This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft File: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft (raw, json) Hash identifier: w/WJbDI6mdy663O+xvqOgB3k615m6YjvpfuDodBbZ9E= Subject key identifier: 4F:3E:81:E8:21:79:EE:09:14:46:88:06:E8:37:75:25:E4:A4:D7:19 Authority key identifier: F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3 Certificate issuer: /CN=f43bf90808ae7eca063f746a8f1d88865734c8a3 Certificate serial: 019AF0886A5426EBB776CE3D3BD1D631CD56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft Manifest number: 177A Signing time: Fri 05 Dec 2025 22:01:03 +0000 Manifest this update: Fri 05 Dec 2025 22:01:03 +0000 Manifest next update: Sat 06 Dec 2025 22:01:03 +0000 Files and hashes: 1: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl (hash: RK840jy/5uSpiryaX64YcG369U3gBq8X3KJmVotcXOQ=) 2: ROD80653_T-MkjTmqYTdP5M1LUg.roa (hash: lOnwVxDIfeJwEQvoT4QPCm3NmWmOEk6KMpexVgqv54Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:6a:54:26:eb:b7:76:ce:3d:3b:d1:d6:31:cd:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f43bf90808ae7eca063f746a8f1d88865734c8a3 Validity Not Before: Dec 5 22:01:03 2025 GMT Not After : Dec 6 22:01:03 2025 GMT Subject: CN=4f3e81e82179ee0914468806e8377525e4a4d719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5d:4b:02:c1:1a:07:e7:22:bd:df:b8:3f:7d: b7:3c:ef:1e:f8:8e:10:61:7d:70:c5:d6:9b:6b:1a: 7f:da:11:9d:3f:51:37:83:4d:4b:dc:04:c2:9a:a7: 28:eb:c3:5b:ad:6c:cb:f3:ea:b6:57:00:fa:e4:6c: da:92:ab:af:95:a8:d1:ba:1d:38:50:20:49:47:5c: 40:62:16:4e:9f:ab:09:00:0f:3b:fe:1d:70:b3:1e: 4c:d5:f4:eb:d9:21:7a:cc:59:d9:6e:14:a6:fa:8a: 1a:b1:0d:db:5f:54:bd:3a:73:bd:c7:5b:be:4a:24: fc:35:45:2d:b5:86:0c:20:5a:61:6f:1e:0e:58:99: ec:3a:65:c6:b8:66:76:b7:05:74:c3:d8:2b:58:f7: 6e:e6:91:84:97:a7:b3:bc:3b:fc:ab:7c:1a:de:ee: cd:5c:b7:ce:fc:8b:b1:a0:8c:d0:73:54:24:7b:08: f7:fc:4f:f6:44:a4:bc:cf:93:55:50:8c:28:88:2d: 02:e2:dd:4e:f5:61:cf:5f:af:af:b9:9e:9d:e7:28: d2:fc:4a:53:f5:78:0e:c1:f9:7f:55:7d:e1:0c:49: 17:3b:7b:97:e7:bb:f4:90:3b:f5:fa:0e:1c:00:49: 85:ae:31:cf:17:26:0f:0d:58:b2:43:50:70:b4:94: b3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:3E:81:E8:21:79:EE:09:14:46:88:06:E8:37:75:25:E4:A4:D7:19 X509v3 Authority Key Identifier: keyid:F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:93:c2:90:32:70:db:20:24:7c:d0:7a:93:f1:81:11:9f:25: