This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft File: 9rLInTH2F1Fqhgp4IrumgkinaaA.mft (raw, json) Hash identifier: kPmx8GJ8NYQEv7kX5yIROfb2VOz++GpKL56zDklLUNc= Subject key identifier: E8:12:E6:24:AC:D0:B1:66:D5:BC:6A:9F:D5:11:63:5D:81:A4:AE:A1 Authority key identifier: F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0 Certificate issuer: /CN=f6b2c89d31f617516a860a7822bba68248a769a0 Certificate serial: 019AFCC49486F68B7A5EBC77B39666A52420 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft Manifest number: 0955 Signing time: Mon 08 Dec 2025 07:02:12 +0000 Manifest this update: Mon 08 Dec 2025 07:02:12 +0000 Manifest next update: Tue 09 Dec 2025 07:02:12 +0000 Files and hashes: 1: 0iYjHA4kyW6qTATWGW_TDJUOsEk.roa (hash: EaJ38giyluinl93rwFdYFKbOjiJmuj1tUHU09V9bmYM=) 2: 9rLInTH2F1Fqhgp4IrumgkinaaA.crl (hash: oRyLvUoDjOKqlmJ7EsKtS3unF6EWESGy1rusANjLVpg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c4:94:86:f6:8b:7a:5e:bc:77:b3:96:66:a5:24:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6b2c89d31f617516a860a7822bba68248a769a0 Validity Not Before: Dec 8 07:02:12 2025 GMT Not After : Dec 9 07:02:12 2025 GMT Subject: CN=e812e624acd0b166d5bc6a9fd511635d81a4aea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5a:b2:21:ea:fd:d8:76:d2:fa:64:b1:90:08: 93:6d:26:ef:cd:1c:00:d8:55:d0:b7:9b:71:a9:a1: 4b:2c:5a:e0:96:2b:44:1b:da:fc:29:2c:03:6c:a8: 3f:ad:e3:26:34:9c:a8:ee:15:3d:e8:5d:cf:f1:f2: 31:e1:19:52:af:40:c1:17:ad:4a:10:ad:49:83:14: 05:01:77:30:51:57:41:02:ea:ec:54:64:81:60:f5: 8f:d0:6d:16:a0:35:9b:6f:2d:a1:9a:d1:e2:df:50: f7:97:c1:21:ba:64:b1:42:80:c3:53:ac:a0:4e:a3: 28:0c:3f:91:59:3c:0e:a4:a7:52:0d:49:b7:6b:ab: 50:b6:51:52:de:cc:72:c3:4f:6d:a3:63:42:49:93: da:80:55:82:b8:19:6a:a6:5e:c3:c8:57:f5:4d:6e: 5e:cb:89:02:da:0c:10:e1:34:47:f8:86:1b:0f:cd: 89:1d:61:a8:8c:ac:48:2f:e4:2a:c0:0f:e5:64:4d: 06:62:04:c2:f2:0e:50:84:c3:d1:e3:86:1e:dc:24: 19:fe:a0:cb:cb:0f:f0:2e:f2:1d:98:0d:9c:0e:9d: 97:0c:83:32:4d:cf:b2:de:34:1f:8f:f4:3f:f6:02: 25:f3:5f:22:95:a9:f1:e3:a1:44:e1:c2:9d:3f:8b: a2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:12:E6:24:AC:D0:B1:66:D5:BC:6A:9F:D5:11:63:5D:81:A4:AE:A1 X509v3 Authority Key Identifier: keyid:F6:B2:C8:9D:31:F6:17:51:6A:86:0A:78:22:BB:A6:82:48:A7:69:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rLInTH2F1Fqhgp4IrumgkinaaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/917bd6-8bd3-4c28-825f-1475d22dc162/1/9rLInTH2F1Fqhgp4IrumgkinaaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:1d:e5:5d:01:02:16:55:75:84:dc:ab:a8:44:8f:17:be:e7: 