This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft File: 9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft (raw, json) Hash identifier: H5B0mdjOnkODBllehazEEgyQ5dPKGmc/TPjArfCYEBY= Subject key identifier: 99:B9:80:28:E8:4F:FF:5B:37:0C:61:19:22:3D:98:9B:F5:00:DA:0D Authority key identifier: F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E Certificate issuer: /CN=f50e225bfb45218b997719804ea287f1751cf20e Certificate serial: 019AF1D2409A834C971ED269219CCFCE9ACF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 04:01:19 +0000 Manifest this update: Sat 06 Dec 2025 04:01:19 +0000 Manifest next update: Sun 07 Dec 2025 04:01:19 +0000 Files and hashes: 1: 9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl (hash: 6VVK0ZhwFQt96xkD9F6ldqZShsymPscKQx8CiWKtdw0=) 2: tCReBQEfist-xvNAig7wcNT_kFY.roa (hash: eAnNRfWeMAKf3K2opw1l/ihLmhFWT1Klsp1nr6sdAiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:40:9a:83:4c:97:1e:d2:69:21:9c:cf:ce:9a:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f50e225bfb45218b997719804ea287f1751cf20e Validity Not Before: Dec 6 04:01:19 2025 GMT Not After : Dec 7 04:01:19 2025 GMT Subject: CN=99b98028e84fff5b370c6119223d989bf500da0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b9:8b:e8:37:ce:a2:ce:a6:7a:59:1a:af:b9: 3b:51:dc:06:c2:55:28:6f:ff:02:aa:39:76:42:53: 73:06:0f:51:53:08:52:50:31:ea:d5:ee:e8:98:2f: b1:d3:83:68:89:6a:b5:29:4f:0d:ef:05:62:ec:24: af:86:3a:bb:3f:96:9f:3d:3b:7c:56:6e:bb:93:00: 4a:76:97:49:7f:34:28:b9:f8:e0:62:8d:dc:bb:d5: 03:33:79:b9:cc:90:2c:c9:57:37:ab:4e:42:d8:35: 28:a8:bc:a6:5c:7b:4d:92:b9:bf:14:93:43:8d:b1: 94:01:6d:bc:76:ad:74:d6:e2:eb:ee:b9:e3:f3:ae: d2:72:7f:4d:09:c4:08:ed:d6:27:6b:26:e3:fb:dd: fa:d9:f2:c6:bb:6a:45:4b:de:2d:1e:24:be:47:38: a8:2e:8d:00:96:f2:af:18:e8:6b:54:e4:f3:b4:1d: e6:f9:39:61:17:86:6d:c5:1a:a4:5e:10:9c:01:95: 53:47:84:7d:25:37:20:f8:bf:56:ed:87:ff:9b:9e: fd:7a:dd:ff:f9:6c:54:80:95:ac:ca:c8:fd:f2:fa: 58:e4:55:35:22:11:f3:98:21:f6:27:d6:91:41:94: 4a:b5:d0:e5:e5:aa:b5:ed:ed:79:79:6c:2d:9a:d1: 16:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B9:80:28:E8:4F:FF:5B:37:0C:61:19:22:3D:98:9B:F5:00:DA:0D X509v3 Authority Key Identifier: keyid:F5:0E:22:5B:FB:45:21:8B:99:77:19:80:4E:A2:87:F1:75:1C:F2:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Q4iW_tFIYuZdxmATqKH8XUc8g4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/172310-3cb0-4bb0-91ae-4462a126d07d/1/9Q4iW_tFIYuZdxmATqKH8XUc8g4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:59:f4:71:f5:32:f1:a7:5d:e3:55:66:4d:38:e0:72:bf:15: 