This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft File: B9sjpeJVD_l0yl9BkXrIZ9UONek.mft (raw, json) Hash identifier: yqMYAeuaufUjNXSuZ25WolOJ3Ig2qEAaSmqiY4QcHoU= Subject key identifier: 77:5B:B3:22:2F:54:76:C8:22:5D:72:DD:A3:3F:89:28:19:72:69:22 Authority key identifier: 07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9 Certificate issuer: /CN=07db23a5e2550ff974ca5f41917ac867d50e35e9 Certificate serial: 019AF23F6F73D6B5678AB48180F6C4124580 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft Manifest number: 0A9C Signing time: Sat 06 Dec 2025 06:00:34 +0000 Manifest this update: Sat 06 Dec 2025 06:00:34 +0000 Manifest next update: Sun 07 Dec 2025 06:00:34 +0000 Files and hashes: 1: 8XyUaz5PxPLue0CrUchlRmHnqJs.roa (hash: KMSpxL6wtJUNFCJFnfAUFjLMRmLQ4Dcv8f1856Q+IkY=) 2: B9sjpeJVD_l0yl9BkXrIZ9UONek.crl (hash: EsC4l2oUuFF5huPFCmJKcO7By5QMHG4bZzj06HSjHQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:6f:73:d6:b5:67:8a:b4:81:80:f6:c4:12:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07db23a5e2550ff974ca5f41917ac867d50e35e9 Validity Not Before: Dec 6 06:00:34 2025 GMT Not After : Dec 7 06:00:34 2025 GMT Subject: CN=775bb3222f5476c8225d72dda33f892819726922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:93:d8:d5:b3:d4:77:57:bf:2c:5a:5b:2d:e0: c2:19:eb:d3:c2:77:5a:eb:96:c3:8f:9e:79:fa:fa: 72:5a:3e:1a:0c:b6:48:87:80:e8:4f:25:bd:79:a6: 06:62:c3:f4:58:0c:b8:d6:63:66:24:f1:6f:01:22: 66:c8:6d:16:76:43:c0:7e:01:aa:01:ba:b3:d7:87: 84:c8:83:80:b1:db:d4:3f:67:eb:cd:6e:01:b7:48: 4f:c0:31:47:b6:ce:26:20:f2:65:35:03:80:ee:58: f0:01:4e:66:6a:06:8b:ca:29:d1:55:24:05:31:29: 4c:15:5b:66:5b:48:4b:48:73:36:73:a6:d6:a2:4e: e1:41:da:6f:c6:df:2c:ab:07:a5:cd:14:22:6d:dd: ee:3f:77:95:2b:ea:dd:02:d3:88:de:24:d0:55:d0: 4b:bb:5f:03:88:e1:0e:ab:6f:6d:5b:f4:8a:32:86: dd:f2:dd:2c:6c:2f:44:5b:12:d7:36:44:fc:89:30: f9:27:92:d5:0c:d9:c3:a6:ff:48:06:df:24:4f:f8: db:a0:38:51:a9:42:75:0b:c7:a7:c7:27:16:c0:b4: 61:ca:b8:5b:2a:59:af:85:e1:a3:b5:b3:4c:18:e5: d0:74:7d:ce:6b:a4:48:d7:35:71:93:02:43:4c:9f: 84:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:5B:B3:22:2F:54:76:C8:22:5D:72:DD:A3:3F:89:28:19:72:69:22 X509v3 Authority Key Identifier: keyid:07:DB:23:A5:E2:55:0F:F9:74:CA:5F:41:91:7A:C8:67:D5:0E:35:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9sjpeJVD_l0yl9BkXrIZ9UONek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0305cd-0d71-420a-be38-5ccd5e9ce004/1/B9sjpeJVD_l0yl9BkXrIZ9UONek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:41:a5:84:13:81:17:40:5c:6b:45:a7:7a:f3:fe:ce:46:c6: 