This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft File: r9v0VgEKm9FJQcoskcpTPn71F4o.mft (raw, json) Hash identifier: z5d6Pky8/8wCpmfPI/CJZw5j0nQLqhf6F4Tqs/L7kF4= Subject key identifier: 27:CE:5D:BA:54:A7:03:66:21:38:2E:00:52:00:CB:31:51:C0:8F:B6 Authority key identifier: AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A Certificate issuer: /CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a Certificate serial: 019AF12D3D97B151C37EC99E46BE9A8C7EA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft Manifest number: 1039 Signing time: Sat 06 Dec 2025 01:01:05 +0000 Manifest this update: Sat 06 Dec 2025 01:01:05 +0000 Manifest next update: Sun 07 Dec 2025 01:01:05 +0000 Files and hashes: 1: ajkzuEH8FnXzD6y9WqgTkvcAyWQ.roa (hash: ezeCzHTBFnMMCDhX8NkCA6ybD9xQfKuL+xUd+x4C3b4=) 2: r9v0VgEKm9FJQcoskcpTPn71F4o.crl (hash: Y0iTujwlSvBkTRRfcblndYQDIwJavLaS2NMT++uJg/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:3d:97:b1:51:c3:7e:c9:9e:46:be:9a:8c:7e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a Validity Not Before: Dec 6 01:01:05 2025 GMT Not After : Dec 7 01:01:05 2025 GMT Subject: CN=27ce5dba54a7036621382e005200cb3151c08fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:90:c3:e5:75:6e:da:83:be:c7:4a:8a:11:3a: 42:33:47:02:de:d3:bc:55:0d:44:6b:2b:6c:15:c2: 02:c5:97:35:e0:cb:52:35:57:7f:cb:b2:7e:a8:2b: eb:b5:e3:e0:05:cd:4c:37:3c:bc:eb:f6:10:86:35: b8:7f:59:dc:11:fc:4f:cc:6e:9a:14:fb:10:8c:b0: 53:1c:19:a4:18:e2:dc:34:4d:e2:c5:56:f9:b7:55: 6c:77:89:29:3b:ab:78:82:b3:9c:5f:72:7f:4b:04: a6:6a:79:10:82:5a:d5:8e:6b:16:9f:5e:e4:7c:6c: 32:ae:25:94:fe:3b:14:42:76:4f:d8:5c:26:20:75: f2:41:9b:ed:23:aa:8f:b3:b3:43:3d:2a:f3:b9:28: ea:df:4d:0d:9b:73:9c:75:cb:03:ab:34:3b:fd:30: 5c:c0:f2:0f:0d:57:79:06:a1:45:77:67:ba:68:b3: 52:e2:b8:6a:0b:d0:e8:ab:29:0c:66:ce:6c:25:ce: b8:5c:c5:64:fb:88:76:77:32:ab:22:49:48:cc:dc: ab:e0:6d:fd:5e:bf:f9:04:d6:96:e1:1f:1d:91:8a: 1c:55:95:65:32:d2:01:ad:cf:67:05:2f:fd:73:2f: c0:3f:37:ce:55:68:d5:6c:ea:5b:79:0b:1e:54:8f: a0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:CE:5D:BA:54:A7:03:66:21:38:2E:00:52:00:CB:31:51:C0:8F:B6 X509v3 Authority Key Identifier: keyid:AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:fc:41:23:e0:79:e7:9c:80:84:c1:9a:c4:74:c2:26:21:cb: 46:34:53:a4:f0:9a:6e:9c:ee:a6:3b:a6:36:07:a0:73:12:86: 