This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft File: 9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft (raw, json) Hash identifier: BytU2hyADewCE7IPWrYUEfllm66g8CrQi9lI9MsAVIQ= Subject key identifier: 17:C9:FD:EA:63:17:37:80:64:08:4C:A1:01:3E:84:0F:93:69:FD:B4 Authority key identifier: F5:D4:12:95:3A:C0:6A:7C:52:CB:26:79:6F:88:06:B1:BB:85:96:17 Certificate issuer: /CN=f5d412953ac06a7c52cb26796f8806b1bb859617 Certificate serial: 019AF31CD45A5306024C87A4E3D1168A4A39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 10:02:24 +0000 Manifest this update: Sat 06 Dec 2025 10:02:24 +0000 Manifest next update: Sun 07 Dec 2025 10:02:24 +0000 Files and hashes: 1: 9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl (hash: 3myP+nswypitl1HCXMn0dcoQIVh63TyRszviHyU2V/8=) 2: iZXergsmx3c-YFSPwK1duaC7zXE.roa (hash: ux75uK3r8KWiMZRMZNyHuR7X45YAulKv87yeHOUi7Zc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:d4:5a:53:06:02:4c:87:a4:e3:d1:16:8a:4a:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5d412953ac06a7c52cb26796f8806b1bb859617 Validity Not Before: Dec 6 10:02:24 2025 GMT Not After : Dec 7 10:02:24 2025 GMT Subject: CN=17c9fdea6317378064084ca1013e840f9369fdb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f7:3a:04:65:55:56:d6:84:5e:df:e4:7a:7e: ed:85:5a:c9:ec:3e:da:36:9a:b3:d0:16:c2:3d:34: c7:38:fa:f0:9c:46:42:f6:f9:d4:1f:ca:23:ce:03: e0:40:ee:5a:58:27:5f:b7:63:d4:fb:9c:7b:b3:e2: 5f:e3:3e:c5:c0:d4:4e:81:23:0e:dc:8b:24:c2:ff: 96:f0:78:96:7a:90:4b:7d:f4:ab:4e:c1:2b:ab:55: cb:92:d6:46:ed:2e:23:f3:db:ca:70:d8:16:6c:ef: a3:6c:d9:82:af:67:cc:4e:7c:f5:46:a0:70:4b:a2: f7:15:18:f7:fe:65:e3:f8:f2:c8:08:72:a5:00:8e: 7b:d4:93:b4:fd:88:f2:a4:c8:c1:a1:0e:cb:2d:b8: c2:fb:f5:fd:17:76:20:98:30:69:41:eb:78:21:35: 80:d2:e7:20:d2:9b:3c:dc:f8:a0:4d:01:2f:42:d2: d7:45:bb:4f:21:4f:67:4f:a6:c7:23:29:d0:50:65: e4:38:fa:ea:1d:a0:4b:9c:ee:b8:78:12:2b:b0:02: a5:6d:5d:7a:28:47:7b:01:17:88:ee:34:7a:cb:b7: e2:64:c9:a5:80:2a:18:7c:1e:7a:7f:99:05:2e:99: 6f:cc:3e:62:17:6f:67:ea:5e:ee:7c:7f:32:0d:eb: a5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C9:FD:EA:63:17:37:80:64:08:4C:A1:01:3E:84:0F:93:69:FD:B4 X509v3 Authority Key Identifier: keyid:F5:D4:12:95:3A:C0:6A:7C:52:CB:26:79:6F:88:06:B1:BB:85:96:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:66:df:c4:23:22:ba:e6:b1:37:eb:b3:91:3e:1d:8b:78:fc: 