This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft File: 9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft (raw, json) Hash identifier: 0dz310W4dKJy+MjTMawfrX3MIUigCYMbihbVASgul8E= Subject key identifier: 3D:BB:B3:69:CC:DF:DA:CF:36:05:40:6B:92:FB:2B:16:0F:2D:08:37 Authority key identifier: F4:ED:5E:5D:BB:A1:EA:B6:D3:95:8E:59:41:82:9C:9D:A1:B2:C6:7F Certificate issuer: /CN=f4ed5e5dbba1eab6d3958e5941829c9da1b2c67f Certificate serial: 019B2D0BB151BE9EC98F814FAE163DEAE63C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft Manifest number: 0B8C Signing time: Wed 17 Dec 2025 16:01:39 +0000 Manifest this update: Wed 17 Dec 2025 16:01:39 +0000 Manifest next update: Thu 18 Dec 2025 16:01:39 +0000 Files and hashes: 1: 9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl (hash: 2Fnsf5dN/AwZFGaOX+P5BmkUcke/30D1j40w6cYyTHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:b1:51:be:9e:c9:8f:81:4f:ae:16:3d:ea:e6:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4ed5e5dbba1eab6d3958e5941829c9da1b2c67f Validity Not Before: Dec 17 16:01:39 2025 GMT Not After : Dec 18 16:01:39 2025 GMT Subject: CN=3dbbb369ccdfdacf3605406b92fb2b160f2d0837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:57:5c:f9:84:c3:99:53:74:b8:a8:bb:72:5b: 2a:35:a4:af:d4:b1:7f:d8:a1:fc:ba:f9:3f:39:09: 8d:48:43:b2:27:60:ab:5b:d4:dd:fe:71:00:a9:93: 70:ff:f2:80:79:37:b5:9b:b6:8a:25:52:68:97:e9: 7b:25:4d:db:c2:84:fb:c6:a4:49:22:86:8e:88:f5: 22:32:57:3b:10:65:0c:53:b5:5f:9c:3b:57:fc:fd: ef:2d:a1:50:8b:c4:95:36:b8:36:50:f4:0f:66:26: d2:0e:74:48:3c:ae:f6:ac:ee:0b:4d:68:ce:bc:a9: 62:45:33:cc:69:f9:43:e9:cf:bf:7c:33:3e:71:27: 5a:40:4c:50:5b:83:43:0a:74:48:56:30:fd:40:ca: d3:b9:62:74:fa:f5:8a:11:08:56:bf:72:43:e3:91: 68:e8:98:e1:76:42:dd:60:44:da:e5:12:f6:bd:b1: 5d:fc:d1:2d:47:81:8e:bf:4c:c2:64:04:77:a5:12: 7f:8c:9f:24:1e:a1:3a:31:5e:7f:ae:4c:3a:15:ce: ab:3d:3a:6f:3e:77:f9:99:2d:a7:c1:ae:65:07:f6: 5e:14:ab:be:3e:e5:bc:5b:b4:46:e2:2f:2a:1d:4b: 76:0d:35:b8:e1:d0:37:a9:de:8d:eb:6e:4d:1b:0c: ce:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:BB:B3:69:CC:DF:DA:CF:36:05:40:6B:92:FB:2B:16:0F:2D:08:37 X509v3 Authority Key Identifier: keyid:F4:ED:5E:5D:BB:A1:EA:B6:D3:95:8E:59:41:82:9C:9D:A1:B2:C6:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/afc86c-25b0-474c-a5c4-db1a6bbcbb72/1/9O1eXbuh6rbTlY5ZQYKcnaGyxn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:c3:68:2c:64:7a:d3:b0:1f:91:48:d4:55:4c:52:d3:5e:1c: 