This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft File: niN_MrrhSoH9on6ylGDDoO2jQkA.mft (raw, json) Hash identifier: 42zbDpK+rHD5Ql79qBTALNemAQp4m+LkZLeyIW1cf04= Subject key identifier: D9:90:4A:49:97:C3:69:84:3F:C0:B8:7C:F6:F7:0A:00:7F:FD:76:15 Authority key identifier: 9E:23:7F:32:BA:E1:4A:81:FD:A2:7E:B2:94:60:C3:A0:ED:A3:42:40 Certificate issuer: /CN=9e237f32bae14a81fda27eb29460c3a0eda34240 Certificate serial: 019B3420057FF662BFB6D7736567305886A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft Manifest number: 0F8A Signing time: Fri 19 Dec 2025 01:01:12 +0000 Manifest this update: Fri 19 Dec 2025 01:01:12 +0000 Manifest next update: Sat 20 Dec 2025 01:01:12 +0000 Files and hashes: 1: duyGpoRiUSXpX71VT4XYnZHmGlA.roa (hash: BUaqTN98K6qCPpPRz7Abj2KUlyE692OgtKSmoKCDJkM=) 2: niN_MrrhSoH9on6ylGDDoO2jQkA.crl (hash: ZJetm0Y2Epf2ByNlfbv+bHJ2DqgV2rzG65B27Xmu5jk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:20:05:7f:f6:62:bf:b6:d7:73:65:67:30:58:86:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e237f32bae14a81fda27eb29460c3a0eda34240 Validity Not Before: Dec 19 01:01:12 2025 GMT Not After : Dec 20 01:01:12 2025 GMT Subject: CN=d9904a4997c369843fc0b87cf6f70a007ffd7615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:68:3d:5f:f6:53:2b:f2:64:12:e6:77:ad:39: f1:33:9b:39:c5:97:99:e9:53:a7:7d:6f:06:82:e4: 38:61:a8:5c:76:5c:ec:43:56:cb:26:65:ba:bb:9b: 05:94:78:13:ea:fa:95:06:a4:53:a7:32:13:9e:44: 12:94:66:58:06:34:15:50:84:de:e4:15:37:5a:7b: f2:92:99:42:51:ce:5b:17:bd:16:0e:e2:d7:a3:49: ab:f6:f0:b1:31:b4:39:62:d6:aa:01:fc:db:ec:ea: 35:50:ca:19:c3:97:4c:54:ac:c8:b2:29:5f:8e:73: ce:79:bb:f7:c8:f2:d2:e1:c3:cd:97:db:46:73:cd: d3:f7:0c:06:5f:94:d6:19:f5:d2:40:55:c6:98:e2: 60:05:c0:a0:35:8c:c6:3f:1b:3a:5f:0f:6c:bb:3e: c3:5b:2f:80:e7:bf:33:7d:c1:a0:8a:24:52:2a:40: b8:3d:2d:d9:21:23:a2:3e:ac:6c:1a:eb:38:50:d8: c9:49:fc:a1:d0:01:74:d8:51:00:66:bf:22:9f:d7: d2:a0:22:44:43:b3:f3:7f:30:e1:a7:ca:2b:cc:25: ef:6c:8f:47:fe:1b:78:ca:d4:7f:df:a1:da:7a:e8: f1:53:fe:3e:a8:99:a3:4a:16:ff:aa:94:2b:7e:12: 54:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:90:4A:49:97:C3:69:84:3F:C0:B8:7C:F6:F7:0A:00:7F:FD:76:15 X509v3 Authority Key Identifier: keyid:9E:23:7F:32:BA:E1:4A:81:FD:A2:7E:B2:94:60:C3:A0:ED:A3:42:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:63:ae:44:64:c1:97:e0:60:c3:c3:65:51:10:c4:d5:63:5e: 