This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft File: 9qD_yrRKardihf2LFfuprgRywAo.mft (raw, json) Hash identifier: zphdpjlXbYnzXVeTO+jmHLy+1of6+smB/T+Ckirju18= Subject key identifier: 5D:4E:66:9C:E1:F9:80:89:78:0F:56:D0:0D:4D:38:26:62:F2:B4:37 Authority key identifier: F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A Certificate issuer: /CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a Certificate serial: 019AF2768FB47E32D180D51B2791C8E8F3CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 07:00:47 +0000 Manifest this update: Sat 06 Dec 2025 07:00:47 +0000 Manifest next update: Sun 07 Dec 2025 07:00:47 +0000 Files and hashes: 1: 9qD_yrRKardihf2LFfuprgRywAo.crl (hash: ptuf6FpKoYf3wJ3PrdhPvgewGy2A8m5hCCOyamCjLQw=) 2: XPkwDLJHT478MATdbgeUa5gcEiA.roa (hash: DoMDYSGNMC9OU+9UBRPPXJnhTtSu9q09Id+HJ989GvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:8f:b4:7e:32:d1:80:d5:1b:27:91:c8:e8:f3:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a Validity Not Before: Dec 6 07:00:47 2025 GMT Not After : Dec 7 07:00:47 2025 GMT Subject: CN=5d4e669ce1f98089780f56d00d4d382662f2b437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3c:5d:8a:4e:4a:8b:c4:42:57:55:b4:45:e0: af:3e:67:96:99:e3:90:15:8d:a9:1a:e4:49:75:d8: c6:38:dd:71:d1:f6:0d:84:ec:f2:a7:47:52:1f:d9: 8f:83:83:b7:65:49:d5:5b:5e:53:8d:b6:bb:1e:de: 93:ba:08:0b:bb:3e:5c:e5:f5:e8:45:04:74:7f:a4: cf:aa:fa:cb:e1:51:b7:5b:9c:e0:da:58:f6:26:9d: fd:79:0a:f3:cf:dc:32:22:cd:12:d7:23:bf:6d:f7: 93:93:c5:f8:c7:0a:bd:69:95:29:31:0b:7f:58:de: 6b:ef:1d:dd:95:94:c4:a6:9f:af:c8:4d:05:f7:db: c0:57:aa:e8:00:2a:44:b4:ff:43:0c:1e:ca:d1:95: 4f:59:92:1c:ce:56:99:dd:da:bc:05:50:b7:0f:bc: 09:e8:b6:d0:58:22:d6:03:f7:5b:2e:a6:7b:65:e4: c0:fb:a7:d6:a5:03:70:9f:93:81:3a:db:c0:e3:a5: 4a:40:b1:c5:3d:d1:98:e7:db:3f:e2:b8:20:ff:dc: ae:9b:0b:6c:74:b7:8a:50:f1:e3:4e:9c:cf:e4:52: 19:8d:95:9e:dc:4c:8f:fb:9f:ff:18:28:78:69:cf: 5f:1d:e2:22:bd:3e:48:4a:55:fc:b6:d3:2a:1e:c4: c0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:4E:66:9C:E1:F9:80:89:78:0F:56:D0:0D:4D:38:26:62:F2:B4:37 X509v3 Authority Key Identifier: keyid:F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:76:8a:ed:cd:a9:10:f3:f9:f6:4a:32:12:1c:c5:71:93:9a: fb:78:1d:27:86:eb:f5:a0:b8:7c:18:05:53:88:f5:0f:72:b4: 9f:a3:9f:ba:9c:83:68:ca:2e:e1:ae:7e:1e:d5:29:dc:d9:9b: