This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft File: 9r15bwtjNc_hKKXPm5fudoCC7Y0.mft (raw, json) Hash identifier: Mz3ye2Vj9ebrJtjyKDERXaf7goYwXJqtaV+0GK52i50= Subject key identifier: 56:F2:C8:B7:05:82:3D:BF:93:17:01:7B:6D:13:7C:64:5E:E1:B6:75 Authority key identifier: F6:BD:79:6F:0B:63:35:CF:E1:28:A5:CF:9B:97:EE:76:80:82:ED:8D Certificate issuer: /CN=f6bd796f0b6335cfe128a5cf9b97ee768082ed8d Certificate serial: 019AF31CEDAA33C5B9C96C3F538E36F9F16B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft Manifest number: 025A Signing time: Sat 06 Dec 2025 10:02:30 +0000 Manifest this update: Sat 06 Dec 2025 10:02:30 +0000 Manifest next update: Sun 07 Dec 2025 10:02:30 +0000 Files and hashes: 1: 9r15bwtjNc_hKKXPm5fudoCC7Y0.crl (hash: wNhdeT6ynfOoLKOxE+5xPslSkpM8/tFcxI9iGFaDdOQ=) 2: RIbTLj7txNwoYxh7oe27Ga8iD9g.roa (hash: b58BSl0OG9Cy3uXrPooEMPlzPzUnf3IVg7gnhdmepqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:ed:aa:33:c5:b9:c9:6c:3f:53:8e:36:f9:f1:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6bd796f0b6335cfe128a5cf9b97ee768082ed8d Validity Not Before: Dec 6 10:02:30 2025 GMT Not After : Dec 7 10:02:30 2025 GMT Subject: CN=56f2c8b705823dbf9317017b6d137c645ee1b675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4a:69:c9:3e:a1:30:23:00:3d:68:cc:a2:2a: ec:a3:62:77:58:2d:f9:74:d9:11:96:ec:88:64:18: 58:b5:ac:8f:8a:91:68:0a:34:32:42:f6:de:db:52: a5:5f:b4:29:a1:79:c5:10:41:2c:5a:9e:3c:97:1c: 85:c9:c1:ed:3f:19:02:80:cf:cd:7b:ec:75:a5:85: 04:11:56:c7:e8:f3:90:3b:a0:32:14:79:31:ff:ab: a4:8c:f4:49:9d:e8:4a:cd:cf:76:db:76:f7:79:37: 97:27:c7:59:aa:b7:1b:ed:7b:33:2c:b7:6a:50:b7: 8b:c0:36:97:26:00:fe:f8:cc:f2:0f:12:66:66:ef: d9:69:97:5e:0b:50:7e:69:a0:3d:ff:83:12:69:be: cd:80:76:6e:65:53:c8:04:62:78:7b:6a:27:17:fd: 47:a3:7e:df:51:ed:00:6c:02:23:21:9d:70:ba:3f: ca:a6:b3:5f:a6:10:1a:61:2d:09:3a:c6:69:b5:3a: 05:87:f0:a9:d7:6f:2d:f0:8a:e9:2e:1c:eb:7f:62: 64:2c:68:b6:f9:22:8d:23:03:52:98:51:8a:21:b4: 39:1f:48:d5:c6:bc:84:76:73:cd:e0:37:e0:1d:8f: 8b:71:dd:d6:b0:3f:85:c8:03:8d:43:60:8d:41:54: ce:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F2:C8:B7:05:82:3D:BF:93:17:01:7B:6D:13:7C:64:5E:E1:B6:75 X509v3 Authority Key Identifier: keyid:F6:BD:79:6F:0B:63:35:CF:E1:28:A5:CF:9B:97:EE:76:80:82:ED:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:07:0e:cf:5d:60:51:8c:ee:69:62:49:97:f8:d1:9b:8b:ca: 