This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft File: 9B_-fSl-5OHU0jM1qatKAIjAJdc.mft (raw, json) Hash identifier: qmwDir+WJMH9gQeJrvJMHcN8RJKeW7AxB6XulsnKBpA= Subject key identifier: CD:05:90:C1:04:4B:E7:32:81:D2:85:C5:AA:BC:44:B5:C2:F3:33:F6 Authority key identifier: F4:1F:FE:7D:29:7E:E4:E1:D4:D2:33:35:A9:AB:4A:00:88:C0:25:D7 Certificate issuer: /CN=f41ffe7d297ee4e1d4d23335a9ab4a0088c025d7 Certificate serial: 019AF50A838FCDF6019AA5595723AEA34D6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft Manifest number: 0D37 Signing time: Sat 06 Dec 2025 19:01:38 +0000 Manifest this update: Sat 06 Dec 2025 19:01:38 +0000 Manifest next update: Sun 07 Dec 2025 19:01:38 +0000 Files and hashes: 1: 9B_-fSl-5OHU0jM1qatKAIjAJdc.crl (hash: 7sUhoDZplBeEHaAsqzxDjxgjAON+NX03SS5trYAjv7E=) 2: PRDF7uUUDEgvhpybsRj704dqk1M.roa (hash: 1hJ8QC4+sDAxjl4A67W+QBueyb9hgkEoDhfUwnkhNeA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:83:8f:cd:f6:01:9a:a5:59:57:23:ae:a3:4d:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f41ffe7d297ee4e1d4d23335a9ab4a0088c025d7 Validity Not Before: Dec 6 19:01:38 2025 GMT Not After : Dec 7 19:01:38 2025 GMT Subject: CN=cd0590c1044be73281d285c5aabc44b5c2f333f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:63:2e:24:4d:68:e4:b7:6b:77:1a:ec:30:c1: 91:a7:66:f8:48:41:56:d6:af:80:86:08:f0:bd:0a: 0e:64:a3:f1:d8:26:17:2f:c1:08:23:1d:05:75:db: d9:28:e9:20:76:34:24:27:d0:20:1f:05:25:ef:c4: f8:f7:41:37:6a:fd:2a:c0:8a:fe:d6:b7:aa:56:76: 97:8a:cd:4e:96:c3:22:b7:d2:2a:ac:3a:22:6c:37: 6c:0e:f7:80:33:bb:71:fc:08:80:82:dc:8c:b3:0e: 2a:71:c0:49:98:81:52:a0:6f:9f:00:f6:85:30:23: f6:d1:bb:a3:71:5d:ca:4a:1d:4f:28:b3:09:a6:3d: bc:fe:02:d0:f8:53:ab:ec:d5:d4:62:06:ff:bc:e2: ed:1f:e0:58:97:21:8e:5b:7d:5f:ff:be:70:ef:56: 5e:dd:6d:26:73:ed:50:d9:e6:d7:20:ad:32:15:b8: 5d:23:3a:2b:7f:f8:40:56:b0:f5:cf:cb:2d:12:52: 05:94:99:ac:6a:27:38:69:7d:33:3f:9f:9d:d2:3f: 3c:fe:c8:8f:9b:3f:c5:23:35:60:b2:32:a1:ba:f4: ad:49:fd:1c:15:c4:b8:e8:02:d5:4d:cc:fd:df:c9: 78:d8:32:8f:99:0d:04:c4:0a:e7:68:cb:d0:2d:71: fd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:05:90:C1:04:4B:E7:32:81:D2:85:C5:AA:BC:44:B5:C2:F3:33:F6 X509v3 Authority Key Identifier: keyid:F4:1F:FE:7D:29:7E:E4:E1:D4:D2:33:35:A9:AB:4A:00:88:C0:25:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:1d:60:27:a3:18:bc:99:bf:0f:7e:85:f9:21:2b:cc:07:ec: 