This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft File: 9GRgXq8UuLXSjujQdsHjc491glM.mft (raw, json) Hash identifier: PosKEJ0D4uQ4G5/Ea9CYleXq1nKx/LAOqYbqDdRTN70= Subject key identifier: 87:3C:7C:15:EF:9D:98:E9:2E:62:D7:A2:F3:EC:9B:58:CA:56:3E:D3 Authority key identifier: F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53 Certificate issuer: /CN=f464605eaf14b8b5d28ee8d076c1e3738f758253 Certificate serial: 019AF4D2A017C85D1E0656EE3E3749BD4E20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft Manifest number: 1221 Signing time: Sat 06 Dec 2025 18:00:35 +0000 Manifest this update: Sat 06 Dec 2025 18:00:35 +0000 Manifest next update: Sun 07 Dec 2025 18:00:35 +0000 Files and hashes: 1: 9GRgXq8UuLXSjujQdsHjc491glM.crl (hash: QWAgxRSXhpoJ89vWZY1dSycstUr5vynC2OVjnG7Prdw=) 2: olrnyQQfOhnKpr2co2Em_3dR--o.roa (hash: rp8wShqRa1Zo54SX2Szk+upU5GSFmN+Gac4fff3lsc4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:a0:17:c8:5d:1e:06:56:ee:3e:37:49:bd:4e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f464605eaf14b8b5d28ee8d076c1e3738f758253 Validity Not Before: Dec 6 18:00:35 2025 GMT Not After : Dec 7 18:00:35 2025 GMT Subject: CN=873c7c15ef9d98e92e62d7a2f3ec9b58ca563ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:06:d3:1b:83:e2:88:ad:40:b2:57:e6:13:49: af:62:5f:d6:33:59:bf:bc:49:5c:89:eb:58:d5:df: 3a:f5:c2:18:2a:0e:e9:0b:31:64:63:30:c8:a5:c3: fd:cc:5d:44:ce:76:8d:18:7a:42:12:2e:f3:01:4b: 89:43:52:4f:01:a4:c3:1d:0c:18:ac:ac:7f:99:bf: f0:18:e1:5c:df:7c:ac:3f:96:93:26:f3:13:f1:9a: 73:39:29:e0:0f:99:1c:53:ab:70:02:35:85:06:31: 14:50:3d:b8:3f:b4:d9:8c:4a:61:67:bf:e1:fe:70: 40:d1:a9:a2:6b:d3:b0:c4:04:20:9d:4f:09:ee:02: 0a:89:65:11:da:8d:d2:9b:ca:50:9f:f8:e7:9d:b4: 29:52:4b:ab:7b:de:db:f9:fb:5e:40:b2:61:7a:da: 06:1a:52:ae:6d:59:11:1e:6f:9f:30:2f:80:75:26: 2d:9e:88:04:dc:42:4f:f0:e2:af:2e:a6:93:37:44: 5e:43:9e:93:99:18:80:e1:24:c7:8a:12:a8:55:4d: 72:12:81:cb:c7:08:de:1e:a0:48:c8:a4:1a:76:f0: b9:54:2c:1c:46:e8:e8:41:fe:e7:3b:ff:44:77:ab: de:07:71:01:75:ee:57:c7:95:3d:f5:7c:3b:26:ee: 2d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:3C:7C:15:EF:9D:98:E9:2E:62:D7:A2:F3:EC:9B:58:CA:56:3E:D3 X509v3 Authority Key Identifier: keyid:F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b7:e2:e3:ff:c4:b8:df:39:99:bd:7f:33:9a:51:c1:f6:ec: 25:6f:e2:68:1d:e9:ab:e8:ae:4a:50:9c:0a:d2:3d:a3:f5:c7: