This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft File: 9nKGX4FRC5RVt-qbyMfa15k9U5o.mft (raw, json) Hash identifier: 9l3Oc6qmYGEDEV3T8cv8wTtEBLLyHFRMkb0nVW4XpGs= Subject key identifier: 6E:A8:F7:CE:A3:9D:DC:CF:21:43:51:D1:20:83:D4:CB:5E:AA:2F:15 Authority key identifier: F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A Certificate issuer: /CN=f672865f81510b9455b7ea9bc8c7dad7993d539a Certificate serial: 019AF3521D78977138566032B7FC872179FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft Manifest number: 9D Signing time: Sat 06 Dec 2025 11:00:36 +0000 Manifest this update: Sat 06 Dec 2025 11:00:36 +0000 Manifest next update: Sun 07 Dec 2025 11:00:36 +0000 Files and hashes: 1: 9nKGX4FRC5RVt-qbyMfa15k9U5o.crl (hash: PtX3Mef5BS1pjNHWt6ChIDuDTxaWa46WdYIal9QpPJw=) 2: eRy2kmfW8UDcIPq4LHplflCvw9A.roa (hash: ZWExOEe6M7iJ72nBf8q960kB6kZXayCU4gvOM3MlPx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:1d:78:97:71:38:56:60:32:b7:fc:87:21:79:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f672865f81510b9455b7ea9bc8c7dad7993d539a Validity Not Before: Dec 6 11:00:36 2025 GMT Not After : Dec 7 11:00:36 2025 GMT Subject: CN=6ea8f7cea39ddccf214351d12083d4cb5eaa2f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bf:5c:1c:e8:6d:fe:6c:8e:e0:12:e2:08:18: 30:af:99:3c:da:dd:40:8a:65:1d:30:4a:66:18:22: c6:1a:44:07:36:cb:81:ef:5a:bd:58:65:3e:fb:d9: 23:24:2d:7c:84:19:42:40:e0:33:d9:27:92:59:8e: a4:9f:a2:a5:52:11:31:57:6d:26:79:9e:06:93:4c: 2f:46:2a:fd:a0:64:c9:97:10:10:cc:01:3d:42:7f: 95:43:8c:f2:4c:e0:38:b7:1b:63:6b:cf:05:64:e0: f6:58:67:75:36:4f:d3:56:aa:8e:9d:4e:52:80:fb: 79:29:df:1f:f9:f8:68:d6:47:33:55:01:a9:fb:4c: 3d:a0:ee:af:90:c6:d2:30:fa:ae:59:28:2e:4c:db: 99:53:51:3a:52:7b:8c:6d:cb:36:6a:49:4d:82:2d: 0d:ad:ab:91:4c:ef:71:dc:1c:99:43:63:db:c9:cb: 2c:c7:10:d8:73:42:f6:b2:d1:9c:64:ab:12:6d:d9: c5:41:82:26:e3:c6:45:c1:e6:65:11:1e:eb:bd:ac: 8a:53:e2:a8:c3:2e:ca:63:05:ee:60:8e:1c:23:aa: 87:19:0a:7d:61:2e:9e:60:77:21:1f:3e:21:91:9b: a0:60:d5:4f:d3:95:17:74:15:4c:3f:11:ac:a8:e0: a4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A8:F7:CE:A3:9D:DC:CF:21:43:51:D1:20:83:D4:CB:5E:AA:2F:15 X509v3 Authority Key Identifier: keyid:F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:f5:19:62:cd:44:a3:21:10:42:1e:28:f4:f1:bd:dd:9f:23: ee:e6:50:d1:3a:ab:79:b3:e6:73:ef:af:02:1e:fd:68:e6:fd: