This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft File: 9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft (raw, json) Hash identifier: R0YoWtaPgIjEvxY1oa7SQwulQc291o80RrFx9q/GgLw= Subject key identifier: C6:A6:C1:33:B2:5B:4A:38:C0:0D:A7:44:79:D1:6A:0A:BF:3E:E3:B6 Authority key identifier: F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91 Certificate issuer: /CN=f68e231d5551876e15afc6637eab7fca80088391 Certificate serial: 019AF20999484ED1C817833D0077C577B7A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft Manifest number: 15D7 Signing time: Sat 06 Dec 2025 05:01:46 +0000 Manifest this update: Sat 06 Dec 2025 05:01:46 +0000 Manifest next update: Sun 07 Dec 2025 05:01:46 +0000 Files and hashes: 1: 9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl (hash: mwZdXQqEX9qXFeMO+dLB1MzulCRfaqW5tMH23h/BdU4=) 2: Yj1ZixuYkYbRfQKF1z7pgksE4us.roa (hash: YrNKpDljk4B4Ef1MFB8qPNVZiTFjojjO2XPhpM/1UPY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:99:48:4e:d1:c8:17:83:3d:00:77:c5:77:b7:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f68e231d5551876e15afc6637eab7fca80088391 Validity Not Before: Dec 6 05:01:46 2025 GMT Not After : Dec 7 05:01:46 2025 GMT Subject: CN=c6a6c133b25b4a38c00da74479d16a0abf3ee3b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:99:06:47:82:9b:26:0a:2e:03:d9:3d:2b:9c: 54:89:e5:37:03:9a:c0:b1:b0:d3:bf:2d:a4:16:d2: 6c:79:89:27:26:36:ed:dd:fb:3a:b4:68:76:26:5d: c0:a9:b7:28:2d:e9:93:a6:ca:ac:47:49:f1:25:09: 67:c0:87:f2:a4:43:b8:a3:16:b5:2a:74:71:3c:9f: 14:02:76:e8:aa:6d:e9:36:ef:98:32:17:4c:24:56: c7:23:aa:fb:a6:14:0d:f6:9a:f2:9b:e6:1e:17:16: 6c:b2:b1:27:ce:72:e9:94:cd:01:4c:2a:41:f4:28: 3c:25:4c:b3:1e:59:1f:57:6c:f3:20:5a:a8:85:e8: 2f:3b:d3:32:f2:da:a3:28:4b:ad:82:73:90:c5:ec: 22:76:f6:b1:0d:43:d2:56:f0:07:f4:22:c6:fa:43: d4:45:1c:c0:c6:5e:42:79:12:b9:7c:43:e7:69:56: 73:62:f0:b6:95:3e:b4:77:da:95:68:05:4d:09:3a: e3:82:48:3a:98:e9:2a:15:4d:cf:31:ef:b0:25:a8: 6e:6e:b0:c4:60:f4:8a:8d:a0:2f:ad:f0:03:d0:52: 8d:44:47:6b:1f:e0:07:95:53:df:48:47:2e:b8:be: 19:ce:c1:24:a8:1f:d6:b9:2c:79:b4:84:00:84:6a: 57:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:A6:C1:33:B2:5B:4A:38:C0:0D:A7:44:79:D1:6A:0A:BF:3E:E3:B6 X509v3 Authority Key Identifier: keyid:F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:9d:47:45:78:21:b4:a5:70:3f:d7:a4:e6:c6:45:6c:f5:f8: ec:a9:ce:f6:b7:26:b8:32:b6:fc:09:a4:d6:e9:dc:4d:ec:2f: d0:6e:61:dd:bd:aa:6a:b1:4b:52:6f:04:a3:38:c1:d6:03:75: eb:8e:6b:ab:51:22:f2:02:d1:82:6a:a9:0a:ce:ab:15:56:d2: 3b:da:95:36:bd:14:03:71:c2:15:f3:f5:19:da:27:74:99:3d: cf:fd:de:af:fd:bf:ac:81:48:de:3b:87:e0:76:0f:f5:77:7c: 64:32:96:c6:a1:64:1d:62:18:7f:7a:e8:a5:a0:d4:7b:74:50: de:0f:c5:79:d0:6d:a0:84:ed:ea:7e:22:4a:42:f9:50:f4:d0: 04:c8:ad:ac:62:bd:23:37:1e:c8:9c:cb:f5:dc:ee:17:a2:ea: a0:7b:8d:39:f8:82:85:b3:f3:71:ea:35:a4:50:e2:28:4c:29: d2:46:1a:6b:a3:33:0e:43:07:00:dd:d1:c1:54:03:49:3b:63: bc:1e:3d:24:66:40:70:c6:3d:2b:f0:34:bf:c5:f4:ee:0f:e6: ac:da:bf:51:0e:6a:00:9c:c0:b9:87:8d:b1:65:4a:2f:49:21: 24:a9:22:68:53:48:7b:c6:32:2e:b9:40:4e:fe:ed:3e:8f:55: e3:a1:d2:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZlITtHIF4M9AHfFd7eoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OGUyMzFkNTU1MTg3NmUxNWFmYzY2MzdlYWI3ZmNhODAw ODgzOTEwHhcNMjUxMjA2MDUwMTQ2WhcNMjUxMjA3MDUwMTQ2WjAzMTEwLwYDVQQD EyhjNmE2YzEzM2IyNWI0YTM4YzAwZGE3NDQ3OWQxNmEwYWJmM2VlM2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZkGR4KbJgouA9k9K5xUieU3A5rA sbDTvy2kFtJseYknJjbt3fs6tGh2Jl3AqbcoLemTpsqsR0nxJQlnwIfypEO4oxa1 KnRxPJ8UAnboqm3pNu+YMhdMJFbHI6r7phQN9prym+YeFxZssrEnznLplM0BTCpB 9Cg8JUyzHlkfV2zzIFqohegvO9My8tqjKEutgnOQxewidvaxDUPSVvAH9CLG+kPU RRzAxl5CeRK5fEPnaVZzYvC2lT60d9qVaAVNCTrjgkg6mOkqFU3PMe+wJahubrDE YPSKjaAvrfAD0FKNREdrH+AHlVPfSEcuuL4ZzsEkqB/WuSx5tIQAhGpXqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMamwTOyW0o4wA2nRHnRagq/PuO2MB8GA1UdIwQY MBaAFPaOIx1VUYduFa/GY36rf8qACIORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW80akhWVlJoMjRWcjhaamZxdF95b0FJZzVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8zNDM5ZDgtN2VhMy00ZTMyLTkzNTIt YmExZWQ5NDc0YmEyLzEvOW80akhWVlJoMjRWcjhaamZxdF95b0FJZzVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8zNDM5ZDgtN2VhMy00ZTMyLTkzNTItYmExZWQ5NDc0YmEy LzEvOW80akhWVlJoMjRWcjhaamZxdF95b0FJZzVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZ1HRXgh tKVwP9ek5sZFbPX47KnO9rcmuDK2/Amk1uncTewv0G5h3b2qarFLUm8EozjB1gN1 645rq1Ei8gLRgmqpCs6rFVbSO9qVNr0UA3HCFfP1GdondJk9z/3er/2/rIFI3juH 4HYP9Xd8ZDKWxqFkHWIYf3ropaDUe3RQ3g/FedBtoITt6n4iSkL5UPTQBMitrGK9 IzceyJzL9dzuF6LqoHuNOfiChbPzceo1pFDiKEwp0kYaa6MzDkMHAN3RwVQDSTtj vB49JGZAcMY9K/A0v8X07g/mrNq/UQ5qAJzAuYeNsWVKL0khJKkiaFNIe8YyLrlA Tv7tPo9V46HSxQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:29:45 2025 by rpki-client