4b:64:4d:01:bc:cb:96:b1:1e:05:69:2d:a1:77:85:9b:3d:42: 44:35:3e:0d:95:4f:19:2c:bd:be:6f:ee:ba:a1:ec:ee:6e:b3: de:6f:f3:dd:e8:b4:33:a2:e7:fc:7b:03:40:89:69:ec:5e:52: aa:dc:10:8f:e0:c8:8c:4b:52:d1:54:86:2e:f7:ac:b4:ae:07: a3:d8:99:72:a4:7b:80:43:83:46:84:1d:08:e4:ac:a6:3e:84: 6e:2a:18:54:2f:d5:81:aa:5d:ef:53:29:66:2c:e1:a8:f2:19: 6c:e0:f5:45:f8:7b:37:fd:4e:4f:ac:47:6a:34:37:99:92:03: aa:f7:3c:d6:5a:d2:b6:6f:2e:95:cb:1c:a0:fc:9b:c6:ac:83: 58:f4:42:01:8c:08:6e:50:38:71:b8:b4:7f:69:ef:2c:81:c7: c7:00:b8:6a:4b:b5:ba:f1:7d:06:f0:cf:de:66:6f:39:c1:e0: 12:70:0f:7b:19:51:f1:1e:69:61:c5:e3:2f:e3:10:44:18:d6: 1a:1c:e9:fe:eb:55:d3:72:1d:17:59:04:28:ea:d8:70:01:64: 42:1e:f0:ea:66:96:bc:92:f2:72:23:46:66:25:d8:30:29:f6: de:ba:4f:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CoOPzfYBmqVZVyOuo01uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0MWZmZTdkMjk3ZWU0ZTFkNGQyMzMzNWE5YWI0YTAwODhj MDI1ZDcwHhcNMjUxMjA2MTkwMTM4WhcNMjUxMjA3MTkwMTM4WjAzMTEwLwYDVQQD EyhjZDA1OTBjMTA0NGJlNzMyODFkMjg1YzVhYWJjNDRiNWMyZjMzM2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GMuJE1o5LdrdxrsMMGRp2b4SEFW 1q+AhgjwvQoOZKPx2CYXL8EIIx0FddvZKOkgdjQkJ9AgHwUl78T490E3av0qwIr+ 1reqVnaXis1OlsMit9IqrDoibDdsDveAM7tx/AiAgtyMsw4qccBJmIFSoG+fAPaF MCP20bujcV3KSh1PKLMJpj28/gLQ+FOr7NXUYgb/vOLtH+BYlyGOW31f/75w71Ze 3W0mc+1Q2ebXIK0yFbhdIzorf/hAVrD1z8stElIFlJmsaic4aX0zP5+d0j88/siP mz/FIzVgsjKhuvStSf0cFcS46ALVTcz938l42DKPmQ0ExArnaMvQLXH9BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM0FkMEES+cygdKFxaq8RLXC8zP2MB8GA1UdIwQY MBaAFPQf/n0pfuTh1NIzNamrSgCIwCXXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUJfLWZTbC01T0hVMGpNMXFhdEtBSWpBSmRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zMTAzYTEtYmM1OC00NDRjLTgyMzEt NDNkOGE2ZmQxZjQ1LzEvOUJfLWZTbC01T0hVMGpNMXFhdEtBSWpBSmRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8zMTAzYTEtYmM1OC00NDRjLTgyMzEtNDNkOGE2ZmQxZjQ1 LzEvOUJfLWZTbC01T0hVMGpNMXFhdEtBSWpBSmRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZh1gJ6MY vJm/D36F+SErzAfsS2RNAbzLlrEeBWktoXeFmz1CRDU+DZVPGSy9vm/uuqHs7m6z 3m/z3ei0M6Ln/HsDQIlp7F5SqtwQj+DIjEtS0VSGLvestK4Ho9iZcqR7gEODRoQd COSspj6EbioYVC/Vgapd71MpZizhqPIZbOD1Rfh7N/1OT6xHajQ3mZIDqvc81lrS tm8ulcscoPybxqyDWPRCAYwIblA4cbi0f2nvLIHHxwC4aku1uvF9BvDP3mZvOcHg EnAPexlR8R5pYcXjL+MQRBjWGhzp/utV03IdF1kEKOrYcAFkQh7w6maWvJLyciNG ZiXYMCn23rpP+w== -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:32 2025 by rpki-client