This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft File: 9qFyLout3DWKFYdCZbRmdD5wNlY.mft (raw, json) Hash identifier: JD3x9LKjPnXpn3hgq2tGflNCKcpycDV5/y3RYV8lu58= Subject key identifier: 64:C4:FE:4C:A4:C3:93:70:18:A1:51:D3:84:1B:67:80:6F:F6:0A:1F Authority key identifier: F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56 Certificate issuer: /CN=f6a1722e8baddc358a15874265b466743e703656 Certificate serial: 019AF088BB2F31B393893F6D95D1D355FC49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft Manifest number: 1762 Signing time: Fri 05 Dec 2025 22:01:23 +0000 Manifest this update: Fri 05 Dec 2025 22:01:23 +0000 Manifest next update: Sat 06 Dec 2025 22:01:23 +0000 Files and hashes: 1: 3gQqwuDknMD1by1_10QyLFjqTSQ.roa (hash: 7rS6ATpFIQATm/1nB63KRTZ9v2IEBgVrsScfZWZHuYo=) 2: 9qFyLout3DWKFYdCZbRmdD5wNlY.crl (hash: CjD/T6C7sG5wnN88/L9cvM8553EdJZ/7WYExQseZdJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:bb:2f:31:b3:93:89:3f:6d:95:d1:d3:55:fc:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6a1722e8baddc358a15874265b466743e703656 Validity Not Before: Dec 5 22:01:23 2025 GMT Not After : Dec 6 22:01:23 2025 GMT Subject: CN=64c4fe4ca4c3937018a151d3841b67806ff60a1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:11:26:16:88:3e:fd:7c:c2:94:01:36:02:d7: 4d:a4:f8:06:f6:c1:00:19:a1:bc:56:79:81:35:93: 6d:30:33:bc:e3:88:25:7c:66:48:f7:30:80:a2:50: e2:0a:46:9c:14:28:22:68:31:80:7c:a3:0f:a8:db: 67:26:80:a5:3d:69:f4:f5:24:0f:4b:ef:18:12:37: 8e:57:09:73:88:95:72:f6:86:65:9c:a8:4b:33:8e: 7c:93:ef:ac:e0:0b:12:d9:d9:97:83:a7:02:08:38: d5:83:1b:cd:d2:b4:af:06:85:53:e6:8e:d6:e5:ec: aa:53:45:0a:89:2f:ac:15:b5:50:ca:f6:78:ab:9d: 9c:c5:c4:f3:5e:1f:d7:d6:93:a5:f1:1e:44:a3:f5: 07:2a:92:c7:82:e0:66:71:da:8a:b0:1c:cf:b5:3f: 2f:75:4f:47:28:13:73:a4:4b:c2:2d:22:d5:0f:03: 8a:f0:42:2d:29:64:52:8e:71:08:71:ff:fc:2f:63: 21:d1:78:94:f5:2e:73:fe:c6:9c:d4:26:47:a9:6e: fc:1a:dc:10:53:ae:f3:6a:19:66:d9:0a:f0:72:3c: b3:20:ed:e6:06:30:64:f9:63:0d:e3:d3:a0:dd:aa: cf:dc:fa:d4:8e:0a:f4:e3:eb:81:53:fd:81:f2:54: 79:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C4:FE:4C:A4:C3:93:70:18:A1:51:D3:84:1B:67:80:6F:F6:0A:1F X509v3 Authority Key Identifier: keyid:F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:6e:63:f9:d7:f2:0f:40:b7:8a:a5:0f:71:22:89:6a:ee:1b: 47:c1:94:15:ad:20:17:ac:4e:2e:c8:3f:e6:49:9c:5a:e7:d0: 