This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft File: 9xPX34BXC8z7JzeT8ApdRshT5Jo.mft (raw, json) Hash identifier: WnYECrih2VgtV66Pa1nVksoIKwg5HgR0RJCiHCYmRGg= Subject key identifier: 88:67:48:8E:3D:23:DB:DD:09:89:98:CE:55:80:C5:0B:04:43:6B:F0 Authority key identifier: F7:13:D7:DF:80:57:0B:CC:FB:27:37:93:F0:0A:5D:46:C8:53:E4:9A Certificate issuer: /CN=f713d7df80570bccfb273793f00a5d46c853e49a Certificate serial: 019AF208FD94844E4BF1608D03F33FD6B169 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xPX34BXC8z7JzeT8ApdRshT5Jo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft Manifest number: 0684 Signing time: Sat 06 Dec 2025 05:01:06 +0000 Manifest this update: Sat 06 Dec 2025 05:01:06 +0000 Manifest next update: Sun 07 Dec 2025 05:01:06 +0000 Files and hashes: 1: 9xPX34BXC8z7JzeT8ApdRshT5Jo.crl (hash: xrGIGtNatX6HxSlmU+75uuBmT2eGmC0qQprc7F8Pg7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft rsync://rpki.ripe.net/repository/DEFAULT/9xPX34BXC8z7JzeT8ApdRshT5Jo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:fd:94:84:4e:4b:f1:60:8d:03:f3:3f:d6:b1:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f713d7df80570bccfb273793f00a5d46c853e49a Validity Not Before: Dec 6 05:01:06 2025 GMT Not After : Dec 7 05:01:06 2025 GMT Subject: CN=8867488e3d23dbdd098998ce5580c50b04436bf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:89:d4:b5:6c:c3:aa:c5:d6:06:21:11:8c:a5: 85:6e:93:47:0d:81:d1:65:55:34:d5:ed:f1:7d:ea: 89:cc:14:3e:18:bd:f1:ea:d4:50:e2:13:54:7a:09: cb:d5:10:c0:15:51:c5:cf:6a:72:26:7a:26:7b:44: 96:76:45:81:29:48:8b:2b:16:65:d6:52:8e:65:ee: b2:3b:ba:24:f8:d1:a3:8d:94:83:6c:66:bf:d8:9b: 6a:0f:19:04:4e:d4:f9:39:13:f9:50:24:96:32:24: b9:04:fd:ec:4b:c9:d4:12:3c:c2:94:fd:22:0b:46: 6e:64:23:93:ef:68:d3:57:09:74:38:4d:49:9e:b7: 63:69:49:55:3b:30:7d:20:63:02:b5:ab:dc:e3:f6: a9:57:25:87:86:f0:27:72:c6:69:d6:e8:46:e0:90: b1:06:f3:ab:1a:95:3a:0d:47:83:83:47:d9:15:f1: 68:b8:de:aa:9e:d0:ef:96:9d:65:be:54:4f:3c:07: 1d:71:fc:b8:ab:89:84:4c:0d:93:31:0a:03:13:f2: 3e:a7:62:b5:7b:22:5a:2b:e6:fd:d8:0f:70:5f:75: a5:07:21:06:1d:71:18:d2:86:32:5f:53:d5:c4:2d: 69:16:36:2b:ae:f2:71:04:7a:47:0a:65:cc:34:f3: 54:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:67:48:8E:3D:23:DB:DD:09:89:98:CE:55:80:C5:0B:04:43:6B:F0 X509v3 Authority Key Identifier: keyid:F7:13:D7:DF:80:57:0B:CC:FB:27:37:93:F0:0A:5D:46:C8:53:E4:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xPX34BXC8z7JzeT8ApdRshT5Jo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:09:19:c3:df:0c:ca:c1:7f:32:30:ac:38:f8:f8:94:a6:77: b2:46:e1:be:f2:f8:1e:6d:eb:c0:f7:5d:d6:04:0a:66:b7:22: 87:15:bd:52:09:33:f5:a6:0a:c8:a7:5b:cf:a6:9d:e5:e3:6a: 4b:6b:b3:40:0c:4c:07:83:76:d7:02:65:11:87:8a:ab:ea:ac: f1:55:2a:36:19:cd:6c:21:7f:d6:a6:3b:08:4a:85:e2:f6:d9: a0:4c:2a:66:cf:e4:61:7e:27:ac:f8:28:0a:cd:69:67:ab:4d: 4b:d4:ab:fe:45:20:14:26:4a:5c:e5:15:62:6a:5c:f2:0e:b6: 2e:b4:cf:e9:84:05:e6:76:86:3e:03:81:d6:15:52:eb:1c:ed: fb:c0:4a:84:59:8f:a8:92:15:6c:25:e4:96:72:fd:0a:69:d1: a6:f5:cd:e7:83:9c:59:f5:e0:aa:85:40:c1:3a:be:dd:1c:95: b4:94:79:ee:b7:6c:d9:0a:dc:c6:f9:1c:e1:eb:f5:d6:d0:14: ca:e8:fc:73:20:68:95:3b:f3:25:d4:2a:23:0b:25:ab:e0:6d: 42:d5:69:ce:42:70:0e:30:3a:98:87:76:88:88:b9:1b:e4:c4: 02:82:d6:be:c4:42:df:9e:0b:1b:cd:10:81:12:ba:89:75:1c: 04:8d:30:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCP2UhE5L8WCNA/M/1rFpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MTNkN2RmODA1NzBiY2NmYjI3Mzc5M2YwMGE1ZDQ2Yzg1 M2U0OWEwHhcNMjUxMjA2MDUwMTA2WhcNMjUxMjA3MDUwMTA2WjAzMTEwLwYDVQQD Eyg4ODY3NDg4ZTNkMjNkYmRkMDk4OTk4Y2U1NTgwYzUwYjA0NDM2YmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhInUtWzDqsXWBiERjKWFbpNHDYHR ZVU01e3xfeqJzBQ+GL3x6tRQ4hNUegnL1RDAFVHFz2pyJnome0SWdkWBKUiLKxZl 1lKOZe6yO7ok+NGjjZSDbGa/2JtqDxkETtT5ORP5UCSWMiS5BP3sS8nUEjzClP0i C0ZuZCOT72jTVwl0OE1JnrdjaUlVOzB9IGMCtavc4/apVyWHhvAncsZp1uhG4JCx BvOrGpU6DUeDg0fZFfFouN6qntDvlp1lvlRPPAcdcfy4q4mETA2TMQoDE/I+p2K1 eyJaK+b92A9wX3WlByEGHXEY0oYyX1PVxC1pFjYrrvJxBHpHCmXMNPNUiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhnSI49I9vdCYmYzlWAxQsEQ2vwMB8GA1UdIwQY MBaAFPcT19+AVwvM+yc3k/AKXUbIU+SaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXhQWDM0QlhDOHo3SnplVDhBcGRSc2hUNUpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yM2ExOWEtMzBkYi00ODcyLWFiNzMt NTI4N2FmYzEwZTY4LzEvOXhQWDM0QlhDOHo3SnplVDhBcGRSc2hUNUpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8yM2ExOWEtMzBkYi00ODcyLWFiNzMtNTI4N2FmYzEwZTY4 LzEvOXhQWDM0QlhDOHo3SnplVDhBcGRSc2hUNUpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgkZw98M ysF/MjCsOPj4lKZ3skbhvvL4Hm3rwPdd1gQKZrcihxW9Ugkz9aYKyKdbz6ad5eNq S2uzQAxMB4N21wJlEYeKq+qs8VUqNhnNbCF/1qY7CEqF4vbZoEwqZs/kYX4nrPgo Cs1pZ6tNS9Sr/kUgFCZKXOUVYmpc8g62LrTP6YQF5naGPgOB1hVS6xzt+8BKhFmP qJIVbCXklnL9CmnRpvXN54OcWfXgqoVAwTq+3RyVtJR57rds2Qrcxvkc4ev11tAU yuj8cyBolTvzJdQqIwslq+BtQtVpzkJwDjA6mId2iIi5G+TEAoLWvsRC354LG80Q gRK6iXUcBI0wpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:22:12 2025 by rpki-client