This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft File: 9yQQnyF3AuaYDbkFOo9HEPwKCno.mft (raw, json) Hash identifier: XIW/GqAYAO+tsT6AyHSch58ZUb4jDn+uuKl0EA2x6B0= Subject key identifier: 71:6E:02:5F:DC:4A:D5:06:34:22:B0:1D:99:09:34:80:B5:78:C2:A9 Authority key identifier: F7:24:10:9F:21:77:02:E6:98:0D:B9:05:3A:8F:47:10:FC:0A:0A:7A Certificate issuer: /CN=f724109f217702e6980db9053a8f4710fc0a0a7a Certificate serial: 019B35D70609971068ABDE3D8B982A658A94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yQQnyF3AuaYDbkFOo9HEPwKCno.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft Manifest number: 0294 Signing time: Fri 19 Dec 2025 09:00:42 +0000 Manifest this update: Fri 19 Dec 2025 09:00:42 +0000 Manifest next update: Sat 20 Dec 2025 09:00:42 +0000 Files and hashes: 1: 9yQQnyF3AuaYDbkFOo9HEPwKCno.crl (hash: d29SqChdIyfMxrJF30AJqEWKHEGKyi+AOrR/T2nnWgA=) 2: nFar_UOXP4QzN4-h1MF9qknQEIw.roa (hash: tJ5LZZ8cOfCs7MBCUeqrXfhErlPn41y+8yI8NHVM7o0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft rsync://rpki.ripe.net/repository/DEFAULT/9yQQnyF3AuaYDbkFOo9HEPwKCno.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:06:09:97:10:68:ab:de:3d:8b:98:2a:65:8a:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f724109f217702e6980db9053a8f4710fc0a0a7a Validity Not Before: Dec 19 09:00:42 2025 GMT Not After : Dec 20 09:00:42 2025 GMT Subject: CN=716e025fdc4ad5063422b01d99093480b578c2a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:62:7f:13:b3:65:a6:e4:bf:c9:22:12:8c:eb: 4c:ac:61:75:47:08:7f:c0:a4:c3:30:c0:45:2a:c7: 06:06:e8:bc:40:e6:40:92:74:ac:f7:f1:34:27:d1: ef:f3:92:dd:19:d2:bb:24:71:1e:d8:44:bf:f5:11: 9c:9c:41:da:64:e2:49:e4:96:67:4f:76:46:1b:5d: 88:14:58:06:8f:27:78:3b:cc:46:9d:46:14:c3:07: a3:07:6a:19:6b:72:13:bf:09:33:e5:8b:66:db:ef: 8c:60:7f:91:84:86:5b:fb:cb:86:42:d0:6c:3e:d6: d0:d0:57:3f:0b:40:7f:79:ef:b6:0a:be:ca:05:f3: 0a:1c:43:e9:f8:34:c0:ab:80:c4:39:95:27:05:86: 34:72:b9:3e:4a:2f:d6:6e:35:99:30:2f:5a:80:f9: bb:e1:16:4c:94:f1:97:a9:f4:4f:99:43:9b:74:13: 3e:dc:30:f2:b6:a2:02:f0:26:6b:dd:9a:f1:75:28: f2:13:e2:da:e9:a9:af:69:c4:ea:6c:17:6b:aa:b9: 3d:03:65:99:b8:ad:98:00:33:bb:39:19:8e:1d:44: 6b:6b:ab:16:6c:8d:29:c8:c2:78:99:37:69:aa:a2: 34:c6:e8:a7:5e:bc:10:ce:0c:1b:c7:b6:4a:d9:47: 97:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:6E:02:5F:DC:4A:D5:06:34:22:B0:1D:99:09:34:80:B5:78:C2:A9 X509v3 Authority Key Identifier: keyid:F7:24:10:9F:21:77:02:E6:98:0D:B9:05:3A:8F:47:10:FC:0A:0A:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yQQnyF3AuaYDbkFOo9HEPwKCno.