This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft File: 9zHDObGGFyK__oZyGDFM4SlcPIU.mft (raw, json) Hash identifier: ln8Dqa/nhvVZihDzehIuVni01QK5kiEeqYvKEKAM8GM= Subject key identifier: 32:7B:63:63:17:2A:52:82:61:7B:6F:74:A3:C6:21:57:B0:23:8B:48 Authority key identifier: F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85 Certificate issuer: /CN=f731c339b1861722bffe867218314ce1295c3c85 Certificate serial: 019B2B8AC50C2C0905648A77C1859B19306C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 09:01:13 +0000 Manifest this update: Wed 17 Dec 2025 09:01:13 +0000 Manifest next update: Thu 18 Dec 2025 09:01:13 +0000 Files and hashes: 1: 9UQ0_3_mS41_iKwg1qjiuH2k8kg.roa (hash: kiU7QM0C1mwEaOQNcthFFJZevyv4iXHm9WMDBPMiwH8=) 2: 9zHDObGGFyK__oZyGDFM4SlcPIU.crl (hash: rkOsPm9JZa4nugrf5DxMgo62ylZL2zvsAwNQa1Ivzus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.crl rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:c5:0c:2c:09:05:64:8a:77:c1:85:9b:19:30:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f731c339b1861722bffe867218314ce1295c3c85 Validity Not Before: Dec 17 09:01:13 2025 GMT Not After : Dec 18 09:01:13 2025 GMT Subject: CN=327b6363172a5282617b6f74a3c62157b0238b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b0:21:fb:66:5d:b1:35:40:32:5b:79:67:9e: e8:ce:65:17:21:b1:a6:cf:76:a1:a4:8d:b9:34:ce: 1e:52:87:24:0e:a7:b8:2e:11:18:2b:b2:c0:70:74: c7:8d:55:c6:f8:f6:c8:0b:35:f3:d0:62:9a:0a:ef: fe:50:18:d7:a7:9b:9e:f2:f9:98:a8:ba:1c:a6:ba: 78:89:a3:3f:f3:50:e1:15:38:54:bc:48:51:f0:7b: 50:3c:5d:24:8d:6a:b3:db:da:dd:1b:67:ac:df:bc: 9f:6f:d5:2a:70:58:7e:ac:18:51:bd:42:29:b7:0e: 94:45:99:39:d3:c7:62:5c:0e:f3:39:05:b4:85:07: fe:ff:33:38:89:28:57:95:24:8c:76:b3:95:d2:1b: 15:1d:22:ca:99:b7:32:e1:d3:64:7e:52:3d:56:ce: 67:ac:dd:67:23:9e:de:89:24:b8:d1:96:23:1d:b7: 37:c1:f1:d8:dd:3e:2a:b9:88:21:c9:10:8b:27:d7: 1d:b5:12:be:18:09:75:b2:43:6e:9e:b5:25:c5:1c: 1d:7d:5e:b9:e2:b7:14:8b:1b:d4:2d:41:09:40:86: 64:3f:9d:ca:e2:2c:0f:b8:fa:64:e4:de:3f:f8:8d: bb:c7:1f:aa:60:60:fe:17:c3:89:c0:fb:38:e3:84: d5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7B:63:63:17:2A:52:82:61:7B:6F:74:A3:C6:21:57:B0:23:8B:48 X509v3 Authority Key Identifier: keyid:F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:51:f0:69:f8:40:f8:5d:82:54:f0:24:df:39:6d:d8:a3:bf: 87:2e:d4:93:8f:33:9d:aa:95:b7:93:95:99:61:25:26:ed:c5: