This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/021cd7-0a1b-49a2-9def-64aeb24cbe98/1/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.mft File: 9lLDECU8Ea-N8dkL6BrOQ31ti_Q.mft (raw, json) Hash identifier: 7tosPirZ1DkkCLoWJnjTjFhYrJmIV4ZvFwpVhflSvM8= Subject key identifier: 77:09:63:9B:BD:C3:90:0F:4B:DB:2F:65:4D:50:EA:32:96:0E:5E:AE Authority key identifier: F6:52:C3:10:25:3C:11:AF:8D:F1:D9:0B:E8:1A:CE:43:7D:6D:8B:F4 Certificate issuer: /CN=f652c310253c11af8df1d90be81ace437d6d8bf4 Certificate serial: 019AF208D5C4898A8D6D61B050015316B670 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/021cd7-0a1b-49a2-9def-64aeb24cbe98/1/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.mft Manifest number: 2E Signing time: Sat 06 Dec 2025 05:00:56 +0000 Manifest this update: Sat 06 Dec 2025 05:00:56 +0000 Manifest next update: Sun 07 Dec 2025 05:00:56 +0000 Files and hashes: 1: 9lLDECU8Ea-N8dkL6BrOQ31ti_Q.crl (hash: T8qvKKIhfohDsuvI+QQrraWupd1QMrggmxB+fv7AFAI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/021cd7-0a1b-49a2-9def-64aeb24cbe98/1/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/021cd7-0a1b-49a2-9def-64aeb24cbe98/1/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d5:c4:89:8a:8d:6d:61:b0:50:01:53:16:b6:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f652c310253c11af8df1d90be81ace437d6d8bf4 Validity Not Before: Dec 6 05:00:56 2025 GMT Not After : Dec 7 05:00:56 2025 GMT Subject: CN=7709639bbdc3900f4bdb2f654d50ea32960e5eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:59:06:63:80:0c:d0:3b:a5:4e:6d:ad:a7:14: 1b:76:04:57:47:64:57:cf:e6:a0:19:57:c2:8b:fa: 98:30:54:04:17:43:be:16:4b:4b:e9:be:b0:d3:da: 43:2a:02:eb:c1:82:8a:1f:21:67:f6:9b:9b:10:ea: 6c:aa:f8:be:38:6c:27:3a:98:42:35:aa:9a:58:46: 77:d8:68:29:04:c0:e8:09:8f:e8:ad:91:5a:38:61: 48:d9:88:d9:a5:24:07:af:3d:33:c2:1c:c1:b1:eb: ea:62:0d:28:78:74:b2:9f:c5:d6:35:f2:0c:c1:32: 9e:a1:c2:f0:50:0b:68:cd:60:e5:67:c7:1b:f9:8e: 55:16:cd:fe:9d:58:38:13:9f:f7:41:db:dd:e2:dd: f5:6f:7f:38:13:f6:69:b9:5f:04:df:c6:1e:0a:75: e0:32:01:fa:c1:72:47:fc:1d:06:b5:ce:e4:ec:b4: bd:46:56:09:af:b7:60:c9:63:d9:05:48:96:9a:10: 19:96:87:1e:09:af:e8:ca:aa:e4:b2:b3:be:15:f3: 92:c6:82:a6:23:8a:c6:3a:11:a1:bf:29:b8:9c:60: 42:b1:b0:ed:ec:63:7c:eb:ca:0e:f2:9c:9d:84:94: 48:f9:da:ec:7f:a0:bd:4f:1c:32:67:29:32:fc:d9: a4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:09:63:9B:BD:C3:90:0F:4B:DB:2F:65:4D:50:EA:32:96:0E:5E:AE X509v3 Authority Key Identifier: keyid:F6:52:C3:10:25:3C:11:AF:8D:F1:D9:0B:E8:1A:CE:43:7D:6D:8B:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/021cd7-0a1b-49a2-9def-64aeb24cbe98/1/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/021cd7-0a1b-49a2-9def-64aeb24cbe98/1/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:be:10:fd:06:0a:25:7f:00:df:ff:7c:c0:ef:53:e7:f2:06: 0a:e0:23:16:64:ea:3f:08:95:43:f0:6a:d5:0a:71:d4:68:10: 9f:97:69:af:ce:ad:e9:e1:43:e9:82:37:93:1d:2b:75:92:28: f3:1a:c5:d4:83:a7:9f:78:c4:cb:3d:06:b5:3f:f2:60:9f:36: 31:32:b1:17:8c:80:d2:ac:a8:a8:1e:07:9a:80:de:44:78:d1: aa:ca:6a:d9:90:95:6a:e5:04:eb:b0:78:13:75:35:47:a4:40: a2:c9:0d:d3:2f:7d:ff:78:aa:b4:0e:79:a1:88:12:ed:98:d5: 2e:db:30:1f:51:40:fc:0b:0d:34:d7:24:9e:06:b3:9e:e2:68: 3b:07:e5:71:58:d2:32:1b:12:08:2f:44:69:02:b6:b7:78:6f: c2:ce:5f:fb:90:a0:6f:5c:d9:ca:e2:2b:ea:72:0e:32:e6:46: 80:87:11:08:2d:91:22:8a:cc:72:1e:25:ab:22:79:e4:ed:04: 62:b9:d1:16:9e:c9:b7:b2:1d:6c:5c:99:d3:68:b4:c2:1b:d3: 20:38:21:75:bf:cf:2a:64:59:89:fb:d1:9d:87:d3:31:00:78: cb:12:b4:cb:3c:93:be:4d:db:cf:5b:33:47:6d:70:8a:41:25: 4f:53:20:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNXEiYqNbWGwUAFTFrZwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NTJjMzEwMjUzYzExYWY4ZGYxZDkwYmU4MWFjZTQzN2Q2 ZDhiZjQwHhcNMjUxMjA2MDUwMDU2WhcNMjUxMjA3MDUwMDU2WjAzMTEwLwYDVQQD Eyg3NzA5NjM5YmJkYzM5MDBmNGJkYjJmNjU0ZDUwZWEzMjk2MGU1ZWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VkGY4AM0DulTm2tpxQbdgRXR2RX z+agGVfCi/qYMFQEF0O+FktL6b6w09pDKgLrwYKKHyFn9pubEOpsqvi+OGwnOphC NaqaWEZ32GgpBMDoCY/orZFaOGFI2YjZpSQHrz0zwhzBsevqYg0oeHSyn8XWNfIM wTKeocLwUAtozWDlZ8cb+Y5VFs3+nVg4E5/3Qdvd4t31b384E/ZpuV8E38YeCnXg MgH6wXJH/B0Gtc7k7LS9RlYJr7dgyWPZBUiWmhAZloceCa/oyqrksrO+FfOSxoKm I4rGOhGhvym4nGBCsbDt7GN868oO8pydhJRI+drsf6C9TxwyZyky/NmkuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHcJY5u9w5APS9svZU1Q6jKWDl6uMB8GA1UdIwQY MBaAFPZSwxAlPBGvjfHZC+gazkN9bYv0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWxMREVDVThFYS1OOGRrTDZCck9RMzF0aV9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wMjFjZDctMGExYi00OWEyLTlkZWYt NjRhZWIyNGNiZTk4LzEvOWxMREVDVThFYS1OOGRrTDZCck9RMzF0aV9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8wMjFjZDctMGExYi00OWEyLTlkZWYtNjRhZWIyNGNiZTk4 LzEvOWxMREVDVThFYS1OOGRrTDZCck9RMzF0aV9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlL4Q/QYK JX8A3/98wO9T5/IGCuAjFmTqPwiVQ/Bq1Qpx1GgQn5dpr86t6eFD6YI3kx0rdZIo 8xrF1IOnn3jEyz0GtT/yYJ82MTKxF4yA0qyoqB4HmoDeRHjRqspq2ZCVauUE67B4 E3U1R6RAoskN0y99/3iqtA55oYgS7ZjVLtswH1FA/AsNNNckngaznuJoOwflcVjS MhsSCC9EaQK2t3hvws5f+5Cgb1zZyuIr6nIOMuZGgIcRCC2RIorMch4lqyJ55O0E YrnRFp7Jt7IdbFyZ02i0whvTIDghdb/PKmRZifvRnYfTMQB4yxK0yzyTvk3bz1sz R21wikElT1MgfQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:40 2025 by rpki-client