This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft File: 9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft (raw, json) Hash identifier: i/vfmyPS35/opQPQPJ2b7CHflgdC9WKzZjDoBZj1/No= Subject key identifier: 38:60:06:2C:0E:33:5D:2B:02:0C:80:F0:A6:6B:DC:84:52:FE:00:4D Authority key identifier: F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2 Certificate issuer: /CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2 Certificate serial: 019AF50992F708D45905ACA90908AAAC00E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft Manifest number: 066C Signing time: Sat 06 Dec 2025 19:00:36 +0000 Manifest this update: Sat 06 Dec 2025 19:00:36 +0000 Manifest next update: Sun 07 Dec 2025 19:00:36 +0000 Files and hashes: 1: 9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl (hash: pPwqjLEjbMDJAWiDRn0TlRWeRpt/cmPU5QC4mH26NKk=) 2: hmRzovRV4UHybR1HxVtSJMOLDCw.roa (hash: OsQ6iHBOvn0+b51MYRo/b13uIhsZ7r4gypQoB9TbMVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:92:f7:08:d4:59:05:ac:a9:09:08:aa:ac:00:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2 Validity Not Before: Dec 6 19:00:36 2025 GMT Not After : Dec 7 19:00:36 2025 GMT Subject: CN=3860062c0e335d2b020c80f0a66bdc8452fe004d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a7:fc:91:5e:c3:44:8b:26:7c:31:b0:5d:6b: 1a:6d:07:87:f9:47:25:18:2a:95:07:7c:73:84:a6: 22:89:fe:1a:88:91:67:03:56:c1:5c:eb:d5:45:74: fd:42:c0:80:2a:ab:02:7b:84:3f:50:e7:d8:19:c3: 5a:af:a0:16:2e:bb:e8:13:0c:2c:d6:81:00:62:a5: 54:1a:f1:3e:fe:e1:01:b6:f6:d6:42:15:22:56:95: b6:ea:e3:81:ea:28:be:3e:ee:83:df:6b:c8:e9:79: 49:1a:c0:58:e6:8a:a3:a5:05:cd:0a:80:98:0b:0c: f1:ae:9b:3b:fb:41:2d:46:9f:5e:d2:ad:13:ca:7e: e5:f9:58:9a:d1:25:47:e8:de:75:48:f8:51:b2:3e: 2f:3b:19:f8:f6:06:88:ef:b1:53:25:bc:6e:e2:3f: 66:60:d9:5d:f7:c0:14:7e:92:c4:92:1c:89:6a:b2: 51:44:ae:ed:51:85:a5:c5:23:d8:91:4f:49:4a:ac: a4:51:f5:5c:05:b9:ad:9e:44:17:02:39:da:93:97: 8c:b5:30:8f:07:8a:88:c1:02:d8:b9:53:d7:fd:29: 14:49:39:a6:a2:d1:62:ff:e9:16:85:24:d1:f7:28: 1e:53:d7:86:84:57:80:86:8c:f2:73:8e:8c:23:88: 7e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:60:06:2C:0E:33:5D:2B:02:0C:80:F0:A6:6B:DC:84:52:FE:00:4D X509v3 Authority Key Identifier: keyid:F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:80:ab:d7:52:c7:59:33:0b:b5:31:c8:be:79:fb:3f:57:b1: 10:1b:6c:0e:7d:3b:b5:5f:6a:2d:68:9d:e1:9e:cb:06:08:b1: 48:95:30:81:04:59:91:e9:b3:42:d9:a1:ce:67:81:0b:57:6a: bb:b5:a6:dd:41:ec:8a:7d:76:ca:b0:cc:5e:1f:f0:d0:58:ca: 22:25:c5:0e:6e:bf:c6:4d:e4:9c:e2:34:3d:44:d9:13:98:f1: f2:91:3b:de:67:dc:f2:64:03:a4:37:ac:c0:61:b0:41:ee:10: d4:1b:e2:3b:ec:53:c6:7c:0a:22:73:b1:71:62:87:80:d3:bd: 2f:b4:fd:d3:d3:76:c1:9c:cc:7c:43:43:7f:8b:57:9d:8d:2d: 55:8f:66:42:9e:78:8b:82:e8:63:22:a1:76:a1:8b:88:3e:91: d6:41:6e:7a:79:9c:0b:5a:30:c5:e3:ba:d7:3a:21:c4:2c:71: 47:ce:aa:e4:55:8d:00:bd:4b:90:fb:40:2c:21:f4:3b:6a:b8: ec:9d:02:68:b5:10:e4:9d:c2:a6:5d:ea:3d:7d:b6:8e:b3:32: 41:02:88:23:92:34:9b:c7:f8:1e:d4:c6:b8:ee:34:95:83:92: cc:ad:4f:bc:25:5e:86:5f:fe:c1:11:04:0d:8f:cb:09:6f:4d: a7:3f:22:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CZL3CNRZBaypCQiqrADjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1M2ZkOWU2OWQ3ZDFmMmRkYzI2NzA5MTYyNjE5MGNlYWE4 NWNmYzIwHhcNMjUxMjA2MTkwMDM2WhcNMjUxMjA3MTkwMDM2WjAzMTEwLwYDVQQD EygzODYwMDYyYzBlMzM1ZDJiMDIwYzgwZjBhNjZiZGM4NDUyZmUwMDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKf8kV7DRIsmfDGwXWsabQeH+Ucl GCqVB3xzhKYiif4aiJFnA1bBXOvVRXT9QsCAKqsCe4Q/UOfYGcNar6AWLrvoEwws 1oEAYqVUGvE+/uEBtvbWQhUiVpW26uOB6ii+Pu6D32vI6XlJGsBY5oqjpQXNCoCY Cwzxrps7+0EtRp9e0q0Tyn7l+Via0SVH6N51SPhRsj4vOxn49gaI77FTJbxu4j9m YNld98AUfpLEkhyJarJRRK7tUYWlxSPYkU9JSqykUfVcBbmtnkQXAjnak5eMtTCP B4qIwQLYuVPX/SkUSTmmotFi/+kWhSTR9ygeU9eGhFeAhozyc46MI4h+MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhgBiwOM10rAgyA8KZr3IRS/gBNMB8GA1UdIwQY MBaAFPU/2eadfR8t3CZwkWJhkM6qhc/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVRfWjVwMTlIeTNjSm5DUlltR1F6cXFGejhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9hN2RiNGMtYzlmNi00ZTBjLWFhOTct NGM4OTgwYjU4MTI2LzEvOVRfWjVwMTlIeTNjSm5DUlltR1F6cXFGejhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9hN2RiNGMtYzlmNi00ZTBjLWFhOTctNGM4OTgwYjU4MTI2 LzEvOVRfWjVwMTlIeTNjSm5DUlltR1F6cXFGejhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYCr11LH WTMLtTHIvnn7P1exEBtsDn07tV9qLWid4Z7LBgixSJUwgQRZkemzQtmhzmeBC1dq u7Wm3UHsin12yrDMXh/w0FjKIiXFDm6/xk3knOI0PUTZE5jx8pE73mfc8mQDpDes wGGwQe4Q1BviO+xTxnwKInOxcWKHgNO9L7T909N2wZzMfENDf4tXnY0tVY9mQp54 i4LoYyKhdqGLiD6R1kFuenmcC1owxeO61zohxCxxR86q5FWNAL1LkPtALCH0O2q4 7J0CaLUQ5J3Cpl3qPX22jrMyQQKII5I0m8f4HtTGuO40lYOSzK1PvCVehl/+wREE DY/LCW9Npz8iEg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:28:11 2025 by rpki-client