This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft File: t09j_Q3Bl-Uq0nInbEDT7kux15k.mft (raw, json) Hash identifier: LyjwTShsGMVHUN0xQz532x4lSw2A8r8mSBBoULM3Xbw= Subject key identifier: 1E:49:EF:0C:FE:D1:4D:91:B8:32:7A:82:7B:A5:4E:76:78:E7:08:BA Authority key identifier: B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99 Certificate issuer: /CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799 Certificate serial: 019AF31B8A80630079320784A9EC372C4234 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft Manifest number: 1505 Signing time: Sat 06 Dec 2025 10:00:59 +0000 Manifest this update: Sat 06 Dec 2025 10:00:59 +0000 Manifest next update: Sun 07 Dec 2025 10:00:59 +0000 Files and hashes: 1: CTtxM-1YJnI7s2CeXEI8bJGchw8.roa (hash: m3vS1eOhVy8HVysz20rw/64QS2NyFhJNMyCoI4Eqes4=) 2: t09j_Q3Bl-Uq0nInbEDT7kux15k.crl (hash: 9lxIbMjSUeW//xkW2fl2FleLipA/nBPKX498bEkpHUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:8a:80:63:00:79:32:07:84:a9:ec:37:2c:42:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799 Validity Not Before: Dec 6 10:00:59 2025 GMT Not After : Dec 7 10:00:59 2025 GMT Subject: CN=1e49ef0cfed14d91b8327a827ba54e7678e708ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c0:e2:c4:46:1d:97:de:0f:c3:df:a4:35:92: 4d:aa:0f:24:50:9f:38:b3:fc:b0:36:80:d5:20:23: 95:b6:6a:87:99:d3:59:f9:19:85:ad:3b:47:1e:47: e8:ca:2f:b8:60:10:fa:d1:7d:66:44:6c:b5:2a:04: 10:b2:09:71:83:09:1c:3d:f0:d0:d4:9a:c7:18:e0: ee:de:40:7f:0f:ef:91:1d:49:81:6c:e2:a7:59:0e: 23:b5:3d:9b:79:f9:e2:c2:f7:f9:f3:a0:38:72:a7: aa:6b:1a:0c:7c:5f:da:6e:df:15:4e:cc:22:70:0c: 16:a8:ab:83:04:5d:19:73:90:9e:c6:66:1e:57:d4: e5:fc:b4:fd:74:c8:9b:f1:e5:1e:a7:2f:29:10:fa: 05:7a:1f:7e:b4:f0:bd:c4:db:0b:9d:09:bc:7f:42: 6f:05:75:85:1a:48:83:41:f8:97:0e:f3:96:98:ac: 79:d4:36:46:cb:43:46:0e:f4:22:5a:cc:b3:45:35: 23:c8:b9:72:4b:ee:a5:6a:7f:a2:d1:67:5a:1f:8d: 75:3c:df:57:06:48:2a:32:ad:af:d1:ba:18:10:fa: fc:b3:1d:a7:39:e3:52:28:14:8a:19:32:5a:98:4d: 21:a2:f7:54:09:b9:32:f9:bf:08:86:54:fd:ff:4d: 5d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:49:EF:0C:FE:D1:4D:91:B8:32:7A:82:7B:A5:4E:76:78:E7:08:BA X509v3 Authority Key Identifier: keyid:B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5d:32:57:d2:2c:8a:3a:a2:45:39:bc:73:cf:38:0e:8a:78: 47:de:d4:d6:90:ed:10:72:23:de:98:3f:83:2b:40:a6:63:1c: 