cd:55:20:da:d0:a9:0e:a3:6d:ce:87:b3:f2:3d:02:3c:f3:9c: 21:90:25:b8:ad:fe:66:ba:eb:3c:c5:3e:cd:3b:ed:b1:13:ab: a1:c8:03:b2:c7:23:0a:ab:43:22:ce:9b:a5:49:13:3a:13:2a: 1c:91:84:a9:33:18:cb:c5:46:27:1c:88:fd:43:25:7c:40:1d: e2:54:a2:8f:02:c7:c7:84:49:df:d1:a5:77:3c:2b:58:b4:58: ad:c0:96:e5:01:92:b7:7a:f9:54:00:84:ca:79:3c:93:7c:1d: 34:83:27:d9:f8:4b:aa:d3:23:54:39:d3:ff:6b:42:75:5b:5d: eb:02:2f:50:f1:c0:1e:df:7d:b1:30:d4:e1:a3:24:a6:9c:32: c5:9f:55:57:23:25:9a:1c:9a:9e:87:69:ee:45:8d:60:95:d5: 95:bc:58:e2:bf:27:4d:91:a9:95:bc:c5:0c:e9:72:58:53:59: 5d:b2:99:a6:82:d7:d5:ed:f5:41:fb:02:dc:fc:fb:21:30:62: 4d:99:22:8e:a3:a7:aa:0b:cb:b2:6e:89:cd:8e:12:93:a4:5a: 68:db:23:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUh14l3E4VmAyt/yHIXn/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NzI4NjVmODE1MTBiOTQ1NWI3ZWE5YmM4YzdkYWQ3OTkz ZDUzOWEwHhcNMjUxMjA2MTEwMDM2WhcNMjUxMjA3MTEwMDM2WjAzMTEwLwYDVQQD Eyg2ZWE4ZjdjZWEzOWRkY2NmMjE0MzUxZDEyMDgzZDRjYjVlYWEyZjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb9cHOht/myO4BLiCBgwr5k82t1A imUdMEpmGCLGGkQHNsuB71q9WGU++9kjJC18hBlCQOAz2SeSWY6kn6KlUhExV20m eZ4Gk0wvRir9oGTJlxAQzAE9Qn+VQ4zyTOA4txtja88FZOD2WGd1Nk/TVqqOnU5S gPt5Kd8f+fho1kczVQGp+0w9oO6vkMbSMPquWSguTNuZU1E6UnuMbcs2aklNgi0N rauRTO9x3ByZQ2PbycssxxDYc0L2stGcZKsSbdnFQYIm48ZFweZlER7rvayKU+Ko wy7KYwXuYI4cI6qHGQp9YS6eYHchHz4hkZugYNVP05UXdBVMPxGsqOCkuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6o986jndzPIUNR0SCD1Mteqi8VMB8GA1UdIwQY MBaAFPZyhl+BUQuUVbfqm8jH2teZPVOaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW5LR1g0RlJDNVJWdC1xYnlNZmExNWs5VTVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xNDM1MWMtYjFlZC00MThlLWJhZTQt YTE5MjI3MDk3ZmYzLzEvOW5LR1g0RlJDNVJWdC1xYnlNZmExNWs5VTVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xNDM1MWMtYjFlZC00MThlLWJhZTQtYTE5MjI3MDk3ZmYz LzEvOW5LR1g0RlJDNVJWdC1xYnlNZmExNWs5VTVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPUZYs1E oyEQQh4o9PG93Z8j7uZQ0TqrebPmc++vAh79aOb9zVUg2tCpDqNtzoez8j0CPPOc IZAluK3+ZrrrPMU+zTvtsROrocgDsscjCqtDIs6bpUkTOhMqHJGEqTMYy8VGJxyI /UMlfEAd4lSijwLHx4RJ39GldzwrWLRYrcCW5QGSt3r5VACEynk8k3wdNIMn2fhL qtMjVDnT/2tCdVtd6wIvUPHAHt99sTDU4aMkppwyxZ9VVyMlmhyanodp7kWNYJXV lbxY4r8nTZGplbzFDOlyWFNZXbKZpoLX1e31QfsC3Pz7ITBiTZkijqOnqgvLsm6J zY4Sk6RaaNsjaQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:41:26 2025 by rpki-client