This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft File: 9fgHODUdz8da-ZaZOikpw3E0ogg.mft (raw, json) Hash identifier: 3np019OEn/qMYR3385ziXZYlQdP65J+Ypi8K+8MokFg= Subject key identifier: EF:7A:87:5E:75:B0:74:E2:AA:72:E6:1E:1F:A6:F1:B8:17:AC:B8:95 Authority key identifier: F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08 Certificate issuer: /CN=f5f80738351dcfc75af996993a2929c37134a208 Certificate serial: 019B21E316F12C29964AEDB1A2C3FE7DB300 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft Manifest number: 1174 Signing time: Mon 15 Dec 2025 12:01:29 +0000 Manifest this update: Mon 15 Dec 2025 12:01:29 +0000 Manifest next update: Tue 16 Dec 2025 12:01:29 +0000 Files and hashes: 1: 2Qdf3KbNG5NqoZJX8HW2axOKIks.roa (hash: aZGBYQ1YtddzlVOGQVr+1nQgozPaUhvPhqEz391ISKs=) 2: 9fgHODUdz8da-ZaZOikpw3E0ogg.crl (hash: D8Rc2pj4/nvjFrj6gZmyyvJqS5J8N292xjKF8RPVKfk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e3:16:f1:2c:29:96:4a:ed:b1:a2:c3:fe:7d:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f80738351dcfc75af996993a2929c37134a208 Validity Not Before: Dec 15 12:01:29 2025 GMT Not After : Dec 16 12:01:29 2025 GMT Subject: CN=ef7a875e75b074e2aa72e61e1fa6f1b817acb895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:22:ea:8e:04:24:1a:91:cc:6b:b2:ec:be:42: cd:68:9b:ac:70:14:b1:0d:fa:9a:11:02:fb:05:67: 4a:c1:77:cf:28:7c:a9:cd:5d:fa:25:cf:15:01:d6: 17:05:a1:84:07:13:cc:1f:63:0d:bc:c4:33:04:9f: 82:22:57:56:27:f7:ae:ba:77:06:f3:8b:98:e8:dc: 9c:37:4c:32:3d:2b:2f:2d:92:12:ee:a1:b5:f0:fb: e9:25:15:f9:2e:9b:f7:70:08:98:0a:c7:76:71:ee: 13:2d:51:d5:fb:18:9c:69:78:40:7d:d9:fe:a6:54: d2:f8:9b:3f:a1:f7:b0:92:79:10:73:ba:69:b5:55: a8:2f:79:fa:00:19:e2:b8:cd:0f:0d:44:df:e0:b9: 89:6e:6a:19:b9:dc:38:58:28:74:0e:6a:93:f1:dd: 4d:ba:7e:0f:61:22:20:46:1a:3d:c9:be:b0:fe:c2: 4b:63:39:10:1d:c1:7c:ad:b4:e2:f7:23:66:ac:14: 59:93:5f:db:59:35:3b:06:f0:c1:e8:ec:3f:2c:ea: d4:ef:c6:fb:67:47:0a:14:94:22:3c:15:c3:df:94: 07:18:43:3e:7c:87:f5:f1:09:c8:5c:97:74:fd:cf: 2d:54:29:50:a3:f4:b8:86:37:86:a7:40:81:55:ae: df:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:7A:87:5E:75:B0:74:E2:AA:72:E6:1E:1F:A6:F1:B8:17:AC:B8:95 X509v3 Authority Key Identifier: keyid:F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:cc:5d:21:2b:dd:0a:f4:71:ff:e2:52:a9:d6:d0:1a:4d:46: b7:07:26:22:0b:58:45:81:bb:59:6e:01:d3:6d:38:96:2e:2e: e0:8f:a7:3a:39:30:c6:01:09:e6:40:00:ad:0b:65:31:8d:76: 8f:4f:11:b1:67:50:d1:a1:cb:09:c8:66:c6:be:87:ec:51:f4: 70:6d:31:e4:ca:56:23:c3:79:8e:6b:ff:b3:a9:de:16:2f:28: 35:73:44:5e:c4:11:4a:ec:be:0c:2f:f0:db:cf:79:72:35:ff: d4:cf:1f:70:34:e5:d4:18:bb:b0:07:a4:d5:de:19:18:13:d8: 49:5b:57:83:8c:49:3d:1c:f5:3a:a0:f9:53:79:c7:cf:08:0a: 79:9d:65:27:65:2b:39:0f:42:05:08:6d:43:82:31:85:2a:d0: c4:63:28:89:b0:6b:d4:19:27:fe:f3:c6:3c:bd:19:6d:8a:77: 5e:f9:5b:04:d1:58:f6:c6:fc:a1:bc:b4:35:9e:b3:36:5f:9b: 2a:c9:02:50:f6:85:10:2d:eb:01:fc:72:64:c0:e7:e7:e2:f0: 2b:6b:12:a4:62:ff:b2:a6:56:7d:3f:c5:f1:c4:95:da:54:08: 2e:22:ac:89:14:5d:fb:ef:d8:07:18:f9:1c:5b:33:f7:7b:fe: 8c:a1:de:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4xbxLCmWSu2xosP+fbMAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZjgwNzM4MzUxZGNmYzc1YWY5OTY5OTNhMjkyOWMzNzEz NGEyMDgwHhcNMjUxMjE1MTIwMTI5WhcNMjUxMjE2MTIwMTI5WjAzMTEwLwYDVQQD EyhlZjdhODc1ZTc1YjA3NGUyYWE3MmU2MWUxZmE2ZjFiODE3YWNiODk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCLqjgQkGpHMa7LsvkLNaJuscBSx DfqaEQL7BWdKwXfPKHypzV36Jc8VAdYXBaGEBxPMH2MNvMQzBJ+CIldWJ/euuncG 84uY6NycN0wyPSsvLZIS7qG18PvpJRX5Lpv3cAiYCsd2ce4TLVHV+xicaXhAfdn+ plTS+Js/ofewknkQc7pptVWoL3n6ABniuM0PDUTf4LmJbmoZudw4WCh0DmqT8d1N un4PYSIgRho9yb6w/sJLYzkQHcF8rbTi9yNmrBRZk1/bWTU7BvDB6Ow/LOrU78b7 Z0cKFJQiPBXD35QHGEM+fIf18QnIXJd0/c8tVClQo/S4hjeGp0CBVa7fTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO96h151sHTiqnLmHh+m8bgXrLiVMB8GA1UdIwQY MBaAFPX4Bzg1Hc/HWvmWmTopKcNxNKIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZnSE9EVWR6OGRhLVphWk9pa3B3M0Uwb2dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9hNGQzNzgtNDg1Yy00YjUxLWE3MjYt ZWE4NDExZDU3MmFlLzEvOWZnSE9EVWR6OGRhLVphWk9pa3B3M0Uwb2dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9hNGQzNzgtNDg1Yy00YjUxLWE3MjYtZWE4NDExZDU3MmFl LzEvOWZnSE9EVWR6OGRhLVphWk9pa3B3M0Uwb2dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgsxdISvd CvRx/+JSqdbQGk1GtwcmIgtYRYG7WW4B0204li4u4I+nOjkwxgEJ5kAArQtlMY12 j08RsWdQ0aHLCchmxr6H7FH0cG0x5MpWI8N5jmv/s6neFi8oNXNEXsQRSuy+DC/w 2895cjX/1M8fcDTl1Bi7sAek1d4ZGBPYSVtXg4xJPRz1OqD5U3nHzwgKeZ1lJ2Ur OQ9CBQhtQ4IxhSrQxGMoibBr1Bkn/vPGPL0ZbYp3XvlbBNFY9sb8oby0NZ6zNl+b KskCUPaFEC3rAfxyZMDn5+LwK2sSpGL/sqZWfT/F8cSV2lQILiKsiRRd++/YBxj5 HFsz93v+jKHebw== -----END CERTIFICATE-----Generated at Mon Dec 15 20:00:18 2025 by rpki-client