53:bc:7c:62:aa:46:c9:1b:98:01:48:74:1e:7d:61:09:70:ae: 7c:a0:e9:65:71:30:02:9e:70:0e:6b:3e:00:85:da:26:26:4e: 7e:35:6a:7b:18:2f:d1:34:5f:d4:8b:18:b9:47:fd:de:8a:86: 65:3b:5b:71:61:37:f0:b8:89:6a:d9:2e:d5:a2:07:c1:80:70: 9b:f7:c6:3c:5f:61:91:31:9f:68:0c:36:00:d6:97:a4:91:d4: 0f:e5:68:ef:7b:06:2a:dc:b8:0e:c8:e9:1f:52:b3:9f:89:c6: 2b:f0:27:ec:96:0f:c0:45:d8:44:d8:0a:88:8e:e7:30:e9:71: fa:dd:59:38:63:d0:b7:78:3b:e3:54:ae:20:db:59:fa:48:fb: 73:a2:f1:43:67:53:b7:4c:4d:03:95:c3:0a:9f:e0:46:03:a3: 60:1a:d9:43:95:c3:c4:d4:5c:11:ee:84:4e:30:47:66:72:cd: db:94:4c:cc:5f:bf:56:13:a0:ec:e9:7d:7a:63:4f:0c:ae:85: ce:22:44:92:38:f4:0b:7a:4a:60:d6:36:ed:92:ae:ab:ba:45: ff:16:fe:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG4qAYwB5MgeEqew3LEI0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NGY2M2ZkMGRjMTk3ZTUyYWQyNzIyNzZjNDBkM2VlNGJi MWQ3OTkwHhcNMjUxMjA2MTAwMDU5WhcNMjUxMjA3MTAwMDU5WjAzMTEwLwYDVQQD EygxZTQ5ZWYwY2ZlZDE0ZDkxYjgzMjdhODI3YmE1NGU3Njc4ZTcwOGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sDixEYdl94Pw9+kNZJNqg8kUJ84 s/ywNoDVICOVtmqHmdNZ+RmFrTtHHkfoyi+4YBD60X1mRGy1KgQQsglxgwkcPfDQ 1JrHGODu3kB/D++RHUmBbOKnWQ4jtT2befniwvf586A4cqeqaxoMfF/abt8VTswi cAwWqKuDBF0Zc5CexmYeV9Tl/LT9dMib8eUepy8pEPoFeh9+tPC9xNsLnQm8f0Jv BXWFGkiDQfiXDvOWmKx51DZGy0NGDvQiWsyzRTUjyLlyS+6lan+i0WdaH411PN9X BkgqMq2v0boYEPr8sx2nOeNSKBSKGTJamE0hovdUCbky+b8IhlT9/01dKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5J7wz+0U2RuDJ6gnulTnZ45wi6MB8GA1UdIwQY MBaAFLdPY/0NwZflKtJyJ2xA0+5LsdeZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDA5al9RM0JsLVVxMG5JbmJFRFQ3a3V4MTVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85ODExNzYtNGQxMC00ODU5LWJhMGYt MWQyMmIwMmI5YjFiLzEvdDA5al9RM0JsLVVxMG5JbmJFRFQ3a3V4MTVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS85ODExNzYtNGQxMC00ODU5LWJhMGYtMWQyMmIwMmI5YjFi LzEvdDA5al9RM0JsLVVxMG5JbmJFRFQ3a3V4MTVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALl0yV9Is ijqiRTm8c884Dop4R97U1pDtEHIj3pg/gytApmMcU7x8YqpGyRuYAUh0Hn1hCXCu fKDpZXEwAp5wDms+AIXaJiZOfjVqexgv0TRf1IsYuUf93oqGZTtbcWE38LiJatku 1aIHwYBwm/fGPF9hkTGfaAw2ANaXpJHUD+Vo73sGKty4DsjpH1Kzn4nGK/An7JYP wEXYRNgKiI7nMOlx+t1ZOGPQt3g741SuINtZ+kj7c6LxQ2dTt0xNA5XDCp/gRgOj YBrZQ5XDxNRcEe6ETjBHZnLN25RMzF+/VhOg7Ol9emNPDK6FziJEkjj0C3pKYNY2 7ZKuq7pF/xb+wQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:12:29 2025 by rpki-client