This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft File: 9fDwfKCmtMssFZ6QRZdFA64ohYE.mft (raw, json) Hash identifier: n+bgXaCr/yLKNrTvmw/naWXYt+gt4fdirZizKgJ7DK0= Subject key identifier: CA:12:DE:08:03:E1:60:9C:76:79:D4:20:A2:3C:DE:98:AC:2B:F2:4E Authority key identifier: F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81 Certificate issuer: /CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581 Certificate serial: 019AF163EF1476C0DFEB280E2CEB06BBD278 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft Manifest number: C8 Signing time: Sat 06 Dec 2025 02:00:49 +0000 Manifest this update: Sat 06 Dec 2025 02:00:49 +0000 Manifest next update: Sun 07 Dec 2025 02:00:49 +0000 Files and hashes: 1: 9fDwfKCmtMssFZ6QRZdFA64ohYE.crl (hash: gOwqxsHUJ93TJw4JBcP13QCbZZd9P0anWg7dWSZJgvc=) 2: _TKV-DpdXmei2SR3rrnjoUIFNqQ.roa (hash: R5raBHMEiNG8zclHwaLQB17jXPqQeZzFe9QNn7MrSYM=) 3: c25XUVb4Bk3AvdWuVyNrTQybFGc.roa (hash: j4cV2DVaLOTZm+S8euSjn/Ih9FV1aHPND9PujtBd3s0=) 4: q764NZ2C5xrpkP8LBsmdVe7f1dw.roa (hash: sLViIw17i8ukMTeK1rHQJp904qo/JWVcyaL9gru+PTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:ef:14:76:c0:df:eb:28:0e:2c:eb:06:bb:d2:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581 Validity Not Before: Dec 6 02:00:49 2025 GMT Not After : Dec 7 02:00:49 2025 GMT Subject: CN=ca12de0803e1609c7679d420a23cde98ac2bf24e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ef:a8:31:75:b4:95:e7:a7:b1:d1:c2:ec:7e: 69:59:0a:74:e2:76:c1:c0:d6:1f:eb:d5:74:bd:a3: 25:33:43:29:2c:39:39:40:f2:36:09:76:f8:2a:68: 32:bc:9c:ba:a2:2c:fa:08:c8:4c:d7:5f:a5:be:54: 99:7f:72:9e:6b:fe:04:55:30:25:d2:66:41:0b:01: 05:fb:75:d6:cc:cf:a0:0f:d5:43:f4:db:f5:30:2e: 02:38:5b:a6:e6:29:27:a0:ec:71:b2:91:bb:ee:98: 9d:74:91:bb:73:e6:dd:55:ea:da:10:e1:88:b6:fc: 8b:86:43:03:ae:be:e0:53:53:4d:84:c3:a8:56:a5: 24:04:88:48:d3:7f:b8:77:a1:b2:8e:bb:db:8f:63: 37:78:d1:cb:40:2f:f7:ce:1b:f0:29:bc:49:8e:e6: 9d:14:52:e4:c2:3a:58:39:fa:60:95:1b:f7:f7:82: 9f:b5:f9:bb:6a:93:7e:50:a3:b6:54:8e:13:e1:4b: 1a:dc:94:63:a6:74:d1:08:93:8a:12:aa:75:bf:f3: 5f:5b:49:23:8e:6e:7a:da:c0:8e:8f:e2:70:1e:80: f4:36:af:05:2b:7a:10:0b:6a:eb:6f:bf:36:56:26: f8:7a:44:3e:88:99:80:7f:6e:f8:86:f2:b1:04:0b: 4a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:12:DE:08:03:E1:60:9C:76:79:D4:20:A2:3C:DE:98:AC:2B:F2:4E X509v3 Authority Key Identifier: keyid:F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:e1:04:aa:2c:8a:59:c1:a2:1d:36:1e:7c:84:b5:58:72:ba: 