This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft File: 9aEH8WvGsAt2TDms_WMzY2RtWZY.mft (raw, json) Hash identifier: +fozkxBGAF+6a9v0ODjkbUR3C20w3i4jVZfOyUxEtjA= Subject key identifier: B5:48:06:79:45:30:9C:3D:16:D0:00:BF:2A:07:39:53:5F:5B:FC:7B Authority key identifier: F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96 Certificate issuer: /CN=f5a107f16bc6b00b764c39acfd633363646d5996 Certificate serial: 019AF464B4C54E1CF2FD18181096956BB7D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft Manifest number: 0484 Signing time: Sat 06 Dec 2025 16:00:31 +0000 Manifest this update: Sat 06 Dec 2025 16:00:31 +0000 Manifest next update: Sun 07 Dec 2025 16:00:31 +0000 Files and hashes: 1: 9aEH8WvGsAt2TDms_WMzY2RtWZY.crl (hash: jRgJBYSgTyPCJ0KAmjY82dP0V5xdsE93yVOy34PrXXc=) 2: i8fQ4SDQp7cMewdMesiICFs9ZAg.roa (hash: bCMQ7OQEomrpckp+sy5Q02dQCcDmXIN8SQy3NDUMNVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:b4:c5:4e:1c:f2:fd:18:18:10:96:95:6b:b7:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5a107f16bc6b00b764c39acfd633363646d5996 Validity Not Before: Dec 6 16:00:31 2025 GMT Not After : Dec 7 16:00:31 2025 GMT Subject: CN=b548067945309c3d16d000bf2a0739535f5bfc7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fd:36:be:ad:92:df:62:a0:c8:05:84:d6:36: 85:96:29:ae:6f:68:3c:4b:b1:19:4a:64:73:5b:61: ed:40:b2:62:8c:b1:dc:3a:62:c8:a3:42:55:97:b3: 92:3d:e8:02:0e:4f:d9:7a:32:b5:dd:16:85:fa:94: 7f:8a:cb:8e:1c:89:6a:53:b1:85:ee:2d:4c:12:43: 5f:24:97:41:54:1a:00:f0:66:cc:a9:40:65:3e:23: 96:e6:14:b5:59:6b:4a:74:27:94:ab:f0:3c:7c:cf: 68:54:a6:01:20:e5:c6:b3:9a:14:8f:e4:09:45:ba: c6:66:6f:f7:f1:71:e8:4b:3e:a4:bd:bf:24:39:e8: 8d:0a:4b:9f:16:ec:db:90:9d:a2:07:db:47:77:3a: 7c:67:ab:ac:62:2e:04:b1:d9:ff:37:2f:e4:da:56: fa:df:73:82:9d:09:d2:04:8f:b8:a1:fd:16:25:c5: d2:83:97:c7:dd:6a:42:fd:4a:32:53:3e:3c:d5:8f: 12:56:9a:d3:f2:ec:c7:b4:bd:30:84:9b:e5:2d:e1: bf:64:18:71:ff:ab:b5:f0:2a:fd:79:1a:41:cf:c4: 8d:53:01:2e:92:22:a4:b8:fc:81:5e:e9:f9:ff:90: cc:34:e5:d6:08:d7:05:d9:d5:21:f3:a9:26:12:b4: 55:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:48:06:79:45:30:9C:3D:16:D0:00:BF:2A:07:39:53:5F:5B:FC:7B X509v3 Authority Key Identifier: keyid:F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:0d:c0:3c:c0:3f:66:90:90:ae:bd:cd:b3:34:ff:7e:fd:25: 20:1a:2b:63:e8:1c:42:35:47:56:27:fb:78:28:ed:a3:d1:56: 