b8:81:c9:33:8f:c1:aa:4c:8f:45:17:b2:1c:f0:b5:fa:b1:1a: 0f:f0:26:a2:c5:4d:f9:4b:5e:ff:9b:e2:31:1a:b9:af:41:b8: 08:09:54:22:b9:89:8e:fb:26:5e:a7:c7:6b:d2:0f:09:8b:f5: 05:87:41:83:54:b3:33:9f:d8:af:ba:43:6a:03:24:9e:98:f1: ca:ec:00:fd:e6:46:54:11:75:58:82:7c:b0:3a:62:b4:f0:aa: 4f:53:96:fc:f8:a0:d7:4e:fa:09:62:76:bb:ee:39:40:e9:4c: a7:8c:ae:0f:96:c2:bf:98:9d:53:e8:be:58:84:6a:2e:be:22: 2b:f3:38:b9:e2:90:20:65:c5:f4:a2:89:2d:fa:1d:f5:c1:fa: f8:97:81:53:3b:4c:68:ba:78:ce:49:ca:a3:18:f8:87:8d:26: 00:2a:de:71:58:c1:e7:cc:e4:1c:53:88:ff:5e:c6:da:11:af: 58:2c:01:48:ed:d9:be:c7:e6:87:a5:93:2f:69:74:a7:07:84: 7b:ab:72:ee:10:55:91:6b:cc:21:c5:bc:c5:ef:29:72:4c:59: 0e:e6:92:7b:d5:55:98:1c:f2:b3:e8:e2:16:9e:1c:f7:04:a0: 32:78:50:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiGpUJuu3ds49O9HWMc1WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0M2JmOTA4MDhhZTdlY2EwNjNmNzQ2YThmMWQ4ODg2NTcz NGM4YTMwHhcNMjUxMjA1MjIwMTAzWhcNMjUxMjA2MjIwMTAzWjAzMTEwLwYDVQQD Eyg0ZjNlODFlODIxNzllZTA5MTQ0Njg4MDZlODM3NzUyNWU0YTRkNzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV1LAsEaB+civd+4P323PO8e+I4Q YX1wxdabaxp/2hGdP1E3g01L3ATCmqco68NbrWzL8+q2VwD65GzakquvlajRuh04 UCBJR1xAYhZOn6sJAA87/h1wsx5M1fTr2SF6zFnZbhSm+ooasQ3bX1S9OnO9x1u+ SiT8NUUttYYMIFphbx4OWJnsOmXGuGZ2twV0w9grWPdu5pGEl6ezvDv8q3wa3u7N XLfO/IuxoIzQc1Qkewj3/E/2RKS8z5NVUIwoiC0C4t1O9WHPX6+vuZ6d5yjS/EpT 9XgOwfl/VX3hDEkXO3uX57v0kDv1+g4cAEmFrjHPFyYPDViyQ1BwtJSz8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE8+geghee4JFEaIBug3dSXkpNcZMB8GA1UdIwQY MBaAFPQ7+QgIrn7KBj90ao8diIZXNMijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUR2NUNBaXVmc29HUDNScWp4MklobGMweUtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hOGQ5NDMtZjA4Mi00YjE4LWI4NDAt Mzg5MTk1YzRmMDdiLzEvOUR2NUNBaXVmc29HUDNScWp4MklobGMweUtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9hOGQ5NDMtZjA4Mi00YjE4LWI4NDAtMzg5MTk1YzRmMDdi LzEvOUR2NUNBaXVmc29HUDNScWp4MklobGMweUtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApPCkDJw 2yAkfNB6k/GBEZ8luIHJM4/BqkyPRReyHPC1+rEaD/AmosVN+Ute/5viMRq5r0G4 CAlUIrmJjvsmXqfHa9IPCYv1BYdBg1SzM5/Yr7pDagMknpjxyuwA/eZGVBF1WIJ8 sDpitPCqT1OW/Pig1076CWJ2u+45QOlMp4yuD5bCv5idU+i+WIRqLr4iK/M4ueKQ IGXF9KKJLfod9cH6+JeBUztMaLp4zknKoxj4h40mACrecVjB58zkHFOI/17G2hGv WCwBSO3Zvsfmh6WTL2l0pweEe6ty7hBVkWvMIcW8xe8pckxZDuaSe9VVmBzys+ji Fp4c9wSgMnhQiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:16 2025 by rpki-client