This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft File: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft (raw, json) Hash identifier: PjDGrsE6YRpr2cZqWjT4CsNgi1g49m5mZf7pEMcdc5A= Subject key identifier: 4A:DD:49:5E:66:97:69:D5:CC:7B:AC:FF:9F:21:AD:6C:98:BA:9C:B7 Authority key identifier: F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B Certificate issuer: /CN=f4272ac0423fb097583c6872567d84cae410c89b Certificate serial: 019AF20946A5CFEF878C98540B01A4C7C462 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft Manifest number: 0A78 Signing time: Sat 06 Dec 2025 05:01:25 +0000 Manifest this update: Sat 06 Dec 2025 05:01:25 +0000 Manifest next update: Sun 07 Dec 2025 05:01:25 +0000 Files and hashes: 1: 9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl (hash: 6AywTWTxeBXg5PmzIYiAhQiiWakFeBAe2exUVNyNkU4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:46:a5:cf:ef:87:8c:98:54:0b:01:a4:c7:c4:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4272ac0423fb097583c6872567d84cae410c89b Validity Not Before: Dec 6 05:01:25 2025 GMT Not After : Dec 7 05:01:25 2025 GMT Subject: CN=4add495e669769d5cc7bacff9f21ad6c98ba9cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:54:c9:13:bb:48:5c:fa:e7:3c:ef:fb:55:37: fb:00:2c:bb:30:5f:6c:96:af:28:d8:22:53:33:28: da:29:69:ce:94:7d:79:f6:f6:8a:a6:c7:f4:af:01: ba:77:1e:ea:08:4e:17:e7:56:de:d8:d3:53:de:23: 41:76:59:18:47:47:b1:77:34:8e:61:a7:ac:e0:4c: 13:f0:b7:80:ce:b5:08:49:78:2e:2d:12:c4:34:e4: ef:70:d7:03:2d:b0:8f:28:38:96:44:6f:7f:67:81: f1:fb:9c:ac:0c:c1:d6:23:c1:9a:7b:a0:7c:ff:ed: 49:6c:70:01:f5:8d:c7:af:ec:74:53:09:06:cc:62: b5:b2:bd:3c:2b:8f:9d:21:25:f7:17:47:5d:f9:6a: c6:4a:5d:24:5c:4c:bb:04:df:6d:5b:ef:f2:ce:eb: c0:32:67:92:1c:44:14:2d:2f:24:fa:58:25:b6:14: 52:3f:23:a9:44:18:fb:c3:ea:6b:e6:e4:b8:de:ab: 42:75:f3:a0:71:83:55:47:43:47:b1:a1:42:94:3b: d1:10:50:ac:e6:0f:c7:fe:72:91:3f:19:41:1c:7e: 8f:77:8a:c3:0c:f2:e9:3d:7b:30:2f:ad:05:5c:97: cb:ec:31:8d:5e:ec:34:bb:a0:e8:67:3d:f5:e2:dd: 0c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:DD:49:5E:66:97:69:D5:CC:7B:AC:FF:9F:21:AD:6C:98:BA:9C:B7 X509v3 Authority Key Identifier: keyid:F4:27:2A:C0:42:3F:B0:97:58:3C:68:72:56:7D:84:CA:E4:10:C8:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CcqwEI_sJdYPGhyVn2EyuQQyJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7f2cf2-4294-43d6-a321-47eddde2a372/1/9CcqwEI_sJdYPGhyVn2EyuQQyJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:0d:03:92:67:f9:a5:4f:87:72:33:e8:83:dd:5a:3f:12:3d: