This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft File: 9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft (raw, json) Hash identifier: 83EeMRT7DO2Qyx2Eg2oE7UV3wCMICOSGyhAFTmymlO8= Subject key identifier: 8F:94:0A:9B:30:42:87:28:8D:E7:CF:73:DD:83:8D:97:BD:09:F9:8D Authority key identifier: F6:74:F0:C8:D1:6C:BB:51:0B:BA:1F:E3:AC:46:85:EE:E3:56:F8:E7 Certificate issuer: /CN=f674f0c8d16cbb510bba1fe3ac4685eee356f8e7 Certificate serial: 019AF388FC5CC04509CDB538FDD4114FA90B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft Manifest number: 064D Signing time: Sat 06 Dec 2025 12:00:32 +0000 Manifest this update: Sat 06 Dec 2025 12:00:32 +0000 Manifest next update: Sun 07 Dec 2025 12:00:32 +0000 Files and hashes: 1: 9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl (hash: qYQnN+XFImjTrOc4caL7q4tBVdswptLoHAlopcS92so=) 2: tjboCeupGoWMhzNMAbe1acyZSfo.roa (hash: 4a1e4ZJ2rm6Y1i2yYMJDPx5U9pmumE35uvRPVX+uXuM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:88:fc:5c:c0:45:09:cd:b5:38:fd:d4:11:4f:a9:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f674f0c8d16cbb510bba1fe3ac4685eee356f8e7 Validity Not Before: Dec 6 12:00:32 2025 GMT Not After : Dec 7 12:00:32 2025 GMT Subject: CN=8f940a9b304287288de7cf73dd838d97bd09f98d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:32:f2:38:f2:ab:8f:06:4c:9e:fc:52:b7:0d: be:23:e0:04:ef:1c:01:b7:63:fe:67:41:58:6e:12: f9:3b:28:21:5c:03:48:cc:2a:1f:f7:29:1b:19:60: 9a:a4:d4:f8:df:ee:fb:c4:2d:71:2c:3a:b0:f9:3c: 1b:cd:a5:43:9e:39:04:c3:0c:17:a0:66:56:e9:5a: 84:a1:5c:ef:c2:7d:58:0c:f3:bf:a6:b8:09:f2:1e: 3e:97:44:b8:be:ae:2b:37:d7:78:0b:6c:03:02:52: a7:5f:e8:16:47:18:20:c3:c1:19:54:55:77:7f:b1: 6c:c9:96:50:dd:b1:2d:f9:49:33:c6:d4:24:70:cf: 89:3c:97:42:98:53:74:ad:cd:8c:7d:2b:5a:93:94: 07:36:12:c2:6c:0c:b1:84:07:b4:16:46:01:ab:08: 99:9a:c3:d3:4e:4e:f7:35:0c:ea:8a:aa:02:35:83: e0:25:56:73:a7:47:a8:a2:9f:88:4e:40:ef:ac:11: 79:9d:ec:49:d3:1b:b2:3f:e1:a9:b4:5a:54:ff:1b: cc:e4:68:57:ee:f9:04:75:a3:95:d1:8f:e1:44:98: f9:32:f3:1a:f5:d9:31:09:f7:ff:6c:7d:1f:99:b5: 5e:2e:df:23:68:0f:d2:28:ec:01:23:9d:76:30:87: f2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:94:0A:9B:30:42:87:28:8D:E7:CF:73:DD:83:8D:97:BD:09:F9:8D X509v3 Authority Key Identifier: keyid:F6:74:F0:C8:D1:6C:BB:51:0B:BA:1F:E3:AC:46:85:EE:E3:56:F8:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a9:e8:e8:0b:21:1f:01:1f:4c:1e:ec:00:a2:bb:dd:43:7d: 