This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft File: v9P33PxgiR_DiPpcHb118nuVGeI.mft (raw, json) Hash identifier: yKsgP0lstvewTQOSYXqozZncHN+o9a0GT/P3u7vMknc= Subject key identifier: 91:7D:F3:EE:0A:AF:C1:13:AA:27:2F:00:9B:4B:FF:20:8E:A9:0C:33 Authority key identifier: BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2 Certificate issuer: /CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2 Certificate serial: 019B34C65F2810888063E7AB72B22BF4CB23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 04:02:54 +0000 Manifest this update: Fri 19 Dec 2025 04:02:54 +0000 Manifest next update: Sat 20 Dec 2025 04:02:54 +0000 Files and hashes: 1: v9P33PxgiR_DiPpcHb118nuVGeI.crl (hash: 4D0BoT2bZ6auCUEuAkDeRPRvOwzMISGqH/vRMRqnV7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c6:5f:28:10:88:80:63:e7:ab:72:b2:2b:f4:cb:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2 Validity Not Before: Dec 19 04:02:54 2025 GMT Not After : Dec 20 04:02:54 2025 GMT Subject: CN=917df3ee0aafc113aa272f009b4bff208ea90c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2e:e2:42:4a:36:7d:1a:51:0d:cd:87:ee:76: e5:d2:c0:49:9b:41:3f:b3:01:06:b1:29:58:c1:3e: 04:a6:89:87:de:f0:46:4d:04:4e:0c:b4:cd:53:3a: e2:68:02:e2:e5:bf:6b:42:30:6a:9b:28:c9:0a:a2: ce:73:fc:23:d8:72:9e:05:af:a4:bf:ac:01:81:cd: 4d:4f:a9:ba:4d:f4:11:17:1a:1a:07:37:0d:79:88: ce:ec:c3:c1:46:ef:2e:11:17:1f:d7:04:3b:91:82: 62:d0:79:82:af:dc:5b:8b:7b:6d:3e:07:58:37:2c: 67:ab:e5:64:91:c4:7e:9c:4d:63:a1:8b:5d:a0:20: 6c:b2:b5:f3:cd:34:dd:b7:2c:66:0c:8f:db:3c:a8: 84:a7:7b:31:31:ac:bf:04:63:a0:ae:5b:3d:0f:3a: 45:1e:45:9a:f8:f9:37:84:42:c9:6d:4d:5a:7e:0a: cc:1f:ff:eb:e0:42:ef:a3:70:42:9e:30:51:81:cb: 09:ae:b4:c9:49:77:24:85:5a:0b:9d:83:9e:f0:5f: 8a:d4:03:6b:49:1a:b2:56:08:fb:59:93:54:35:d1: 5c:3e:79:fa:54:0e:a3:8d:31:43:a3:f0:c5:04:d8: bb:11:64:84:96:fe:8d:f5:44:5a:77:24:d6:bf:35: bc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7D:F3:EE:0A:AF:C1:13:AA:27:2F:00:9B:4B:FF:20:8E:A9:0C:33 X509v3 Authority Key Identifier: keyid:BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:60:f6:10:e1:45:87:7f:9a:7c:e3:b2:8d:d4:c5:a5:4a:0e: 47:66:a8:58:95:26:d4:2e:ef:f5:f6:07:21:7d:c0:0b:58:a6: 25:88:03:48:bf:f2:91:ce:86:98:08:6c:41:ec:d2:1d:fa:d4: 96:33:5e:9e:9f:e8:1a:99:eb:bd:bc:0c:9c:0e:be:55:2a:f9: c7:93:8a:64:f2:ae:f2:11:94:e6:46:0f:74:bb:ae:16:70:d1: f7:7e:48:55:5b:c4:fb:54:d2:92:71:7c:90:06:f4:02:f4:e6: 41:76:55:f0:49:6a:4c:80:9f:27:b0:62:82:6d:1f:61:bc:76: b7:01:34:93:2d:24:2f:ee:5e:c1:bc:29:58:35:6d:9c:f6:57: c1:aa:b7:f8:6f:86:65:ae:b7:97:64:65:51:c3:4c:09:27:47: 82:95:63:14:d7:41:4e:0d:7e:99:14:4e:23:05:5e:21:99:d5: 34:e0:ac:48:8b:53:59:16:34:b3:fd:70:4b:d3:7e:3a:be:30: 4c:0d:3c:d8:24:15:dc:84:34:ee:5e:d5:3b:51:9a:06:6b:42: ed:25:51:49:95:82:97:d4:94:49:a9:5f:b6:5c:34:4c:38:54: 8b:c2:5c:eb:5b:ce:83:cb:20:3a:75:4e:5a:b2:20:a6:35:47: 51:03:a7:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xl8oEIiAY+ercrIr9MsjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZDNmN2RjZmM2MDg5MWZjMzg4ZmE1YzFkYmQ3NWYyN2I5 NTE5ZTIwHhcNMjUxMjE5MDQwMjU0WhcNMjUxMjIwMDQwMjU0WjAzMTEwLwYDVQQD Eyg5MTdkZjNlZTBhYWZjMTEzYWEyNzJmMDA5YjRiZmYyMDhlYTkwYzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsC7iQko2fRpRDc2H7nbl0sBJm0E/ swEGsSlYwT4EpomH3vBGTQRODLTNUzriaALi5b9rQjBqmyjJCqLOc/wj2HKeBa+k v6wBgc1NT6m6TfQRFxoaBzcNeYjO7MPBRu8uERcf1wQ7kYJi0HmCr9xbi3ttPgdY Nyxnq+VkkcR+nE1joYtdoCBssrXzzTTdtyxmDI/bPKiEp3sxMay/BGOgrls9DzpF HkWa+Pk3hELJbU1afgrMH//r4ELvo3BCnjBRgcsJrrTJSXckhVoLnYOe8F+K1ANr SRqyVgj7WZNUNdFcPnn6VA6jjTFDo/DFBNi7EWSElv6N9URadyTWvzW8/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJF98+4Kr8ETqicvAJtL/yCOqQwzMB8GA1UdIwQY MBaAFL/T99z8YIkfw4j6XB29dfJ7lRniMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjlQMzNQeGdpUl9EaVBwY0hiMTE4bnVWR2VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kM2E2OTUtNWFmZS00NmI2LWJlNTkt NThmZWQyODIyY2EzLzEvdjlQMzNQeGdpUl9EaVBwY0hiMTE4bnVWR2VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9kM2E2OTUtNWFmZS00NmI2LWJlNTktNThmZWQyODIyY2Ez LzEvdjlQMzNQeGdpUl9EaVBwY0hiMTE4bnVWR2VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxGD2EOFF h3+afOOyjdTFpUoOR2aoWJUm1C7v9fYHIX3AC1imJYgDSL/ykc6GmAhsQezSHfrU ljNenp/oGpnrvbwMnA6+VSr5x5OKZPKu8hGU5kYPdLuuFnDR935IVVvE+1TSknF8 kAb0AvTmQXZV8ElqTICfJ7Bigm0fYbx2twE0ky0kL+5ewbwpWDVtnPZXwaq3+G+G Za63l2RlUcNMCSdHgpVjFNdBTg1+mRROIwVeIZnVNOCsSItTWRY0s/1wS9N+Or4w TA082CQV3IQ07l7VO1GaBmtC7SVRSZWCl9SUSalftlw0TDhUi8Jc61vOg8sgOnVO WrIgpjVHUQOnYg== -----END CERTIFICATE-----Generated at Fri Dec 19 06:17:58 2025 by rpki-client