77:e4:78:bc:44:11:5f:ef:f6:89:af:88:11:7c:6d:97:1b:aa: 99:81:74:a5:11:45:27:b1:c3:47:cd:92:90:43:fa:50:ad:a5: e9:0a:17:6d:b0:a2:4c:03:da:5a:bd:74:9e:bc:47:d5:52:3f: f7:bd:ee:5b:d8:e1:c8:b4:5a:8f:12:75:d3:68:38:7f:d0:03: 7b:88:11:69:1a:a6:7d:04:6a:60:97:dc:1a:4b:51:92:aa:ec: 42:bc:26:fe:d1:c0:8e:3d:14:86:2d:30:c5:ba:8f:c8:ae:78: ce:9c:de:01:af:64:f0:fa:97:99:d6:af:c7:84:19:d9:e8:23: 5d:8b:97:4e:96:32:d0:67:e8:27:36:13:1e:24:96:6e:4a:14: ba:11:87:15:9c:92:5f:ad:35:30:f5:40:ad:d2:3f:6f:93:3a: 26:68:ba:e8:57:30:e9:56:e8:b4:5e:73:0e:97:a5:76:61:26: 57:7f:58:2d:9a:27:d4:4f:e3:5e:6b:6c:01:e8:4a:57:14:23: d7:ca:84:36:37:8e:14:b9:2c:10:17:45:80:64:51:3a:39:ca: 12:29:70:3f:2f:ff:10:84:11:9d:73:ce:93:38:b4:77:ae:25: fa:fa:c5:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHO2qM8W5yWw/U442+fFrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YmQ3OTZmMGI2MzM1Y2ZlMTI4YTVjZjliOTdlZTc2ODA4 MmVkOGQwHhcNMjUxMjA2MTAwMjMwWhcNMjUxMjA3MTAwMjMwWjAzMTEwLwYDVQQD Eyg1NmYyYzhiNzA1ODIzZGJmOTMxNzAxN2I2ZDEzN2M2NDVlZTFiNjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0ppyT6hMCMAPWjMoirso2J3WC35 dNkRluyIZBhYtayPipFoCjQyQvbe21KlX7QpoXnFEEEsWp48lxyFycHtPxkCgM/N e+x1pYUEEVbH6POQO6AyFHkx/6ukjPRJnehKzc9223b3eTeXJ8dZqrcb7XszLLdq ULeLwDaXJgD++MzyDxJmZu/ZaZdeC1B+aaA9/4MSab7NgHZuZVPIBGJ4e2onF/1H o37fUe0AbAIjIZ1wuj/KprNfphAaYS0JOsZptToFh/Cp128t8IrpLhzrf2JkLGi2 +SKNIwNSmFGKIbQ5H0jVxryEdnPN4DfgHY+Lcd3WsD+FyAONQ2CNQVTOzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFbyyLcFgj2/kxcBe20TfGRe4bZ1MB8GA1UdIwQY MBaAFPa9eW8LYzXP4Silz5uX7naAgu2NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXIxNWJ3dGpOY19oS0tYUG01ZnVkb0NDN1kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lMmM4MjEtNmQwMC00NzcwLWFmMmEt M2VlN2M3MmUwMWViLzEvOXIxNWJ3dGpOY19oS0tYUG01ZnVkb0NDN1kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9lMmM4MjEtNmQwMC00NzcwLWFmMmEtM2VlN2M3MmUwMWVi LzEvOXIxNWJ3dGpOY19oS0tYUG01ZnVkb0NDN1kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEwcOz11g UYzuaWJJl/jRm4vKd+R4vEQRX+/2ia+IEXxtlxuqmYF0pRFFJ7HDR82SkEP6UK2l 6QoXbbCiTAPaWr10nrxH1VI/973uW9jhyLRajxJ102g4f9ADe4gRaRqmfQRqYJfc GktRkqrsQrwm/tHAjj0Uhi0wxbqPyK54zpzeAa9k8PqXmdavx4QZ2egjXYuXTpYy 0GfoJzYTHiSWbkoUuhGHFZySX601MPVArdI/b5M6Jmi66Fcw6VbotF5zDpeldmEm V39YLZon1E/jXmtsAehKVxQj18qENjeOFLksEBdFgGRROjnKEilwPy//EIQRnXPO kzi0d64l+vrFuw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:55:29 2025 by rpki-client