This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft File: 9RNpzL-GsehOGutG5tM20591Kuc.mft (raw, json) Hash identifier: qE05Y+iSCZkRh1IDFg/MRUyOuhZiOvR105hxOaOqs4I= Subject key identifier: F4:5A:6C:B8:A5:9B:6B:FE:FB:03:B1:AE:6B:F9:53:39:37:28:53:15 Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Certificate serial: 019AF208DF6EC4AD08FCFEC38DF727E4B851 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft Manifest number: 17F5 Signing time: Sat 06 Dec 2025 05:00:58 +0000 Manifest this update: Sat 06 Dec 2025 05:00:58 +0000 Manifest next update: Sun 07 Dec 2025 05:00:58 +0000 Files and hashes: 1: 9RNpzL-GsehOGutG5tM20591Kuc.crl (hash: V9xxrl+BJklgZE7+y+qDlgwaAMIX2+Tj4Cm9/EWT00o=) 2: DSxMowOlSTC_MwVM7KlgQMPQNrE.roa (hash: nlhxWq37E/ratvBd5zCucB9L6gUR7nqV3LRV9tj9pbU=) 3: GnNRUTaHKbvwp7s1YiOty60yT_4.roa (hash: DPbHniq9Fo7ay7YRJ0huiIByC8Soz9pYUx8L6HOv9sQ=) 4: KnjyYVOU3YLigPxZRgN4AIoHUvQ.roa (hash: RKZNdSizbytDBkbsChEKMTDt0/k1bzP9vgLbksKhVuw=) 5: QNttCfsRuRLZvfJbkaOBCIPuwh0.roa (hash: JLiKXYuPVXcBLBoE9Kt2pa4tnI2ncSaE6qIZD2hxOms=) 6: eIGROqEP_UMAGqwd_UF27f4fmZI.roa (hash: PTOYqGwoLaRLkb7pZ9O+ROkYyxABiCDB4jwXpj+Fojw=) 7: iNeJPd86ukMD5LJRKI03IcI4aR8.roa (hash: zF30P8QynaOrv8qAmVAHNi6YCjV5/lmN6BVFSTJGcBU=) 8: rSXDYdDhtGY6mAhj2Yx5dAMm9XY.roa (hash: FCFQH85pPvPZL6nivkLqilRYIo7O5H0KAY3npTX/SAo=) 9: wEOyaII8ofTcxpdp7U0hKgvJ_rA.roa (hash: BzCbGCRxMuWWL0WJXC3qLwx7jLDACyNbgAFEvlAin18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:df:6e:c4:ad:08:fc:fe:c3:8d:f7:27:e4:b8:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Validity Not Before: Dec 6 05:00:58 2025 GMT Not After : Dec 7 05:00:58 2025 GMT Subject: CN=f45a6cb8a59b6bfefb03b1ae6bf9533937285315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:98:87:5f:74:88:75:36:22:21:ce:06:c3:83: b9:b1:c8:fc:93:b9:7d:96:91:a6:15:aa:03:da:7b: dc:b4:e0:d6:b2:07:01:ed:5a:f3:b3:72:58:b1:8e: f5:62:a9:f5:0b:48:b7:79:61:c6:3f:fa:ca:b7:ab: df:11:be:6e:f9:5b:fb:5b:01:24:bd:2f:1c:73:ff: 34:14:c3:1d:74:ca:48:53:1e:b0:6b:35:08:25:1f: 49:bc:89:c0:c2:1e:12:23:e4:c4:4e:e0:04:59:55: 61:74:37:37:0f:a4:2e:24:f8:75:e9:16:22:9f:90: 0a:e7:bd:96:8d:61:dd:a1:a9:55:e6:0a:8f:4a:86: 8d:3b:f0:89:03:22:06:39:9d:35:56:85:3d:2b:32: 4f:82:df:77:7c:05:39:fd:54:36:c3:10:11:59:72: e0:07:9b:ce:5c:e8:1c:e4:ff:68:f1:8a:da:80:35: 14:0a:d4:79:ae:d2:51:34:8c:12:52:2a:d7:4e:4c: 8b:a5:9d:5a:27:e1:b0:da:ce:a8:33:2b:b5:0d:7e: 