This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft File: 9YgvM_dIDcx7h2N66nY2gonXXC0.mft (raw, json) Hash identifier: LNpMw0F9RYZ5SBKIQeRczZahivljgXA2pgnYyJbaG+0= Subject key identifier: A7:A7:F7:D5:DC:81:CF:13:1A:50:02:2E:C2:47:C5:4B:78:96:1C:E2 Authority key identifier: F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D Certificate issuer: /CN=f5882f33f7480dcc7b87637aea76368289d75c2d Certificate serial: 019AF5AEC948373724657C017615D486E07F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft Manifest number: 047C Signing time: Sat 06 Dec 2025 22:01:03 +0000 Manifest this update: Sat 06 Dec 2025 22:01:03 +0000 Manifest next update: Sun 07 Dec 2025 22:01:03 +0000 Files and hashes: 1: 9YgvM_dIDcx7h2N66nY2gonXXC0.crl (hash: 8haFRfOJ6kumDl8myMuRohm8t1sUzeme8lwvqGfopqw=) 2: QOEcWjHe4NVCZVw1toczwOnDbvg.roa (hash: EaeTTrx2jGMXQlq6vQvVplBMXhi0x7kTgcTmmy7+jJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:c9:48:37:37:24:65:7c:01:76:15:d4:86:e0:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5882f33f7480dcc7b87637aea76368289d75c2d Validity Not Before: Dec 6 22:01:03 2025 GMT Not After : Dec 7 22:01:03 2025 GMT Subject: CN=a7a7f7d5dc81cf131a50022ec247c54b78961ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:71:fc:f9:55:64:48:b3:ad:23:3f:79:30:83: 78:d9:30:53:63:81:0c:0b:4c:df:5a:ea:1e:35:99: 6d:8d:d8:b0:87:8c:40:04:9c:eb:a4:04:f4:33:bf: fe:7f:de:88:60:23:55:0f:07:4f:23:85:ee:0d:54: 14:5b:95:a1:2a:9b:47:3f:28:6b:11:21:e8:b1:e9: 56:13:6a:d3:dd:f3:24:dc:6c:00:b5:38:19:9f:fb: b7:40:30:60:be:15:2b:c0:a6:4a:5f:c8:6e:04:30: ef:39:c6:8f:96:38:75:f6:60:3d:c9:a9:99:51:90: 25:36:79:1b:29:db:e3:17:74:1c:a7:3e:53:ee:57: 4e:f9:71:70:87:37:8c:fd:01:f9:0c:24:2b:3a:77: c0:d2:cd:cf:5d:62:cc:9d:85:64:f0:be:1a:a7:b2: 45:ba:98:77:a8:1c:c9:d8:e8:b4:5b:7a:fa:cd:bd: 1b:66:e9:47:fd:5e:cd:9b:8b:08:e6:cf:f0:45:51: b5:5a:91:25:3e:9a:c0:1c:8b:2f:ae:41:b0:af:cf: 3f:0a:81:89:43:05:fb:a0:ad:04:1f:e4:b9:60:22: d8:1d:bb:76:7d:2e:9c:73:2c:be:b2:6e:05:7f:b0: 1c:43:ae:3b:5f:8e:f4:83:79:9d:5b:7b:63:a3:85: e5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A7:F7:D5:DC:81:CF:13:1A:50:02:2E:C2:47:C5:4B:78:96:1C:E2 X509v3 Authority Key Identifier: keyid:F5:88:2F:33:F7:48:0D:CC:7B:87:63:7A:EA:76:36:82:89:D7:5C:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YgvM_dIDcx7h2N66nY2gonXXC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/92ff2a-a16a-4a78-99b2-a95105f16e66/1/9YgvM_dIDcx7h2N66nY2gonXXC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:1b:9f:a0:73:cd:d7:af:9f:f8:52:bb:d3:8d:e5:16:e8:3e: 