This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft File: m9_8i9uESXC44oubS-bywG39eYU.mft (raw, json) Hash identifier: 4b322PgNZrxHK7Mfexd/JPIGX96A6C1hd4Rw7mQx4OM= Subject key identifier: A9:95:79:CC:52:AF:4A:6D:C8:3C:CE:E1:0B:DE:3F:E7:DE:DE:C0:8C Authority key identifier: 9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85 Certificate issuer: /CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985 Certificate serial: 019AF1D1B0DE41010BEBA10B47B24542A73E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft Manifest number: 153C Signing time: Sat 06 Dec 2025 04:00:42 +0000 Manifest this update: Sat 06 Dec 2025 04:00:42 +0000 Manifest next update: Sun 07 Dec 2025 04:00:42 +0000 Files and hashes: 1: QAk6JCs2jjSqyiQ-YA0VdOCDCeI.roa (hash: FpR2ZM6Bp7jsZvcIkRbwo6z9Bs9HecznXsZ9i9f2MH4=) 2: m9_8i9uESXC44oubS-bywG39eYU.crl (hash: cUS66ACrFWxRHixadBr8QawBn3bx8XYJcMGgouT2ug8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.crl rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:b0:de:41:01:0b:eb:a1:0b:47:b2:45:42:a7:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985 Validity Not Before: Dec 6 04:00:42 2025 GMT Not After : Dec 7 04:00:42 2025 GMT Subject: CN=a99579cc52af4a6dc83ccee10bde3fe7dedec08c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8b:26:9c:37:c6:38:4a:28:8c:32:e1:93:bc: 2c:60:03:93:a5:0a:12:a6:b9:28:ad:d3:50:1a:d2: 47:1d:4b:e7:60:33:b1:2e:68:fd:3a:36:e7:e7:1e: 71:c8:ae:0f:8d:b8:de:a7:ec:61:cf:90:fc:bc:ba: ac:2e:98:58:3f:aa:6b:4e:43:18:57:cd:7c:70:ce: 2b:72:cf:9a:a6:6a:4a:fb:22:3b:0e:f2:35:cb:bd: ff:3e:65:44:e1:a8:dc:ec:b6:bb:b8:50:bd:3b:81: ab:e1:88:ad:11:ab:39:2f:28:31:83:41:df:e4:3f: ae:57:4c:d0:ae:4e:50:b6:3c:6f:0f:fd:b0:ba:7d: 70:da:74:41:3e:71:82:3b:8c:d0:96:a1:20:f3:28: 36:62:1c:64:04:49:1b:86:14:5d:38:6d:ec:73:93: a0:6e:55:7d:98:36:66:c8:68:b9:97:df:22:0d:37: 0b:22:bc:2b:a1:2a:a2:dc:bf:87:6a:ea:e9:82:73: b4:28:48:47:5d:08:8b:74:88:c1:1d:2f:13:d0:90: 47:d8:02:32:df:e3:fe:00:1d:52:97:33:c4:79:a1: 01:6e:8d:7d:6d:cf:b1:6b:49:38:39:a1:67:54:5c: f9:ae:10:f2:f2:07:6d:7d:1b:2b:c5:54:c9:df:e9: 7d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:95:79:CC:52:AF:4A:6D:C8:3C:CE:E1:0B:DE:3F:E7:DE:DE:C0:8C X509v3 Authority Key Identifier: keyid:9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:78:6c:83:6a:2e:47:41:a3:48:25:81:9e:7a:aa:8c:9f:c0: 6c:c2:a7:30:76:24:39:ab:13:ff:20:d1:73:76:a4:a6:6b:91: