This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft File: _9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft (raw, json) Hash identifier: TQjnIw3nj8Dyw9vnhJrDI3fivqAKqpqJDAXUa8tAwLA= Subject key identifier: 78:31:1C:32:62:68:7A:EE:A3:DE:F0:25:85:C6:18:EA:D8:FF:57:11 Authority key identifier: FF:D3:C1:74:2F:C0:5A:80:A2:DC:6B:B0:EB:E1:03:0A:9B:BC:8C:94 Certificate issuer: /CN=ffd3c1742fc05a80a2dc6bb0ebe1030a9bbc8c94 Certificate serial: 019AF3C0B47B756C6BA96D858EA92E6F2199 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 13:01:23 +0000 Manifest this update: Sat 06 Dec 2025 13:01:23 +0000 Manifest next update: Sun 07 Dec 2025 13:01:23 +0000 Files and hashes: 1: GDYfoKKG3yFaIjJkJ3YCAK8hLqA.roa (hash: erb5aM2h7W5I1XqnWYG/lDx7/8zDPLRd0RbZw0dE/qs=) 2: _9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl (hash: cE0mXBX6GgnsstB9N8aPsl0SENGBhGpH/QqvMx2Sbmg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:b4:7b:75:6c:6b:a9:6d:85:8e:a9:2e:6f:21:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffd3c1742fc05a80a2dc6bb0ebe1030a9bbc8c94 Validity Not Before: Dec 6 13:01:23 2025 GMT Not After : Dec 7 13:01:23 2025 GMT Subject: CN=78311c3262687aeea3def02585c618ead8ff5711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3b:91:4b:08:a0:0f:30:11:e0:37:53:3b:6e: ef:51:0f:e7:13:6f:ed:99:cb:6f:76:4d:d0:e2:4e: 1b:b6:68:52:e2:74:1c:25:dc:a5:b3:4c:84:b0:b3: 53:69:a9:ba:b4:f9:ac:d9:34:36:33:75:1a:59:10: 5c:8c:7f:e1:00:04:cd:0f:8d:51:23:9f:85:ea:b3: 3a:e5:ad:ee:a9:ff:cc:25:46:6b:b7:de:93:f8:8a: d1:8b:20:07:f7:d5:de:2c:8e:1b:b9:9e:55:2c:28: 29:fb:08:ef:1b:f0:11:da:0a:e1:ab:ae:4b:ea:5c: 5b:a2:42:46:2a:7e:3d:b5:2c:a7:b9:44:a8:dd:e6: c1:b7:81:9a:a5:74:c9:65:d3:21:87:20:80:76:3d: b3:77:ee:07:be:5d:30:8c:f9:f1:4e:28:ee:3f:dc: ca:e7:53:98:42:eb:3a:78:4e:d8:bf:98:8a:3c:b4: 30:83:f2:ca:34:1b:1e:46:58:5e:1f:4a:40:3e:7d: 0d:bc:05:a9:19:88:f4:d5:ab:0d:ac:1d:62:0b:eb: 4a:be:a2:7d:c9:ad:c3:d4:d7:2e:5e:7f:02:aa:5a: 30:11:5d:8d:44:6b:63:0b:ce:d6:11:dc:de:a0:43: 69:35:03:f9:1e:1b:44:14:13:c1:a4:da:c7:09:45: 00:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:31:1C:32:62:68:7A:EE:A3:DE:F0:25:85:C6:18:EA:D8:FF:57:11 X509v3 Authority Key Identifier: keyid:FF:D3:C1:74:2F:C0:5A:80:A2:DC:6B:B0:EB:E1:03:0A:9B:BC:8C:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:84:41:09:70:4f:4c:6f:0a:59:de:fb:b0:6f:f2:57:58:2b: b6:d9:6c:4a:46:5d:19:9b:96:ac:63:58:76:e3:78:91:4f:59: 11:4c:72:00:db:b1:82:71:53:18:bf:aa:45:66:01:ec:bd:1e: 01:8c:32:b0:34:1a:3d:fe:53:00:cb:8f:2e:9a:ff:6f:24:84: 61:e4:39:c3:1b:58:b8:87:35:d1:4e:57:61:85:8d:f7:94:55: 73:f0:e5:50:3f:1a:f4:5b:4e:e1:47:71:ab:4a:dd:69:70:8f: a2:00:5b:57:e5:e2:14:d7:dd:e5:e7:43:1a:4e:9c:6a:93:f2: ba:ce:3e:6c:01:3a:12:8c:63:bb:2f:f3:09:cd:66:ce:84:0c: b8:49:41:22:e3:12:c6:52:68:3b:95:b9:14:2f:4b:65:dd:80: 6c:d3:d2:c5:c3:c1:c0:44:74:c0:e7:f0:18:99:73:1d:8a:fb: b7:04:e8:a2:f4:db:35:a8:13:bb:e5:eb:f2:9c:55:2b:10:c6: 46:f5:28:f2:1d:90:fe:20:26:b1:45:15:1e:fb:6f:40:f3:42: ef:2e:83:0f:9c:ea:87:e0:c4:3a:46:28:e8:3c:bd:f0:6a:c5: 93:37:86:cd:21:ee:05:c9:09:6f:34:ca:ab:3c:46:dc:11:6a: 2c:e3:9e:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwLR7dWxrqW2FjqkubyGZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZDNjMTc0MmZjMDVhODBhMmRjNmJiMGViZTEwMzBhOWJi YzhjOTQwHhcNMjUxMjA2MTMwMTIzWhcNMjUxMjA3MTMwMTIzWjAzMTEwLwYDVQQD Eyg3ODMxMWMzMjYyNjg3YWVlYTNkZWYwMjU4NWM2MThlYWQ4ZmY1NzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TuRSwigDzAR4DdTO27vUQ/nE2/t mctvdk3Q4k4btmhS4nQcJdyls0yEsLNTaam6tPms2TQ2M3UaWRBcjH/hAATND41R I5+F6rM65a3uqf/MJUZrt96T+IrRiyAH99XeLI4buZ5VLCgp+wjvG/AR2grhq65L 6lxbokJGKn49tSynuUSo3ebBt4GapXTJZdMhhyCAdj2zd+4Hvl0wjPnxTijuP9zK 51OYQus6eE7Yv5iKPLQwg/LKNBseRlheH0pAPn0NvAWpGYj01asNrB1iC+tKvqJ9 ya3D1NcuXn8CqlowEV2NRGtjC87WEdzeoENpNQP5HhtEFBPBpNrHCUUA0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgxHDJiaHruo97wJYXGGOrY/1cRMB8GA1UdIwQY MBaAFP/TwXQvwFqAotxrsOvhAwqbvIyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzlQQmRDX0FXb0NpM0d1dzYtRURDcHU4akpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9jMzNkZjktZWRkNS00NjNiLWIwNTIt MGYwYmM0MDFlMWUxLzEvXzlQQmRDX0FXb0NpM0d1dzYtRURDcHU4akpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9jMzNkZjktZWRkNS00NjNiLWIwNTItMGYwYmM0MDFlMWUx LzEvXzlQQmRDX0FXb0NpM0d1dzYtRURDcHU4akpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYRBCXBP TG8KWd77sG/yV1grttlsSkZdGZuWrGNYduN4kU9ZEUxyANuxgnFTGL+qRWYB7L0e AYwysDQaPf5TAMuPLpr/bySEYeQ5wxtYuIc10U5XYYWN95RVc/DlUD8a9FtO4Udx q0rdaXCPogBbV+XiFNfd5edDGk6capPyus4+bAE6Eoxjuy/zCc1mzoQMuElBIuMS xlJoO5W5FC9LZd2AbNPSxcPBwER0wOfwGJlzHYr7twToovTbNagTu+Xr8pxVKxDG RvUo8h2Q/iAmsUUVHvtvQPNC7y6DD5zqh+DEOkYo6Dy98GrFkzeGzSHuBckJbzTK qzxG3BFqLOOeJw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:34:14 2025 by rpki-client