This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft File: 9gcH8oeiMJvuy7hS7kCqgxueeGY.mft (raw, json) Hash identifier: AbdE7mSv1O39VPcVMtSPhsFe99/tN4IxofG5kPXGz3Y= Subject key identifier: 7C:CA:E1:03:53:4F:C5:3C:76:90:45:AF:7F:2F:9B:48:35:5A:F9:49 Authority key identifier: F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66 Certificate issuer: /CN=f60707f287a2309beecbb852ee40aa831b9e7866 Certificate serial: 019AF49BA755F3D58D4B3803180DEB5B4D19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft Manifest number: 0E10 Signing time: Sat 06 Dec 2025 17:00:32 +0000 Manifest this update: Sat 06 Dec 2025 17:00:32 +0000 Manifest next update: Sun 07 Dec 2025 17:00:32 +0000 Files and hashes: 1: 1qWzBwVhmQ6zdPJi5w7aMEYeKoc.roa (hash: QUUw5IgATMBX8godfHfSxzPR3Se/paZBDUtUUYMUESM=) 2: 9gcH8oeiMJvuy7hS7kCqgxueeGY.crl (hash: Ni6bMKZQvZdAkN81GXe7h5cg9N9FWJBBtfyDoB8Tx+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:a7:55:f3:d5:8d:4b:38:03:18:0d:eb:5b:4d:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60707f287a2309beecbb852ee40aa831b9e7866 Validity Not Before: Dec 6 17:00:32 2025 GMT Not After : Dec 7 17:00:32 2025 GMT Subject: CN=7ccae103534fc53c769045af7f2f9b48355af949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:65:d3:29:bd:87:bf:1c:16:38:7d:9d:5f:3d: 19:46:0d:53:30:1b:56:16:82:d8:ac:89:e9:b4:59: e7:bb:aa:4d:c4:fd:3b:d7:50:8d:f7:11:0f:87:58: 7a:59:db:33:de:89:d7:a7:b5:c1:71:37:3d:ea:2d: f0:86:90:3d:e9:ae:9d:0c:c7:0e:60:b5:27:ae:a4: bb:5d:86:05:e6:21:41:c3:5f:8c:e4:7a:0d:20:90: 7f:2b:da:cd:a6:76:65:a0:38:30:e7:b3:8b:9f:0b: 0d:c7:7b:7e:3d:4d:eb:3f:1d:c2:44:c7:9e:da:2a: d1:af:c2:1d:eb:cf:2d:e9:67:b9:28:28:bf:5a:55: 15:66:3f:6b:56:03:58:51:60:28:0f:3a:0f:0c:0e: c3:d5:df:fb:d0:88:c7:8d:bd:ee:43:1c:96:ec:da: 88:08:51:50:ae:53:e0:75:3e:f4:8a:c5:cc:14:f9: 0f:db:c8:0e:00:09:16:28:d2:16:c6:db:5d:17:6e: 22:33:1a:a1:8f:e7:a6:7e:cd:26:ed:eb:02:40:16: b3:ab:5f:af:63:e4:af:17:79:49:ce:62:8c:9e:05: 83:e7:60:a3:82:d8:9b:6f:d9:07:d0:ac:fc:3b:ef: 67:2e:d1:0b:6f:3f:32:5c:c4:f6:7d:32:ee:a8:ca: 9c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CA:E1:03:53:4F:C5:3C:76:90:45:AF:7F:2F:9B:48:35:5A:F9:49 X509v3 Authority Key Identifier: keyid:F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:bd:b0:31:29:44:64:05:b6:39:82:e0:3d:a0:22:61:3f:1d: aa:85:29:cc:88:f5:f6:7b:a7:05:d1:8e:ac:31:a7:4b:de:f8: 