This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft File: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft (raw, json) Hash identifier: Whlf0dvD2ktW6TXypIhyHByG7/L1ghJPkcvDEWi1Abk= Subject key identifier: 82:87:BD:B1:62:F2:5E:F0:5F:57:76:5A:B9:51:F9:C2:AD:43:60:FB Authority key identifier: F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40 Certificate issuer: /CN=f4dcb5741e29352ddd42469270178506008a4140 Certificate serial: 019AF3C01A9E739F330B2BA74B5694176928 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft Manifest number: 03CE Signing time: Sat 06 Dec 2025 13:00:44 +0000 Manifest this update: Sat 06 Dec 2025 13:00:44 +0000 Manifest next update: Sun 07 Dec 2025 13:00:44 +0000 Files and hashes: 1: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl (hash: vc7yGtcilv3pmW8AfIqhOMS92Jfua781mTzp33fP0no=) 2: T3T0ZkFQFPUc2BEd0op7sYAz8XA.roa (hash: WuXt/ChkvGDFgO8WDo1RKpja79/oAcXrCCkvEETR+EY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:1a:9e:73:9f:33:0b:2b:a7:4b:56:94:17:69:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4dcb5741e29352ddd42469270178506008a4140 Validity Not Before: Dec 6 13:00:44 2025 GMT Not After : Dec 7 13:00:44 2025 GMT Subject: CN=8287bdb162f25ef05f57765ab951f9c2ad4360fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e5:fb:1b:b2:80:b1:bc:00:e9:ee:5a:48:90: 42:da:d5:26:66:0c:50:7e:dc:fa:a1:55:cc:03:ee: 6b:8a:00:e5:64:7a:3b:c4:dd:39:34:1d:ff:8e:94: 95:5f:8e:e9:1d:33:90:9c:1f:72:08:57:30:e6:de: f1:0d:37:40:d5:f9:cc:8a:34:b9:5a:57:ce:02:27: fb:f8:7b:4a:34:9b:55:72:20:78:30:85:4c:5a:c8: ed:82:f0:3b:29:44:c6:b5:6f:e9:1e:b3:74:4c:ee: fa:e9:05:6c:dc:eb:96:5a:fb:a6:68:86:d8:50:28: 8a:ce:71:98:c9:e3:d0:e1:56:dc:19:a9:dc:07:26: 54:9f:89:1c:94:7d:53:87:88:9d:56:49:f7:09:ba: 0f:24:07:4c:ce:46:05:b5:78:3f:3a:80:00:20:83: 72:60:97:57:81:34:78:2e:0d:83:d6:fa:2b:84:56: 68:6e:49:fb:56:f3:9a:c5:5a:ab:78:e8:df:5f:ae: 7f:db:44:c5:21:9f:f3:33:ba:cc:9f:0c:68:bb:47: ad:a2:3b:8a:90:25:b8:ec:03:0d:80:77:fa:5d:09: e0:5b:78:35:0e:0c:10:08:84:89:5d:9b:ef:a6:c7: dc:05:ec:1d:8e:74:9b:a9:06:0d:05:57:73:de:ba: 1e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:87:BD:B1:62:F2:5E:F0:5F:57:76:5A:B9:51:F9:C2:AD:43:60:FB X509v3 Authority Key Identifier: keyid:F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:a3:f3:ea:c6:89:e7:f1:dc:bf:d3:96:92:0c:6a:11:47:8d: 