25:ff:ce:11:a1:dc:f2:60:08:3b:df:49:c4:15:d4:de:d7:6f: 26:80:ad:71:40:78:1f:04:fc:ca:11:eb:5e:ad:6c:03:5b:31: c9:f7:f1:3b:ee:50:da:03:f3:6e:ff:53:4d:f9:d3:48:48:f8: 74:81:54:22:ec:bd:dc:48:a7:9c:b6:e7:c1:d4:89:93:63:83: 40:a4:d4:61:9b:06:75:0a:18:1d:f1:cc:ad:0b:65:5d:32:41: d0:4d:60:97:5d:85:e9:e6:bd:e9:90:2b:70:9a:ee:11:27:fd: 5b:73:90:f2:f8:50:0f:33:2e:42:15:6a:a2:85:fd:bf:52:ef: e6:fd:d8:f9:57:d5:97:e5:09:c8:b3:a3:dd:43:cf:6a:13:7f: f3:e4:a7:bf:d1:51:76:cf:54:3b:8a:fc:19:8b:ec:8e:87:f4: 6c:c5:df:8b:7d:8b:bf:d7:63:4a:45:84:4e:18:26:46:0c:d8: 89:33:f0:a9:71:e9:9b:5e:2e:3b:53:f8:a7:1b:0e:29:7b:58: 8b:78:06:89:18:a3:56:d6:4e:4f:68:91:1e:f0:78:11:63:41: de:38:9e:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLT2XsVHDfsmeRr6ajH6gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZGJmNDU2MDEwYTliZDE0OTQxY2EyYzkxY2E1MzNlN2Vm NTE3OGEwHhcNMjUxMjA2MDEwMTA1WhcNMjUxMjA3MDEwMTA1WjAzMTEwLwYDVQQD EygyN2NlNWRiYTU0YTcwMzY2MjEzODJlMDA1MjAwY2IzMTUxYzA4ZmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpDD5XVu2oO+x0qKETpCM0cC3tO8 VQ1EaytsFcICxZc14MtSNVd/y7J+qCvrtePgBc1MNzy86/YQhjW4f1ncEfxPzG6a FPsQjLBTHBmkGOLcNE3ixVb5t1Vsd4kpO6t4grOcX3J/SwSmankQglrVjmsWn17k fGwyriWU/jsUQnZP2FwmIHXyQZvtI6qPs7NDPSrzuSjq300Nm3OcdcsDqzQ7/TBc wPIPDVd5BqFFd2e6aLNS4rhqC9DoqykMZs5sJc64XMVk+4h2dzKrIklIzNyr4G39 Xr/5BNaW4R8dkYocVZVlMtIBrc9nBS/9cy/APzfOVWjVbOpbeQseVI+g+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfOXbpUpwNmITguAFIAyzFRwI+2MB8GA1UdIwQY MBaAFK/b9FYBCpvRSUHKLJHKUz5+9ReKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjl2MFZnRUttOUZKUWNvc2tjcFRQbjcxRjRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8zZWVmYzEtNGYwOC00NTJlLTg0YjQt M2NkZGYxNzUxZjU5LzEvcjl2MFZnRUttOUZKUWNvc2tjcFRQbjcxRjRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8zZWVmYzEtNGYwOC00NTJlLTg0YjQtM2NkZGYxNzUxZjU5 LzEvcjl2MFZnRUttOUZKUWNvc2tjcFRQbjcxRjRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/xBI+B5 55yAhMGaxHTCJiHLRjRTpPCabpzupjumNgegcxKGJf/OEaHc8mAIO99JxBXU3tdv JoCtcUB4HwT8yhHrXq1sA1sxyffxO+5Q2gPzbv9TTfnTSEj4dIFUIuy93EinnLbn wdSJk2ODQKTUYZsGdQoYHfHMrQtlXTJB0E1gl12F6ea96ZArcJruESf9W3OQ8vhQ DzMuQhVqooX9v1Lv5v3Y+VfVl+UJyLOj3UPPahN/8+Snv9FRds9UO4r8GYvsjof0 bMXfi32Lv9djSkWEThgmRgzYiTPwqXHpm14uO1P4pxsOKXtYi3gGiRijVtZOT2iR HvB4EWNB3jieWw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:05 2025 by rpki-client