7f:cf:1a:c5:ee:6b:a9:95:96:da:7b:ff:2c:d0:b6:17:e3:cb: fc:76:dc:5a:65:24:e2:d9:0a:27:68:a7:73:64:d9:9f:1a:6b: e1:f7:b5:0f:47:5e:06:79:ff:1d:82:74:6a:d1:76:e3:98:32: 7e:ed:13:25:a7:ff:11:a5:16:da:03:69:85:53:c9:e6:1f:a6: 8a:0b:78:c5:75:bc:4c:42:26:d9:f2:42:27:23:dc:11:94:99: 88:e4:d0:71:86:76:ac:71:35:4b:f0:d8:09:d7:9b:fe:37:43: 92:30:e8:90:3f:ef:b0:c3:26:bc:83:8f:50:fa:df:eb:63:a1: df:cd:79:80:d8:07:00:e3:4b:09:ac:25:0c:78:4d:b6:ce:85: 41:9f:da:dc:f8:af:23:6b:9b:b7:bd:1a:cd:4b:c3:70:e6:e3: 13:1a:c4:11:ae:16:e3:5a:da:62:12:ae:03:df:77:04:45:27: 54:96:0b:f1:aa:1c:ff:37:3b:70:40:f7:38:ca:d6:38:c7:74: 12:4a:24:82:48:a0:ff:5a:1a:c1:7e:c4:d4:e1:fc:0f:a4:71: fd:7a:80:15:ca:6a:57:9f:c9:87:14:fc:88:0c:e5:8f:32:eb: 04:8d:a9:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8xJSG9ot6Xrx3s5ZmpSQgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YjJjODlkMzFmNjE3NTE2YTg2MGE3ODIyYmJhNjgyNDhh NzY5YTAwHhcNMjUxMjA4MDcwMjEyWhcNMjUxMjA5MDcwMjEyWjAzMTEwLwYDVQQD EyhlODEyZTYyNGFjZDBiMTY2ZDViYzZhOWZkNTExNjM1ZDgxYTRhZWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVqyIer92HbS+mSxkAiTbSbvzRwA 2FXQt5txqaFLLFrglitEG9r8KSwDbKg/reMmNJyo7hU96F3P8fIx4RlSr0DBF61K EK1JgxQFAXcwUVdBAursVGSBYPWP0G0WoDWbby2hmtHi31D3l8EhumSxQoDDU6yg TqMoDD+RWTwOpKdSDUm3a6tQtlFS3sxyw09to2NCSZPagFWCuBlqpl7DyFf1TW5e y4kC2gwQ4TRH+IYbD82JHWGojKxIL+QqwA/lZE0GYgTC8g5QhMPR44Ye3CQZ/qDL yw/wLvIdmA2cDp2XDIMyTc+y3jQfj/Q/9gIl818ilanx46FE4cKdP4uisQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgS5iSs0LFm1bxqn9URY12BpK6hMB8GA1UdIwQY MBaAFPayyJ0x9hdRaoYKeCK7poJIp2mgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXJMSW5USDJGMUZxaGdwNElydW1na2luYWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85MTdiZDYtOGJkMy00YzI4LTgyNWYt MTQ3NWQyMmRjMTYyLzEvOXJMSW5USDJGMUZxaGdwNElydW1na2luYWFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy85MTdiZDYtOGJkMy00YzI4LTgyNWYtMTQ3NWQyMmRjMTYy LzEvOXJMSW5USDJGMUZxaGdwNElydW1na2luYWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmx3lXQEC FlV1hNyrqESPF77nf88axe5rqZWW2nv/LNC2F+PL/HbcWmUk4tkKJ2inc2TZnxpr 4fe1D0deBnn/HYJ0atF245gyfu0TJaf/EaUW2gNphVPJ5h+migt4xXW8TEIm2fJC JyPcEZSZiOTQcYZ2rHE1S/DYCdeb/jdDkjDokD/vsMMmvIOPUPrf62Oh3815gNgH AONLCawlDHhNts6FQZ/a3PivI2ubt70azUvDcObjExrEEa4W41raYhKuA993BEUn VJYL8aoc/zc7cED3OMrWOMd0Ekokgkig/1oawX7E1OH8D6Rx/XqAFcpqV5/JhxT8 iAzljzLrBI2pgA== -----END CERTIFICATE-----Generated at Mon Dec 8 09:37:26 2025 by rpki-client