f3:16:8a:67:86:84:e3:77:f3:b9:c9:3a:ba:f9:dc:bf:98:c1: db:83:00:34:76:3f:27:be:2a:7f:75:ff:d2:b2:55:61:0a:55: 9c:96:b7:9a:ab:0f:66:55:5d:c0:56:5a:cb:ca:72:e1:b0:4e: ab:71:46:e0:fb:8c:3b:3a:32:1a:fa:09:bc:99:13:9c:b9:c0: 90:31:7d:70:89:76:9a:f8:80:c0:aa:23:b6:92:0c:a3:2d:f9: 1b:c6:d3:eb:bd:e6:74:dc:2c:09:a3:b5:6b:b6:6e:70:48:8e: 2e:f9:64:0c:01:56:37:4d:0c:52:04:b5:05:a4:b8:60:cf:d9: 3d:0b:eb:0f:79:10:c1:48:79:22:c5:77:8e:cc:4d:73:b5:85: 07:37:ce:98:d1:d2:7b:8d:a7:55:76:73:2b:5f:2d:f3:57:5a: 18:2d:f3:a2:8b:1a:1b:b9:95:b2:67:ee:c0:95:d8:fc:8f:ba: f2:4e:75:be:05:70:a5:43:99:1c:ee:36:dd:73:c7:6a:f8:ec: 5a:de:21:6e:99:47:dd:0f:5a:fc:a9:1d:0c:e0:03:9c:ef:89: 96:6c:d9:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0bDeQQEL66ELR7JFQqc+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZGZmYzhiZGI4NDQ5NzBiOGUyOGI5YjRiZTZmMmMwNmRm ZDc5ODUwHhcNMjUxMjA2MDQwMDQyWhcNMjUxMjA3MDQwMDQyWjAzMTEwLwYDVQQD EyhhOTk1NzljYzUyYWY0YTZkYzgzY2NlZTEwYmRlM2ZlN2RlZGVjMDhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4smnDfGOEoojDLhk7wsYAOTpQoS prkordNQGtJHHUvnYDOxLmj9Ojbn5x5xyK4Pjbjep+xhz5D8vLqsLphYP6prTkMY V818cM4rcs+apmpK+yI7DvI1y73/PmVE4ajc7La7uFC9O4Gr4YitEas5Lygxg0Hf 5D+uV0zQrk5QtjxvD/2wun1w2nRBPnGCO4zQlqEg8yg2YhxkBEkbhhRdOG3sc5Og blV9mDZmyGi5l98iDTcLIrwroSqi3L+HaurpgnO0KEhHXQiLdIjBHS8T0JBH2AIy 3+P+AB1SlzPEeaEBbo19bc+xa0k4OaFnVFz5rhDy8gdtfRsrxVTJ3+l9fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmVecxSr0ptyDzO4QveP+fe3sCMMB8GA1UdIwQY MBaAFJvf/IvbhElwuOKLm0vm8sBt/XmFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTlfOGk5dUVTWEM0NG91YlMtYnl3RzM5ZVlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wMTU3YTItOTA3Ni00YTgwLWJlMjMt MDUzZjNkZmMxNTIxLzEvbTlfOGk5dUVTWEM0NG91YlMtYnl3RzM5ZVlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8wMTU3YTItOTA3Ni00YTgwLWJlMjMtMDUzZjNkZmMxNTIx LzEvbTlfOGk5dUVTWEM0NG91YlMtYnl3RzM5ZVlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanhsg2ou R0GjSCWBnnqqjJ/AbMKnMHYkOasT/yDRc3akpmuR8xaKZ4aE43fzuck6uvncv5jB 24MANHY/J74qf3X/0rJVYQpVnJa3mqsPZlVdwFZay8py4bBOq3FG4PuMOzoyGvoJ vJkTnLnAkDF9cIl2mviAwKojtpIMoy35G8bT673mdNwsCaO1a7ZucEiOLvlkDAFW N00MUgS1BaS4YM/ZPQvrD3kQwUh5IsV3jsxNc7WFBzfOmNHSe42nVXZzK18t81da GC3zoosaG7mVsmfuwJXY/I+68k51vgVwpUOZHO423XPHavjsWt4hbplH3Q9a/Kkd DOADnO+JlmzZrA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:19:27 2025 by rpki-client