a7:76:37:d7:ee:6a:8b:f7:40:25:69:57:41:b3:44:b1:48:a2: 28:7c:d8:e4:dc:aa:5a:84:83:21:56:27:3a:18:8b:a2:4a:e1: 1f:02:a3:1a:b5:bb:b2:da:02:52:c2:ae:3b:77:60:3b:a6:aa: 9a:6d:a0:5b:28:55:c6:96:73:2a:e2:55:85:18:2d:8a:49:45: 37:d4:53:bc:52:73:5d:5d:70:66:f8:a3:2b:74:13:72:a7:ba: b1:75:03:74:68:01:07:6a:4c:1a:8a:a9:db:07:99:83:a5:0c: 7e:05:00:8d:21:ad:22:0a:63:79:75:c5:20:52:17:90:9a:60: 33:a2:55:9f:17:3d:29:99:53:8c:01:41:b8:96:7d:a3:3b:6d: 15:6a:2a:95:1d:0e:cf:0a:3e:25:e1:24:ca:c4:f5:4e:7d:55: 20:21:b2:58:43:6f:ad:80:d1:cf:c6:61:58:74:a0:bc:0b:86: 2a:91:63:de:19:c9:4e:fb:41:f3:88:d1:ff:da:a5:47:f6:0d: 74:0c:07:c4:64:4a:3e:df:2f:1c:ec:4e:5c:f3:bf:c8:27:a9: 84:72:1d:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrisUMLAkFZIp3wYWbGTBsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MzFjMzM5YjE4NjE3MjJiZmZlODY3MjE4MzE0Y2UxMjk1 YzNjODUwHhcNMjUxMjE3MDkwMTEzWhcNMjUxMjE4MDkwMTEzWjAzMTEwLwYDVQQD EygzMjdiNjM2MzE3MmE1MjgyNjE3YjZmNzRhM2M2MjE1N2IwMjM4YjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprAh+2ZdsTVAMlt5Z57ozmUXIbGm z3ahpI25NM4eUockDqe4LhEYK7LAcHTHjVXG+PbICzXz0GKaCu/+UBjXp5ue8vmY qLocprp4iaM/81DhFThUvEhR8HtQPF0kjWqz29rdG2es37yfb9UqcFh+rBhRvUIp tw6URZk508diXA7zOQW0hQf+/zM4iShXlSSMdrOV0hsVHSLKmbcy4dNkflI9Vs5n rN1nI57eiSS40ZYjHbc3wfHY3T4quYghyRCLJ9cdtRK+GAl1skNunrUlxRwdfV65 4rcUixvULUEJQIZkP53K4iwPuPpk5N4/+I27xx+qYGD+F8OJwPs444TV9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJ7Y2MXKlKCYXtvdKPGIVewI4tIMB8GA1UdIwQY MBaAFPcxwzmxhhciv/6GchgxTOEpXDyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXpIRE9iR0dGeUtfX29aeUdERk00U2xjUElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8xNmM2NGItYjk2NS00OWNjLWFhNDAt MGRjMjBhN2Q4MmI5LzEvOXpIRE9iR0dGeUtfX29aeUdERk00U2xjUElVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8xNmM2NGItYjk2NS00OWNjLWFhNDAtMGRjMjBhN2Q4MmI5 LzEvOXpIRE9iR0dGeUtfX29aeUdERk00U2xjUElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlHwafhA +F2CVPAk3zlt2KO/hy7Uk48znaqVt5OVmWElJu3Fp3Y31+5qi/dAJWlXQbNEsUii KHzY5NyqWoSDIVYnOhiLokrhHwKjGrW7stoCUsKuO3dgO6aqmm2gWyhVxpZzKuJV hRgtiklFN9RTvFJzXV1wZvijK3QTcqe6sXUDdGgBB2pMGoqp2weZg6UMfgUAjSGt IgpjeXXFIFIXkJpgM6JVnxc9KZlTjAFBuJZ9ozttFWoqlR0Ozwo+JeEkysT1Tn1V ICGyWENvrYDRz8ZhWHSgvAuGKpFj3hnJTvtB84jR/9qlR/YNdAwHxGRKPt8vHOxO XPO/yCephHIdGg== -----END CERTIFICATE-----Generated at Wed Dec 17 13:42:10 2025 by rpki-client