This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft File: 9_38M32M4OBe9_e3KvJ-thzUcDc.mft (raw, json) Hash identifier: Z17vWfpY9G4IgZhsCbWKH1iY2h+UugMxOIdf972OHPQ= Subject key identifier: 09:A3:70:56:1A:41:9F:68:09:DD:35:F2:83:26:7A:D2:B2:5E:9C:91 Authority key identifier: F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37 Certificate issuer: /CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037 Certificate serial: 019AF577575A6FFDD69A20D9C96C4AC66D55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 21:00:30 +0000 Manifest this update: Sat 06 Dec 2025 21:00:30 +0000 Manifest next update: Sun 07 Dec 2025 21:00:30 +0000 Files and hashes: 1: 9_38M32M4OBe9_e3KvJ-thzUcDc.crl (hash: iwTD2/8AK1rZmVs303JfzJ2n4iXJp5USL0vzNjtcZ0c=) 2: fCHzIX3PF5IX4vTpqhp12B4ANgE.roa (hash: 56hifj5pI9Tipd1DppPjnl4odiFdle6vhykV6J1DFck=) 3: fZI41ms3tzFvI-4Rmi0bivMoobg.roa (hash: mvSKdaR0Cd14+1pWdKPrKKbl4qxiwAO24l5+RIBOEk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:57:5a:6f:fd:d6:9a:20:d9:c9:6c:4a:c6:6d:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037 Validity Not Before: Dec 6 21:00:30 2025 GMT Not After : Dec 7 21:00:30 2025 GMT Subject: CN=09a370561a419f6809dd35f283267ad2b25e9c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:54:25:28:c9:c5:f0:42:5a:2d:46:15:85:03: a0:82:63:c5:24:95:4b:5c:51:a5:fd:0a:5f:fd:80: fd:0a:b9:2b:4c:76:aa:e8:18:b3:b1:df:e1:58:b5: 67:1c:ff:3d:18:ea:3b:e4:eb:7a:13:16:02:c4:7b: c8:d2:91:eb:5b:a8:bd:b6:7e:60:60:b2:52:68:0b: 2c:83:7f:7e:2f:ba:b1:64:13:e4:45:f7:7b:90:88: f3:2a:23:f7:b7:6f:4a:fb:08:bf:d5:f1:d1:cf:93: a3:cf:3f:ae:9d:12:c9:c7:1e:78:11:45:12:af:fb: 9d:b7:a2:8d:66:f1:56:fb:b1:1c:fb:c7:07:2c:5e: 7e:ef:ea:c3:a1:6e:b6:ae:55:f8:bd:64:d6:c0:d5: 81:a8:c3:87:d3:ad:34:7c:04:ba:d7:fb:b3:47:20: 7b:bf:5f:5b:1e:1e:17:53:55:e9:45:ea:1b:2e:32: 38:2b:8d:a0:c8:ac:59:7c:3b:c9:b7:ef:55:0b:ee: 29:43:f4:8f:c5:81:dc:1a:a7:5b:9b:9f:c5:a2:d1: 8a:4d:1f:81:35:c4:92:80:d7:18:ab:bd:9d:ac:59: a5:b6:48:24:a0:07:24:af:7c:bb:a3:38:3e:b7:1b: 73:fe:72:b2:23:41:b1:c1:a7:78:3a:49:e1:19:a8: 25:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A3:70:56:1A:41:9F:68:09:DD:35:F2:83:26:7A:D2:B2:5E:9C:91 X509v3 Authority Key Identifier: keyid:F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ec:a8:9a:c7:76:c0:90:d1:d3:71:c7:ab:ca:45:19:c7:f0: 7b:9a:aa:14:2d:6c:3a:4d:6b:70:9d:24:15:c7:77:48:b3:53: 