This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft File: 9aKRIk-CvG0mtRntevviXLMsEVw.mft (raw, json) Hash identifier: 88LcNI2o4wf1VhtVNI73TqLw7BhD9Vgv02bk1O+GRww= Subject key identifier: 7C:C3:91:E2:C1:DF:3E:A0:B8:55:6F:C2:40:79:90:0F:1A:83:C0:AE Authority key identifier: F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C Certificate issuer: /CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c Certificate serial: 019AF1D23A5A6835B1D0D96DE14D9EF237D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft Manifest number: 0C32 Signing time: Sat 06 Dec 2025 04:01:17 +0000 Manifest this update: Sat 06 Dec 2025 04:01:17 +0000 Manifest next update: Sun 07 Dec 2025 04:01:17 +0000 Files and hashes: 1: 9aKRIk-CvG0mtRntevviXLMsEVw.crl (hash: 4qYAkD3Ox7aWSXRRoxEehNb+K6qqPyT9UZvYfUK+IUk=) 2: TvqtU6kGEWNG1Cpdb9p7065y7Us.roa (hash: feIhe0HlEu5dhdmycewb1eBF/nryf3+/l635UbwMTEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:3a:5a:68:35:b1:d0:d9:6d:e1:4d:9e:f2:37:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c Validity Not Before: Dec 6 04:01:17 2025 GMT Not After : Dec 7 04:01:17 2025 GMT Subject: CN=7cc391e2c1df3ea0b8556fc24079900f1a83c0ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:65:cd:37:4c:2d:d8:82:45:8c:69:71:42:a8: 72:34:b4:9f:54:db:93:aa:94:b0:9c:05:78:90:52: 35:e8:10:d9:84:ce:d8:9d:73:b5:c0:f9:bd:bc:54: cf:34:6f:fa:8c:f4:5e:25:35:a8:cd:f6:4a:0c:20: 5f:b7:6b:44:64:f5:66:09:a8:df:2f:c4:aa:ce:0c: a2:b3:28:75:b0:4c:92:0a:a2:b4:9a:9b:27:77:f2: 51:cd:c6:57:7c:d6:f7:ea:86:97:e6:72:04:ab:2c: ce:66:a0:86:cc:2e:ab:d8:e4:71:27:69:b6:df:5a: f1:e8:0e:8d:fc:3a:97:be:36:70:4e:c3:1e:ca:1b: 47:31:56:e2:85:63:7d:de:a2:b1:ef:b4:43:e7:60: 58:ff:49:d7:8f:62:ba:a5:da:c4:ef:c3:19:f4:17: b9:94:0c:a9:c2:37:57:a3:91:2f:8b:a4:5f:17:c1: 26:9f:c6:a1:d6:3c:28:e0:b3:0c:c4:35:53:76:e3: a2:7e:a0:ad:fd:87:2a:4f:09:99:ca:98:0c:11:c5: 4b:31:e7:15:d6:5b:73:97:5b:57:c1:0b:d4:67:ce: 14:75:36:ed:f9:c7:f9:7d:39:26:5e:81:85:84:fa: 43:b8:30:1a:2e:5a:cf:5e:c3:d6:86:c6:8a:27:25: 8d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C3:91:E2:C1:DF:3E:A0:B8:55:6F:C2:40:79:90:0F:1A:83:C0:AE X509v3 Authority Key Identifier: keyid:F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:db:38:a0:84:e6:db:14:a0:cf:85:15:06:1c:99:82:57:5e: 15:dd:5b:ac:f7:60:ea:78:c2:ea:e6:ca:f8:03:6f:71:b4:b3: ae:9b:98:5d:b3:43:a4:e3:5b:80:40:de:b1:1a:4b:94:92:e6: 08:2b:bf:f5:47:fa:38:16:3c:bd:c2:92:8b:0f:3c:e2:bb:f9: fa:1f:c9:4a:07:09:ab:14:99:58:c7:5c:94:88:97:07:93:c3: f8:44:ed:5d:7d:76:e7:0a:6f:30:cd:f3:a4:47:3f:04:33:d1: 09:85:b4:d5:46:e0:77:57:75:8f:78:e2:f5:64:9c:e4:fa:e0: e5:58:d3:0d:c6:4a:66:10:8f:8a:63:31:ca:c8:bc:1e:5e:68: 64:7b:c0:28:4d:68:ae:ed:8f:a9:6e:73:92:da:f3:b0:d7:20: 1a:10:71:00:c6:98:ac:96:c5:8b:14:0e:1b:4b:9f:1a:7c:bf: f3:2b:af:ab:e2:5a:51:f4:b6:7d:4b:31:79:fa:c8:95:2d:74: 2c:02:e7:d6:89:10:a4:30:7a:7b:de:07:a5:a2:2b:df:55:c2: cf:25:64:4f:c5:f7:d1:6a:b7:15:b9:79:ea:a6:ca:fe:28:87: 6c:3b:1f:8d:a7:c5:5c:04:2d:23:81:d0:f7:80:3d:ec:66:7b: ff:cc:a5:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jpaaDWx0Nlt4U2e8jfTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1YTI5MTIyNGY4MmJjNmQyNmI1MTllZDdhZmJlMjVjYjMy YzExNWMwHhcNMjUxMjA2MDQwMTE3WhcNMjUxMjA3MDQwMTE3WjAzMTEwLwYDVQQD Eyg3Y2MzOTFlMmMxZGYzZWEwYjg1NTZmYzI0MDc5OTAwZjFhODNjMGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WXNN0wt2IJFjGlxQqhyNLSfVNuT qpSwnAV4kFI16BDZhM7YnXO1wPm9vFTPNG/6jPReJTWozfZKDCBft2tEZPVmCajf L8Sqzgyisyh1sEySCqK0mpsnd/JRzcZXfNb36oaX5nIEqyzOZqCGzC6r2ORxJ2m2 31rx6A6N/DqXvjZwTsMeyhtHMVbihWN93qKx77RD52BY/0nXj2K6pdrE78MZ9Be5 lAypwjdXo5Evi6RfF8Emn8ah1jwo4LMMxDVTduOifqCt/YcqTwmZypgMEcVLMecV 1ltzl1tXwQvUZ84UdTbt+cf5fTkmXoGFhPpDuDAaLlrPXsPWhsaKJyWNPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzDkeLB3z6guFVvwkB5kA8ag8CuMB8GA1UdIwQY MBaAFPWikSJPgrxtJrUZ7Xr74lyzLBFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWFLUklrLUN2RzBtdFJudGV2dmlYTE1zRVZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC84YTVjYzItYzU0Mi00YzliLTgwNzct YmM3OTc3Mzk2ZDliLzEvOWFLUklrLUN2RzBtdFJudGV2dmlYTE1zRVZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC84YTVjYzItYzU0Mi00YzliLTgwNzctYmM3OTc3Mzk2ZDli LzEvOWFLUklrLUN2RzBtdFJudGV2dmlYTE1zRVZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYds4oITm 2xSgz4UVBhyZgldeFd1brPdg6njC6ubK+ANvcbSzrpuYXbNDpONbgEDesRpLlJLm CCu/9Uf6OBY8vcKSiw884rv5+h/JSgcJqxSZWMdclIiXB5PD+ETtXX125wpvMM3z pEc/BDPRCYW01Ubgd1d1j3ji9WSc5Prg5VjTDcZKZhCPimMxysi8Hl5oZHvAKE1o ru2PqW5zktrzsNcgGhBxAMaYrJbFixQOG0ufGny/8yuvq+JaUfS2fUsxefrIlS10 LALn1okQpDB6e94HpaIr31XCzyVkT8X30Wq3Fbl56qbK/iiHbDsfjafFXAQtI4HQ 94A97GZ7/8ylyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:56 2025 by rpki-client