fc:49:36:e1:91:55:7f:59:14:63:ca:0d:7a:44:02:0c:6c:d6: f6:43:26:df:49:5b:89:cb:d1:b9:91:d5:22:07:8d:dc:cf:e2: 19:16:a0:e5:6f:03:13:4b:7c:66:84:8c:b2:0b:69:42:4b:bd: f8:35:8b:6b:bd:ff:51:8c:23:74:f9:9a:35:f7:7d:1a:15:38: 1d:a4:d1:b6:a9:b5:88:c9:a0:1b:c6:ab:4e:5e:9d:c2:d2:c0: 10:3d:26:7c:72:59:6b:ab:c3:08:bd:17:44:32:20:3d:49:68: 69:8b:c0:4a:61:8d:e9:bd:48:a6:3f:30:26:27:b6:bb:4c:d6: d1:85:46:6c:21:52:1f:fb:1e:94:7c:96:c7:f0:65:51:07:ba: 02:90:98:ea:48:4b:f4:e1:fd:67:b7:43:8d:bc:dc:0c:d6:40: c3:1e:6d:94:6d:41:0e:f6:4a:0a:e8:fb:63:be:8e:fb:9a:b7: b7:ce:16:47:e0:d5:70:29:af:49:94:37:57:dd:7d:b1:c1:18: e9:4c:31:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydo+0fjLRgNUbJ5HI6PPPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YTBmZmNhYjQ0YTZhYjc2Mjg1ZmQ4YjE1ZmJhOWFlMDQ3 MmMwMGEwHhcNMjUxMjA2MDcwMDQ3WhcNMjUxMjA3MDcwMDQ3WjAzMTEwLwYDVQQD Eyg1ZDRlNjY5Y2UxZjk4MDg5NzgwZjU2ZDAwZDRkMzgyNjYyZjJiNDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zxdik5Ki8RCV1W0ReCvPmeWmeOQ FY2pGuRJddjGON1x0fYNhOzyp0dSH9mPg4O3ZUnVW15Tjba7Ht6TuggLuz5c5fXo RQR0f6TPqvrL4VG3W5zg2lj2Jp39eQrzz9wyIs0S1yO/bfeTk8X4xwq9aZUpMQt/ WN5r7x3dlZTEpp+vyE0F99vAV6roACpEtP9DDB7K0ZVPWZIczlaZ3dq8BVC3D7wJ 6LbQWCLWA/dbLqZ7ZeTA+6fWpQNwn5OBOtvA46VKQLHFPdGY59s/4rgg/9yumwts dLeKUPHjTpzP5FIZjZWe3EyP+5//GCh4ac9fHeIivT5ISlX8ttMqHsTAiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1OZpzh+YCJeA9W0A1NOCZi8rQ3MB8GA1UdIwQY MBaAFPag/8q0Smq3YoX9ixX7qa4EcsAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXFEX3lyUkthcmRpaGYyTEZmdXByZ1J5d0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9hNWUwNTgtZjQ3NS00N2NjLWI5ZWMt YWU0NjA5NDM4OWJhLzEvOXFEX3lyUkthcmRpaGYyTEZmdXByZ1J5d0FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9hNWUwNTgtZjQ3NS00N2NjLWI5ZWMtYWU0NjA5NDM4OWJh LzEvOXFEX3lyUkthcmRpaGYyTEZmdXByZ1J5d0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApXaK7c2p EPP59koyEhzFcZOa+3gdJ4br9aC4fBgFU4j1D3K0n6OfupyDaMou4a5+HtUp3Nmb /Ek24ZFVf1kUY8oNekQCDGzW9kMm30lbicvRuZHVIgeN3M/iGRag5W8DE0t8ZoSM sgtpQku9+DWLa73/UYwjdPmaNfd9GhU4HaTRtqm1iMmgG8arTl6dwtLAED0mfHJZ a6vDCL0XRDIgPUloaYvASmGN6b1Ipj8wJie2u0zW0YVGbCFSH/selHyWx/BlUQe6 ApCY6khL9OH9Z7dDjbzcDNZAwx5tlG1BDvZKCuj7Y76O+5q3t84WR+DVcCmvSZQ3 V919scEY6UwxkQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:06:41 2025 by rpki-client