94:6d:43:93:96:e5:51:23:b4:89:e2:ac:9b:87:9f:9f:a3:d3: 14:04:5a:c9:46:c2:99:d9:9a:99:98:18:cc:7d:68:f3:31:0d: f2:77:f8:1a:fa:c5:33:2c:7f:c5:cd:90:cd:1a:44:fb:1c:be: f4:75:1d:60:c4:ab:ce:1d:0d:02:69:a0:2a:d9:06:60:f1:97: 8f:3e:c8:9c:d5:26:05:5f:61:c2:4b:06:82:8c:ee:65:7a:bd: 71:fa:3a:c6:1d:54:5a:45:79:d0:b8:aa:cc:be:b6:28:dc:c8: d5:b9:42:2c:64:5a:a0:d2:8a:1e:04:3f:10:0c:ea:0d:a0:50: dc:6b:e6:fc:a1:2b:41:19:71:a6:21:01:4d:0b:0d:e3:73:f6: fe:6d:75:9f:75:b7:00:ae:4a:9d:b3:4f:0b:be:1d:1b:57:d6: 9d:1a:7a:45:49:91:30:19:13:fd:d3:ad:a6:38:96:1e:c6:38: ec:55:a9:c4:70:09:e7:f5:7a:dc:ba:1e:5b:ef:3a:e4:fa:0c: 6f:60:21:3b:95:3a:ce:4c:7b:8b:af:25:50:05:8d:eb:a8:72: f9:ca:83:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d1dab/3WmiDZyWxKxm1VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZmRmYzMzN2Q4Y2UwZTA1ZWY3ZjdiNzJhZjI3ZWI2MWNk NDcwMzcwHhcNMjUxMjA2MjEwMDMwWhcNMjUxMjA3MjEwMDMwWjAzMTEwLwYDVQQD EygwOWEzNzA1NjFhNDE5ZjY4MDlkZDM1ZjI4MzI2N2FkMmIyNWU5YzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FQlKMnF8EJaLUYVhQOggmPFJJVL XFGl/Qpf/YD9CrkrTHaq6Bizsd/hWLVnHP89GOo75Ot6ExYCxHvI0pHrW6i9tn5g YLJSaAssg39+L7qxZBPkRfd7kIjzKiP3t29K+wi/1fHRz5Ojzz+unRLJxx54EUUS r/udt6KNZvFW+7Ec+8cHLF5+7+rDoW62rlX4vWTWwNWBqMOH0600fAS61/uzRyB7 v19bHh4XU1XpReobLjI4K42gyKxZfDvJt+9VC+4pQ/SPxYHcGqdbm5/FotGKTR+B NcSSgNcYq72drFmltkgkoAckr3y7ozg+txtz/nKyI0Gxwad4OknhGagltQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmjcFYaQZ9oCd018oMmetKyXpyRMB8GA1UdIwQY MBaAFPf9/DN9jODgXvf3tyryfrYc1HA3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOV8zOE0zMk00T0JlOV9lM0t2Si10aHpVY0RjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jYTA2NmUtOGRjYS00ZDI4LTk0NGIt Zjk1OWQ0ZTFmMjg5LzEvOV8zOE0zMk00T0JlOV9lM0t2Si10aHpVY0RjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9jYTA2NmUtOGRjYS00ZDI4LTk0NGItZjk1OWQ0ZTFmMjg5 LzEvOV8zOE0zMk00T0JlOV9lM0t2Si10aHpVY0RjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALeyomsd2 wJDR03HHq8pFGcfwe5qqFC1sOk1rcJ0kFcd3SLNTlG1Dk5blUSO0ieKsm4efn6PT FARayUbCmdmamZgYzH1o8zEN8nf4GvrFMyx/xc2QzRpE+xy+9HUdYMSrzh0NAmmg KtkGYPGXjz7InNUmBV9hwksGgozuZXq9cfo6xh1UWkV50LiqzL62KNzI1blCLGRa oNKKHgQ/EAzqDaBQ3Gvm/KErQRlxpiEBTQsN43P2/m11n3W3AK5KnbNPC74dG1fW nRp6RUmRMBkT/dOtpjiWHsY47FWpxHAJ5/V63LoeW+865PoMb2AhO5U6zkx7i68l UAWN66hy+cqD+w== -----END CERTIFICATE-----Generated at Sun Dec 7 04:14:08 2025 by rpki-client