This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft File: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft (raw, json) Hash identifier: i15Re86olDJMYb4kfMaSuelaHHu/cGlI9RahZgnAx7M= Subject key identifier: 08:C4:0C:BB:71:1D:BB:D4:65:22:54:9D:6C:11:DB:D0:50:15:CB:52 Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0 Certificate issuer: /CN=f541d46893aaa164fe2673990d07aa6c071003c0 Certificate serial: 019B37FC49ED8CAF07519E2A1BFF8CDA092E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft Manifest number: 152D Signing time: Fri 19 Dec 2025 19:00:39 +0000 Manifest this update: Fri 19 Dec 2025 19:00:39 +0000 Manifest next update: Sat 20 Dec 2025 19:00:39 +0000 Files and hashes: 1: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl (hash: CRd3YGzjpN+5d9bidYzGck8ApcUOiCL0njOrUsPBJY8=) 2: JYVK5YIo9oFduSfdge32BhR1llk.roa (hash: MLgxgkj7xVD4j08JzP+4k7sw1diRLF6XHz+tW1zn9ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:49:ed:8c:af:07:51:9e:2a:1b:ff:8c:da:09:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0 Validity Not Before: Dec 19 19:00:39 2025 GMT Not After : Dec 20 19:00:39 2025 GMT Subject: CN=08c40cbb711dbbd46522549d6c11dbd05015cb52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:55:47:43:a2:e0:a3:e1:c3:c8:c9:be:c8:24: fd:72:69:2e:00:79:87:f8:58:0f:0a:77:f1:2e:1c: f8:fe:1d:c0:c3:ec:4e:a6:9b:4e:01:60:d3:0e:0e: f0:b0:ee:69:f2:e8:ba:9c:2f:10:76:d9:92:63:ec: 55:ab:b4:a3:86:18:24:ab:ae:4d:4d:a3:61:b9:d6: aa:d7:0a:77:91:ef:28:c8:cc:e5:4d:c1:92:b0:f6: 20:55:1f:a1:1a:e5:9f:eb:c9:6e:f0:37:f4:e5:36: 47:47:c5:8e:6d:97:a6:9b:97:e2:8d:37:27:20:e5: 0b:c0:f2:bd:50:4e:fc:c5:76:52:f8:8c:00:ad:da: 4d:e5:62:e7:0e:91:fd:60:d9:f7:7b:eb:d8:21:79: 2d:5c:92:e7:e6:1f:74:90:4e:38:09:0c:af:ee:13: cb:dc:db:fe:5f:bb:1a:5b:d2:f8:12:c3:19:0a:0b: 05:ba:c6:e8:e5:62:f9:95:74:15:ed:f7:90:7e:7e: 9e:5c:27:7c:c0:15:cb:2e:53:f8:62:65:13:40:3d: af:5f:7a:e4:30:39:ef:24:8e:96:f3:49:39:3c:a3: 0f:a4:66:3f:2e:c9:75:ba:bd:7b:cc:4a:69:4c:a7: 01:1c:13:48:b4:62:36:8d:87:46:c5:b9:43:0e:df: 47:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C4:0C:BB:71:1D:BB:D4:65:22:54:9D:6C:11:DB:D0:50:15:CB:52 X509v3 Authority Key Identifier: keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:d7:5f:f8:8e:3c:be:e0:f6:c0:bf:a4:eb:e7:1a:ac:c8:f9: 05:aa:c7:a0:e5:d3:69:e8:43:bc:68:ab:a2:6b:20:da:4b:e8: 