MBaAFPau1tXOQVeXwShffvb9BDxkZufeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXE3VzFjNUJWNWZCS0Y5LTl2MEVQR1JtNTk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83ZmE5ZWQtYjA4Ny00MGNkLWEwMTYt ZDk1N2I4YzU0Yzk0LzEvOXE3VzFjNUJWNWZCS0Y5LTl2MEVQR1JtNTk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83ZmE5ZWQtYjA4Ny00MGNkLWEwMTYtZDk1N2I4YzU0Yzk0 LzEvOXE3VzFjNUJWNWZCS0Y5LTl2MEVQR1JtNTk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwqtIfPZz JspzhOuG/207WLXmEducIu5kqV6DSomaNup3FP8cqgWj47sMZVi86+TnhcYy1GUh 8ACj0LyM9irc6FtdmBBwmwxpqQI3x669ErKEAw685pJ2oMNoDGvVDT4W4n7x4es9 /n4XwKJbhX/PZ6oZqJSrQBECRnLT8tNO6O2H+IhYpWg0ZcXUfdhJeBqc0wwRnYFX YXGs6Kd7e+EtW5l2c+aVpV12kgCKk9O5o2moEdyXJRKEu2KgQSGwTx3g1jtAvNCw 7bpwF+1c3hBs+wPt5YyJ1shI0hOQCdru+RgYdl51bERG8PG2cicOfwB1pXV/qTGQ 12rpL5Ero+hXxw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:57:33 2025 by rpki-client