This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft File: l9I64ozYYMjt_WGDVvizH15NySg.mft (raw, json) Hash identifier: yZu25G5EVOCA92Xt/E5Dq6O1LAOJPMnnIpu4xQl7pRQ= Subject key identifier: 53:3F:51:9F:78:9D:00:48:84:9E:28:30:05:0C:EC:F0:A6:8C:0C:CE Authority key identifier: 97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28 Certificate issuer: /CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928 Certificate serial: 019AF209C26B4D941DFB0A5C5D3D71B94898 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft Manifest number: 0A71 Signing time: Sat 06 Dec 2025 05:01:57 +0000 Manifest this update: Sat 06 Dec 2025 05:01:57 +0000 Manifest next update: Sun 07 Dec 2025 05:01:57 +0000 Files and hashes: 1: QZlBG2kRh6vni73fkptkgN279c4.roa (hash: XJG4jHJv96gh6e1pmElIHEBthdc/xrtURDP4u20xHEU=) 2: jODSDZiB_9CDcQXiT4tsxNlR8Ac.roa (hash: JEMeTXjwzca2z04dyMlf/bVf4aF3EAXQNY7E1cjOdx4=) 3: l9I64ozYYMjt_WGDVvizH15NySg.crl (hash: 0OwcliJsw+/UvVakLGNPu0NB+Luvt832y/F9Yj7S8K4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:c2:6b:4d:94:1d:fb:0a:5c:5d:3d:71:b9:48:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928 Validity Not Before: Dec 6 05:01:57 2025 GMT Not After : Dec 7 05:01:57 2025 GMT Subject: CN=533f519f789d0048849e2830050cecf0a68c0cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:68:38:34:ed:70:2c:1e:54:9c:d4:21:ce:d8: 53:51:37:e3:a1:81:43:53:3f:9d:e2:40:5a:5a:74: 26:5b:9a:be:1d:94:60:a8:f8:25:d7:d5:d5:61:67: c7:fa:ef:a0:ee:2e:68:d0:ef:75:52:8b:bb:6d:46: f2:5a:7b:a4:4f:15:8a:87:ad:59:15:0b:11:0a:f8: 54:20:01:ef:c1:13:02:a7:13:79:b5:1f:74:98:3f: 8f:dd:8a:3b:94:b3:a8:14:1c:1a:8a:e6:dd:f6:f3: 0b:ba:86:0d:53:74:6d:cf:6f:8f:bc:08:44:4c:86: 9b:bc:b1:cb:30:ae:3d:5c:2b:39:a4:c5:fc:7a:56: cb:10:2d:7d:69:16:31:7a:ee:dc:ba:30:94:cc:8b: 4b:63:1a:47:1d:ab:c2:0e:a0:5d:4d:42:e5:98:69: fd:c9:b7:02:77:39:80:cb:0c:d2:c8:5e:e4:37:c2: 36:c8:7c:0f:58:96:e4:b6:8b:f7:8a:cd:24:04:dc: 77:7d:e4:53:66:59:85:37:97:8f:ec:9c:fc:24:ce: 2d:10:e2:f6:b0:b0:05:21:74:a3:47:4f:11:85:92: 32:81:be:f8:4e:0f:55:ca:94:5c:13:8b:69:53:37: 25:97:f1:fe:8c:67:dc:0f:18:c8:fd:50:23:a6:64: 86:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:3F:51:9F:78:9D:00:48:84:9E:28:30:05:0C:EC:F0:A6:8C:0C:CE X509v3 Authority Key Identifier: keyid:97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:94:12:bc:8b:5e:10:42:30:40:26:8b:d0:7c:9a:10:4d:cc: e2:e8:47:d8:6d:89:a7:f7:0f:42:b6:e1:d6:38:89:56:3a:a8: af:5e:57:56:0e:10:c6:9d:b6:5c:dd:e4:df:cf:01:a9:77:1c: 1e:61:9c:d4:39:81:fe:dd:d8:83:46:5b:46:ea:be:c5:5b:b2: 17:2d:55:68:46:a8:eb:ee:f3:c8:47:6b:31:29:bf:34:0d:51: 02:5d:6d:32:d4:4f:8e:f5:70:e9:d8:ea:8f:b2:d5:15:88:7b: e7:3c:cf:52:4e:6c:ca:6c:44:fc:ce:ff:74:ac:84:1b:87:03: 6e:9a:04:ca:e6:01:89:da:b9:28:33:1d:09:dd:bc:4e:7c:e8: df:db:24:dc:23:fe:ae:7a:eb:8c:ea:6b:7c:74:bd:9c:76:0a: b0:07:72:14:8f:fe:ec:e8:14:03:a7:fd:0d:a7:bb:79:04:70: 49:39:d7:50:76:be:0a:07:8d:7d:c5:85:54:96:51:0f:7f:d7: aa:7e:16:04:e8:18:af:7b:70:8f:3e:16:d0:88:42:d8:85:78: b7:50:3f:13:a9:19:0a:83:af:1a:88:0d:a4:27:ea:eb:65:1a: b4:97:b8:6e:31:a6:34:4c:47:41:4e:21:41:e6:38:b1:e7:56: 84:03:2b:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCcJrTZQd+wpcXT1xuUiYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZDIzYWUyOGNkODYwYzhlZGZkNjE4MzU2ZjhiMzFmNWU0 ZGM5MjgwHhcNMjUxMjA2MDUwMTU3WhcNMjUxMjA3MDUwMTU3WjAzMTEwLwYDVQQD Eyg1MzNmNTE5Zjc4OWQwMDQ4ODQ5ZTI4MzAwNTBjZWNmMGE2OGMwY2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWg4NO1wLB5UnNQhzthTUTfjoYFD Uz+d4kBaWnQmW5q+HZRgqPgl19XVYWfH+u+g7i5o0O91Uou7bUbyWnukTxWKh61Z FQsRCvhUIAHvwRMCpxN5tR90mD+P3Yo7lLOoFBwaiubd9vMLuoYNU3Rtz2+PvAhE TIabvLHLMK49XCs5pMX8elbLEC19aRYxeu7cujCUzItLYxpHHavCDqBdTULlmGn9 ybcCdzmAywzSyF7kN8I2yHwPWJbktov3is0kBNx3feRTZlmFN5eP7Jz8JM4tEOL2 sLAFIXSjR08RhZIygb74Tg9VypRcE4tpUzcll/H+jGfcDxjI/VAjpmSGWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFM/UZ94nQBIhJ4oMAUM7PCmjAzOMB8GA1UdIwQY MBaAFJfSOuKM2GDI7f1hg1b4sx9eTckoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9jYTY0MWYtZGIzYS00ZjY0LWEyNWIt Y2ZhNmE5MTQ4MWUyLzEvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9jYTY0MWYtZGIzYS00ZjY0LWEyNWItY2ZhNmE5MTQ4MWUy LzEvbDlJNjRvellZTWp0X1dHRFZ2aXpIMTVOeVNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe5QSvIte EEIwQCaL0HyaEE3M4uhH2G2Jp/cPQrbh1jiJVjqor15XVg4Qxp22XN3k388BqXcc HmGc1DmB/t3Yg0ZbRuq+xVuyFy1VaEao6+7zyEdrMSm/NA1RAl1tMtRPjvVw6djq j7LVFYh75zzPUk5symxE/M7/dKyEG4cDbpoEyuYBidq5KDMdCd28Tnzo39sk3CP+ rnrrjOprfHS9nHYKsAdyFI/+7OgUA6f9Dae7eQRwSTnXUHa+CgeNfcWFVJZRD3/X qn4WBOgYr3twjz4W0IhC2IV4t1A/E6kZCoOvGogNpCfq62UatJe4bjGmNExHQU4h QeY4sedWhAMrFA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:05:14 2025 by rpki-client