01:dd:09:fd:50:15:31:34:8e:41:f6:ba:7e:f7:51:f9:4f:6b: 85:a0:ac:04:5a:30:ff:1c:f4:fd:c0:b2:2b:5c:5e:41:65:ae: d6:4d:b5:40:ba:39:aa:f3:f3:2a:50:4f:9b:4e:82:02:4e:dd: 71:7e:68:c7:86:22:d7:ea:f3:e8:ce:fe:d9:be:1c:4c:9b:70: d7:d1:68:6a:84:52:cd:ba:22:ee:88:e5:16:90:2a:96:38:8e: 2c:30:76:f9:08:4f:cd:75:34:ff:7f:0e:cd:ac:92:b8:90:cc: 38:b8:fe:6d:17:dd:d4:cd:07:07:71:45:2e:fd:9d:b6:ac:73: d9:14:2e:e9:84:0f:75:c1:e0:1d:f8:96:8e:3f:a8:78:2a:6a: 89:10:22:32:af:d0:ed:b0:ca:70:b6:c9:31:73:75:28:e6:ea: a9:7a:5b:2c:e1:af:8d:86:48:1a:c9:07:dd:7b:38:92:a9:42: ff:9f:c0:6f:f0:e2:92:c8:75:29:b0:af:0c:91:97:4d:02:1f: 05:1d:61:ce:60:5f:21:e7:2e:43:f0:b4:7e:c4:7f:4c:ea:50: ec:f2:a2:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/EntjK8HUZ4qG/+M2gkuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NDFkNDY4OTNhYWExNjRmZTI2NzM5OTBkMDdhYTZjMDcx MDAzYzAwHhcNMjUxMjE5MTkwMDM5WhcNMjUxMjIwMTkwMDM5WjAzMTEwLwYDVQQD EygwOGM0MGNiYjcxMWRiYmQ0NjUyMjU0OWQ2YzExZGJkMDUwMTVjYjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlVHQ6Lgo+HDyMm+yCT9cmkuAHmH +FgPCnfxLhz4/h3Aw+xOpptOAWDTDg7wsO5p8ui6nC8QdtmSY+xVq7Sjhhgkq65N TaNhudaq1wp3ke8oyMzlTcGSsPYgVR+hGuWf68lu8Df05TZHR8WObZemm5fijTcn IOULwPK9UE78xXZS+IwArdpN5WLnDpH9YNn3e+vYIXktXJLn5h90kE44CQyv7hPL 3Nv+X7saW9L4EsMZCgsFusbo5WL5lXQV7feQfn6eXCd8wBXLLlP4YmUTQD2vX3rk MDnvJI6W80k5PKMPpGY/Lsl1ur17zEppTKcBHBNItGI2jYdGxblDDt9HoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjEDLtxHbvUZSJUnWwR29BQFctSMB8GA1UdIwQY MBaAFPVB1GiTqqFk/iZzmQ0HqmwHEAPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVVIVWFKT3FvV1QtSm5PWkRRZXFiQWNRQThBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yZTk1ZTctNTY0NC00NmYyLThmYTMt Mzk4YzA0NTE4OWViLzEvOVVIVWFKT3FvV1QtSm5PWkRRZXFiQWNRQThBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8yZTk1ZTctNTY0NC00NmYyLThmYTMtMzk4YzA0NTE4OWVi LzEvOVVIVWFKT3FvV1QtSm5PWkRRZXFiQWNRQThBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiddf+I48 vuD2wL+k6+carMj5BarHoOXTaehDvGiromsg2kvoAd0J/VAVMTSOQfa6fvdR+U9r haCsBFow/xz0/cCyK1xeQWWu1k21QLo5qvPzKlBPm06CAk7dcX5ox4Yi1+rz6M7+ 2b4cTJtw19FoaoRSzboi7ojlFpAqljiOLDB2+QhPzXU0/38OzaySuJDMOLj+bRfd 1M0HB3FFLv2dtqxz2RQu6YQPdcHgHfiWjj+oeCpqiRAiMq/Q7bDKcLbJMXN1KObq qXpbLOGvjYZIGskH3Xs4kqlC/5/Ab/Diksh1KbCvDJGXTQIfBR1hzmBfIecuQ/C0 fsR/TOpQ7PKiqg== -----END CERTIFICATE-----Generated at Fri Dec 19 22:52:45 2025 by rpki-client