06:ee:c6:2c:61:ac:e0:21:8f:27:d8:05:ad:85:7b:d8:d2:a7: f0:63:19:00:62:83:83:8e:a2:3d:0f:ad:b3:76:50:4e:ec:13: b2:b4:4b:1a:b3:00:b9:5f:10:aa:4c:39:1e:50:24:a4:f8:d6: cc:25:16:79:b6:14:32:61:ab:bf:8e:44:89:96:29:4c:ab:3e: 84:91:36:38:56:78:ec:89:31:49:99:e8:84:ad:cf:b9:78:92: 91:23:ea:25:fb:f5:23:07:07:64:58:71:fa:19:17:7c:8a:08: 7d:1f:20:d2:ce:7a:40:68:35:e2:f6:9d:08:1c:04:a5:5d:19: 89:c4:24:8a:70:02:18:49:ca:bc:c1:a5:78:c1:64:81:d9:8a: a6:89:cb:77:42:0d:a6:32:d5:a3:36:76:7e:62:60:fe:cb:a9: 3a:e2:8f:75:b6:34:5d:eb:a0:2a:27:48:6a:bc:ac:45:f8:2e: 7b:bd:59:4f:71:b0:d7:8f:97:e6:79:97:41:4a:b0:ba:6c:55: 25:09:66:f7:7c:41:94:61:58:39:4a:f5:49:a7:cc:cd:09:77: ab:40:f8:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiLsvMbOTiT9tldHTVfxJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YTE3MjJlOGJhZGRjMzU4YTE1ODc0MjY1YjQ2Njc0M2U3 MDM2NTYwHhcNMjUxMjA1MjIwMTIzWhcNMjUxMjA2MjIwMTIzWjAzMTEwLwYDVQQD Eyg2NGM0ZmU0Y2E0YzM5MzcwMThhMTUxZDM4NDFiNjc4MDZmZjYwYTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxEmFog+/XzClAE2AtdNpPgG9sEA GaG8VnmBNZNtMDO844glfGZI9zCAolDiCkacFCgiaDGAfKMPqNtnJoClPWn09SQP S+8YEjeOVwlziJVy9oZlnKhLM458k++s4AsS2dmXg6cCCDjVgxvN0rSvBoVT5o7W 5eyqU0UKiS+sFbVQyvZ4q52cxcTzXh/X1pOl8R5Eo/UHKpLHguBmcdqKsBzPtT8v dU9HKBNzpEvCLSLVDwOK8EItKWRSjnEIcf/8L2Mh0XiU9S5z/sac1CZHqW78GtwQ U67zahlm2QrwcjyzIO3mBjBk+WMN49Og3arP3PrUjgr04+uBU/2B8lR5/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTE/kykw5NwGKFR04QbZ4Bv9gofMB8GA1UdIwQY MBaAFPahci6Lrdw1ihWHQmW0ZnQ+cDZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXFGeUxvdXQzRFdLRllkQ1piUm1kRDV3TmxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy85Y2NmNzItZjJkZi00NWI2LTkzN2It NmUwNzkwNjliNjViLzEvOXFGeUxvdXQzRFdLRllkQ1piUm1kRDV3TmxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy85Y2NmNzItZjJkZi00NWI2LTkzN2ItNmUwNzkwNjliNjVi LzEvOXFGeUxvdXQzRFdLRllkQ1piUm1kRDV3TmxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf25j+dfy D0C3iqUPcSKJau4bR8GUFa0gF6xOLsg/5kmcWufQBu7GLGGs4CGPJ9gFrYV72NKn 8GMZAGKDg46iPQ+ts3ZQTuwTsrRLGrMAuV8Qqkw5HlAkpPjWzCUWebYUMmGrv45E iZYpTKs+hJE2OFZ47IkxSZnohK3PuXiSkSPqJfv1IwcHZFhx+hkXfIoIfR8g0s56 QGg14vadCBwEpV0ZicQkinACGEnKvMGleMFkgdmKponLd0INpjLVozZ2fmJg/sup OuKPdbY0XeugKidIarysRfgue71ZT3Gw14+X5nmXQUqwumxVJQlm93xBlGFYOUr1 SafMzQl3q0D4kw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:19:59 2025 by rpki-client