21:b2:8c:61:dc:c7:7e:c0:56:e2:b4:94:a4:42:d9:4d:46:cb: da:02:1f:c1:bf:af:18:1f:f7:46:1a:f7:ff:6a:8a:0f:16:b9: f2:43:46:a0:ac:d5:23:35:b7:9e:8b:45:ee:91:d3:74:5d:24: 2f:1f:ab:87:b5:a9:cb:9b:17:62:ed:7f:d5:e5:fd:8a:3d:0d: 83:43:d5:b1:ac:b0:d5:ab:aa:41:c9:ee:d6:e8:5b:3f:6e:88: 04:08:9e:65:90:41:73:7e:f1:d4:93:77:09:61:d2:91:c4:c9: 28:4b:25:61:a5:56:0b:33:3f:c1:1c:6e:c4:68:a7:26:26:c5: e4:37:d4:11:a5:18:8a:1e:e6:e8:40:d8:02:3a:7b:dc:8c:d2: bd:52:f7:33:6a:9f:e3:f5:85:48:7d:aa:34:f7:bd:26:b0:54: 4e:90:16:8a:33:0f:4c:1c:e6:09:27:1d:93:44:ea:bb:6b:c8: a4:ab:28:8d:45:bc:42:89:1a:79:f1:f7:8d:9c:01:5c:ed:45: a3:56:00:30:6d:7f:38:b8:c7:d8:6b:83:da:63:55:7f:c1:a0: 0c:2e:06:4b:90:e8:c5:ef:5a:49:e4:73:74:df:1d:33:a0:cf: e4:69:2c:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziPxcwEUJzbU4/dQRT6kLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NzRmMGM4ZDE2Y2JiNTEwYmJhMWZlM2FjNDY4NWVlZTM1 NmY4ZTcwHhcNMjUxMjA2MTIwMDMyWhcNMjUxMjA3MTIwMDMyWjAzMTEwLwYDVQQD Eyg4Zjk0MGE5YjMwNDI4NzI4OGRlN2NmNzNkZDgzOGQ5N2JkMDlmOThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTLyOPKrjwZMnvxStw2+I+AE7xwB t2P+Z0FYbhL5OyghXANIzCof9ykbGWCapNT43+77xC1xLDqw+TwbzaVDnjkEwwwX oGZW6VqEoVzvwn1YDPO/prgJ8h4+l0S4vq4rN9d4C2wDAlKnX+gWRxggw8EZVFV3 f7FsyZZQ3bEt+UkzxtQkcM+JPJdCmFN0rc2MfStak5QHNhLCbAyxhAe0FkYBqwiZ msPTTk73NQzqiqoCNYPgJVZzp0eoop+ITkDvrBF5nexJ0xuyP+GptFpU/xvM5GhX 7vkEdaOV0Y/hRJj5MvMa9dkxCff/bH0fmbVeLt8jaA/SKOwBI512MIfyEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+UCpswQocojefPc92DjZe9CfmNMB8GA1UdIwQY MBaAFPZ08MjRbLtRC7of46xGhe7jVvjnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW5Ud3lORnN1MUVMdWhfanJFYUY3dU5XLU9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xNjI1NjAtYjRjNS00ZjBkLTljMDYt MThiZGY4ODQ3NDE4LzEvOW5Ud3lORnN1MUVMdWhfanJFYUY3dU5XLU9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8xNjI1NjAtYjRjNS00ZjBkLTljMDYtMThiZGY4ODQ3NDE4 LzEvOW5Ud3lORnN1MUVMdWhfanJFYUY3dU5XLU9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnano6Ash HwEfTB7sAKK73UN9IbKMYdzHfsBW4rSUpELZTUbL2gIfwb+vGB/3Rhr3/2qKDxa5 8kNGoKzVIzW3notF7pHTdF0kLx+rh7Wpy5sXYu1/1eX9ij0Ng0PVsayw1auqQcnu 1uhbP26IBAieZZBBc37x1JN3CWHSkcTJKEslYaVWCzM/wRxuxGinJibF5DfUEaUY ih7m6EDYAjp73IzSvVL3M2qf4/WFSH2qNPe9JrBUTpAWijMPTBzmCScdk0Tqu2vI pKsojUW8QokaefH3jZwBXO1Fo1YAMG1/OLjH2GuD2mNVf8GgDC4GS5Doxe9aSeRz dN8dM6DP5GksHw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:28:07 2025 by rpki-client