This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft File: mFS9ioY6MYlcxsuSLzAIs_CKra4.mft (raw, json) Hash identifier: 05wx9BtEE6b75co9tjrB5jXI7bGK6+pXrn+V2u7vQ3c= Subject key identifier: F8:EE:81:38:FC:61:F4:F1:47:E9:8C:6A:B3:7F:DF:9E:56:08:33:DE Authority key identifier: 98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE Certificate issuer: /CN=9854bd8a863a31895cc6cb922f3008b3f08aadae Certificate serial: 019B2407B700EE7A7556DF192FC99C8059F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft Manifest number: 170E Signing time: Mon 15 Dec 2025 22:00:43 +0000 Manifest this update: Mon 15 Dec 2025 22:00:43 +0000 Manifest next update: Tue 16 Dec 2025 22:00:43 +0000 Files and hashes: 1: 0vdRQP6oDKbrt2AMFylSvIwqIyg.roa (hash: pxwOPSpkw+fKuyNlbzf40gyqoMu+x6ekO7hHtNoYIH4=) 2: eehHZCCtBF4ofvtvmkP_R--u6i0.roa (hash: Qv+/+I4mInj8ZQpbVci07W/0Cj+7zt+KBmz4hdMjJLU=) 3: mFS9ioY6MYlcxsuSLzAIs_CKra4.crl (hash: FFQvc+VK1x6X6SHXmo0ScXSEsavLjFbwnQEQUGOpXig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:07:b7:00:ee:7a:75:56:df:19:2f:c9:9c:80:59:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9854bd8a863a31895cc6cb922f3008b3f08aadae Validity Not Before: Dec 15 22:00:43 2025 GMT Not After : Dec 16 22:00:43 2025 GMT Subject: CN=f8ee8138fc61f4f147e98c6ab37fdf9e560833de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d1:96:4b:d8:67:f4:90:16:0e:f9:a9:fd:e5: d9:63:41:13:1f:0c:c5:71:8f:00:85:bb:54:4d:06: 78:27:15:8e:20:67:10:bd:54:8b:b4:4b:04:6d:42: ce:9c:c7:42:ad:40:53:0b:80:7f:2b:86:3c:3a:da: 2c:c9:4c:b7:91:5f:97:3e:c2:54:a9:1d:f7:5d:d7: 97:e5:2a:3e:e8:aa:92:21:ba:7b:48:49:b9:e9:15: 89:4c:6c:d0:24:03:18:bb:9c:25:d2:77:93:c0:08: f6:6c:7f:df:3d:1c:90:90:41:3c:09:8f:9b:93:cb: 24:76:8d:1b:43:a1:0c:4b:b3:59:9a:4b:06:02:3c: 8f:d2:3d:8d:67:cb:cc:39:0b:00:8b:de:99:9b:3b: 04:e4:04:ef:8b:2f:f1:99:bf:9e:59:a0:f4:cd:7c: ba:51:32:47:02:49:09:91:2e:b3:32:4a:ae:7a:98: 89:b3:86:bf:e6:44:5c:02:20:90:76:fe:f4:fd:e9: 9c:71:94:6e:37:3d:ed:7a:97:98:8f:9d:10:42:88: b6:ba:bd:35:90:97:0d:d6:f8:ca:68:1d:fc:4f:74: 2d:bb:10:ee:a0:f7:62:1f:2e:96:cf:9e:d3:30:3e: 5e:dc:8c:72:6e:5f:c9:6d:67:e5:9b:4f:18:15:a0: 7c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:EE:81:38:FC:61:F4:F1:47:E9:8C:6A:B3:7F:DF:9E:56:08:33:DE X509v3 Authority Key Identifier: keyid:98:54:BD:8A:86:3A:31:89:5C:C6:CB:92:2F:30:08:B3:F0:8A:AD:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFS9ioY6MYlcxsuSLzAIs_CKra4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2ed10c-04b0-4866-9b82-c522b74ddcfd/1/mFS9ioY6MYlcxsuSLzAIs_CKra4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d0:76:e8:1f:99:f6:e7:e6:11:74:27:85:83:f0:cb:74:0a: 89:12:0b:f8:07:f8:32:0c:d2:37:e8:26:a8:29:1a:00:69:49: f9:b5:a7:5b:ab:ae:94:81:22:92:84:96:79:9e:f7:6f:5e:24: 61:25:0f:60:ed:e5:c8:ac:5e:5e:e2:1d:54:a7:9f:ca:24:88: 43:3a:d9:36:49:11:0c:7b:6f:aa:18:a4:47:90:5e:ed:17:ab: 95:f0:14:5b:95:23:ac:bb:a8:93:8b:1b:c3:02:79:ff:81:ce: 1c:bf:2e:36:70:ef:08:ca:5f:6c:e2:7c:f7:d9:54:9d:91:d0: 28:1a:85:f6:e8:3b:33:4d:5e:fd:74:8e:b1:84:a8:b8:0d:5a: fc:52:2b:8f:5c:92:a1:7e:ee:6c:68:7d:5d:54:55:bb:77:2e: 91:63:05:27:24:8e:ff:fa:8c:59:e1:c8:c3:05:7c:63:3a:b6: 01:39:2e:92:61:ad:f5:99:96:4a:3d:e1:6a:10:63:27:87:09: 00:92:aa:8f:35:ed:cc:16:93:6c:20:b6:a4:9f:a3:f7:c1:81: 4b:f6:15:80:c0:b5:99:e1:66:39:d0:63:ad:72:56:db:1d:cf: 37:0a:51:ed:9c:f1:39:fb:4d:b4:7f:7c:02:e6:85:7a:09:fc: 76:ab:2e:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskB7cA7np1Vt8ZL8mcgFnxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NTRiZDhhODYzYTMxODk1Y2M2Y2I5MjJmMzAwOGIzZjA4 YWFkYWUwHhcNMjUxMjE1MjIwMDQzWhcNMjUxMjE2MjIwMDQzWjAzMTEwLwYDVQQD EyhmOGVlODEzOGZjNjFmNGYxNDdlOThjNmFiMzdmZGY5ZTU2MDgzM2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9GWS9hn9JAWDvmp/eXZY0ETHwzF cY8AhbtUTQZ4JxWOIGcQvVSLtEsEbULOnMdCrUBTC4B/K4Y8OtosyUy3kV+XPsJU qR33XdeX5So+6KqSIbp7SEm56RWJTGzQJAMYu5wl0neTwAj2bH/fPRyQkEE8CY+b k8skdo0bQ6EMS7NZmksGAjyP0j2NZ8vMOQsAi96ZmzsE5ATviy/xmb+eWaD0zXy6 UTJHAkkJkS6zMkquepiJs4a/5kRcAiCQdv70/emccZRuNz3tepeYj50QQoi2ur01 kJcN1vjKaB38T3QtuxDuoPdiHy6Wz57TMD5e3Ixybl/JbWflm08YFaB8uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPjugTj8YfTxR+mMarN/355WCDPeMB8GA1UdIwQY MBaAFJhUvYqGOjGJXMbLki8wCLPwiq2uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yZWQxMGMtMDRiMC00ODY2LTliODIt YzUyMmI3NGRkY2ZkLzEvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8yZWQxMGMtMDRiMC00ODY2LTliODItYzUyMmI3NGRkY2Zk LzEvbUZTOWlvWTZNWWxjeHN1U0x6QUlzX0NLcmE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9B26B+Z 9ufmEXQnhYPwy3QKiRIL+Af4MgzSN+gmqCkaAGlJ+bWnW6uulIEikoSWeZ73b14k YSUPYO3lyKxeXuIdVKefyiSIQzrZNkkRDHtvqhikR5Be7RerlfAUW5UjrLuok4sb wwJ5/4HOHL8uNnDvCMpfbOJ899lUnZHQKBqF9ug7M01e/XSOsYSouA1a/FIrj1yS oX7ubGh9XVRVu3cukWMFJySO//qMWeHIwwV8Yzq2ATkukmGt9ZmWSj3hahBjJ4cJ AJKqjzXtzBaTbCC2pJ+j98GBS/YVgMC1meFmOdBjrXJW2x3PNwpR7ZzxOftNtH98 AuaFegn8dqsuNA== -----END CERTIFICATE-----Generated at Tue Dec 16 00:27:57 2025 by rpki-client