This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft File: 9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft (raw, json) Hash identifier: /JR619BR4k/qYizyok3EJv16StTPewOBtlW1gNhzyX4= Subject key identifier: D1:78:7F:14:20:26:7E:4E:CD:0C:D0:70:60:3E:68:82:E3:81:F5:FF Authority key identifier: F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC Certificate issuer: /CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac Certificate serial: 019AF20998BBFBC0B49ED4D950BB55B072DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft Manifest number: FC Signing time: Sat 06 Dec 2025 05:01:46 +0000 Manifest this update: Sat 06 Dec 2025 05:01:46 +0000 Manifest next update: Sun 07 Dec 2025 05:01:46 +0000 Files and hashes: 1: 9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl (hash: sI3ULxI13CNhdununr4o9fyerK5PayUvzkW4k+353Qc=) 2: f1Mto9GzcPc4M2Oix0yJMh6toWA.roa (hash: 84CvNJo6FYo7qJUGi59PScidN7rKl7gKNL3hWWKJ6Lw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:98:bb:fb:c0:b4:9e:d4:d9:50:bb:55:b0:72:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac Validity Not Before: Dec 6 05:01:46 2025 GMT Not After : Dec 7 05:01:46 2025 GMT Subject: CN=d1787f1420267e4ecd0cd070603e6882e381f5ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b6:64:87:68:31:63:c0:27:e8:d9:1e:e4:70: cf:a5:6a:d2:86:07:42:a6:38:75:4e:6c:31:2b:d3: 02:d2:de:a6:b2:ef:24:db:86:c0:4a:69:d7:c5:54: 09:65:d3:94:e9:87:53:53:6e:d5:33:f8:6b:65:0f: 2f:00:cd:63:7f:1f:3d:c1:f3:be:7a:a2:0d:62:63: e6:25:c9:57:c0:f9:56:47:2e:c4:c1:39:74:0b:eb: 87:b1:ee:87:98:e5:6f:a0:67:1d:de:df:fe:8f:59: ac:e4:5c:fb:2d:ab:6f:9a:01:b7:ab:a1:93:3e:c7: 53:76:14:28:25:ac:f0:f7:e4:77:db:06:c6:68:a3: 91:95:b6:d8:6b:ac:6e:71:d1:f7:2b:24:03:5d:b6: 07:7a:8a:d3:4b:b9:90:c8:f8:2b:9c:d5:b2:2b:e1: f4:45:b9:10:05:e4:25:44:37:d8:e9:12:ff:75:39: c4:2f:07:94:d6:3b:23:a6:a2:c0:c6:1d:d6:e3:cc: a0:f9:11:5d:e1:38:b3:c2:09:a0:d9:b2:7a:11:31: 2d:76:bd:2a:10:e4:07:a3:0f:0f:e8:f5:d9:1d:61: c4:69:46:8e:9d:82:cf:e4:9b:00:e2:de:c3:1d:d9: ce:3e:e0:b8:fb:c7:f3:16:04:e4:d3:d1:b5:ce:e5: 89:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:78:7F:14:20:26:7E:4E:CD:0C:D0:70:60:3E:68:82:E3:81:F5:FF X509v3 Authority Key Identifier: keyid:F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:e3:c0:84:7d:2b:c9:7b:fd:0c:9f:65:1c:1a:7c:b2:e0:4c: dc:3e:41:15:8c:e9:31:b0:17:f1:d6:05:85:8f:45:03:70:d9: 56:a2:a9:38:ba:b4:57:38:c9:e0:1b:85:2e:3d:65:42:ad:ae: 6b:4f:31:23:50:47:4e:b2:af:88:de:f3:71:06:6c:27:32:66: ab:44:0b:e1:67:07:3b:e5:8c:61:a3:77:9e:37:60:b8:71:1c: 28:d0:0c:3a:dd:6a:f1:f1:3f:c3:ba:02:2c:70:3a:d2:ed:55: ac:cb:e6:c3:c0:cf:75:d5:00:9b:a3:90:da:14:4c:63:de:2f: 9f:75:b9:6c:08:df:f2:84:5c:b2:61:34:c4:ea:d3:32:fb:74: 43:4e:f0:7d:ea:be:a9:1f:d2:a0:6d:9f:14:21:2a:0b:cd:06: 75:a1:8d:bc:9d:70:7d:52:4b:87:f5:59:10:3a:d3:4c:d2:13: 58:b0:e0:0a:16:23:62:fe:ca:16:d3:95:77:76:3c:f4:84:11: 12:0b:e7:a7:b3:c5:2f:30:1a:05:a2:c5:6f:44:dd:c3:71:c8: e6:7c:71:30:71:c6:97:4d:73:47:94:af:09:d0:cf:62:78:96: 80:59:a0:6c:55:79:36:90:dc:aa:92:df:5f:5e:68:fa:e4:1a: 6c:7a:c8:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZi7+8C0ntTZULtVsHLfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZDZiMWQ5MGVkNGJmMTY1MWFhMjI3MGU2ZWNiYWMyZDg3 OTIyYWMwHhcNMjUxMjA2MDUwMTQ2WhcNMjUxMjA3MDUwMTQ2WjAzMTEwLwYDVQQD EyhkMTc4N2YxNDIwMjY3ZTRlY2QwY2QwNzA2MDNlNjg4MmUzODFmNWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbZkh2gxY8An6Nke5HDPpWrShgdC pjh1TmwxK9MC0t6msu8k24bASmnXxVQJZdOU6YdTU27VM/hrZQ8vAM1jfx89wfO+ eqINYmPmJclXwPlWRy7EwTl0C+uHse6HmOVvoGcd3t/+j1ms5Fz7LatvmgG3q6GT PsdTdhQoJazw9+R32wbGaKORlbbYa6xucdH3KyQDXbYHeorTS7mQyPgrnNWyK+H0 RbkQBeQlRDfY6RL/dTnELweU1jsjpqLAxh3W48yg+RFd4Tizwgmg2bJ6ETEtdr0q EOQHow8P6PXZHWHEaUaOnYLP5JsA4t7DHdnOPuC4+8fzFgTk09G1zuWJ3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNF4fxQgJn5OzQzQcGA+aILjgfX/MB8GA1UdIwQY MBaAFPXWsdkO1L8WUaoicObsusLYeSKsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWRheDJRN1V2eFpScWlKdzV1eTZ3dGg1SXF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80NWZlZTctNjk4NS00YWJlLWFmYWIt MDE0MmZlZjY3MmVjLzEvOWRheDJRN1V2eFpScWlKdzV1eTZ3dGg1SXF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS80NWZlZTctNjk4NS00YWJlLWFmYWItMDE0MmZlZjY3MmVj LzEvOWRheDJRN1V2eFpScWlKdzV1eTZ3dGg1SXF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjePAhH0r yXv9DJ9lHBp8suBM3D5BFYzpMbAX8dYFhY9FA3DZVqKpOLq0VzjJ4BuFLj1lQq2u a08xI1BHTrKviN7zcQZsJzJmq0QL4WcHO+WMYaN3njdguHEcKNAMOt1q8fE/w7oC LHA60u1VrMvmw8DPddUAm6OQ2hRMY94vn3W5bAjf8oRcsmE0xOrTMvt0Q07wfeq+ qR/SoG2fFCEqC80GdaGNvJ1wfVJLh/VZEDrTTNITWLDgChYjYv7KFtOVd3Y89IQR Egvnp7PFLzAaBaLFb0Tdw3HI5nxxMHHGl01zR5SvCdDPYniWgFmgbFV5NpDcqpLf X15o+uQabHrI2g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:22 2025 by rpki-client