cd:c0:44:ee:38:54:9d:74:e4:27:55:3b:a9:a9:f9:27:f6:f5: 14:7c:66:b4:d1:90:a8:31:42:2c:0c:a4:08:96:59:9d:8b:73: 50:f1:f0:9a:5d:49:61:ee:99:80:07:15:8d:8b:d1:fb:c5:c8: 67:e0:41:c4:96:31:3d:66:18:86:05:14:04:f4:70:54:56:42: fb:20:8e:d3:ad:f2:18:03:ec:72:20:39:cc:a3:a2:32:ad:46: c8:dc:c2:85:88:54:c2:de:70:1e:27:27:02:9b:2c:56:68:40: dc:fc:a5:ba:16:b1:b7:81:db:b8:43:69:73:71:f5:22:43:3f: 17:30:fc:90:f6:95:10:1a:83:f2:ca:10:d5:01:e5:60:cd:ae: 46:bd:d1:94:ec:47:cd:45:33:17:38:a3:ee:33:69:9c:4d:f3: ba:b8:f5:45:d6:e8:ab:e9:6d:a5:36:e5:8d:5b:72:0d:7e:a7: ef:79:ec:04:96:50:e3:45:83:98:4e:f0:5b:80:3e:d5:98:65: 76:51:0a:7e:d6:95:06:ed:d3:4c:db:a4:b3:ec:c9:f6:79:e4: dc:71:01:ab:9a:8e:ac:71:ae:a2:36:a2:74:69:60:bf:52:1c: f6:1f:7d:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUalz++HjJhUCwGkx8RiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0MjcyYWMwNDIzZmIwOTc1ODNjNjg3MjU2N2Q4NGNhZTQx MGM4OWIwHhcNMjUxMjA2MDUwMTI1WhcNMjUxMjA3MDUwMTI1WjAzMTEwLwYDVQQD Eyg0YWRkNDk1ZTY2OTc2OWQ1Y2M3YmFjZmY5ZjIxYWQ2Yzk4YmE5Y2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVTJE7tIXPrnPO/7VTf7ACy7MF9s lq8o2CJTMyjaKWnOlH159vaKpsf0rwG6dx7qCE4X51be2NNT3iNBdlkYR0exdzSO Yaes4EwT8LeAzrUISXguLRLENOTvcNcDLbCPKDiWRG9/Z4Hx+5ysDMHWI8Gae6B8 /+1JbHAB9Y3Hr+x0UwkGzGK1sr08K4+dISX3F0dd+WrGSl0kXEy7BN9tW+/yzuvA MmeSHEQULS8k+lglthRSPyOpRBj7w+pr5uS43qtCdfOgcYNVR0NHsaFClDvREFCs 5g/H/nKRPxlBHH6Pd4rDDPLpPXswL60FXJfL7DGNXuw0u6DoZz314t0MnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFErdSV5ml2nVzHus/58hrWyYupy3MB8GA1UdIwQY MBaAFPQnKsBCP7CXWDxoclZ9hMrkEMibMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUNjcXdFSV9zSmRZUEdoeVZuMkV5dVFReUpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83ZjJjZjItNDI5NC00M2Q2LWEzMjEt NDdlZGRkZTJhMzcyLzEvOUNjcXdFSV9zSmRZUEdoeVZuMkV5dVFReUpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy83ZjJjZjItNDI5NC00M2Q2LWEzMjEtNDdlZGRkZTJhMzcy LzEvOUNjcXdFSV9zSmRZUEdoeVZuMkV5dVFReUpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQ0Dkmf5 pU+HcjPog91aPxI9zcBE7jhUnXTkJ1U7qan5J/b1FHxmtNGQqDFCLAykCJZZnYtz UPHwml1JYe6ZgAcVjYvR+8XIZ+BBxJYxPWYYhgUUBPRwVFZC+yCO063yGAPsciA5 zKOiMq1GyNzChYhUwt5wHicnApssVmhA3Pyluhaxt4HbuENpc3H1IkM/FzD8kPaV EBqD8soQ1QHlYM2uRr3RlOxHzUUzFzij7jNpnE3zurj1Rdboq+ltpTbljVtyDX6n 73nsBJZQ40WDmE7wW4A+1ZhldlEKftaVBu3TTNuks+zJ9nnk3HEBq5qOrHGuojai dGlgv1Ic9h999A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:52 2025 by rpki-client