This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft File: 9l50I9P3sbLnrMG6HO4CQLfWedY.mft (raw, json) Hash identifier: 4sSKEh9VeWJFi5YKrqP9Efir0juOuymrI8uz8C2RWM8= Subject key identifier: CC:94:EE:D7:B5:AF:C6:92:FF:84:98:ED:A6:CB:4A:46:A9:D8:E9:47 Authority key identifier: F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6 Certificate issuer: /CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6 Certificate serial: 019AF276D6F836A0EFEE025878B11F8DF27A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 07:01:05 +0000 Manifest this update: Sat 06 Dec 2025 07:01:05 +0000 Manifest next update: Sun 07 Dec 2025 07:01:05 +0000 Files and hashes: 1: 9l50I9P3sbLnrMG6HO4CQLfWedY.crl (hash: wvYTz9AoGhti/j7o2pfPHAf74UxBqQvvExB9RxO4emc=) 2: FAJKZDo6nLNipexAJT8L9FAGXrE.roa (hash: NVIidy7uobZX7hs2QRQ052g+pZeZGSMOgKQJmZ0nDuw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:d6:f8:36:a0:ef:ee:02:58:78:b1:1f:8d:f2:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6 Validity Not Before: Dec 6 07:01:05 2025 GMT Not After : Dec 7 07:01:05 2025 GMT Subject: CN=cc94eed7b5afc692ff8498eda6cb4a46a9d8e947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f0:b4:3d:27:21:f8:59:77:4a:ae:36:f6:92: 7a:60:cf:2f:ad:68:91:fd:36:79:2e:d2:d9:d9:66: f1:6b:c1:6d:dd:bf:c7:95:79:01:e3:25:3f:bf:2e: b5:4e:e1:89:25:40:d3:ed:a5:e4:f6:8f:35:81:06: 8e:e5:85:60:3e:48:55:ab:17:a7:78:7a:99:7a:a8: 4a:ba:59:d8:1f:5e:10:82:12:11:b4:78:56:d8:a9: a8:d6:cb:80:54:2b:91:1a:c8:25:8f:05:83:39:8a: 89:bb:5f:fc:76:b9:0f:2b:db:26:ad:86:f4:40:8e: 13:85:8d:6a:b4:32:47:c7:04:31:3c:c8:10:f3:3f: b6:c5:67:d8:19:dd:30:92:26:d9:d8:6a:88:a3:7c: aa:1e:df:96:0c:e3:76:07:3c:55:bd:9f:42:93:ca: 94:a4:04:d7:ae:f4:eb:b0:f5:78:af:43:fd:13:bc: 35:cb:eb:b6:b1:04:2c:3a:d3:fc:b5:0b:ff:7e:e5: c8:cd:af:c8:2c:82:a4:6b:59:31:39:45:76:26:96: 6f:2d:29:45:4f:1d:97:b8:be:01:22:bf:cc:d4:66: 23:10:17:0d:6d:9b:7a:e2:03:47:06:10:14:07:1b: 09:1e:39:db:e6:ec:6d:64:d5:08:c9:61:1a:40:98: 1d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:94:EE:D7:B5:AF:C6:92:FF:84:98:ED:A6:CB:4A:46:A9:D8:E9:47 X509v3 Authority Key Identifier: keyid:F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:07:0c:36:89:8b:e5:37:66:0d:2e:51:70:f1:6f:6f:30:c1: 5f:8a:a7:0e:0a:bc:73:b8:87:5d:c2:83:2b:b4:53:9a:27:8c: a7:af:57:77:c6:76:6b:a0:ce:5c:1f:a9:d2:13:b3:e1:54:57: be:ed:e4:0e:7d:5f:a1:e7:8e:dd:69:3e:c0:8f:1f:f3:44:36: 61:4c:f5:c3:c8:44:67:00:6d:83:e4:91:1b:c5:20:d8:4c:8e: 8c:04:28:59:64:ed:2b:8c:66:6a:9a:b4:ac:10:1d:29:e7:7b: 69:73:45:62:b1:cb:0e:1a:ce:e6:30:0e:b1:6e:9e:e4:47:5d: 99:66:fd:d4:01:f5:f3:22:15:50:fe:84:9d:29:d7:cd:af:cd: a6:50:64:00:bb:3b:89:99:b0:8c:67:5a:98:22:17:55:55:af: 29:41:5a:d6:79:c4:45:7c:28:7b:a4:a5:3d:42:0e:88:3c:7c: a3:3e:03:4b:64:70:48:c6:4d:6c:b2:bd:bf:82:f6:5b:a8:71: e2:92:98:59:b9:91:48:78:4f:f2:a2:0f:b4:f0:0b:c1:36:fe: e1:0c:a9:ae:13:ee:07:dd:01:c5:13:a6:b5:f3:01:30:68:84: 52:1c:0a:cf:ac:31:1c:c6:44:66:3c:d8:f1:e1:91:42:0e:5b: ba:16:16:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydtb4NqDv7gJYeLEfjfJ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NWU3NDIzZDNmN2IxYjJlN2FjYzFiYTFjZWUwMjQwYjdk Njc5ZDYwHhcNMjUxMjA2MDcwMTA1WhcNMjUxMjA3MDcwMTA1WjAzMTEwLwYDVQQD EyhjYzk0ZWVkN2I1YWZjNjkyZmY4NDk4ZWRhNmNiNGE0NmE5ZDhlOTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/C0PSch+Fl3Sq429pJ6YM8vrWiR /TZ5LtLZ2Wbxa8Ft3b/HlXkB4yU/vy61TuGJJUDT7aXk9o81gQaO5YVgPkhVqxen eHqZeqhKulnYH14QghIRtHhW2Kmo1suAVCuRGsgljwWDOYqJu1/8drkPK9smrYb0 QI4ThY1qtDJHxwQxPMgQ8z+2xWfYGd0wkibZ2GqIo3yqHt+WDON2BzxVvZ9Ck8qU pATXrvTrsPV4r0P9E7w1y+u2sQQsOtP8tQv/fuXIza/ILIKka1kxOUV2JpZvLSlF Tx2XuL4BIr/M1GYjEBcNbZt64gNHBhAUBxsJHjnb5uxtZNUIyWEaQJgdoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyU7te1r8aS/4SY7abLSkap2OlHMB8GA1UdIwQY MBaAFPZedCPT97Gy56zBuhzuAkC31nnWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWw1MEk5UDNzYkxuck1HNkhPNENRTGZXZWRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8wMTMxNTMtYjYzYi00MDc0LWFjNWMt ZjRkZDY2MzlmODc1LzEvOWw1MEk5UDNzYkxuck1HNkhPNENRTGZXZWRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8wMTMxNTMtYjYzYi00MDc0LWFjNWMtZjRkZDY2MzlmODc1 LzEvOWw1MEk5UDNzYkxuck1HNkhPNENRTGZXZWRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbAcMNomL 5TdmDS5RcPFvbzDBX4qnDgq8c7iHXcKDK7RTmieMp69Xd8Z2a6DOXB+p0hOz4VRX vu3kDn1foeeO3Wk+wI8f80Q2YUz1w8hEZwBtg+SRG8Ug2EyOjAQoWWTtK4xmapq0 rBAdKed7aXNFYrHLDhrO5jAOsW6e5EddmWb91AH18yIVUP6EnSnXza/NplBkALs7 iZmwjGdamCIXVVWvKUFa1nnERXwoe6SlPUIOiDx8oz4DS2RwSMZNbLK9v4L2W6hx 4pKYWbmRSHhP8qIPtPALwTb+4QyprhPuB90BxROmtfMBMGiEUhwKz6wxHMZEZjzY 8eGRQg5buhYW/A== -----END CERTIFICATE-----Generated at Sat Dec 6 13:21:53 2025 by rpki-client