This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft File: 9IOBPbTT97DwLDH4W1JDww9F4lI.mft (raw, json) Hash identifier: m0xPuRobrsTtV9z6XCfhcm/YZyLdzOcU1+ul3ShvQ4o= Subject key identifier: AA:F8:7F:14:CC:56:D4:8A:26:F4:17:74:76:63:EE:4F:DE:5C:CB:F0 Authority key identifier: F4:83:81:3D:B4:D3:F7:B0:F0:2C:31:F8:5B:52:43:C3:0F:45:E2:52 Certificate issuer: /CN=f483813db4d3f7b0f02c31f85b5243c30f45e252 Certificate serial: 019AF12D0EB382301AE7BBF508AC81CC4A5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:00:53 +0000 Manifest this update: Sat 06 Dec 2025 01:00:53 +0000 Manifest next update: Sun 07 Dec 2025 01:00:53 +0000 Files and hashes: 1: 9IOBPbTT97DwLDH4W1JDww9F4lI.crl (hash: 7smOx5Zg17wQs5Ixx5hzk56lLTzAwgSVvxhUtQcwDDE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:0e:b3:82:30:1a:e7:bb:f5:08:ac:81:cc:4a:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f483813db4d3f7b0f02c31f85b5243c30f45e252 Validity Not Before: Dec 6 01:00:53 2025 GMT Not After : Dec 7 01:00:53 2025 GMT Subject: CN=aaf87f14cc56d48a26f417747663ee4fde5ccbf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d0:1c:93:a4:2e:47:08:8b:85:cf:c8:b2:eb: 75:5d:2d:be:0a:05:c5:43:17:d8:d1:a0:ce:f8:7f: c8:cd:ef:d4:a7:bb:ad:37:14:8f:c0:c8:8f:71:3a: 6d:bc:5c:a8:06:56:d8:f2:62:d6:cf:25:c0:27:4a: 2c:d0:cb:bb:72:6c:a7:8d:29:af:33:96:85:32:a2: a4:b8:5d:d4:3b:c6:73:9f:d6:67:9e:23:29:2d:e7: 23:c5:c4:49:23:d2:9c:2d:f5:80:4e:98:90:f1:2c: 50:85:c4:a0:95:3c:93:57:78:50:fd:2e:b0:35:94: 13:2b:a9:a8:c3:f5:ad:cf:be:f6:9f:89:9c:61:24: 46:f4:b2:58:88:63:10:3e:b1:47:85:1a:35:9c:51: 4f:c0:13:f4:32:77:98:bd:08:47:aa:ce:60:57:fa: 0a:c2:25:f0:e3:18:db:d4:34:f8:bc:9a:b2:ec:96: a1:c8:76:79:8e:4e:e6:d4:6f:cd:2c:12:eb:f5:ec: a6:56:3e:17:ec:8c:1f:d7:80:14:16:1b:e7:7c:75: 7e:09:f3:47:1f:9b:eb:39:ab:d8:7a:7e:f5:89:76: 47:04:84:24:c1:ef:97:78:5a:cd:35:2e:a1:46:1d: 57:08:58:f9:ed:37:a6:59:4b:dc:a4:f3:5e:9a:9f: 9a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F8:7F:14:CC:56:D4:8A:26:F4:17:74:76:63:EE:4F:DE:5C:CB:F0 X509v3 Authority Key Identifier: keyid:F4:83:81:3D:B4:D3:F7:B0:F0:2C:31:F8:5B:52:43:C3:0F:45:E2:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9IOBPbTT97DwLDH4W1JDww9F4lI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fd2a73-2157-46cf-981a-e718c843a294/1/9IOBPbTT97DwLDH4W1JDww9F4lI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:2a:16:61:0b:08:c1:c1:28:11:27:7c:c5:35:9d:bd:08:a7: e3:de:bf:84:c9:3c:bd:36:85:3b:d6:91:46:3b:8a:1a:41:2f: 46:06:42:14:97:f0:43:07:08:9a:cd:ab:fa:e3:90:7a:09:ab: a8:34:4a:1d:25:8c:7a:72:34:6e:6e:a7:7e:e9:65:06:9f:41: 7e:82:04:22:53:6e:31:6d:7e:78:49:40:35:05:91:f7:3f:5e: f2:b9:80:80:bc:ea:7b:ed:a4:03:13:34:15:e0:8f:c1:56:a4: 84:71:dd:c9:3d:fb:3a:e3:ec:fc:7b:22:31:7a:58:d3:e1:90: ce:bb:73:e8:dd:d8:03:5b:39:d2:51:62:32:2e:1f:b1:7c:f6: 94:4f:a4:79:52:75:18:91:46:79:b6:64:37:b9:d4:b9:0f:95: 16:24:39:73:0d:16:57:2e:3d:82:9d:79:ea:b7:ae:81:6c:26: ac:8b:6c:43:f3:6a:4e:8a:67:cc:ec:1e:ca:76:47:c2:6f:be: 0c:f7:59:a9:92:5b:d9:bb:99:74:9c:14:d3:93:28:3c:11:41: 77:69:b1:1d:64:1a:d3:88:86:cf:68:ec:c9:4e:54:33:e9:c7: ea:5b:35:86:43:77:2d:ce:36:ca:70:2b:ae:aa:24:00:7f:e3: cb:59:51:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQ6zgjAa57v1CKyBzEpbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ODM4MTNkYjRkM2Y3YjBmMDJjMzFmODViNTI0M2MzMGY0 NWUyNTIwHhcNMjUxMjA2MDEwMDUzWhcNMjUxMjA3MDEwMDUzWjAzMTEwLwYDVQQD EyhhYWY4N2YxNGNjNTZkNDhhMjZmNDE3NzQ3NjYzZWU0ZmRlNWNjYmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodAck6QuRwiLhc/Isut1XS2+CgXF QxfY0aDO+H/Ize/Up7utNxSPwMiPcTptvFyoBlbY8mLWzyXAJ0os0Mu7cmynjSmv M5aFMqKkuF3UO8Zzn9ZnniMpLecjxcRJI9KcLfWATpiQ8SxQhcSglTyTV3hQ/S6w NZQTK6mow/Wtz772n4mcYSRG9LJYiGMQPrFHhRo1nFFPwBP0MneYvQhHqs5gV/oK wiXw4xjb1DT4vJqy7JahyHZ5jk7m1G/NLBLr9eymVj4X7Iwf14AUFhvnfHV+CfNH H5vrOavYen71iXZHBIQkwe+XeFrNNS6hRh1XCFj57TemWUvcpPNemp+aVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKr4fxTMVtSKJvQXdHZj7k/eXMvwMB8GA1UdIwQY MBaAFPSDgT200/ew8Cwx+FtSQ8MPReJSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUlPQlBiVFQ5N0R3TERINFcxSkR3dzlGNGxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9mZDJhNzMtMjE1Ny00NmNmLTk4MWEt ZTcxOGM4NDNhMjk0LzEvOUlPQlBiVFQ5N0R3TERINFcxSkR3dzlGNGxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9mZDJhNzMtMjE1Ny00NmNmLTk4MWEtZTcxOGM4NDNhMjk0 LzEvOUlPQlBiVFQ5N0R3TERINFcxSkR3dzlGNGxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlCoWYQsI wcEoESd8xTWdvQin496/hMk8vTaFO9aRRjuKGkEvRgZCFJfwQwcIms2r+uOQegmr qDRKHSWMenI0bm6nfullBp9BfoIEIlNuMW1+eElANQWR9z9e8rmAgLzqe+2kAxM0 FeCPwVakhHHdyT37OuPs/HsiMXpY0+GQzrtz6N3YA1s50lFiMi4fsXz2lE+keVJ1 GJFGebZkN7nUuQ+VFiQ5cw0WVy49gp156reugWwmrItsQ/NqTopnzOweynZHwm++ DPdZqZJb2buZdJwU05MoPBFBd2mxHWQa04iGz2jsyU5UM+nH6ls1hkN3Lc42ynAr rqokAH/jy1lRKg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:54:15 2025 by rpki-client