This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft File: x9qC6HeTPZwslSyzdsk6qjN919I.mft (raw, json) Hash identifier: htvkfHmk2UwhGKH5tcCSNEPtf5OR9G8tJhZrQxM1QjY= Subject key identifier: 4F:40:B6:99:37:2B:61:16:56:0E:69:00:B4:6F:FE:6A:FC:6C:CB:F5 Authority key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2 Certificate issuer: /CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2 Certificate serial: 019AF19BB4799035BCE88EC4CD942B115880 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:01:44 +0000 Manifest this update: Sat 06 Dec 2025 03:01:44 +0000 Manifest next update: Sun 07 Dec 2025 03:01:44 +0000 Files and hashes: 1: cFEMcTrZnpJM6OI3sLSildoG7_o.roa (hash: 9byuaTVIbm1V06CyQEH6JUvAc6lfIjdANtz73++4OCM=) 2: x9qC6HeTPZwslSyzdsk6qjN919I.crl (hash: ew6vBRjYWLb6yHmzEGdktfJg2PTgw8KJ5ocOBiscCRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:b4:79:90:35:bc:e8:8e:c4:cd:94:2b:11:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2 Validity Not Before: Dec 6 03:01:44 2025 GMT Not After : Dec 7 03:01:44 2025 GMT Subject: CN=4f40b699372b6116560e6900b46ffe6afc6ccbf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f6:6c:04:37:ce:40:44:ea:27:a6:a2:86:0e: e6:f2:81:d8:0e:83:bd:42:75:c5:b7:d9:cf:89:21: a7:e0:3e:0d:c8:c0:be:18:38:18:be:40:cf:b4:e1: 1d:9d:74:8c:c6:e3:9d:c4:f5:db:67:4c:85:22:99: 2c:28:80:8a:a3:76:b4:82:a2:c5:53:f1:f0:68:19: 05:94:9f:22:79:ca:1a:2d:b3:16:ae:ad:bc:99:31: 85:36:a9:c3:e4:37:1b:5b:8f:e7:dd:3c:d3:23:99: 22:16:fe:f1:ec:85:cd:41:18:e6:a3:66:b9:16:b8: d4:d5:37:b0:6f:fa:05:b5:ed:66:14:8e:39:13:35: 93:59:1e:46:3e:6c:76:ea:3d:c2:1f:02:ec:0d:47: db:1d:7d:8b:10:4d:38:95:cb:91:01:36:71:a7:89: 13:8a:32:01:78:f4:26:b0:82:3c:d7:16:1a:8c:67: 68:f9:ac:be:2c:79:a5:de:de:00:69:56:67:64:34: 14:1d:f4:24:a1:1f:39:16:42:6c:34:49:15:f1:69: 03:59:9c:62:31:26:8b:a4:6c:b0:54:17:96:e9:75: d7:ed:df:92:82:12:b4:ef:88:9b:f7:f6:4f:11:df: 3b:ef:ff:6c:95:1a:d9:7e:37:8c:b7:dc:2d:76:a2: e1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:40:B6:99:37:2B:61:16:56:0E:69:00:B4:6F:FE:6A:FC:6C:CB:F5 X509v3 Authority Key Identifier: keyid:C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:b9:f8:8a:c8:f3:33:d9:e6:14:dd:81:b2:7d:0b:41:e5:9a: 6f:5c:66:96:90:74:58:ff:5e:8b:e8:51:8d:f7:d0:1f:da:72: c1:4d:92:44:c0:2c:fd:1d:7f:ac:09:07:96:60:fa:65:c1:68: e1:a7:38:d6:c9:7b:ad:b8:57:28:99:82:fd:00:6d:b6:58:73: 96:97:3c:f9:90:c1:5c:6c:98:d1:b3:27:71:4e:13:66:1d:27: ea:17:b6:02:ee:8e:9e:38:f2:ce:cf:2e:da:1f:0b:d0:bd:29: bc:99:b4:53:18:2f:cd:53:38:99:72:50:92:82:65:67:24:84: 3a:d5:7a:a0:be:0a:ff:c7:75:ab:b4:d8:50:c2:7e:a4:f8:d9: a8:86:a9:86:54:27:d5:f1:b9:54:26:b8:91:14:71:35:a6:cc: f9:04:3c:d7:5e:ac:ec:2e:70:21:14:53:61:c3:22:5b:d3:31: f6:b3:50:77:e7:c5:fb:2a:a3:d6:ad:fd:d1:9e:07:e8:7d:ca: 66:66:68:1c:4c:9c:4d:4b:25:a1:30:92:38:5e:69:a3:eb:b0: 3e:4c:98:73:f1:09:31:f1:f4:7f:7e:6c:cf:27:e2:fd:9d:ae: 45:d7:ad:84:82:f4:67:60:fd:ed:13:49:53:96:b3:f9:fc:b9: e4:0d:05:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7R5kDW86I7EzZQrEViAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZGE4MmU4Nzc5MzNkOWMyYzk1MmNiMzc2YzkzYWFhMzM3 ZGQ3ZDIwHhcNMjUxMjA2MDMwMTQ0WhcNMjUxMjA3MDMwMTQ0WjAzMTEwLwYDVQQD Eyg0ZjQwYjY5OTM3MmI2MTE2NTYwZTY5MDBiNDZmZmU2YWZjNmNjYmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvZsBDfOQETqJ6aihg7m8oHYDoO9 QnXFt9nPiSGn4D4NyMC+GDgYvkDPtOEdnXSMxuOdxPXbZ0yFIpksKICKo3a0gqLF U/HwaBkFlJ8iecoaLbMWrq28mTGFNqnD5DcbW4/n3TzTI5kiFv7x7IXNQRjmo2a5 FrjU1Tewb/oFte1mFI45EzWTWR5GPmx26j3CHwLsDUfbHX2LEE04lcuRATZxp4kT ijIBePQmsII81xYajGdo+ay+LHml3t4AaVZnZDQUHfQkoR85FkJsNEkV8WkDWZxi MSaLpGywVBeW6XXX7d+SghK074ib9/ZPEd877/9slRrZfjeMt9wtdqLhywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9Atpk3K2EWVg5pALRv/mr8bMv1MB8GA1UdIwQY MBaAFMfaguh3kz2cLJUss3bJOqozfdfSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDlxQzZIZVRQWndzbFN5emRzazZxak45MTlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jYjUzN2QtZDdlZi00MDljLTgyM2Mt ZWFlNGY2ZDMzY2E2LzEveDlxQzZIZVRQWndzbFN5emRzazZxak45MTlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jYjUzN2QtZDdlZi00MDljLTgyM2MtZWFlNGY2ZDMzY2E2 LzEveDlxQzZIZVRQWndzbFN5emRzazZxak45MTlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAULn4isjz M9nmFN2Bsn0LQeWab1xmlpB0WP9ei+hRjffQH9pywU2SRMAs/R1/rAkHlmD6ZcFo 4ac41sl7rbhXKJmC/QBttlhzlpc8+ZDBXGyY0bMncU4TZh0n6he2Au6Onjjyzs8u 2h8L0L0pvJm0UxgvzVM4mXJQkoJlZySEOtV6oL4K/8d1q7TYUMJ+pPjZqIaphlQn 1fG5VCa4kRRxNabM+QQ8116s7C5wIRRTYcMiW9Mx9rNQd+fF+yqj1q390Z4H6H3K ZmZoHEycTUsloTCSOF5po+uwPkyYc/EJMfH0f35szyfi/Z2uRdethIL0Z2D97RNJ U5az+fy55A0F5A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:18 2025 by rpki-client