bd:02:46:42:8c:a7:92:7d:5f:0b:9d:44:e2:a5:3a:03:51:04: ae:ec:5a:29:3c:f5:3e:dc:28:eb:a1:e8:0d:f0:ac:a3:98:35: 16:52:8a:24:4c:7b:e5:07:5a:66:a4:e0:68:3d:ce:30:99:80: 9b:60:1b:5c:a5:27:81:01:e6:72:3c:23:2c:dd:de:2c:82:00: f4:00:17:d1:20:28:5d:f4:07:e6:cc:94:13:3c:35:a9:75:be: 0a:10:ec:e8:da:71:46:45:78:1b:76:b9:4a:a4:c1:2c:db:c3: 6f:f7:49:d4:e0:b2:93:50:5d:1d:23:fc:b0:22:08:6e:76:2f: da:0b:94:dd:d6:b2:a8:82:fb:8a:69:52:a4:f3:a3:48:a5:32: 99:34:e8:06:53:f6:51:3c:8b:92:0f:59:03:6f:01:2a:e6:99: f3:0c:48:ac:19:46:a7:b9:95:a0:01:fa:67:f7:b4:c6:c4:5c: ab:84:e7:9b:fd:f2:63:a9:3e:bf:28:68:2c:b4:73:12:5a:f1: ec:f7:57:4f:c2:ff:30:e4:2a:db:dc:ca:69:c8:68:33:dc:c3: 68:8d:79:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00qAXyF0eBlbuPjdJvU4gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NjQ2MDVlYWYxNGI4YjVkMjhlZThkMDc2YzFlMzczOGY3 NTgyNTMwHhcNMjUxMjA2MTgwMDM1WhcNMjUxMjA3MTgwMDM1WjAzMTEwLwYDVQQD Eyg4NzNjN2MxNWVmOWQ5OGU5MmU2MmQ3YTJmM2VjOWI1OGNhNTYzZWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwbTG4PiiK1AslfmE0mvYl/WM1m/ vElcietY1d869cIYKg7pCzFkYzDIpcP9zF1EznaNGHpCEi7zAUuJQ1JPAaTDHQwY rKx/mb/wGOFc33ysP5aTJvMT8ZpzOSngD5kcU6twAjWFBjEUUD24P7TZjEphZ7/h /nBA0amia9OwxAQgnU8J7gIKiWUR2o3Sm8pQn/jnnbQpUkure97b+fteQLJhetoG GlKubVkRHm+fMC+AdSYtnogE3EJP8OKvLqaTN0ReQ56TmRiA4STHihKoVU1yEoHL xwjeHqBIyKQadvC5VCwcRujoQf7nO/9Ed6veB3EBde5Xx5U99Xw7Ju4tvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIc8fBXvnZjpLmLXovPsm1jKVj7TMB8GA1UdIwQY MBaAFPRkYF6vFLi10o7o0HbB43OPdYJTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUdSZ1hxOFV1TFhTanVqUWRzSGpjNDkxZ2xNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81MWU5OGQtZDQ4ZS00NWExLTkzMDMt ZTJkODY0N2ZlNWRkLzEvOUdSZ1hxOFV1TFhTanVqUWRzSGpjNDkxZ2xNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi81MWU5OGQtZDQ4ZS00NWExLTkzMDMtZTJkODY0N2ZlNWRk LzEvOUdSZ1hxOFV1TFhTanVqUWRzSGpjNDkxZ2xNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLfi4//E uN85mb1/M5pRwfbsJW/iaB3pq+iuSlCcCtI9o/XHvQJGQoynkn1fC51E4qU6A1EE ruxaKTz1Ptwo66HoDfCso5g1FlKKJEx75QdaZqTgaD3OMJmAm2AbXKUngQHmcjwj LN3eLIIA9AAX0SAoXfQH5syUEzw1qXW+ChDs6NpxRkV4G3a5SqTBLNvDb/dJ1OCy k1BdHSP8sCIIbnYv2guU3dayqIL7imlSpPOjSKUymTToBlP2UTyLkg9ZA28BKuaZ 8wxIrBlGp7mVoAH6Z/e0xsRcq4Tnm/3yY6k+vyhoLLRzElrx7PdXT8L/MOQq29zK achoM9zDaI15VQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:42:16 2025 by rpki-client