This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft File: 9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json) Hash identifier: qjUTb7ct+CiHH4Lcg6KoIUNPWTR4lc3K5K3S9az3fsM= Subject key identifier: 6C:F4:D5:B9:DA:28:CB:8F:8A:E5:06:45:EF:5D:B6:92:0A:BF:6C:E0 Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a Certificate serial: 019B4625CDB637A4E35B0B0F48B45A63E79F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft Manifest number: 1581 Signing time: Mon 22 Dec 2025 13:00:41 +0000 Manifest this update: Mon 22 Dec 2025 13:00:41 +0000 Manifest next update: Tue 23 Dec 2025 13:00:41 +0000 Files and hashes: 1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: 7QA3D67V/LrKRPj56MYlDJpQqkT5NSXHVXu1wQCp9QE=) 2: BiMv8HqHvhESPjdfNiZspDWMcck.roa (hash: VDtYCMJvov6A+4AQvfrZcV5PKPedCXfg7qI6T/gVIIY=) 3: Ss5v8qqCfPgnwpyM50tDxRLgrEE.roa (hash: hD0+G5MXyDM1luyb7ODeIqLQR1bD/LfiGebJK14aPaI=) 4: id6tq9B8Miy7wJM6L5HxddzH87k.roa (hash: oCe30Ut+jcQoEpHEArIn6mGQ5oeRKOfvgjQV4Jelj2s=) 5: ySaeFcHOtz6rH7T-LHaZk4KLgY4.roa (hash: kRBm8C5K+JyK4jIZs00HDTzQAvxAZ6ZeitYKBzGUqMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:25:cd:b6:37:a4:e3:5b:0b:0f:48:b4:5a:63:e7:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a Validity Not Before: Dec 22 13:00:41 2025 GMT Not After : Dec 23 13:00:41 2025 GMT Subject: CN=6cf4d5b9da28cb8f8ae50645ef5db6920abf6ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f6:64:c9:4e:06:d9:31:2c:8f:4b:bc:fe:d7: fe:19:d7:64:af:8d:3b:a4:06:f4:d2:14:23:3d:78: a4:d7:52:1c:b5:8f:8f:68:06:b4:53:4f:bc:c8:ad: a0:a4:44:af:c8:4a:02:76:37:15:13:9e:8c:8d:fc: 1a:02:fb:34:1d:d0:56:f0:17:6e:25:49:23:e6:c5: 34:ce:27:8f:aa:7a:b0:9e:e7:92:d0:ac:6f:3c:45: 52:0f:ca:52:a4:75:1f:13:68:eb:2b:fc:2a:3e:c3: 43:85:6d:44:b0:ef:93:f0:6e:1e:16:30:5d:8a:52: 37:6c:b1:8e:c1:83:78:9f:cc:6e:be:e8:85:a2:37: 69:a2:89:be:da:63:fb:70:38:10:dd:6b:f6:86:d0: 4a:57:75:6a:a3:f6:2f:9e:ee:fa:5e:8f:06:7d:59: 9a:80:48:fc:a1:7a:cb:6d:7c:92:90:87:1e:d1:bc: 0c:c9:8f:c4:9b:23:05:4b:35:ed:5c:3f:2f:ca:db: 42:67:52:61:ce:4b:20:2f:fd:b5:f7:16:91:1b:4b: f7:33:d2:92:eb:da:fa:0d:eb:6f:61:76:ea:7b:f8: 8b:66:61:e3:13:8f:59:ff:ea:3b:ea:0d:cd:ad:a0: 2f:a5:bf:13:5d:98:13:c2:2b:80:67:8c:ca:21:33: be:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F4:D5:B9:DA:28:CB:8F:8A:E5:06:45:EF:5D:B6:92:0A:BF:6C:E0 