3e:97:0b:ae:cc:63:a7:cc:17:bb:6f:12:c0:ca:7f:8a:ce:52: 9c:6f:c7:ed:36:b4:14:4e:4d:7f:02:fd:be:af:f4:60:9f:15: b6:b0:ba:71:95:aa:00:36:e9:5d:44:1c:39:a4:90:c3:37:fb: f9:35:c3:e0:75:48:a1:ec:59:ed:82:30:f8:a2:b6:a6:f0:3d: ed:57:72:2f:73:a3:c7:ce:7e:47:6b:ed:09:7b:8e:be:b9:07: 0d:ab:51:5d:6e:86:89:6b:04:c4:ba:e4:18:0e:ce:9f:ad:e4: f6:7e:fb:31:ae:25:02:61:65:72:8d:ef:62:48:80:b0:84:eb: 50:1d:e0:df:3e:41:14:6c:bb:e7:77:35:15:0e:bf:f4:49:46: bb:f1:40:5b:97:d6:c6:f9:86:20:2a:22:03:c1:f9:2e:07:49: 4c:4b:e2:81:78:ab:d2:d5:b5:90:38:64:8f:b2:45:a2:43:6d: 01:c0:21:bf:b1:6b:41:ad:71:43:9c:54:03:98:1c:8e:3f:4c: 05:fd:ee:6c:fd:ae:e1:77:d5:78:bc:56:f5:91:bf:7c:22:27: a1:a4:42:4b:d8:ae:48:94:80:2b:4d:b3:a1:47:16:0f:16:6b: a4:5b:06:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC7FRvp7Jj4FPrhY96uY8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZWQ1ZTVkYmJhMWVhYjZkMzk1OGU1OTQxODI5YzlkYTFi MmM2N2YwHhcNMjUxMjE3MTYwMTM5WhcNMjUxMjE4MTYwMTM5WjAzMTEwLwYDVQQD EygzZGJiYjM2OWNjZGZkYWNmMzYwNTQwNmI5MmZiMmIxNjBmMmQwODM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFdc+YTDmVN0uKi7clsqNaSv1LF/ 2KH8uvk/OQmNSEOyJ2CrW9Td/nEAqZNw//KAeTe1m7aKJVJol+l7JU3bwoT7xqRJ IoaOiPUiMlc7EGUMU7VfnDtX/P3vLaFQi8SVNrg2UPQPZibSDnRIPK72rO4LTWjO vKliRTPMaflD6c+/fDM+cSdaQExQW4NDCnRIVjD9QMrTuWJ0+vWKEQhWv3JD45Fo 6JjhdkLdYETa5RL2vbFd/NEtR4GOv0zCZAR3pRJ/jJ8kHqE6MV5/rkw6Fc6rPTpv Pnf5mS2nwa5lB/ZeFKu+PuW8W7RG4i8qHUt2DTW44dA3qd6N625NGwzOjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD27s2nM39rPNgVAa5L7KxYPLQg3MB8GA1UdIwQY MBaAFPTtXl27oeq205WOWUGCnJ2hssZ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU8xZVhidWg2cmJUbFk1WlFZS2NuYUd5eG44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hZmM4NmMtMjViMC00NzRjLWE1YzQt ZGIxYTZiYmNiYjcyLzEvOU8xZVhidWg2cmJUbFk1WlFZS2NuYUd5eG44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9hZmM4NmMtMjViMC00NzRjLWE1YzQtZGIxYTZiYmNiYjcy LzEvOU8xZVhidWg2cmJUbFk1WlFZS2NuYUd5eG44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfMNoLGR6 07AfkUjUVUxS014cPpcLrsxjp8wXu28SwMp/is5SnG/H7Ta0FE5NfwL9vq/0YJ8V trC6cZWqADbpXUQcOaSQwzf7+TXD4HVIoexZ7YIw+KK2pvA97VdyL3Ojx85+R2vt CXuOvrkHDatRXW6GiWsExLrkGA7On63k9n77Ma4lAmFlco3vYkiAsITrUB3g3z5B FGy753c1FQ6/9ElGu/FAW5fWxvmGICoiA8H5LgdJTEvigXir0tW1kDhkj7JFokNt AcAhv7FrQa1xQ5xUA5gcjj9MBf3ubP2u4XfVeLxW9ZG/fCInoaRCS9iuSJSAK02z oUcWDxZrpFsGOQ== -----END CERTIFICATE-----Generated at Wed Dec 17 19:02:52 2025 by rpki-client