68:c9:6c:ca:5a:8c:0a:1e:69:12:f6:6a:de:2e:1d:28:b3:ab: 53:9f:d8:2f:59:84:a8:2b:98:b1:ab:bd:28:b0:48:8a:be:1d: 03:11:0c:9e:87:10:33:79:32:74:43:4b:d0:9b:45:9c:66:0e: d8:12:05:58:a5:60:a7:a1:06:f2:e5:aa:f7:e6:79:a3:81:a3: 97:7d:76:84:f4:c0:1d:9b:12:ad:77:41:73:0d:88:1f:19:6e: 83:f0:d4:4e:82:99:28:28:3a:b5:47:3d:f4:10:ef:9e:1b:ba: ec:62:34:b2:98:f6:c7:5e:8b:0d:fb:28:a8:42:8e:f6:5b:dc: 9c:19:94:ab:b2:be:27:d9:98:25:12:c1:b4:28:6d:5a:fe:87: 2b:44:c5:02:f5:68:59:a3:4c:f4:7a:e1:4e:2c:17:81:97:4b: a5:ba:02:7d:ae:46:4a:1e:0e:fb:9f:ef:da:13:7c:ae:50:df: 0c:2e:7f:0b:a0:9d:1d:f9:5c:e8:16:64:e4:a7:2c:13:e3:dd: 27:17:6a:19:80:98:03:6d:27:59:00:08:f8:54:db:10:ff:62: 67:6b:13:1a:ad:e7:63:e6:2c:e9:d5:64:98:c7:e0:02:4f:15: d6:5c:76:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHNRaUwYCTIek49EWiko5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZDQxMjk1M2FjMDZhN2M1MmNiMjY3OTZmODgwNmIxYmI4 NTk2MTcwHhcNMjUxMjA2MTAwMjI0WhcNMjUxMjA3MTAwMjI0WjAzMTEwLwYDVQQD EygxN2M5ZmRlYTYzMTczNzgwNjQwODRjYTEwMTNlODQwZjkzNjlmZGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/c6BGVVVtaEXt/ken7thVrJ7D7a Npqz0BbCPTTHOPrwnEZC9vnUH8ojzgPgQO5aWCdft2PU+5x7s+Jf4z7FwNROgSMO 3Iskwv+W8HiWepBLffSrTsErq1XLktZG7S4j89vKcNgWbO+jbNmCr2fMTnz1RqBw S6L3FRj3/mXj+PLICHKlAI571JO0/YjypMjBoQ7LLbjC+/X9F3YgmDBpQet4ITWA 0ucg0ps83PigTQEvQtLXRbtPIU9nT6bHIynQUGXkOPrqHaBLnO64eBIrsAKlbV16 KEd7AReI7jR6y7fiZMmlgCoYfB56f5kFLplvzD5iF29n6l7ufH8yDeulxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfJ/epjFzeAZAhMoQE+hA+Taf20MB8GA1UdIwQY MBaAFPXUEpU6wGp8UssmeW+IBrG7hZYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWRRU2xUckFhbnhTeXlaNWI0Z0dzYnVGbGhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kOGU2NGQtOWQ2Yy00MTQ5LWE2OWEt NzlkNTJkYzY2OTI2LzEvOWRRU2xUckFhbnhTeXlaNWI0Z0dzYnVGbGhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9kOGU2NGQtOWQ2Yy00MTQ5LWE2OWEtNzlkNTJkYzY2OTI2 LzEvOWRRU2xUckFhbnhTeXlaNWI0Z0dzYnVGbGhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2bfxCMi uuaxN+uzkT4di3j8aMlsylqMCh5pEvZq3i4dKLOrU5/YL1mEqCuYsau9KLBIir4d AxEMnocQM3kydENL0JtFnGYO2BIFWKVgp6EG8uWq9+Z5o4Gjl312hPTAHZsSrXdB cw2IHxlug/DUToKZKCg6tUc99BDvnhu67GI0spj2x16LDfsoqEKO9lvcnBmUq7K+ J9mYJRLBtChtWv6HK0TFAvVoWaNM9HrhTiwXgZdLpboCfa5GSh4O+5/v2hN8rlDf DC5/C6CdHflc6BZk5KcsE+PdJxdqGYCYA20nWQAI+FTbEP9iZ2sTGq3nY+Ys6dVk mMfgAk8V1lx2FQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:01:12 2025 by rpki-client