04:e4:66:ed:34:16:66:40:6b:1b:44:d7:be:10:45:2a:02:df: 22:81:50:a7:42:5c:2d:4d:58:a0:6a:71:c8:b1:38:8c:cd:fc: 5e:07:7a:5a:5f:66:fd:36:f3:07:10:ca:89:e7:4e:c5:20:5c: 9c:99:32:bd:69:6f:34:38:eb:8a:e1:ba:e8:1b:58:e4:ce:e0: b2:63:df:86:e4:da:c0:aa:eb:a8:92:9c:4e:d4:23:c9:dd:da: 36:5d:a8:cf:66:4a:7d:d4:12:9b:41:69:e6:ac:ef:50:33:db: d8:e2:84:6e:43:e3:56:7d:b8:1b:8c:98:6b:a0:98:ac:2c:aa: d3:b1:fa:50:80:c3:1f:7e:d0:68:63:56:39:a0:f4:44:9f:d6: 6e:36:06:2d:4a:51:da:35:25:2b:62:3d:5a:0b:b6:70:39:68: 87:bf:ba:1c:49:7d:30:ae:06:62:a3:29:2a:40:4c:1d:bc:f8: f3:9d:8c:38:7b:1e:37:b1:ea:ce:74:70:d9:bd:30:db:f0:63: c0:2f:12:7e:5b:15:6e:fd:6f:ef:d9:4c:07:61:8b:5a:b0:19: 08:ae:92:09:2a:63:b2:74:06:e1:75:ae:9a:68:b0:57:ca:ef: 3c:19:96:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rslINzckZXwBdhXUhuB/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ODgyZjMzZjc0ODBkY2M3Yjg3NjM3YWVhNzYzNjgyODlk NzVjMmQwHhcNMjUxMjA2MjIwMTAzWhcNMjUxMjA3MjIwMTAzWjAzMTEwLwYDVQQD EyhhN2E3ZjdkNWRjODFjZjEzMWE1MDAyMmVjMjQ3YzU0Yjc4OTYxY2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13H8+VVkSLOtIz95MIN42TBTY4EM C0zfWuoeNZltjdiwh4xABJzrpAT0M7/+f96IYCNVDwdPI4XuDVQUW5WhKptHPyhr ESHoselWE2rT3fMk3GwAtTgZn/u3QDBgvhUrwKZKX8huBDDvOcaPljh19mA9yamZ UZAlNnkbKdvjF3Qcpz5T7ldO+XFwhzeM/QH5DCQrOnfA0s3PXWLMnYVk8L4ap7JF uph3qBzJ2Oi0W3r6zb0bZulH/V7Nm4sI5s/wRVG1WpElPprAHIsvrkGwr88/CoGJ QwX7oK0EH+S5YCLYHbt2fS6ccyy+sm4Ff7AcQ647X470g3mdW3tjo4Xl4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKen99Xcgc8TGlACLsJHxUt4lhziMB8GA1UdIwQY MBaAFPWILzP3SA3Me4djeup2NoKJ11wtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVlndk1fZElEY3g3aDJONjZuWTJnb25YWEMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC85MmZmMmEtYTE2YS00YTc4LTk5YjIt YTk1MTA1ZjE2ZTY2LzEvOVlndk1fZElEY3g3aDJONjZuWTJnb25YWEMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC85MmZmMmEtYTE2YS00YTc4LTk5YjItYTk1MTA1ZjE2ZTY2 LzEvOVlndk1fZElEY3g3aDJONjZuWTJnb25YWEMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0RufoHPN 16+f+FK7043lFug+BORm7TQWZkBrG0TXvhBFKgLfIoFQp0JcLU1YoGpxyLE4jM38 Xgd6Wl9m/TbzBxDKiedOxSBcnJkyvWlvNDjriuG66BtY5M7gsmPfhuTawKrrqJKc TtQjyd3aNl2oz2ZKfdQSm0Fp5qzvUDPb2OKEbkPjVn24G4yYa6CYrCyq07H6UIDD H37QaGNWOaD0RJ/WbjYGLUpR2jUlK2I9Wgu2cDloh7+6HEl9MK4GYqMpKkBMHbz4 852MOHseN7HqznRw2b0w2/BjwC8SflsVbv1v79lMB2GLWrAZCK6SCSpjsnQG4XWu mmiwV8rvPBmWTw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:21:04 2025 by rpki-client