5c:cd:9a:cd:f7:a4:6f:9a:b3:a2:57:1f:2f:f4:66:7d:c1:6a: ae:48:19:cd:6d:07:61:df:42:d5:86:3f:2c:ea:e1:d7:9f:44: ed:a8:24:4c:78:87:ff:81:51:d6:c8:c5:eb:f2:56:bc:a6:37: f8:99:44:79:dc:7f:4b:51:39:80:a9:5b:73:96:2f:31:d3:68: 9c:bc:89:45:72:10:62:e4:86:58:4a:50:5f:50:5d:47:a8:fc: 59:59:82:1a:26:1d:79:bb:f8:33:e2:df:9f:2c:07:eb:0e:a2: 1e:5a:79:93:a3:47:31:15:e0:65:db:67:eb:d5:17:8c:cf:bb: 15:90:a4:d9:53:0e:40:2a:81:38:b2:cc:cb:5e:f5:1c:1c:1c: 8f:ef:fb:5d:6e:80:1f:99:d6:65:d2:bc:3e:e5:9d:81:6f:06: b9:56:2d:e1:f7:45:9a:d5:99:0f:2f:46:bd:f3:e3:8d:a8:16: a3:3a:44:4a:72:d1:15:dc:d9:c3:77:e1:08:48:13:fd:24:82: ac:c8:e0:fa:2c:28:a2:8d:89:35:99:e8:eb:56:4c:62:55:19: 76:d8:87:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m6dV89WNSzgDGA3rW00ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MDcwN2YyODdhMjMwOWJlZWNiYjg1MmVlNDBhYTgzMWI5 ZTc4NjYwHhcNMjUxMjA2MTcwMDMyWhcNMjUxMjA3MTcwMDMyWjAzMTEwLwYDVQQD Eyg3Y2NhZTEwMzUzNGZjNTNjNzY5MDQ1YWY3ZjJmOWI0ODM1NWFmOTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2XTKb2HvxwWOH2dXz0ZRg1TMBtW FoLYrInptFnnu6pNxP0711CN9xEPh1h6Wdsz3onXp7XBcTc96i3whpA96a6dDMcO YLUnrqS7XYYF5iFBw1+M5HoNIJB/K9rNpnZloDgw57OLnwsNx3t+PU3rPx3CRMee 2irRr8Id688t6We5KCi/WlUVZj9rVgNYUWAoDzoPDA7D1d/70IjHjb3uQxyW7NqI CFFQrlPgdT70isXMFPkP28gOAAkWKNIWxttdF24iMxqhj+emfs0m7esCQBazq1+v Y+SvF3lJzmKMngWD52Cjgtibb9kH0Kz8O+9nLtELbz8yXMT2fTLuqMqc+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzK4QNTT8U8dpBFr38vm0g1WvlJMB8GA1UdIwQY MBaAFPYHB/KHojCb7su4Uu5AqoMbnnhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWdjSDhvZWlNSnZ1eTdoUzdrQ3FneHVlZUdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hM2E3MDgtYzY2OS00NzdmLTlkM2It ZTVmYTM1MGY4ZmE4LzEvOWdjSDhvZWlNSnZ1eTdoUzdrQ3FneHVlZUdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9hM2E3MDgtYzY2OS00NzdmLTlkM2ItZTVmYTM1MGY4ZmE4 LzEvOWdjSDhvZWlNSnZ1eTdoUzdrQ3FneHVlZUdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhr2wMSlE ZAW2OYLgPaAiYT8dqoUpzIj19nunBdGOrDGnS974XM2azfekb5qzolcfL/RmfcFq rkgZzW0HYd9C1YY/LOrh159E7agkTHiH/4FR1sjF6/JWvKY3+JlEedx/S1E5gKlb c5YvMdNonLyJRXIQYuSGWEpQX1BdR6j8WVmCGiYdebv4M+LfnywH6w6iHlp5k6NH MRXgZdtn69UXjM+7FZCk2VMOQCqBOLLMy171HBwcj+/7XW6AH5nWZdK8PuWdgW8G uVYt4fdFmtWZDy9GvfPjjagWozpESnLRFdzZw3fhCEgT/SSCrMjg+iwooo2JNZno 61ZMYlUZdtiH0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 19:07:10 2025 by rpki-client