This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft File: 9bulXh8L-GE-qbu-KXooGzyDgYA.mft (raw, json) Hash identifier: g7QWNgrYLvNgGjc0BjrsEKkleHhF7lQrCb4f/9nltpU= Subject key identifier: 41:B0:62:D1:F7:6B:0F:28:21:92:5D:5E:18:8B:2B:B3:A9:12:97:79 Authority key identifier: F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80 Certificate issuer: /CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180 Certificate serial: 019B2176208C819FC5E62310513EDA2BD321 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft Manifest number: 177B Signing time: Mon 15 Dec 2025 10:02:28 +0000 Manifest this update: Mon 15 Dec 2025 10:02:28 +0000 Manifest next update: Tue 16 Dec 2025 10:02:28 +0000 Files and hashes: 1: 9bulXh8L-GE-qbu-KXooGzyDgYA.crl (hash: QPYD9CN2s0dhaPL9WLzSznaNWfE7uWFM8ylMsOeiy3w=) 2: UKsojMJQKjwqEBjlQ0hvZzPL5fM.roa (hash: JwS6NOp3JTf4Gv4MdW3hpkLuh9j4F7ahSArR1W30tPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:76:20:8c:81:9f:c5:e6:23:10:51:3e:da:2b:d3:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5bba55e1f0bf8613ea9bbbe297a281b3c838180 Validity Not Before: Dec 15 10:02:28 2025 GMT Not After : Dec 16 10:02:28 2025 GMT Subject: CN=41b062d1f76b0f2821925d5e188b2bb3a9129779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:26:df:41:35:7e:5a:d1:c9:3f:99:85:a1:4b: f5:6d:89:80:f3:22:21:0e:85:ad:b4:c0:92:a9:b6: 15:fe:d8:21:1b:b2:98:4f:65:ea:f8:e8:2c:ef:95: b1:ed:3c:71:ac:b4:ba:08:a6:95:89:12:e3:d8:7c: 87:d8:cc:77:91:58:d8:2a:69:1e:cb:86:9a:00:1f: 5b:b4:6e:c4:08:b4:15:87:0a:19:5d:67:e7:13:0f: 40:3a:15:40:ea:c3:6f:44:c1:76:db:21:68:37:69: 04:83:3d:91:cf:1f:96:3b:1b:57:52:ce:25:dc:9f: 21:61:d3:21:57:17:53:83:b0:d8:3f:73:e5:0e:e8: aa:71:15:72:c5:e7:14:59:25:f3:2c:6e:b7:7c:a0: f5:e6:15:95:22:a7:b1:82:02:cc:ad:bb:51:b8:42: c4:3a:5b:3e:ea:6c:07:49:e8:d6:2c:fa:ce:e6:45: 9a:23:b2:a7:d9:1e:00:4d:b5:d0:14:ce:e3:3c:bd: e1:be:2d:04:26:03:77:50:9d:ac:4a:01:b9:c9:35: e6:68:fc:df:02:1f:9f:59:ea:ed:6d:7c:11:25:50: 0d:dd:ee:38:0c:e3:a2:2a:bd:ee:33:a5:48:b7:a7: b3:f7:c6:11:b1:26:e1:88:77:6a:bb:5e:56:68:b4: 58:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B0:62:D1:F7:6B:0F:28:21:92:5D:5E:18:8B:2B:B3:A9:12:97:79 X509v3 Authority Key Identifier: keyid:F5:BB:A5:5E:1F:0B:F8:61:3E:A9:BB:BE:29:7A:28:1B:3C:83:81:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9bulXh8L-GE-qbu-KXooGzyDgYA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/17cc4a-292c-4d50-8d3e-f5b97c0f0f24/1/9bulXh8L-GE-qbu-KXooGzyDgYA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:fd:76:c8:f5:93:f3:b2:e4:d5:09:42:8b:05:72:f2:8d:b2: e6:5d:93:65:33:ea:1c:80:12:5f:b3:5e:f5:bc:52:66:ea:20: f7:71:21:45:f9:0a:25:90:d2:05:77:91:c3:b8:11:b1:6c:e6: 3e:3e:b8:0c:ac:68:da:4a:84:3d:04:42:fd:49:4d:a6:27:11: 91:16:f8:22:98:21:e4:1e:25:b1:74:1e:b9:f8:bf:c0:6b:33: f6:e5:6e:4a:f3:1e:a4:d6:81:3c:18:98:0b:b9:02:3e:f7:ad: 73:e5:f2:21:34:ff:ac:0e:76:29:05:80:52:1d:5d:40:bc:2e: 01:6e:ba:d4:ed:60:0e:2b:59:6e:4a:f8:63:2d:c4:e8:02:d2: 96:3b:33:4f:45:cb:1e:ff:10:0d:51:b8:d7:6d:48:ef:85:2c: 89:b9:8b:1e:6f:3b:4b:36:4f:97:27:aa:e6:c5:f0:4f:d5:9a: 43:c6:84:bf:66:c7:c1:fa:42:77:a9:62:5d:4c:ff:62:19:bb: 1e:f5:53:08:42:31:af:a4:0e:f4:37:a3:65:d8:95:96:71:17: 8e:00:47:20:30:c5:0b:e2:27:2d:4f:3c:f6:52:8c:25:4a:48: 71:90:d6:4c:1d:5a:b3:21:93:fc:70:72:5c:75:07:b4:a4:de: 3b:bf:79:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdiCMgZ/F5iMQUT7aK9MhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1YmJhNTVlMWYwYmY4NjEzZWE5YmJiZTI5N2EyODFiM2M4 MzgxODAwHhcNMjUxMjE1MTAwMjI4WhcNMjUxMjE2MTAwMjI4WjAzMTEwLwYDVQQD Eyg0MWIwNjJkMWY3NmIwZjI4MjE5MjVkNWUxODhiMmJiM2E5MTI5Nzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SbfQTV+WtHJP5mFoUv1bYmA8yIh DoWttMCSqbYV/tghG7KYT2Xq+Ogs75Wx7TxxrLS6CKaViRLj2HyH2Mx3kVjYKmke y4aaAB9btG7ECLQVhwoZXWfnEw9AOhVA6sNvRMF22yFoN2kEgz2Rzx+WOxtXUs4l 3J8hYdMhVxdTg7DYP3PlDuiqcRVyxecUWSXzLG63fKD15hWVIqexggLMrbtRuELE Ols+6mwHSejWLPrO5kWaI7Kn2R4ATbXQFM7jPL3hvi0EJgN3UJ2sSgG5yTXmaPzf Ah+fWertbXwRJVAN3e44DOOiKr3uM6VIt6ez98YRsSbhiHdqu15WaLRYEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGwYtH3aw8oIZJdXhiLK7OpEpd5MB8GA1UdIwQY MBaAFPW7pV4fC/hhPqm7vil6KBs8g4GAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWJ1bFhoOEwtR0UtcWJ1LUtYb29HenlEZ1lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xN2NjNGEtMjkyYy00ZDUwLThkM2Ut ZjViOTdjMGYwZjI0LzEvOWJ1bFhoOEwtR0UtcWJ1LUtYb29HenlEZ1lBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8xN2NjNGEtMjkyYy00ZDUwLThkM2UtZjViOTdjMGYwZjI0 LzEvOWJ1bFhoOEwtR0UtcWJ1LUtYb29HenlEZ1lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsP12yPWT 87Lk1QlCiwVy8o2y5l2TZTPqHIASX7Ne9bxSZuog93EhRfkKJZDSBXeRw7gRsWzm Pj64DKxo2kqEPQRC/UlNpicRkRb4Ipgh5B4lsXQeufi/wGsz9uVuSvMepNaBPBiY C7kCPvetc+XyITT/rA52KQWAUh1dQLwuAW661O1gDitZbkr4Yy3E6ALSljszT0XL Hv8QDVG4121I74UsibmLHm87SzZPlyeq5sXwT9WaQ8aEv2bHwfpCd6liXUz/Yhm7 HvVTCEIxr6QO9DejZdiVlnEXjgBHIDDFC+InLU889lKMJUpIcZDWTB1asyGT/HBy XHUHtKTeO795Rg== -----END CERTIFICATE-----Generated at Mon Dec 15 14:41:29 2025 by rpki-client