X509v3 Authority Key Identifier: keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:f3:21:3e:de:86:75:69:5e:2c:fb:dd:7a:37:67:be:ae:20: 06:43:8f:2b:db:ef:2c:5b:98:61:64:5f:d6:41:b8:df:f5:fc: b8:45:81:8a:66:81:0d:36:7a:cd:e2:28:2b:89:ce:ee:a4:27: 81:86:b0:54:4d:46:59:9a:d2:a0:f1:77:53:52:89:0e:30:04: ad:41:c3:6b:e4:42:83:e3:ee:b1:d5:11:c2:e4:1b:8f:30:88: fd:1a:7e:f4:01:30:5d:0e:df:1b:81:04:7b:9f:5e:d9:d1:69: e2:67:af:a3:6c:0f:65:cc:7e:3f:6b:1b:a9:64:bf:33:33:32: 42:64:4d:c6:35:ff:f3:c5:14:3b:55:76:3a:cb:10:6e:e7:a7: 7e:a2:a4:00:b9:0a:bb:02:26:97:f7:36:1b:34:e7:ee:f9:63: 22:81:20:45:ea:27:b8:d2:85:ef:7c:cf:99:c3:df:5e:08:52: 9a:e5:3f:4d:6f:9f:2c:72:01:1a:14:43:44:f8:40:44:a0:19: 8e:90:84:50:71:42:dd:28:ce:ee:0f:c0:91:b8:a9:08:ed:80: b3:53:65:fd:e7:24:4c:8c:87:45:a2:a3:1f:8b:da:cc:92:4d: 74:66:30:f2:4d:59:d7:12:37:50:c8:03:ad:5a:9d:b8:c3:4c: 64:ec:b2:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJc22N6TjWwsPSLRaY+efMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NTFkYzk4NzVlMzVlYzU4MGM1NzFmZDA0MTZmNGQ1ZjVk NDE1OGEwHhcNMjUxMjIyMTMwMDQxWhcNMjUxMjIzMTMwMDQxWjAzMTEwLwYDVQQD Eyg2Y2Y0ZDViOWRhMjhjYjhmOGFlNTA2NDVlZjVkYjY5MjBhYmY2Y2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfZkyU4G2TEsj0u8/tf+Gddkr407 pAb00hQjPXik11IctY+PaAa0U0+8yK2gpESvyEoCdjcVE56MjfwaAvs0HdBW8Bdu JUkj5sU0ziePqnqwnueS0KxvPEVSD8pSpHUfE2jrK/wqPsNDhW1EsO+T8G4eFjBd ilI3bLGOwYN4n8xuvuiFojdpoom+2mP7cDgQ3Wv2htBKV3Vqo/Yvnu76Xo8GfVma gEj8oXrLbXySkIce0bwMyY/EmyMFSzXtXD8vyttCZ1JhzksgL/219xaRG0v3M9KS 69r6DetvYXbqe/iLZmHjE49Z/+o76g3NraAvpb8TXZgTwiuAZ4zKITO+0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGz01bnaKMuPiuUGRe9dtpIKv2zgMB8GA1UdIwQY MBaAFPZR3Jh1417FgMVx/QQW9NX11BWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUt MDc1MTAzODE0MjBhLzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUtMDc1MTAzODE0MjBh LzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfMhPt6G dWleLPvdejdnvq4gBkOPK9vvLFuYYWRf1kG43/X8uEWBimaBDTZ6zeIoK4nO7qQn gYawVE1GWZrSoPF3U1KJDjAErUHDa+RCg+PusdURwuQbjzCI/Rp+9AEwXQ7fG4EE e59e2dFp4mevo2wPZcx+P2sbqWS/MzMyQmRNxjX/88UUO1V2OssQbuenfqKkALkK uwIml/c2GzTn7vljIoEgReonuNKF73zPmcPfXghSmuU/TW+fLHIBGhRDRPhARKAZ jpCEUHFC3SjO7g/AkbipCO2As1Nl/eckTIyHRaKjH4vazJJNdGYw8k1Z1xI3UMgD rVqduMNMZOyyww== -----END CERTIFICATE-----Generated at Mon Dec 22 20:33:32 2025 by rpki-client