This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft File: 9lQZ43AKNrorA5Bsn49NLf2EgHA.mft (raw, json) Hash identifier: 44y8ebh2R4xircJE1Euf9NmG5I/L8LpCEuSh+92GyjM= Subject key identifier: 17:5A:C8:40:95:9D:AF:F7:6C:BE:07:18:B0:EA:78:58:F9:E7:B6:31 Authority key identifier: F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70 Certificate issuer: /CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070 Certificate serial: 019AF31C68BBA7E173EE71CBABFCD9B9A218 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft Manifest number: 0E7D Signing time: Sat 06 Dec 2025 10:01:56 +0000 Manifest this update: Sat 06 Dec 2025 10:01:56 +0000 Manifest next update: Sun 07 Dec 2025 10:01:56 +0000 Files and hashes: 1: 9lQZ43AKNrorA5Bsn49NLf2EgHA.crl (hash: NSgUB8usM1DUL8m7jw0bpKzDGZBRnvVblvRheliWS/Y=) 2: khAk69GaviX3ISVPskdgmXYxHg0.roa (hash: iZg+JNU8yAUj+GbVfYYrGDVbFREqgvj716gjoOSNlMU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:68:bb:a7:e1:73:ee:71:cb:ab:fc:d9:b9:a2:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070 Validity Not Before: Dec 6 10:01:56 2025 GMT Not After : Dec 7 10:01:56 2025 GMT Subject: CN=175ac840959daff76cbe0718b0ea7858f9e7b631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0c:42:4a:78:bf:14:24:cd:45:42:66:e3:cc: ef:e9:0f:03:64:ab:1d:86:d5:11:26:a3:13:e1:e4: ef:37:87:19:62:97:c4:83:76:a8:18:ae:ad:be:c2: af:ae:82:fe:94:1b:0e:2e:a6:72:42:b1:fa:df:f5: 21:b8:2a:ed:7c:db:ff:3d:84:60:84:87:e7:86:e7: 78:e4:bb:5e:b2:98:8a:80:29:e7:f6:bb:0f:4b:cf: 8f:fa:46:01:98:db:20:90:5d:a1:d5:93:74:65:88: bc:e0:84:e3:22:2c:43:e4:17:12:ff:f6:c8:e5:93: 4f:9f:96:ef:47:22:df:24:ce:0c:1a:03:17:97:8f: 93:d2:ad:ad:82:d2:26:65:8a:26:af:62:09:7a:7d: 76:11:a8:5c:46:0b:d3:dc:f2:58:4a:f1:6a:74:69: 74:5c:97:38:e7:98:de:f5:be:97:f6:71:0e:88:56: cf:87:8b:1c:80:67:38:de:ec:c1:e8:4f:3b:1c:05: bc:80:37:82:cc:d1:85:aa:ab:cf:08:3a:06:67:93: b1:81:82:50:25:86:ed:cf:35:0c:72:c1:49:ad:bc: 75:88:c6:bb:43:3c:c4:2e:db:10:0d:fc:c2:d8:f5: af:5e:4b:24:65:a8:15:77:7b:5f:25:93:ce:2c:c5: a8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:5A:C8:40:95:9D:AF:F7:6C:BE:07:18:B0:EA:78:58:F9:E7:B6:31 X509v3 Authority Key Identifier: keyid:F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:c2:20:47:32:81:6e:aa:ab:fc:50:57:db:f0:af:d2:25:9e: 7f:4d:00:03:73:ee:be:a9:c3:a6:fa:e8:09:a6:09:2c:c7:76: ee:95:66:31:7f:c2:79:51:64:ed:dc:46:d2:9f:73:85:b7:07: ac:b3:94:45:5e:4d:e5:d9:08:d0:47:cd:44:19:58:92:29:5b: a8:9d:e2:1a:85:99:46:b9:b7:92:fc:bf:56:37:db:58:71:d5: 00:3a:2e:55:0a:c9:42:52:75:a1:72:95:d9:a3:49:fc:d8:fb: 43:54:df:94:6b:82:4f:3b:c6:9e:e9:26:47:5d:6f:cc:f2:7f: d6:23:4d:ca:e0:38:56:8e:1b:05:42:f1:87:60:3b:91:94:c2: 34:33:e4:6b:09:9b:c5:ef:05:2e:2d:56:fe:84:24:90:99:84: ef:37:8d:65:4e:59:9e:3c:e8:8c:65:58:1f:56:47:7a:fe:8b: a8:28:ab:16:9f:37:b3:97:3a:b9:34:3d:bf:f3:01:65:d2:c7: f2:f1:43:e8:6f:15:47:e7:a9:1b:e3:e3:da:61:df:52:e2:81: a9:2b:14:99:e3:b1:b7:5f:25:31:d7:7d:fd:1d:a1:76:71:2c: 79:82:96:d3:95:33:b5:a8:41:64:5d:2c:1e:52:c7:7a:bd:6b: 47:f6:c6:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHGi7p+Fz7nHLq/zZuaIYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NTQxOWUzNzAwYTM2YmEyYjAzOTA2YzlmOGY0ZDJkZmQ4 NDgwNzAwHhcNMjUxMjA2MTAwMTU2WhcNMjUxMjA3MTAwMTU2WjAzMTEwLwYDVQQD EygxNzVhYzg0MDk1OWRhZmY3NmNiZTA3MThiMGVhNzg1OGY5ZTdiNjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAxCSni/FCTNRUJm48zv6Q8DZKsd htURJqMT4eTvN4cZYpfEg3aoGK6tvsKvroL+lBsOLqZyQrH63/UhuCrtfNv/PYRg hIfnhud45LtespiKgCnn9rsPS8+P+kYBmNsgkF2h1ZN0ZYi84ITjIixD5BcS//bI 5ZNPn5bvRyLfJM4MGgMXl4+T0q2tgtImZYomr2IJen12EahcRgvT3PJYSvFqdGl0 XJc455je9b6X9nEOiFbPh4scgGc43uzB6E87HAW8gDeCzNGFqqvPCDoGZ5OxgYJQ JYbtzzUMcsFJrbx1iMa7QzzELtsQDfzC2PWvXkskZagVd3tfJZPOLMWomQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBdayECVna/3bL4HGLDqeFj557YxMB8GA1UdIwQY MBaAFPZUGeNwCja6KwOQbJ+PTS39hIBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80NDljMDItZjI2Mi00NWQzLThmOGYt ZDRiNzIzZWQ3ODFjLzEvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny80NDljMDItZjI2Mi00NWQzLThmOGYtZDRiNzIzZWQ3ODFj LzEvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIMIgRzKB bqqr/FBX2/Cv0iWef00AA3PuvqnDpvroCaYJLMd27pVmMX/CeVFk7dxG0p9zhbcH rLOURV5N5dkI0EfNRBlYkilbqJ3iGoWZRrm3kvy/VjfbWHHVADouVQrJQlJ1oXKV 2aNJ/Nj7Q1TflGuCTzvGnukmR11vzPJ/1iNNyuA4Vo4bBULxh2A7kZTCNDPkawmb xe8FLi1W/oQkkJmE7zeNZU5ZnjzojGVYH1ZHev6LqCirFp83s5c6uTQ9v/MBZdLH 8vFD6G8VR+epG+Pj2mHfUuKBqSsUmeOxt18lMdd9/R2hdnEseYKW05UztahBZF0s HlLHer1rR/bG2g== -----END CERTIFICATE-----Generated at Sat Dec 6 15:08:42 2025 by rpki-client