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:78:ef:b9:19:2a:8f:97:24:24:00:dc:cd:20:8a:58:be:d5: 0e:62:aa:8d:e8:ea:9a:c2:fa:a9:f6:62:fd:fb:a5:2a:76:0f: a0:25:9f:92:30:d2:dd:07:17:2d:fd:57:13:f9:c0:a0:e8:42: 97:d3:11:a6:e2:64:85:f7:f8:61:e8:9d:49:14:b2:0f:02:b8: df:77:5f:4c:a3:4c:74:75:7a:59:3e:84:bc:eb:09:97:c2:e5: 4f:85:20:4e:e7:b9:be:19:5c:12:ed:50:db:94:cd:40:2f:48: 23:d6:98:9d:03:74:d8:15:41:b2:ff:df:69:48:25:ae:a8:cc: 73:64:4b:4a:e4:0a:df:ac:08:48:e0:22:79:ea:bd:68:83:89: 9a:df:5e:7d:04:44:11:1d:5f:95:3c:74:c9:58:84:a1:83:0a: 21:1f:9e:9f:4f:a5:b8:85:28:bb:c5:a7:e5:5f:c9:4c:23:aa: ae:e7:78:fe:98:56:88:56:79:09:3c:2c:5d:c9:f8:11:fe:88: c9:f2:c0:dc:92:81:63:06:b8:da:2d:f0:04:f2:92:32:b1:cb: 2f:f6:77:66:98:f2:a8:ff:aa:1d:92:86:2d:ee:dc:4f:b1:ec: b7:74:d8:ea:b7:13:1a:fd:4e:1a:92:0c:65:39:29:b3:89:88: 70:3c:6e:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11wYJlxBoq949i5gqZYqUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MjQxMDlmMjE3NzAyZTY5ODBkYjkwNTNhOGY0NzEwZmMw YTBhN2EwHhcNMjUxMjE5MDkwMDQyWhcNMjUxMjIwMDkwMDQyWjAzMTEwLwYDVQQD Eyg3MTZlMDI1ZmRjNGFkNTA2MzQyMmIwMWQ5OTA5MzQ4MGI1NzhjMmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2J/E7NlpuS/ySISjOtMrGF1Rwh/ wKTDMMBFKscGBui8QOZAknSs9/E0J9Hv85LdGdK7JHEe2ES/9RGcnEHaZOJJ5JZn T3ZGG12IFFgGjyd4O8xGnUYUwwejB2oZa3ITvwkz5Ytm2++MYH+RhIZb+8uGQtBs PtbQ0Fc/C0B/ee+2Cr7KBfMKHEPp+DTAq4DEOZUnBYY0crk+Si/WbjWZMC9agPm7 4RZMlPGXqfRPmUObdBM+3DDytqIC8CZr3ZrxdSjyE+La6amvacTqbBdrqrk9A2WZ uK2YADO7ORmOHURra6sWbI0pyMJ4mTdpqqI0xuinXrwQzgwbx7ZK2UeXwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFuAl/cStUGNCKwHZkJNIC1eMKpMB8GA1UdIwQY MBaAFPckEJ8hdwLmmA25BTqPRxD8Cgp6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXlRUW55RjNBdWFZRGJrRk9vOUhFUHdLQ25vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZDY3NjgtMDJlOS00M2RjLTgyZDgt YjJmNmJjM2UwYjM1LzEvOXlRUW55RjNBdWFZRGJrRk9vOUhFUHdLQ25vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8wZDY3NjgtMDJlOS00M2RjLTgyZDgtYjJmNmJjM2UwYjM1 LzEvOXlRUW55RjNBdWFZRGJrRk9vOUhFUHdLQ25vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjHjvuRkq j5ckJADczSCKWL7VDmKqjejqmsL6qfZi/fulKnYPoCWfkjDS3QcXLf1XE/nAoOhC l9MRpuJkhff4YeidSRSyDwK433dfTKNMdHV6WT6EvOsJl8LlT4UgTue5vhlcEu1Q 25TNQC9II9aYnQN02BVBsv/faUglrqjMc2RLSuQK36wISOAieeq9aIOJmt9efQRE ER1flTx0yViEoYMKIR+en0+luIUou8Wn5V/JTCOqrud4/phWiFZ5CTwsXcn4Ef6I yfLA3JKBYwa42i3wBPKSMrHLL/Z3ZpjyqP+qHZKGLe7cT7Hst3TY6rcTGv1OGpIM ZTkps4mIcDxuPg== -----END CERTIFICATE-----Generated at Fri Dec 19 12:55:11 2025 by rpki-client