54:fb:7c:4c:b3:d2:13:6f:a7:be:f3:d7:57:69:3f:1e:a2:14: cd:82:48:f1:aa:50:9c:a1:2c:c5:0e:60:87:da:de:0f:4e:d6: 97:54:c1:0e:0d:26:ef:a2:9f:5a:22:fd:d7:0a:0a:00:4d:a2: 0e:6f:ef:a6:b7:9b:f4:45:5d:42:68:85:df:d3:c5:6d:d0:f3: 76:25:22:56:c7:92:cb:91:3b:2e:ac:96:d1:c8:95:ed:51:f6: d9:20:82:0e:f9:83:50:cf:cb:3e:cb:af:62:dd:6c:17:c8:2b: 94:68:80:63:ce:eb:86:35:14:02:73:b8:a5:3e:25:64:91:32: 8c:6f:7e:07:4e:b4:da:c8:3d:ec:f6:54:cb:02:9c:8a:b4:c7: 99:3d:71:ba:22:1b:ad:cd:09:63:fd:6f:7b:7f:fc:1a:79:bf: dd:a4:59:e0:8f:60:4e:36:1a:d3:42:2f:3d:c3:3f:e4:d5:e3: c3:20:98:69:90:f8:15:b0:37:3c:43:b6:ea:db:ba:97:92:a8: 78:e0:52:1f:a6:94:0c:8d:83:21:1a:37:d3:df:3e:be:04:f5: 71:a9:6b:0f:ae:c1:87:c0:cc:eb:a3:7e:44:cd:4d:8c:09:80: 72:eb:97:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+8UdsDf6ygOLOsGu9J4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZjBmMDdjYTBhNmI0Y2IyYzE1OWU5MDQ1OTc0NTAzYWUy ODg1ODEwHhcNMjUxMjA2MDIwMDQ5WhcNMjUxMjA3MDIwMDQ5WjAzMTEwLwYDVQQD EyhjYTEyZGUwODAzZTE2MDljNzY3OWQ0MjBhMjNjZGU5OGFjMmJmMjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO+oMXW0leensdHC7H5pWQp04nbB wNYf69V0vaMlM0MpLDk5QPI2CXb4KmgyvJy6oiz6CMhM11+lvlSZf3Kea/4EVTAl 0mZBCwEF+3XWzM+gD9VD9Nv1MC4COFum5iknoOxxspG77piddJG7c+bdVeraEOGI tvyLhkMDrr7gU1NNhMOoVqUkBIhI03+4d6Gyjrvbj2M3eNHLQC/3zhvwKbxJjuad FFLkwjpYOfpglRv394Kftfm7apN+UKO2VI4T4Usa3JRjpnTRCJOKEqp1v/NfW0kj jm562sCOj+JwHoD0Nq8FK3oQC2rrb782Vib4ekQ+iJmAf274hvKxBAtKDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMoS3ggD4WCcdnnUIKI83pisK/JOMB8GA1UdIwQY MBaAFPXw8HygprTLLBWekEWXRQOuKIWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZEd2ZLQ210TXNzRlo2UVJaZEZBNjRvaFlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lYjBkOTEtNzA4Yy00OTEwLTg0Zjkt MzIzNDg2Y2EwNTQwLzEvOWZEd2ZLQ210TXNzRlo2UVJaZEZBNjRvaFlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9lYjBkOTEtNzA4Yy00OTEwLTg0ZjktMzIzNDg2Y2EwNTQw LzEvOWZEd2ZLQ210TXNzRlo2UVJaZEZBNjRvaFlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqOEEqiyK WcGiHTYefIS1WHK6VPt8TLPSE2+nvvPXV2k/HqIUzYJI8apQnKEsxQ5gh9reD07W l1TBDg0m76KfWiL91woKAE2iDm/vpreb9EVdQmiF39PFbdDzdiUiVseSy5E7LqyW 0ciV7VH22SCCDvmDUM/LPsuvYt1sF8grlGiAY87rhjUUAnO4pT4lZJEyjG9+B060 2sg97PZUywKcirTHmT1xuiIbrc0JY/1ve3/8Gnm/3aRZ4I9gTjYa00IvPcM/5NXj wyCYaZD4FbA3PEO26tu6l5KoeOBSH6aUDI2DIRo3098+vgT1calrD67Bh8DM66N+ RM1NjAmAcuuXvA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:07:41 2025 by rpki-client