This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft File: 9-5cHIBMM_3jPZsIuRn3PTHQttk.mft (raw, json) Hash identifier: 2G89JDDw3ED6PH4klIpZ6cueAhpSockgfv0Zu6CCZJc= Subject key identifier: 13:26:61:92:50:8B:85:88:86:B3:3E:6F:00:CD:DE:F0:C7:2F:0A:4B Authority key identifier: F7:EE:5C:1C:80:4C:33:FD:E3:3D:9B:08:B9:19:F7:3D:31:D0:B6:D9 Certificate issuer: /CN=f7ee5c1c804c33fde33d9b08b919f73d31d0b6d9 Certificate serial: 019AF208A896DE828EDF8B34A26B8D111AA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft Manifest number: 0BD8 Signing time: Sat 06 Dec 2025 05:00:44 +0000 Manifest this update: Sat 06 Dec 2025 05:00:44 +0000 Manifest next update: Sun 07 Dec 2025 05:00:44 +0000 Files and hashes: 1: 9-5cHIBMM_3jPZsIuRn3PTHQttk.crl (hash: I+ZJ8lWcwfhYUNEWnAoVLa0lsoQpDhKhDvwCeP4FZOQ=) 2: VIIA5VZpizTIGxWzHyr_ZNDV3cA.roa (hash: cehPDwufBxU4/kiVLRiGeuXvq0MlYpc57MWfPb+PZlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:a8:96:de:82:8e:df:8b:34:a2:6b:8d:11:1a:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7ee5c1c804c33fde33d9b08b919f73d31d0b6d9 Validity Not Before: Dec 6 05:00:44 2025 GMT Not After : Dec 7 05:00:44 2025 GMT Subject: CN=13266192508b858886b33e6f00cddef0c72f0a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2e:22:49:1a:4d:e2:02:95:c8:e4:13:40:70: 01:97:83:85:86:b8:1c:b3:38:74:a9:ee:49:a3:a4: bf:f8:20:bd:b0:e8:0c:1b:41:81:6a:dd:39:6b:ff: 27:87:e3:19:07:9f:48:fa:91:07:00:33:62:ac:8a: 88:72:2a:fa:a0:c1:e7:fe:cb:93:81:1a:60:70:c6: a1:9c:a3:39:96:2d:95:93:e4:d8:3a:7a:7f:93:05: f2:3e:c9:8c:83:d9:b1:7f:31:77:94:61:61:01:03: 85:ad:b9:d6:08:05:13:4b:19:2b:97:9b:46:8a:62: a2:01:7c:29:4c:13:aa:04:0f:f2:1f:71:03:9e:75: 1d:e9:5e:3d:1a:3b:55:4d:b5:fb:a8:13:88:13:7e: 5c:4d:30:e6:7d:fe:82:3c:99:de:79:b2:aa:db:3e: 5e:1d:6e:56:bf:82:4e:36:6f:d8:79:57:5d:cb:3c: 62:bd:9c:71:32:a8:f1:b0:46:03:0d:c8:ae:03:d1: ac:96:55:d9:74:ed:d5:29:e5:b4:a5:e7:3e:f1:3b: a2:e1:c8:20:50:34:87:4b:b1:6d:2a:c6:6f:15:81: 38:93:a5:64:dd:84:b6:57:0e:7a:c3:0c:c9:8a:a7: ca:8b:54:e4:68:18:ad:da:63:d6:81:2f:38:93:46: f3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:26:61:92:50:8B:85:88:86:B3:3E:6F:00:CD:DE:F0:C7:2F:0A:4B X509v3 Authority Key Identifier: keyid:F7:EE:5C:1C:80:4C:33:FD:E3:3D:9B:08:B9:19:F7:3D:31:D0:B6:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-5cHIBMM_3jPZsIuRn3PTHQttk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5b28e1-f70c-42d4-838c-e08d53f09612/1/9-5cHIBMM_3jPZsIuRn3PTHQttk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:4e:7a:d2:12:ec:11:5f:37:b2:6e:9a:17:9e:64:52:d3:f4: df:83:fe:48:20:47:9c:46:99:d9:24:de:7b:e8:e0:83:11:26: e6:da:15:91:58:69:b6:c9:17:d0:7b:fb:90:d0:d1:d1:0c:7c: 85:e3:78:a7:33:17:3c:cd:16:ef:61:bc:82:42:e2:f3:e9:dc: aa:e3:25:ad:91:27:14:1a:c0:47:25:51:af:f6:0b:d5:c5:4e: 3e:b9:09:7d:63:2e:86:a0:f1:35:3d:c9:48:ba:1b:70:42:12: ef:02:f4:aa:97:a7:24:17:4e:28:20:4d:7b:1f:2b:89:88:04: 95:f9:21:b0:f4:69:23:69:7a:ae:3b:b1:a8:ee:9c:b6:92:b8: de:ca:de:51:15:e8:cd:20:92:e6:d1:ff:ef:4d:bc:5e:28:84: cd:96:b2:43:d0:dd:09:24:d9:f1:34:7d:a5:e8:8a:38:08:0c: 0f:bc:7c:6b:45:de:e6:ef:e6:73:a7:34:fd:c5:cc:fd:02:b4: 12:09:86:4a:a0:91:24:0c:e3:50:46:54:0c:c2:57:2b:eb:10: a0:b2:d2:dd:61:3c:cb:71:78:fc:02:9e:8e:67:f6:39:dc:1f: 75:f5:9d:22:46:9c:75:ff:c2:10:9a:96:18:43:58:5e:aa:6a: af:6f:0d:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKiW3oKO34s0omuNERqjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZWU1YzFjODA0YzMzZmRlMzNkOWIwOGI5MTlmNzNkMzFk MGI2ZDkwHhcNMjUxMjA2MDUwMDQ0WhcNMjUxMjA3MDUwMDQ0WjAzMTEwLwYDVQQD EygxMzI2NjE5MjUwOGI4NTg4ODZiMzNlNmYwMGNkZGVmMGM3MmYwYTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi4iSRpN4gKVyOQTQHABl4OFhrgc szh0qe5Jo6S/+CC9sOgMG0GBat05a/8nh+MZB59I+pEHADNirIqIcir6oMHn/suT gRpgcMahnKM5li2Vk+TYOnp/kwXyPsmMg9mxfzF3lGFhAQOFrbnWCAUTSxkrl5tG imKiAXwpTBOqBA/yH3EDnnUd6V49GjtVTbX7qBOIE35cTTDmff6CPJneebKq2z5e HW5Wv4JONm/YeVddyzxivZxxMqjxsEYDDciuA9GsllXZdO3VKeW0pec+8Tui4cgg UDSHS7FtKsZvFYE4k6Vk3YS2Vw56wwzJiqfKi1TkaBit2mPWgS84k0bzCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMmYZJQi4WIhrM+bwDN3vDHLwpLMB8GA1UdIwQY MBaAFPfuXByATDP94z2bCLkZ9z0x0LbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOS01Y0hJQk1NXzNqUFpzSXVSbjNQVEhRdHRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81YjI4ZTEtZjcwYy00MmQ0LTgzOGMt ZTA4ZDUzZjA5NjEyLzEvOS01Y0hJQk1NXzNqUFpzSXVSbjNQVEhRdHRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy81YjI4ZTEtZjcwYy00MmQ0LTgzOGMtZTA4ZDUzZjA5NjEy LzEvOS01Y0hJQk1NXzNqUFpzSXVSbjNQVEhRdHRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB0560hLs EV83sm6aF55kUtP034P+SCBHnEaZ2STee+jggxEm5toVkVhptskX0Hv7kNDR0Qx8 heN4pzMXPM0W72G8gkLi8+ncquMlrZEnFBrARyVRr/YL1cVOPrkJfWMuhqDxNT3J SLobcEIS7wL0qpenJBdOKCBNex8riYgElfkhsPRpI2l6rjuxqO6ctpK43sreURXo zSCS5tH/7028XiiEzZayQ9DdCSTZ8TR9peiKOAgMD7x8a0Xe5u/mc6c0/cXM/QK0 EgmGSqCRJAzjUEZUDMJXK+sQoLLS3WE8y3F4/AKejmf2OdwfdfWdIkacdf/CEJqW GENYXqpqr28NbA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:18:18 2025 by rpki-client