This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft File: 9Il_29x9JQjfzRTP9gCtQ7knkks.mft (raw, json) Hash identifier: aGC8DDa7N5FhZzjN2M1/Q8oAQdM1sUF9rzhXAy1gNsA= Subject key identifier: 88:B8:7B:CB:38:5C:A5:8C:59:EC:3F:4D:04:BF:47:0C:1D:45:93:2B Authority key identifier: F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B Certificate issuer: /CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b Certificate serial: 019AF35295D911BDFDD4ADE442CDED246726 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft Manifest number: 0C94 Signing time: Sat 06 Dec 2025 11:01:07 +0000 Manifest this update: Sat 06 Dec 2025 11:01:07 +0000 Manifest next update: Sun 07 Dec 2025 11:01:07 +0000 Files and hashes: 1: 9Il_29x9JQjfzRTP9gCtQ7knkks.crl (hash: e0SR4f/vB8e10+JKffJidT23GtGSYI1kqXJ4HpXBspE=) 2: goWXgCcrT8sdpWvs98SjkshS1QQ.roa (hash: pL/QBtJXrUgZbyv/2j+3PUPuF0UtD1Pg09swJJxayTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:95:d9:11:bd:fd:d4:ad:e4:42:cd:ed:24:67:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b Validity Not Before: Dec 6 11:01:07 2025 GMT Not After : Dec 7 11:01:07 2025 GMT Subject: CN=88b87bcb385ca58c59ec3f4d04bf470c1d45932b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0a:1e:a4:15:26:39:6d:bc:08:25:b3:5e:64: 37:0a:2f:81:7a:f2:5b:1f:98:9e:d3:c8:9a:21:bd: 19:82:80:c0:b4:0a:fc:62:78:bb:12:a1:b2:89:14: 69:d9:bd:c1:20:48:4f:6f:fc:dd:e9:27:dd:53:29: 56:98:cb:62:13:55:98:a3:3e:bc:7d:26:14:3a:cf: 68:22:62:0e:43:b8:23:50:ae:9f:c5:3f:9e:c5:53: 3d:d8:62:a7:a1:5c:9c:f8:1e:54:75:cc:0f:fd:d0: 2c:5e:80:ee:56:84:19:50:dd:23:16:4c:cb:ff:ff: 04:eb:15:8c:50:78:67:64:2f:cc:85:9e:40:a5:02: 5e:91:48:e6:09:6d:76:2d:6f:0e:25:1c:0f:66:6a: 93:60:c0:19:2a:cb:41:2d:27:b0:7d:2a:21:a5:8b: 44:11:a4:66:64:79:68:4b:45:2f:2e:97:40:f8:1f: e6:8f:3b:60:9e:f9:fd:03:c1:92:db:f1:20:99:22: cb:29:ad:21:88:1c:87:a7:f9:a6:d2:30:02:13:13: 84:88:1b:81:c3:d6:b4:aa:37:e6:e3:90:9f:01:aa: 5d:44:16:26:c3:aa:e6:12:f4:b7:87:26:ed:8e:92: 00:2a:9e:f5:04:bf:2e:f3:27:ba:ba:0a:48:21:84: 86:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B8:7B:CB:38:5C:A5:8C:59:EC:3F:4D:04:BF:47:0C:1D:45:93:2B X509v3 Authority Key Identifier: keyid:F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:2b:39:73:16:e7:5b:41:7b:ea:bf:d7:a2:41:2c:db:77:a3: 85:a6:59:22:d8:3e:0c:f1:c5:eb:bc:3c:fe:63:b4:5f:e5:c9: 7e:d1:aa:21:4f:18:5e:ef:5f:0a:0e:15:0c:1e:c2:d6:20:2e: 1c:e7:09:1c:d3:05:88:ab:3e:1d:66:12:11:f4:b2:d7:04:a0: 75:62:a2:8c:71:71:64:16:4b:88:44:69:0d:cc:cc:99:20:2b: a5:75:4c:af:a5:45:74:1f:d9:87:55:47:66:5c:a6:2a:ae:15: 43:c8:24:b5:d9:bf:34:c9:e9:e9:f5:83:8e:c1:e8:af:54:0d: 07:51:ef:1f:05:ed:52:d0:a9:6f:ea:5c:0d:4c:4f:52:a7:80: ce:a5:b4:fb:d9:77:38:82:13:ae:56:a6:d7:b9:6f:c2:86:d5: 6c:56:32:9b:92:22:49:27:c6:98:55:24:b6:f0:64:23:d6:0b: 51:58:f7:46:b1:8e:08:69:ac:9a:77:9e:fd:60:22:b6:fe:c5: 4b:f3:2c:1e:9b:33:8a:dc:53:55:bf:57:bc:ac:c8:76:0d:d3: d9:63:fb:b3:57:15:23:ab:a4:aa:9b:23:76:c3:2f:4f:ea:38: e2:a1:09:d3:a6:59:ad:8c:cd:1c:73:e5:0d:e6:d3:66:c7:4a: d7:b7:1a:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUpXZEb391K3kQs3tJGcmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ODk3ZmRiZGM3ZDI1MDhkZmNkMTRjZmY2MDBhZDQzYjky NzkyNGIwHhcNMjUxMjA2MTEwMTA3WhcNMjUxMjA3MTEwMTA3WjAzMTEwLwYDVQQD Eyg4OGI4N2JjYjM4NWNhNThjNTllYzNmNGQwNGJmNDcwYzFkNDU5MzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAoepBUmOW28CCWzXmQ3Ci+BevJb H5ie08iaIb0ZgoDAtAr8Yni7EqGyiRRp2b3BIEhPb/zd6SfdUylWmMtiE1WYoz68 fSYUOs9oImIOQ7gjUK6fxT+exVM92GKnoVyc+B5UdcwP/dAsXoDuVoQZUN0jFkzL //8E6xWMUHhnZC/MhZ5ApQJekUjmCW12LW8OJRwPZmqTYMAZKstBLSewfSohpYtE EaRmZHloS0UvLpdA+B/mjztgnvn9A8GS2/EgmSLLKa0hiByHp/mm0jACExOEiBuB w9a0qjfm45CfAapdRBYmw6rmEvS3hybtjpIAKp71BL8u8ye6ugpIIYSGtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIi4e8s4XKWMWew/TQS/RwwdRZMrMB8GA1UdIwQY MBaAFPSJf9vcfSUI380Uz/YArUO5J5JLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83Yjk5N2ItYmVhNi00ODkxLTk1ZDEt OTRjNmY3NDRkZTQ2LzEvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC83Yjk5N2ItYmVhNi00ODkxLTk1ZDEtOTRjNmY3NDRkZTQ2 LzEvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVys5cxbn W0F76r/XokEs23ejhaZZItg+DPHF67w8/mO0X+XJftGqIU8YXu9fCg4VDB7C1iAu HOcJHNMFiKs+HWYSEfSy1wSgdWKijHFxZBZLiERpDczMmSArpXVMr6VFdB/Zh1VH ZlymKq4VQ8gktdm/NMnp6fWDjsHor1QNB1HvHwXtUtCpb+pcDUxPUqeAzqW0+9l3 OIITrlam17lvwobVbFYym5IiSSfGmFUktvBkI9YLUVj3RrGOCGmsmnee/WAitv7F S/MsHpszitxTVb9XvKzIdg3T2WP7s1cVI6ukqpsjdsMvT+o44qEJ06ZZrYzNHHPl DebTZsdK17caew== -----END CERTIFICATE-----Generated at Sat Dec 6 13:53:58 2025 by rpki-client