This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft File: 9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft (raw, json) Hash identifier: /uzLshRFiqSmZzO3eYcftKAX0gZUizlMWiUXm8LPH+M= Subject key identifier: 42:7D:E9:B4:D9:AB:8A:A1:F0:75:98:68:3A:0B:25:CF:D5:88:99:0F Authority key identifier: F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB Certificate issuer: /CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb Certificate serial: 019AF42DDD13D5D7D3250C5566411F78D07A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 15:00:37 +0000 Manifest this update: Sat 06 Dec 2025 15:00:37 +0000 Manifest next update: Sun 07 Dec 2025 15:00:37 +0000 Files and hashes: 1: 9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl (hash: wyjn9c91emkf/Eeo5EuY7YgiYuSfJ/1BwMkJGkVR/uM=) 2: cZzu9h7JCSpAe7ubMeZNqvU_k-M.roa (hash: 9lLGwap+wzAcsgGorlbM31Osi8VLCiKaPunG1+P2vww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:dd:13:d5:d7:d3:25:0c:55:66:41:1f:78:d0:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb Validity Not Before: Dec 6 15:00:37 2025 GMT Not After : Dec 7 15:00:37 2025 GMT Subject: CN=427de9b4d9ab8aa1f07598683a0b25cfd588990f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:69:8b:8a:38:69:b4:90:6d:b7:26:1e:54:d0: 25:ac:f0:9a:ee:69:45:6f:9c:1f:cf:af:2a:14:23: 53:a9:6f:94:72:52:2a:62:b2:a5:fd:5f:78:4f:10: 9d:e9:3d:67:64:4e:4e:f1:32:43:cb:19:84:58:df: a7:c2:cf:76:d0:82:b0:a6:a0:b9:13:26:8e:6a:25: 15:ce:a2:55:7c:71:46:4f:71:2b:1f:04:3b:e2:69: c8:dd:d7:2f:4b:92:bf:70:e2:09:45:00:ce:ad:a6: 93:ab:74:2a:55:3c:d0:04:ed:0f:05:36:ea:17:12: d6:0e:4f:c2:e4:cb:46:5f:df:21:f2:d5:82:a2:2b: 62:7b:f3:45:6c:27:ce:9b:66:56:c1:18:ad:f5:e0: fa:a0:3c:6f:55:40:85:1b:e2:c7:6f:a3:25:d0:11: 02:19:88:33:ec:18:d1:3c:42:48:16:9d:84:af:ad: 9e:5f:58:17:4a:97:ee:d6:7c:3b:f5:f2:ff:94:e9: 76:fe:4e:7f:fe:74:ba:ab:97:25:c6:82:c8:d3:20: 64:ea:c8:5c:27:b5:a0:fb:0a:ef:6f:48:98:c0:4b: ea:63:53:95:bc:b8:19:43:d1:4d:6c:f2:73:e8:f1: e1:9e:68:3a:0a:58:10:2b:0e:ba:db:d9:f5:07:c1: 66:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7D:E9:B4:D9:AB:8A:A1:F0:75:98:68:3A:0B:25:CF:D5:88:99:0F X509v3 Authority Key Identifier: keyid:F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:56:03:27:25:12:2c:49:ca:ec:00:06:21:c7:87:40:80:0e: b3:7d:03:d5:34:92:f1:d3:b7:45:11:f0:43:b6:11:33:a9:e6: c1:63:2a:0c:35:85:6e:c0:35:0f:b1:80:d8:c2:5d:11:75:06: 5f:d4:d1:fd:fa:12:2a:4f:7c:ff:a6:af:bb:17:75:b6:78:8d: 1f:bb:32:bc:04:8f:a7:b0:80:bb:66:08:65:22:bf:43:bf:93: 49:22:12:a9:3d:f7:50:07:c8:e5:07:0f:c5:cb:a2:83:20:ec: 0e:7d:a8:11:58:87:0b:57:6b:4a:e1:db:28:2f:a8:56:2c:6e: eb:8a:05:58:9b:94:15:21:d4:78:c7:68:a8:1d:6c:9a:9e:44: 6e:8b:14:e7:36:f0:3e:58:e9:32:b8:3d:8f:2a:74:9b:3c:a2: ee:ae:8c:d9:79:40:1b:7c:e8:21:a1:43:d3:45:07:7e:74:17: cc:7d:74:7e:5d:ed:0d:f8:e8:32:ad:3b:a9:94:52:96:c1:cc: cf:c9:3a:39:05:78:ab:38:82:98:03:69:f6:8a:04:1a:80:d2: 54:11:01:2b:b9:f3:fb:75:f5:68:3c:0c:ac:65:75:3a:ef:ad: 23:78:36:66:0d:06:ac:15:b7:9f:97:d2:03:9f:3f:bf:81:ea: b9:70:c7:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Ld0T1dfTJQxVZkEfeNB6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YWNiMjY5ZmE4YTU1NGY1MjQzYTNhYmQ2OGQ1YjhkNzZm ZTVlYmIwHhcNMjUxMjA2MTUwMDM3WhcNMjUxMjA3MTUwMDM3WjAzMTEwLwYDVQQD Eyg0MjdkZTliNGQ5YWI4YWExZjA3NTk4NjgzYTBiMjVjZmQ1ODg5OTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAummLijhptJBttyYeVNAlrPCa7mlF b5wfz68qFCNTqW+UclIqYrKl/V94TxCd6T1nZE5O8TJDyxmEWN+nws920IKwpqC5 EyaOaiUVzqJVfHFGT3ErHwQ74mnI3dcvS5K/cOIJRQDOraaTq3QqVTzQBO0PBTbq FxLWDk/C5MtGX98h8tWCoitie/NFbCfOm2ZWwRit9eD6oDxvVUCFG+LHb6Ml0BEC GYgz7BjRPEJIFp2Er62eX1gXSpfu1nw79fL/lOl2/k5//nS6q5clxoLI0yBk6shc J7Wg+wrvb0iYwEvqY1OVvLgZQ9FNbPJz6PHhnmg6ClgQKw6629n1B8FmPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJ96bTZq4qh8HWYaDoLJc/ViJkPMB8GA1UdIwQY MBaAFPassmn6ilVPUkOjq9aNW412/l67MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXF5eWFmcUtWVTlTUTZPcjFvMWJqWGItWHJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yOTU1ZmQtMDkyYS00ZWNjLWE5MmYt ZmJiMzNhNTRmYWRlLzEvOXF5eWFmcUtWVTlTUTZPcjFvMWJqWGItWHJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8yOTU1ZmQtMDkyYS00ZWNjLWE5MmYtZmJiMzNhNTRmYWRl LzEvOXF5eWFmcUtWVTlTUTZPcjFvMWJqWGItWHJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglYDJyUS LEnK7AAGIceHQIAOs30D1TSS8dO3RRHwQ7YRM6nmwWMqDDWFbsA1D7GA2MJdEXUG X9TR/foSKk98/6avuxd1tniNH7syvASPp7CAu2YIZSK/Q7+TSSISqT33UAfI5QcP xcuigyDsDn2oEViHC1drSuHbKC+oVixu64oFWJuUFSHUeMdoqB1smp5EbosU5zbw PljpMrg9jyp0mzyi7q6M2XlAG3zoIaFD00UHfnQXzH10fl3tDfjoMq07qZRSlsHM z8k6OQV4qziCmANp9ooEGoDSVBEBK7nz+3X1aDwMrGV1Ou+tI3g2Zg0GrBW3n5fS A58/v4HquXDHcg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:26:45 2025 by rpki-client