17:6d:b0:c1:bd:90:6c:42:c0:5e:36:39:be:0c:e6:23:d0:f5: 0e:9a:d4:d9:d4:44:5a:95:d6:ee:26:1d:43:6d:fd:dd:40:53: ec:c3:af:ed:4b:1e:5f:34:a4:46:ab:44:4a:a2:83:a3:43:1a: 59:ce:21:24:c8:3a:46:d3:82:bb:4d:ab:de:b9:56:03:ac:e9: 84:f4:74:68:ff:0c:02:91:44:f6:e1:37:f3:be:bf:9f:e8:bf: 9d:8e:ab:6d:ac:cd:14:4b:1b:94:3e:21:1e:35:cc:3b:8a:c1: 3c:86:91:37:d7:3c:b8:73:c5:92:ff:93:f8:66:1a:14:cb:10: 07:87:68:e1:87:34:a3:76:3e:bb:d3:51:29:76:5b:1e:ae:69: 1c:ad:f5:d8:1e:fb:99:29:a4:1d:ce:e6:3d:b1:5e:d7:f8:6a: 6e:a0:6a:cd:b6:b8:4a:47:cd:60:80:58:19:aa:db:d1:e7:35: 36:23:2d:65:f2:83:fb:48:48:57:65:fc:6f:59:c3:69:e9:62: 68:41:01:1f:e6:59:61:05:8f:2d:6f:be:a1:d0:89:7d:59:3d: ae:f8:38:90:d4:5c:d8:6d:18:20:8c:80:9f:08:42:60:d6:ed: 94:d0:aa:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0IAV/9mK/ttdzZWcwWIahMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMjM3ZjMyYmFlMTRhODFmZGEyN2ViMjk0NjBjM2EwZWRh MzQyNDAwHhcNMjUxMjE5MDEwMTEyWhcNMjUxMjIwMDEwMTEyWjAzMTEwLwYDVQQD EyhkOTkwNGE0OTk3YzM2OTg0M2ZjMGI4N2NmNmY3MGEwMDdmZmQ3NjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmg9X/ZTK/JkEuZ3rTnxM5s5xZeZ 6VOnfW8GguQ4YahcdlzsQ1bLJmW6u5sFlHgT6vqVBqRTpzITnkQSlGZYBjQVUITe 5BU3WnvykplCUc5bF70WDuLXo0mr9vCxMbQ5YtaqAfzb7Oo1UMoZw5dMVKzIsilf jnPOebv3yPLS4cPNl9tGc83T9wwGX5TWGfXSQFXGmOJgBcCgNYzGPxs6Xw9suz7D Wy+A578zfcGgiiRSKkC4PS3ZISOiPqxsGus4UNjJSfyh0AF02FEAZr8in9fSoCJE Q7PzfzDhp8orzCXvbI9H/ht4ytR/36HaeujxU/4+qJmjShb/qpQrfhJUpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNmQSkmXw2mEP8C4fPb3CgB//XYVMB8GA1UdIwQY MBaAFJ4jfzK64UqB/aJ+spRgw6Dto0JAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmlOX01ycmhTb0g5b242eWxHRERvTzJqUWtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi81ZDZlYmQtYThlZS00NzRjLWI3MWEt YTY0MmNjODViYzcxLzEvbmlOX01ycmhTb0g5b242eWxHRERvTzJqUWtBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi81ZDZlYmQtYThlZS00NzRjLWI3MWEtYTY0MmNjODViYzcx LzEvbmlOX01ycmhTb0g5b242eWxHRERvTzJqUWtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2OuRGTB l+Bgw8NlURDE1WNeF22wwb2QbELAXjY5vgzmI9D1DprU2dREWpXW7iYdQ2393UBT 7MOv7UseXzSkRqtESqKDo0MaWc4hJMg6RtOCu02r3rlWA6zphPR0aP8MApFE9uE3 876/n+i/nY6rbazNFEsblD4hHjXMO4rBPIaRN9c8uHPFkv+T+GYaFMsQB4do4Yc0 o3Y+u9NRKXZbHq5pHK312B77mSmkHc7mPbFe1/hqbqBqzba4SkfNYIBYGarb0ec1 NiMtZfKD+0hIV2X8b1nDaeliaEEBH+ZZYQWPLW++odCJfVk9rvg4kNRc2G0YIIyA nwhCYNbtlNCq8g== -----END CERTIFICATE-----Generated at Fri Dec 19 09:11:53 2025 by rpki-client