This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft File: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft (raw, json) Hash identifier: FwV3dFifhCKSQRFJ08rIVet6k6FFpjdp69ETXPtb1BQ= Subject key identifier: C0:D3:D2:C4:73:D8:E7:15:CB:65:D2:D0:D1:21:0A:8F:99:2B:A9:9B Authority key identifier: F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12 Certificate issuer: /CN=f69527a06a035cbcaecf00daca2fd88399cf9d12 Certificate serial: 019AF12DC3C15BA1FE958A34A71958C71D52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft Manifest number: 0D29 Signing time: Sat 06 Dec 2025 01:01:39 +0000 Manifest this update: Sat 06 Dec 2025 01:01:39 +0000 Manifest next update: Sun 07 Dec 2025 01:01:39 +0000 Files and hashes: 1: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl (hash: fg64uzbzuroIdtcMrcVtIEFtWuroeumhw32EqfBY0XA=) 2: HnZ1VjQW735MMUi4UDqiepCAdeM.roa (hash: 31a3rYl8qptlSMbknXPbZIkMQ7iUM4ri0d4GzZPfheM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:c3:c1:5b:a1:fe:95:8a:34:a7:19:58:c7:1d:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12 Validity Not Before: Dec 6 01:01:39 2025 GMT Not After : Dec 7 01:01:39 2025 GMT Subject: CN=c0d3d2c473d8e715cb65d2d0d1210a8f992ba99b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4e:d7:f9:23:b0:70:7b:7e:c5:88:c8:12:88: 76:74:70:36:fd:08:c1:65:8c:73:cd:c4:25:9e:9b: f9:fe:ef:99:2d:82:5f:5c:90:dc:5b:52:61:a2:ae: ee:3c:30:bf:a2:da:0a:2d:59:2e:9b:75:d9:0f:9e: 37:61:2d:2c:d7:33:e6:a8:70:03:66:d6:f5:4d:fa: 13:00:42:18:57:96:6b:f9:d7:c4:dc:e7:a6:d1:f9: f2:93:c3:b6:c5:7a:a7:e0:e8:25:b2:78:2b:8f:05: b3:1b:c8:81:2e:d8:6f:87:af:ad:3e:43:57:91:af: bc:48:9b:d6:af:9b:f2:59:ed:77:04:9a:a5:15:fe: 3f:5e:14:65:34:ba:11:6d:a8:af:b9:bd:3b:dc:2a: bf:22:b9:5f:37:7b:03:d5:74:91:67:76:a6:f0:91: 25:e8:fe:4e:eb:ec:a7:5e:65:4e:fd:ed:d7:81:cc: 66:9d:85:fd:2b:cf:80:3d:99:ec:99:63:ff:3c:0c: 0e:eb:72:24:71:af:20:ce:40:8e:aa:ce:dc:f0:d1: d9:12:f7:65:cd:ce:1b:ad:4a:82:ad:50:d8:c5:02: 0d:e9:2f:1d:0a:35:30:e7:77:65:4f:a6:eb:39:0c: 51:cb:52:bc:fc:bb:7e:9d:5d:22:2d:bf:27:f8:2e: 6d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D3:D2:C4:73:D8:E7:15:CB:65:D2:D0:D1:21:0A:8F:99:2B:A9:9B X509v3 Authority Key Identifier: keyid:F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:c1:21:fe:8f:3d:47:55:29:e4:d9:6a:9e:6b:fd:24:b4:df: a8:99:4e:d0:f7:d9:6f:32:60:6e:7d:a1:9e:a8:58:9a:39:41: 