This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft File: 9TFMH54Rk8ICXLZytSNXOXjSVNk.mft (raw, json) Hash identifier: ilVZjxamdiBw+CbW6h9dCfYBr7vsaRvvNBbPDsNAr4w= Subject key identifier: 69:A4:91:CD:DC:DF:22:B8:76:48:86:C7:63:82:29:36:6B:82:F0:EC Authority key identifier: F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9 Certificate issuer: /CN=f5314c1f9e1193c2025cb672b523573978d254d9 Certificate serial: 019AF19AE56C40981FD8C7BD2E049B071BD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft Manifest number: 0ACA Signing time: Sat 06 Dec 2025 03:00:51 +0000 Manifest this update: Sat 06 Dec 2025 03:00:51 +0000 Manifest next update: Sun 07 Dec 2025 03:00:51 +0000 Files and hashes: 1: 9TFMH54Rk8ICXLZytSNXOXjSVNk.crl (hash: muRUJ7m8ugiDs7sgi4McpZ1bwwLVlkBL2Kz2Oa+ZtCU=) 2: vnQYA6POl1a8tK2ZzQU1CNh2rSU.roa (hash: cwo0eDB9nxSSyKe/qdMpdoKv9t3e96TKN+bq+LM4mpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:e5:6c:40:98:1f:d8:c7:bd:2e:04:9b:07:1b:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5314c1f9e1193c2025cb672b523573978d254d9 Validity Not Before: Dec 6 03:00:51 2025 GMT Not After : Dec 7 03:00:51 2025 GMT Subject: CN=69a491cddcdf22b8764886c7638229366b82f0ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a9:32:b7:1d:62:e1:c8:b7:82:68:9c:6a:90: b6:f5:4c:df:c1:ce:61:70:69:98:5b:52:e8:1d:59: 1d:e9:84:df:78:6d:82:31:28:17:52:c5:75:2d:f0: 6e:92:15:0b:b0:97:ed:32:ec:ec:93:7a:a6:3b:d3: ef:ca:20:b4:98:82:3a:59:d4:ed:2b:0b:66:f1:d0: e8:41:4c:4b:13:db:2c:f0:f2:e3:2c:4c:3a:1a:a9: 19:d8:0b:40:40:1e:dd:37:66:b3:4f:82:51:71:39: fa:67:1b:2f:b2:6a:e6:d8:ee:3e:09:0f:5d:65:bc: 8a:9d:d1:69:1c:ad:65:24:44:d8:c3:34:dc:8d:31: 29:75:88:fa:1a:74:55:b5:15:a5:23:b0:d6:0f:c9: ea:e5:70:36:7d:41:c1:d5:71:34:c0:39:8c:f7:2a: 32:fd:9d:1a:ce:d9:b5:33:ee:c5:a4:4e:6a:ac:dd: 3c:60:84:f9:36:7c:98:4d:96:e5:f7:d0:da:25:e1: 99:c8:b1:58:9f:92:1a:b9:d8:93:52:e9:9f:3b:19: 1a:04:c8:08:bc:83:b8:ac:15:61:a9:76:9a:5e:65: 9c:da:70:db:f0:1e:44:08:0d:0a:ba:a5:d3:66:05: 42:c3:38:34:a7:5c:72:86:e5:32:54:1b:4b:5a:bd: a3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A4:91:CD:DC:DF:22:B8:76:48:86:C7:63:82:29:36:6B:82:F0:EC X509v3 Authority Key Identifier: keyid:F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:87:70:cd:20:49:74:71:35:01:0b:39:0b:fe:7e:10:cc:e7: 6d:77:d4:b3:7e:a8:80:08:30:a5:0a:2d:02:74:ca:55:f7:5e: b9:31:ef:22:1e:b4:9e:68:a5:46:4e:aa:7f:a9:32:b5:0b:fc: b5:53:40:f9:20:d3:14:ea:eb:91:04:b5:0f:32:c0:4c:b1:4f: e9:8c:a8:ba:1d:43:82:3e:8b:63:df:20:2f:ad:83:1d:71:d1: b6:6c:8f:dd:c7:1e:45:6b:02:e5:8b:b4:22:a6:5f:8d:9f:79: a6:02:80:2e:8e:06:a6:e5:5d:93:47:13:16:87:52:e2:9a:f4: 37:13:bb:cb:e0:55:92:d4:32:33:22:5d:48:cf:fc:03:51:eb: bb:d8:7d:07:b1:d9:c0:4a:f7:5b:c7:3b:07:87:d9:06:0d:75: 95:f1:da:97:17:7d:68:73:91:c2:c9:35:ab:cd:6c:8f:07:26: d6:80:b9:7e:9e:50:a9:ee:4d:c9:32:35:1a:dc:90:fd:fd:cf: 5f:16:98:b6:1e:21:82:03:4c:88:bb:fa:9c:cb:70:fa:ae:98: df:c9:ea:af:32:d5:ce:a8:8d:8d:92:b9:3d:0d:2b:b1:c5:b8: f8:92:6a:06:ca:17:ec:fd:a3:cc:38:61:fa:80:cb:20:d7:5d: 83:07:83:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmuVsQJgf2Me9LgSbBxvXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MzE0YzFmOWUxMTkzYzIwMjVjYjY3MmI1MjM1NzM5Nzhk MjU0ZDkwHhcNMjUxMjA2MDMwMDUxWhcNMjUxMjA3MDMwMDUxWjAzMTEwLwYDVQQD Eyg2OWE0OTFjZGRjZGYyMmI4NzY0ODg2Yzc2MzgyMjkzNjZiODJmMGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6kytx1i4ci3gmicapC29Uzfwc5h cGmYW1LoHVkd6YTfeG2CMSgXUsV1LfBukhULsJftMuzsk3qmO9PvyiC0mII6WdTt Kwtm8dDoQUxLE9ss8PLjLEw6GqkZ2AtAQB7dN2azT4JRcTn6Zxsvsmrm2O4+CQ9d ZbyKndFpHK1lJETYwzTcjTEpdYj6GnRVtRWlI7DWD8nq5XA2fUHB1XE0wDmM9yoy /Z0aztm1M+7FpE5qrN08YIT5NnyYTZbl99DaJeGZyLFYn5IaudiTUumfOxkaBMgI vIO4rBVhqXaaXmWc2nDb8B5ECA0KuqXTZgVCwzg0p1xyhuUyVBtLWr2jBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmkkc3c3yK4dkiGx2OCKTZrgvDsMB8GA1UdIwQY MBaAFPUxTB+eEZPCAly2crUjVzl40lTZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVRGTUg1NFJrOElDWExaeXRTTlhPWGpTVk5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8xZDA5ZTYtYWU3Yi00MzRjLTk5ZWMt NzM4Yzc0OTJmNzY4LzEvOVRGTUg1NFJrOElDWExaeXRTTlhPWGpTVk5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8xZDA5ZTYtYWU3Yi00MzRjLTk5ZWMtNzM4Yzc0OTJmNzY4 LzEvOVRGTUg1NFJrOElDWExaeXRTTlhPWGpTVk5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYdwzSBJ dHE1AQs5C/5+EMznbXfUs36ogAgwpQotAnTKVfdeuTHvIh60nmilRk6qf6kytQv8 tVNA+SDTFOrrkQS1DzLATLFP6Yyouh1Dgj6LY98gL62DHXHRtmyP3cceRWsC5Yu0 IqZfjZ95pgKALo4GpuVdk0cTFodS4pr0NxO7y+BVktQyMyJdSM/8A1Hru9h9B7HZ wEr3W8c7B4fZBg11lfHalxd9aHORwsk1q81sjwcm1oC5fp5Qqe5NyTI1GtyQ/f3P XxaYth4hggNMiLv6nMtw+q6Y38nqrzLVzqiNjZK5PQ0rscW4+JJqBsoX7P2jzDhh +oDLINddgweDAw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:15:59 2025 by rpki-client