5d:ce:a4:40:be:3b:12:76:a4:33:c5:ee:69:28:8c:84:c5:fe: 5e:51:04:43:45:11:b4:a2:a4:d0:59:a5:e3:c8:15:c7:67:2e: 55:3a:5a:2f:eb:97:cd:94:76:63:11:ce:4e:d7:d4:73:5e:d8: 39:1f:b4:fe:98:dd:5b:1a:2e:cf:5c:c7:8f:f0:fa:fb:7d:d5: 73:3a:3d:bf:2c:d0:fd:a0:af:92:1c:5e:2b:f3:f6:82:6a:c4: 51:bd:53:a5:ad:43:d9:fb:44:1c:8f:66:d5:39:89:87:6c:13: 39:70:31:f6:50:31:88:a5:62:08:7e:aa:66:e3:47:06:83:0c: df:c3:fd:9d:de:d2:f5:62:97:13:7b:00:fb:96:11:26:2c:16: c2:63:18:ce:76:6a:56:55:2f:da:0a:ec:53:65:ba:98:1e:35: 14:af:66:75:c7:ae:7e:b2:e5:7e:f8:00:d9:d2:27:3f:a8:e0: 16:51:ef:96:de:34:b5:14:81:a8:a2:64:8b:b8:b7:b2:d3:6e: 3c:2a:19:c8:25:d6:e8:bf:cf:4d:a0:e5:33:e5:58:bb:ee:85: 27:9b:fe:6d:a3:ac:85:b9:f9:ac:4e:66:73:da:54:7d:34:6f: ba:f8:7e:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kCag0yXHtJpIZzPzprPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MGUyMjViZmI0NTIxOGI5OTc3MTk4MDRlYTI4N2YxNzUx Y2YyMGUwHhcNMjUxMjA2MDQwMTE5WhcNMjUxMjA3MDQwMTE5WjAzMTEwLwYDVQQD Eyg5OWI5ODAyOGU4NGZmZjViMzcwYzYxMTkyMjNkOTg5YmY1MDBkYTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLmL6DfOos6melkar7k7UdwGwlUo b/8Cqjl2QlNzBg9RUwhSUDHq1e7omC+x04NoiWq1KU8N7wVi7CSvhjq7P5afPTt8 Vm67kwBKdpdJfzQoufjgYo3cu9UDM3m5zJAsyVc3q05C2DUoqLymXHtNkrm/FJND jbGUAW28dq101uLr7rnj867Scn9NCcQI7dYnaybj+9362fLGu2pFS94tHiS+Rzio Lo0AlvKvGOhrVOTztB3m+TlhF4ZtxRqkXhCcAZVTR4R9JTcg+L9W7Yf/m579et3/ +WxUgJWsysj98vpY5FU1IhHzmCH2J9aRQZRKtdDl5aq17e15eWwtmtEWJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJm5gCjoT/9bNwxhGSI9mJv1ANoNMB8GA1UdIwQY MBaAFPUOIlv7RSGLmXcZgE6ih/F1HPIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVE0aVdfdEZJWXVaZHhtQVRxS0g4WFVjOGc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8xNzIzMTAtM2NiMC00YmIwLTkxYWUt NDQ2MmExMjZkMDdkLzEvOVE0aVdfdEZJWXVaZHhtQVRxS0g4WFVjOGc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS8xNzIzMTAtM2NiMC00YmIwLTkxYWUtNDQ2MmExMjZkMDdk LzEvOVE0aVdfdEZJWXVaZHhtQVRxS0g4WFVjOGc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1n0cfUy 8add41VmTTjgcr8VXc6kQL47EnakM8XuaSiMhMX+XlEEQ0URtKKk0Fml48gVx2cu VTpaL+uXzZR2YxHOTtfUc17YOR+0/pjdWxouz1zHj/D6+33Vczo9vyzQ/aCvkhxe K/P2gmrEUb1Tpa1D2ftEHI9m1TmJh2wTOXAx9lAxiKViCH6qZuNHBoMM38P9nd7S 9WKXE3sA+5YRJiwWwmMYznZqVlUv2grsU2W6mB41FK9mdceufrLlfvgA2dInP6jg FlHvlt40tRSBqKJki7i3stNuPCoZyCXW6L/PTaDlM+VYu+6FJ5v+baOshbn5rE5m c9pUfTRvuvh+TQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:57 2025 by rpki-client