This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft File: 9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft (raw, json) Hash identifier: g2IrBReI+auNW9OVBRqPjbD599TtlFJesr6AyAJAq6E= Subject key identifier: 09:2B:3F:DE:57:B1:C4:7F:45:D6:36:A3:C6:8D:9B:5F:56:E3:92:CE Authority key identifier: F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB Certificate issuer: /CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb Certificate serial: 019B2C2F042F054C783E801760F08909E6C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 12:00:37 +0000 Manifest this update: Wed 17 Dec 2025 12:00:37 +0000 Manifest next update: Thu 18 Dec 2025 12:00:37 +0000 Files and hashes: 1: 9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl (hash: KB+/ofyOPx/gWEOkbdRWuUXMWDfiMhptNRE4+m04a6Q=) 2: cZzu9h7JCSpAe7ubMeZNqvU_k-M.roa (hash: 9lLGwap+wzAcsgGorlbM31Osi8VLCiKaPunG1+P2vww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:04:2f:05:4c:78:3e:80:17:60:f0:89:09:e6:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb Validity Not Before: Dec 17 12:00:37 2025 GMT Not After : Dec 18 12:00:37 2025 GMT Subject: CN=092b3fde57b1c47f45d636a3c68d9b5f56e392ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:af:d5:7b:7b:1d:56:21:6f:5c:2d:a5:e5:2f: 0c:18:5c:83:25:7b:6b:76:43:9b:67:37:c4:36:f4: fa:f9:b7:da:3b:ec:59:4e:86:e2:87:51:c7:67:5e: 6b:bc:9d:5e:83:dc:f0:2a:f5:f4:ab:7d:c1:bc:be: f3:61:9b:00:6c:28:de:0e:a7:10:de:df:02:a0:8a: 8a:6c:29:11:eb:4e:6c:83:22:f8:52:7c:23:9a:db: ee:44:57:90:5e:46:e0:de:26:5a:0b:49:17:9f:86: 0d:bc:81:53:dd:04:71:14:8f:10:6f:21:a8:92:2e: e7:c0:6f:c2:4c:05:aa:45:ff:e3:e2:fb:a5:9a:3f: b6:2f:48:8e:72:89:76:59:45:06:31:a7:a0:46:48: 37:80:20:c4:12:47:6f:7b:b8:fc:f7:09:c3:a9:f3: d4:27:e2:07:47:a0:5a:46:63:6b:28:18:17:32:da: 0b:84:7b:1a:97:13:99:bf:1e:86:05:be:3f:74:bc: d9:f4:0f:9b:9b:8d:35:b1:18:96:ae:f4:42:0f:1d: 74:1e:2b:43:d2:52:a0:d5:33:ae:b4:fa:a9:19:da: b1:dc:04:c2:49:6f:00:ff:70:c7:7e:18:3c:5a:39: 53:cc:fb:da:b6:cd:ed:e5:b9:ac:12:f2:93:73:6d: 89:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:2B:3F:DE:57:B1:C4:7F:45:D6:36:A3:C6:8D:9B:5F:56:E3:92:CE X509v3 Authority Key Identifier: keyid:F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:15:d7:e7:43:e2:26:a7:5b:4a:33:c7:64:d2:84:29:86:b2: 9a:a7:c8:57:82:20:e2:d0:bc:23:47:45:f5:c3:e9:2c:99:f7: f4:c9:50:25:16:74:15:f6:85:f6:df:7e:1e:51:74:18:51:69: f0:66:7f:08:32:df:e7:63:ef:62:2e:86:c8:d7:f4:8a:50:0b: c6:fb:3a:70:75:be:7e:83:dd:a9:4a:b8:12:ca:bf:82:b5:e6: d8:69:ee:d9:fc:09:d9:06:08:84:c1:a3:d3:a1:84:a7:bf:ec: 41:24:7c:3e:31:ee:1e:0c:40:90:b6:65:70:fa:97:00:a5:5b: 8e:3e:b9:bd:49:f3:cc:cf:71:55:ba:b9:45:ea:b7:a1:cf:de: 92:d1:1d:42:ba:fa:56:de:0b:36:48:14:dc:1c:84:33:60:f1: c3:f6:02:1a:14:20:ed:b4:c2:1f:e0:0b:9c:25:84:4c:e3:1a: 78:b5:99:22:06:30:ac:44:85:90:5f:13:6c:36:ca:3a:e4:a1: 1d:4b:69:36:e2:d8:cb:36:da:5c:c9:f5:a9:e3:00:d7:13:27: e4:44:f5:09:60:7a:dc:2f:ee:db:28:12:b0:56:e6:21:f8:ad: 07:a1:4c:75:ee:8b:b1:da:37:b9:79:d5:93:d2:25:d2:b1:92: 44:a2:43:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssLwQvBUx4PoAXYPCJCebEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YWNiMjY5ZmE4YTU1NGY1MjQzYTNhYmQ2OGQ1YjhkNzZm ZTVlYmIwHhcNMjUxMjE3MTIwMDM3WhcNMjUxMjE4MTIwMDM3WjAzMTEwLwYDVQQD EygwOTJiM2ZkZTU3YjFjNDdmNDVkNjM2YTNjNjhkOWI1ZjU2ZTM5MmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxK/Ve3sdViFvXC2l5S8MGFyDJXtr dkObZzfENvT6+bfaO+xZTobih1HHZ15rvJ1eg9zwKvX0q33BvL7zYZsAbCjeDqcQ 3t8CoIqKbCkR605sgyL4UnwjmtvuRFeQXkbg3iZaC0kXn4YNvIFT3QRxFI8QbyGo ki7nwG/CTAWqRf/j4vulmj+2L0iOcol2WUUGMaegRkg3gCDEEkdve7j89wnDqfPU J+IHR6BaRmNrKBgXMtoLhHsalxOZvx6GBb4/dLzZ9A+bm401sRiWrvRCDx10HitD 0lKg1TOutPqpGdqx3ATCSW8A/3DHfhg8WjlTzPvats3t5bmsEvKTc22JDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkrP95XscR/RdY2o8aNm19W45LOMB8GA1UdIwQY MBaAFPassmn6ilVPUkOjq9aNW412/l67MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXF5eWFmcUtWVTlTUTZPcjFvMWJqWGItWHJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yOTU1ZmQtMDkyYS00ZWNjLWE5MmYt ZmJiMzNhNTRmYWRlLzEvOXF5eWFmcUtWVTlTUTZPcjFvMWJqWGItWHJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8yOTU1ZmQtMDkyYS00ZWNjLWE5MmYtZmJiMzNhNTRmYWRl LzEvOXF5eWFmcUtWVTlTUTZPcjFvMWJqWGItWHJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdRXX50Pi JqdbSjPHZNKEKYaymqfIV4Ig4tC8I0dF9cPpLJn39MlQJRZ0FfaF9t9+HlF0GFFp 8GZ/CDLf52PvYi6GyNf0ilALxvs6cHW+foPdqUq4Esq/grXm2Gnu2fwJ2QYIhMGj 06GEp7/sQSR8PjHuHgxAkLZlcPqXAKVbjj65vUnzzM9xVbq5Req3oc/ektEdQrr6 Vt4LNkgU3ByEM2Dxw/YCGhQg7bTCH+ALnCWETOMaeLWZIgYwrESFkF8TbDbKOuSh HUtpNuLYyzbaXMn1qeMA1xMn5ET1CWB63C/u2ygSsFbmIfitB6FMde6Lsdo3uXnV k9Il0rGSRKJD2g== -----END CERTIFICATE-----Generated at Wed Dec 17 16:37:15 2025 by rpki-client