47:bc:30:4b:a9:db:ea:63:18:f0:3a:15:6d:71:20:5b:02:ab: 94:f3:66:76:67:f8:48:8f:a3:ad:18:5f:42:0a:b1:dc:37:4a: c5:14:25:7b:c9:15:80:16:92:ab:1f:fc:09:e4:8b:88:2e:a5: a7:26:06:e1:2b:e8:ac:05:10:e5:9b:72:cb:8d:13:fc:a0:25: 94:b6:cb:f6:73:98:5b:d7:b9:e8:36:6a:5c:2b:80:b4:5f:20: db:b4:83:5f:00:b2:02:6e:e6:b7:54:bc:ad:e3:c5:a1:39:51: c0:76:4c:ab:6d:8c:8e:87:71:58:b1:f6:8f:ca:cd:db:b1:bb: c3:a3:1b:90:3f:0e:f7:87:07:cf:a2:c1:29:8d:6d:fb:e6:ef: b9:4d:78:1a:ed:e4:bf:30:eb:a6:bb:5f:0a:05:bb:2d:cc:81: 6e:4c:2c:15:74:44:16:bf:15:7f:06:9a:1f:96:ab:83:dd:5e: 3d:65:cc:0a:c7:46:c2:72:3c:82:40:27:01:13:c4:fe:53:e0: eb:5e:7f:e1:80:86:ac:66:5a:6a:89:84:76:a5:7f:20:ba:7e: 6c:e4:a4:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLcPBW6H+lYo0pxlYxx1SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OTUyN2EwNmEwMzVjYmNhZWNmMDBkYWNhMmZkODgzOTlj ZjlkMTIwHhcNMjUxMjA2MDEwMTM5WhcNMjUxMjA3MDEwMTM5WjAzMTEwLwYDVQQD EyhjMGQzZDJjNDczZDhlNzE1Y2I2NWQyZDBkMTIxMGE4Zjk5MmJhOTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz07X+SOwcHt+xYjIEoh2dHA2/QjB ZYxzzcQlnpv5/u+ZLYJfXJDcW1Jhoq7uPDC/otoKLVkum3XZD543YS0s1zPmqHAD Ztb1TfoTAEIYV5Zr+dfE3Oem0fnyk8O2xXqn4OglsngrjwWzG8iBLthvh6+tPkNX ka+8SJvWr5vyWe13BJqlFf4/XhRlNLoRbaivub073Cq/IrlfN3sD1XSRZ3am8JEl 6P5O6+ynXmVO/e3XgcxmnYX9K8+APZnsmWP/PAwO63Ikca8gzkCOqs7c8NHZEvdl zc4brUqCrVDYxQIN6S8dCjUw53dlT6brOQxRy1K8/Lt+nV0iLb8n+C5tGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDT0sRz2OcVy2XS0NEhCo+ZK6mbMB8GA1UdIwQY MBaAFPaVJ6BqA1y8rs8A2sov2IOZz50SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXBVbm9Hb0RYTHl1endEYXlpX1lnNW5QblJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kNDU1MzEtZDZjOC00ZGNlLWI2MDYt ODVjODU1MjI3YjIzLzEvOXBVbm9Hb0RYTHl1endEYXlpX1lnNW5QblJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9kNDU1MzEtZDZjOC00ZGNlLWI2MDYtODVjODU1MjI3YjIz LzEvOXBVbm9Hb0RYTHl1endEYXlpX1lnNW5QblJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMEh/o89 R1Up5Nlqnmv9JLTfqJlO0PfZbzJgbn2hnqhYmjlBR7wwS6nb6mMY8DoVbXEgWwKr lPNmdmf4SI+jrRhfQgqx3DdKxRQle8kVgBaSqx/8CeSLiC6lpyYG4SvorAUQ5Zty y40T/KAllLbL9nOYW9e56DZqXCuAtF8g27SDXwCyAm7mt1S8rePFoTlRwHZMq22M jodxWLH2j8rN27G7w6MbkD8O94cHz6LBKY1t++bvuU14Gu3kvzDrprtfCgW7LcyB bkwsFXREFr8VfwaaH5arg91ePWXMCsdGwnI8gkAnARPE/lPg615/4YCGrGZaaomE dqV/ILp+bOSkSQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:09:05 2025 by rpki-client