36:88:ae:31:17:bc:b6:4c:84:0c:b5:a4:cc:22:ac:02:f6:54: 08:37:83:45:56:82:1f:d2:10:f6:5e:f4:f1:d0:df:ab:f7:f9: 0c:7c:6b:6c:42:c1:58:53:56:f2:23:1d:0c:7d:64:f7:c7:19: 23:50:6d:7a:31:29:d3:6e:50:c6:2f:94:2c:1c:92:0a:12:15: 53:24:5a:41:60:6e:c0:7b:7a:67:6c:a5:22:62:48:45:c2:48: 52:3d:85:62:bb:97:67:04:c0:05:68:ee:10:7f:6b:2f:e4:57: f0:d6:bb:78:16:c1:f9:21:6c:4a:10:97:4c:bc:76:71:47:12: 76:c1:31:07:1b:1d:83:ae:e7:89:5c:5b:30:a1:95:df:4b:a3: 0e:a8:40:17:b8:d2:ad:af:b1:6e:7e:99:c5:94:21:07:47:14: 69:28:04:52:5d:f3:c6:5b:96:74:37:23:7d:df:b4:ff:70:14: 6a:a1:d6:07:91:ad:01:b7:56:fe:69:50:80:c6:cd:a1:a6:ab: 82:5f:5f:8e:c0:8f:22:72:fe:9a:b7:5f:eb:34:41:36:f5:16: 42:41:aa:d5:ee:f7:e9:a6:a9:c6:a3:c2:f6:87:4e:47:f8:95: 76:ea:7c:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP29z1rVnirSBgPbEEkWAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZGIyM2E1ZTI1NTBmZjk3NGNhNWY0MTkxN2FjODY3ZDUw ZTM1ZTkwHhcNMjUxMjA2MDYwMDM0WhcNMjUxMjA3MDYwMDM0WjAzMTEwLwYDVQQD Eyg3NzViYjMyMjJmNTQ3NmM4MjI1ZDcyZGRhMzNmODkyODE5NzI2OTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pPY1bPUd1e/LFpbLeDCGevTwnda 65bDj555+vpyWj4aDLZIh4DoTyW9eaYGYsP0WAy41mNmJPFvASJmyG0WdkPAfgGq Abqz14eEyIOAsdvUP2frzW4Bt0hPwDFHts4mIPJlNQOA7ljwAU5magaLyinRVSQF MSlMFVtmW0hLSHM2c6bWok7hQdpvxt8sqwelzRQibd3uP3eVK+rdAtOI3iTQVdBL u18DiOEOq29tW/SKMobd8t0sbC9EWxLXNkT8iTD5J5LVDNnDpv9IBt8kT/jboDhR qUJ1C8enxycWwLRhyrhbKlmvheGjtbNMGOXQdH3Oa6RI1zVxkwJDTJ+E4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdbsyIvVHbIIl1y3aM/iSgZcmkiMB8GA1UdIwQY MBaAFAfbI6XiVQ/5dMpfQZF6yGfVDjXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjlzanBlSlZEX2wweWw5QmtYcklaOVVPTmVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wMzA1Y2QtMGQ3MS00MjBhLWJlMzgt NWNjZDVlOWNlMDA0LzEvQjlzanBlSlZEX2wweWw5QmtYcklaOVVPTmVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wMzA1Y2QtMGQ3MS00MjBhLWJlMzgtNWNjZDVlOWNlMDA0 LzEvQjlzanBlSlZEX2wweWw5QmtYcklaOVVPTmVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP0GlhBOB F0Bca0WnevP+zkbGNoiuMRe8tkyEDLWkzCKsAvZUCDeDRVaCH9IQ9l708dDfq/f5 DHxrbELBWFNW8iMdDH1k98cZI1BtejEp025Qxi+ULBySChIVUyRaQWBuwHt6Z2yl ImJIRcJIUj2FYruXZwTABWjuEH9rL+RX8Na7eBbB+SFsShCXTLx2cUcSdsExBxsd g67niVxbMKGV30ujDqhAF7jSra+xbn6ZxZQhB0cUaSgEUl3zxluWdDcjfd+0/3AU aqHWB5GtAbdW/mlQgMbNoaargl9fjsCPInL+mrdf6zRBNvUWQkGq1e736aapxqPC 9odOR/iVdup8Xg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:51:00 2025 by rpki-client