99:9c:90:71:8a:1e:39:80:35:e1:22:90:d5:8a:7a:9f:76:8d: 3e:93:d7:6e:3d:23:e0:da:e3:70:4f:cb:e6:c3:10:9a:a2:9a: 93:3b:8a:7d:df:32:90:43:78:88:b6:7b:e1:34:b8:8f:7f:9b: 86:90:db:31:bf:68:01:2d:61:6a:08:55:d6:14:2b:e8:0f:c5: 17:4a:50:e6:8b:c7:f3:f6:5d:e4:3b:47:1d:02:ad:92:fe:59: aa:e1:fa:1d:e9:b7:8c:68:7a:f7:9c:57:4b:e0:f9:20:e6:c8: df:40:dd:61:fd:b6:f0:d6:ce:68:a6:bc:78:c9:f2:12:7b:2f: 95:5c:46:25:04:88:0d:6f:47:61:ec:5f:98:aa:0c:80:a5:d0: b4:c6:f7:46:dc:d8:ff:d3:d7:75:f0:fb:26:c7:7d:fa:85:2a: af:f5:d0:0f:19:5e:62:20:42:e1:fc:01:fe:79:41:50:d0:3d: 42:3e:db:8d:24:14:db:23:c9:e5:f4:4f:eb:fd:e4:71:d7:b5: 62:c7:0c:7a:f5:b2:7d:1e:18:b1:a3:70:c1:7f:76:21:c6:6e: 26:67:48:47:20:f1:c9:b1:ea:c6:0c:bd:66:a2:cb:03:ac:d7: 94:2f:f4:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwBqec58zCyunS1aUF2koMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZGNiNTc0MWUyOTM1MmRkZDQyNDY5MjcwMTc4NTA2MDA4 YTQxNDAwHhcNMjUxMjA2MTMwMDQ0WhcNMjUxMjA3MTMwMDQ0WjAzMTEwLwYDVQQD Eyg4Mjg3YmRiMTYyZjI1ZWYwNWY1Nzc2NWFiOTUxZjljMmFkNDM2MGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuX7G7KAsbwA6e5aSJBC2tUmZgxQ ftz6oVXMA+5rigDlZHo7xN05NB3/jpSVX47pHTOQnB9yCFcw5t7xDTdA1fnMijS5 WlfOAif7+HtKNJtVciB4MIVMWsjtgvA7KUTGtW/pHrN0TO766QVs3OuWWvumaIbY UCiKznGYyePQ4VbcGancByZUn4kclH1Th4idVkn3CboPJAdMzkYFtXg/OoAAIINy YJdXgTR4Lg2D1vorhFZobkn7VvOaxVqreOjfX65/20TFIZ/zM7rMnwxou0etojuK kCW47AMNgHf6XQngW3g1DgwQCISJXZvvpsfcBewdjnSbqQYNBVdz3roe5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKHvbFi8l7wX1d2WrlR+cKtQ2D7MB8GA1UdIwQY MBaAFPTctXQeKTUt3UJGknAXhQYAikFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU55MWRCNHBOUzNkUWthU2NCZUZCZ0NLUVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMDczZjEtOTZlZC00YjM1LWEzZjQt ZjgzMDc3Nzk5NDViLzEvOU55MWRCNHBOUzNkUWthU2NCZUZCZ0NLUVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9kMDczZjEtOTZlZC00YjM1LWEzZjQtZjgzMDc3Nzk5NDVi LzEvOU55MWRCNHBOUzNkUWthU2NCZUZCZ0NLUVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhaPz6saJ 5/Hcv9OWkgxqEUeNmZyQcYoeOYA14SKQ1Yp6n3aNPpPXbj0j4NrjcE/L5sMQmqKa kzuKfd8ykEN4iLZ74TS4j3+bhpDbMb9oAS1haghV1hQr6A/FF0pQ5ovH8/Zd5DtH HQKtkv5ZquH6Hem3jGh695xXS+D5IObI30DdYf228NbOaKa8eMnyEnsvlVxGJQSI DW9HYexfmKoMgKXQtMb3RtzY/9PXdfD7Jsd9+oUqr/XQDxleYiBC4fwB/nlBUNA9 Qj7bjSQU2yPJ5fRP6/3kcde1YscMevWyfR4YsaNwwX92IcZuJmdIRyDxybHqxgy9 ZqLLA6zXlC/07g== -----END CERTIFICATE-----Generated at Sat Dec 6 22:42:00 2025 by rpki-client