07:e1:35:85:1f:39:20:5d:e0:61:2a:66:db:ad:8c:f8:fc:07: 26:82:d5:fc:03:aa:73:76:6a:ce:9b:e8:d0:4f:0b:1e:73:49: f8:c9:14:6b:ea:50:7a:c6:3f:4d:13:78:7a:b5:fd:e5:78:50: 41:78:d2:07:b1:f3:5e:71:a9:4f:0e:b5:96:38:84:57:a6:70: 44:1d:14:4e:54:d0:76:fc:0e:92:bc:79:3e:88:6c:70:0d:16: a6:46:12:37:02:ea:ee:c3:a2:a6:02:e4:7c:15:c3:8d:6f:64: e8:e8:df:97:e2:f6:eb:e8:91:23:b7:a7:cd:ca:1a:86:f5:4c: 96:94:36:de:bb:55:7c:bf:21:79:35:ea:ec:72:af:51:cc:eb: 39:55:f3:f3:12:9d:54:d7:66:92:34:e1:06:82:5a:23:6d:fb: 2a:8f:f5:2f:51:4f:11:37:73:98:42:65:93:8f:87:2a:0d:d9: db:8a:9e:5b:80:8d:d2:d4:be:12:52:c4:36:57:40:70:fc:be: 6e:01:83:df:f2:50:96:b1:c2:04:15:6d:f5:3f:bd:6c:1f:57: 75:da:f4:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZLTFThzy/RgYEJaVa7fWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1YTEwN2YxNmJjNmIwMGI3NjRjMzlhY2ZkNjMzMzYzNjQ2 ZDU5OTYwHhcNMjUxMjA2MTYwMDMxWhcNMjUxMjA3MTYwMDMxWjAzMTEwLwYDVQQD EyhiNTQ4MDY3OTQ1MzA5YzNkMTZkMDAwYmYyYTA3Mzk1MzVmNWJmYzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/02vq2S32KgyAWE1jaFlimub2g8 S7EZSmRzW2HtQLJijLHcOmLIo0JVl7OSPegCDk/ZejK13RaF+pR/isuOHIlqU7GF 7i1MEkNfJJdBVBoA8GbMqUBlPiOW5hS1WWtKdCeUq/A8fM9oVKYBIOXGs5oUj+QJ RbrGZm/38XHoSz6kvb8kOeiNCkufFuzbkJ2iB9tHdzp8Z6usYi4Esdn/Ny/k2lb6 33OCnQnSBI+4of0WJcXSg5fH3WpC/UoyUz481Y8SVprT8uzHtL0whJvlLeG/ZBhx /6u18Cr9eRpBz8SNUwEukiKkuPyBXun5/5DMNOXWCNcF2dUh86kmErRV+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVIBnlFMJw9FtAAvyoHOVNfW/x7MB8GA1UdIwQY MBaAFPWhB/FrxrALdkw5rP1jM2NkbVmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWFFSDhXdkdzQXQyVERtc19XTXpZMlJ0V1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMGJhNWUtNmJiMy00ODU4LThiMmIt OWYxY2ZiOGQxNDI4LzEvOWFFSDhXdkdzQXQyVERtc19XTXpZMlJ0V1pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9mMGJhNWUtNmJiMy00ODU4LThiMmItOWYxY2ZiOGQxNDI4 LzEvOWFFSDhXdkdzQXQyVERtc19XTXpZMlJ0V1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQ3APMA/ ZpCQrr3NszT/fv0lIBorY+gcQjVHVif7eCjto9FWB+E1hR85IF3gYSpm262M+PwH JoLV/AOqc3Zqzpvo0E8LHnNJ+MkUa+pQesY/TRN4erX95XhQQXjSB7HzXnGpTw61 ljiEV6ZwRB0UTlTQdvwOkrx5PohscA0WpkYSNwLq7sOipgLkfBXDjW9k6Ojfl+L2 6+iRI7enzcoahvVMlpQ23rtVfL8heTXq7HKvUczrOVXz8xKdVNdmkjThBoJaI237 Ko/1L1FPETdzmEJlk4+HKg3Z24qeW4CN0tS+ElLENldAcPy+bgGD3/JQlrHCBBVt 9T+9bB9Xddr0XQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:36:52 2025 by rpki-client