24:c2:78:b1:70:81:b2:ac:34:51:49:a3:91:14:58: 8f:af:d4:41:cb:70:c8:48:43:9f:f3:8c:04:44:0d: 98:cf:7a:7e:d2:46:71:ad:cf:27:19:15:20:ce:ad: 52:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:5A:6C:B8:A5:9B:6B:FE:FB:03:B1:AE:6B:F9:53:39:37:28:53:15 X509v3 Authority Key Identifier: keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:63:0e:12:f5:52:2d:c9:97:f4:3f:39:f8:69:bc:eb:76:e0: b5:10:70:c1:b0:ef:01:4b:4a:b9:dd:08:cc:15:0d:29:70:dd: 70:54:5f:44:a8:14:94:8e:68:c8:bb:09:13:ae:34:9c:65:e1: 84:4f:70:89:ff:cb:4a:34:52:9c:f2:53:63:ca:79:67:0a:2d: ef:83:60:3f:c7:64:22:6a:4f:33:63:c8:2d:b4:15:91:3a:4b: fc:e3:d9:e6:37:08:d8:61:ab:a4:11:9a:06:53:9d:72:8b:b9: 55:e7:71:01:a5:b0:d3:86:e8:82:91:d7:5a:55:a0:90:f3:41: f5:26:d0:b9:3a:e4:f8:41:33:50:69:0a:69:b0:7e:d8:bd:38: 7f:f4:e5:28:56:a0:42:6f:61:a3:b3:34:17:be:da:12:18:cb: b7:3e:2b:2d:be:d0:4b:a0:3f:6e:25:eb:b1:8a:c0:6b:02:86: ce:51:04:4d:05:be:ac:1d:fb:f5:c1:5d:e3:55:b3:74:32:f8: a0:af:1a:ba:a7:1c:a2:e9:86:f9:51:19:99:c2:ce:e8:b3:ed: c9:a7:e2:02:5e:ed:17:71:b2:e5:32:98:f8:52:2e:9d:17:19: fc:b7:e3:c1:64:f6:bc:1b:55:8c:ba:5e:92:76:8f:78:aa:b6: 15:3a:83:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCN9uxK0I/P7Djfcn5LhRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3 NTJhZTcwHhcNMjUxMjA2MDUwMDU4WhcNMjUxMjA3MDUwMDU4WjAzMTEwLwYDVQQD EyhmNDVhNmNiOGE1OWI2YmZlZmIwM2IxYWU2YmY5NTMzOTM3Mjg1MzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5iHX3SIdTYiIc4Gw4O5scj8k7l9 lpGmFaoD2nvctODWsgcB7Vrzs3JYsY71Yqn1C0i3eWHGP/rKt6vfEb5u+Vv7WwEk vS8cc/80FMMddMpIUx6wazUIJR9JvInAwh4SI+TETuAEWVVhdDc3D6QuJPh16RYi n5AK572WjWHdoalV5gqPSoaNO/CJAyIGOZ01VoU9KzJPgt93fAU5/VQ2wxARWXLg B5vOXOgc5P9o8YragDUUCtR5rtJRNIwSUirXTkyLpZ1aJ+Gw2s6oMyu1DX4kwnix cIGyrDRRSaORFFiPr9RBy3DISEOf84wERA2Yz3p+0kZxrc8nGRUgzq1SEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRabLilm2v++wOxrmv5Uzk3KFMVMB8GA1UdIwQY MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt MmI5MjBiZGUzOTkwLzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzGMOEvVS LcmX9D85+Gm863bgtRBwwbDvAUtKud0IzBUNKXDdcFRfRKgUlI5oyLsJE640nGXh hE9wif/LSjRSnPJTY8p5Zwot74NgP8dkImpPM2PILbQVkTpL/OPZ5jcI2GGrpBGa BlOdcou5VedxAaWw04bogpHXWlWgkPNB9SbQuTrk+EEzUGkKabB+2L04f/TlKFag Qm9ho7M0F77aEhjLtz4rLb7QS6A/biXrsYrAawKGzlEETQW+rB379cFd41WzdDL4 oK8auqccoumG+VEZmcLO6LPtyafiAl7tF3Gy5TKY+FIunRcZ/LfjwWT2vBtVjLpe knaPeKq2FTqDfQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:23 2025 by rpki-client