This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft File: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft (raw, json) Hash identifier: Vh0NzdPtFEQvURKxPtxZeMldep9iQpo4gxajSo+FpWk= Subject key identifier: 9F:3F:28:46:04:FC:50:0B:C8:35:77:00:44:C4:A2:9C:06:1F:46:00 Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4 Certificate issuer: /CN=bbd351b274fc23a42728303638a0d62b606401b4 Certificate serial: 019AF540B6A7EF6FEE9AE3681175ABA78893 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 20:00:50 +0000 Manifest this update: Sat 06 Dec 2025 20:00:50 +0000 Manifest next update: Sun 07 Dec 2025 20:00:50 +0000 Files and hashes: 1: 5g1tjgsfll7LK-waAj9bTQ2h-3c.roa (hash: 8D1n33aMnmCgAozOd2zA5z3xSs5pmebBm8HLBHCuK3k=) 2: LH7w3vOlTcRmJHq2EtyJwGzFlEE.roa (hash: BdRuTFIKBfgw0BiPV5lECgqiOEd6ZtJOGCfbNoIAYBE=) 3: Q6nJt5OyB3yAAOcFFRG5qOehAok.roa (hash: KO9C76YDm/Okx701iaZdKEGFLB0y+hfe45N6CADpuPc=) 4: mSE5jFaDyQq229roQ5L8OUwLYf8.roa (hash: 9syYjhG++XjU5LLyMYmj6GtRt7K4tV+VTMTyeR8mVrI=) 5: mrSrlKE7xCslqlPTXvwVWDdiqIY.roa (hash: p/QlzvPV8hfJGKn1J+54dIx9OQB/pBF0YHBs+kQo1HM=) 6: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl (hash: 7TuEaev24leF42s3GhuI4gCITHhp3MO9vUU+b2Et80c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:b6:a7:ef:6f:ee:9a:e3:68:11:75:ab:a7:88:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4 Validity Not Before: Dec 6 20:00:50 2025 GMT Not After : Dec 7 20:00:50 2025 GMT Subject: CN=9f3f284604fc500bc835770044c4a29c061f4600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9b:d4:9e:7c:ec:f2:9d:2f:67:f2:52:25:53: f4:a3:45:92:cc:3c:cb:53:75:b1:7f:38:29:68:57: 77:b6:c4:1d:09:c8:4f:e4:0b:4c:23:99:c3:b3:a9: e9:d1:2e:b2:95:5c:27:1f:2a:dd:9e:7a:90:42:60: 62:a2:0c:66:f1:3f:76:67:9a:0b:a1:4e:44:11:eb: 67:32:70:45:db:4c:7d:d9:6e:8b:f4:63:ce:95:7e: e4:28:0b:9a:c9:61:0b:2e:e9:33:3f:33:01:60:45: ff:c2:c8:d9:3e:dc:cd:73:d8:30:3e:de:1b:ba:fd: e5:f5:d7:8b:f2:4f:0d:7f:c7:8b:bc:76:29:93:e5: 07:13:ee:23:cf:99:4a:ce:a7:f7:5a:b9:c4:29:76: 99:71:de:db:27:c2:e4:32:5b:8a:d7:f3:51:38:ad: 00:00:bc:f2:5d:54:19:70:c6:39:9c:5d:89:e5:35: aa:b0:00:28:3a:9e:89:41:2c:c8:d5:27:4e:8c:5b: b5:92:f9:d5:5a:17:66:2a:88:f7:c9:bf:df:37:31: e5:37:f8:ec:ea:6b:bc:95:3e:f1:fd:0b:59:4e:d4: 67:1e:e9:a2:e2:44:7c:d5:0f:15:4d:0b:c6:57:c6: 67:13:cb:29:8f:80:59:e1:ce:2d:10:8a:a2:79:7a: 61:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:3F:28:46:04:FC:50:0B:C8:35:77:00:44:C4:A2:9C:06:1F:46:00 X509v3 Authority Key Identifier: keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:cf:15:35:5f:2a:00:aa:5f:9f:96:39:83:0d:2c:d7:43:9c: 38:0c:56:07:ee:86:a6:b9:03:2d:02:af:60:e7:05:23:ff:df: 19:1f:c6:be:36:b3:65:19:cc:f4:71:8d:73:41:bb:27:d3:3b: 1b:ac:db:84:01:70:2f:a1:5d:7e:45:1a:11:a4:ff:7a:98:7a: 28:95:0a:9d:54:ae:85:6b:58:9a:b5:ee:10:94:7e:98:85:64: b8:62:24:78:9d:10:0d:b2:cf:8c:e4:ca:15:d3:ae:2c:3e:f8: 11:8c:34:8d:78:5b:14:3b:71:07:10:87:14:df:f8:50:48:d9: 6b:75:03:09:cd:06:a6:fb:8c:6b:2b:1f:0a:9f:01:da:ce:71: 1a:52:73:97:e5:cf:38:e8:b1:fd:48:40:6e:b0:ab:03:c5:3e: 98:4f:b8:fd:f3:19:5d:db:b9:56:b4:03:30:32:ad:45:8a:35: d5:5a:b1:0f:ce:85:48:98:69:97:9d:b2:da:2c:df:b6:a8:1f: 58:2c:21:4e:bc:37:fe:e7:98:1a:f9:75:e3:c5:c6:60:3c:50: e3:12:3a:a8:bc:a6:d4:48:c7:89:5c:34:9e:af:2f:61:d5:40: de:d2:8e:2a:e1:49:e8:7b:de:7f:4a:80:18:e2:de:c5:44:56: 63:5b:40:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QLan72/umuNoEXWrp4iTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZDM1MWIyNzRmYzIzYTQyNzI4MzAzNjM4YTBkNjJiNjA2 NDAxYjQwHhcNMjUxMjA2MjAwMDUwWhcNMjUxMjA3MjAwMDUwWjAzMTEwLwYDVQQD Eyg5ZjNmMjg0NjA0ZmM1MDBiYzgzNTc3MDA0NGM0YTI5YzA2MWY0NjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJvUnnzs8p0vZ/JSJVP0o0WSzDzL U3WxfzgpaFd3tsQdCchP5AtMI5nDs6np0S6ylVwnHyrdnnqQQmBiogxm8T92Z5oL oU5EEetnMnBF20x92W6L9GPOlX7kKAuayWELLukzPzMBYEX/wsjZPtzNc9gwPt4b uv3l9deL8k8Nf8eLvHYpk+UHE+4jz5lKzqf3WrnEKXaZcd7bJ8LkMluK1/NROK0A ALzyXVQZcMY5nF2J5TWqsAAoOp6JQSzI1SdOjFu1kvnVWhdmKoj3yb/fNzHlN/js 6mu8lT7x/QtZTtRnHumi4kR81Q8VTQvGV8ZnE8spj4BZ4c4tEIqieXphmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8/KEYE/FALyDV3AETEopwGH0YAMB8GA1UdIwQY MBaAFLvTUbJ0/COkJygwNjig1itgZAG0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTlOUnNuVDhJNlFuS0RBMk9LRFdLMkJrQWJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jMWY5MGEtMmJhZC00MWI0LWIxYTYt NDZiMzAyOGEwM2IwLzEvdTlOUnNuVDhJNlFuS0RBMk9LRFdLMkJrQWJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9jMWY5MGEtMmJhZC00MWI0LWIxYTYtNDZiMzAyOGEwM2Iw LzEvdTlOUnNuVDhJNlFuS0RBMk9LRFdLMkJrQWJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAis8VNV8q AKpfn5Y5gw0s10OcOAxWB+6GprkDLQKvYOcFI//fGR/GvjazZRnM9HGNc0G7J9M7 G6zbhAFwL6FdfkUaEaT/eph6KJUKnVSuhWtYmrXuEJR+mIVkuGIkeJ0QDbLPjOTK FdOuLD74EYw0jXhbFDtxBxCHFN/4UEjZa3UDCc0GpvuMaysfCp8B2s5xGlJzl+XP OOix/UhAbrCrA8U+mE+4/fMZXdu5VrQDMDKtRYo11VqxD86FSJhpl52y2izftqgf WCwhTrw3/ueYGvl148XGYDxQ4xI6qLym1EjHiVw0nq8vYdVA3tKOKuFJ6Hvef0qA GOLexURWY1tACg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:20:09 2025 by rpki-client