This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft File: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft (raw, json) Hash identifier: hPkf3oUOhe2bUB51MdcFK1l2cwDG4PRJUHHvc99XtQQ= Subject key identifier: 26:4E:FB:2B:7A:64:57:39:76:35:1B:C5:22:30:7B:71:71:4F:3F:16 Authority key identifier: F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40 Certificate issuer: /CN=f4dcb5741e29352ddd42469270178506008a4140 Certificate serial: 019B25F5F393BD54AD564B6C484509417BF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft Manifest number: 03E8 Signing time: Tue 16 Dec 2025 07:00:34 +0000 Manifest this update: Tue 16 Dec 2025 07:00:34 +0000 Manifest next update: Wed 17 Dec 2025 07:00:34 +0000 Files and hashes: 1: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl (hash: RO+lWROLGo46KhQGXZ+/YffxAdUVN/9RjujhZI3AySs=) 2: T3T0ZkFQFPUc2BEd0op7sYAz8XA.roa (hash: WuXt/ChkvGDFgO8WDo1RKpja79/oAcXrCCkvEETR+EY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 07:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:f5:f3:93:bd:54:ad:56:4b:6c:48:45:09:41:7b:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4dcb5741e29352ddd42469270178506008a4140 Validity Not Before: Dec 16 07:00:34 2025 GMT Not After : Dec 17 07:00:34 2025 GMT Subject: CN=264efb2b7a64573976351bc522307b71714f3f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4d:59:62:ac:67:ff:00:8d:c7:05:d0:3b:ae: 76:be:9f:eb:46:60:5d:43:f1:3f:c8:89:57:d5:16: 56:da:3d:13:c0:c5:46:f9:72:31:17:6b:99:fe:b8: ef:06:03:36:71:e7:ee:f2:cf:a9:d3:45:20:a6:13: 21:7e:95:8f:51:7e:b7:d0:e7:9e:9a:5e:00:5b:ca: 05:47:e1:36:84:38:73:75:52:85:c6:92:b0:8b:f7: 2f:5a:62:46:5c:5c:cb:20:81:d8:4b:83:5f:c2:1c: 19:0b:40:ef:95:f7:4e:e6:4c:50:df:b3:23:82:09: 2a:0b:cb:97:39:09:3a:9b:21:86:de:97:29:cd:13: a5:87:b6:d3:87:5b:b0:5f:7b:ba:2d:2b:60:b2:dd: 30:1d:dd:a3:41:06:d7:96:a8:ef:82:2e:1c:51:f5: 5e:47:bf:3f:3b:55:53:2b:cd:4f:17:66:bf:27:cf: b5:6f:bb:98:df:1d:2d:ad:57:06:bb:12:47:a5:66: 60:70:92:84:30:d0:0b:12:8a:8f:b1:2e:11:fe:a8: a4:7f:79:61:b0:8a:f0:b9:0d:13:15:90:7d:28:07: f8:ed:a4:10:9b:13:2d:32:ad:22:08:a7:6e:17:43: cd:1f:f2:38:1d:a2:13:99:1e:70:68:8d:b0:eb:c7: a1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:4E:FB:2B:7A:64:57:39:76:35:1B:C5:22:30:7B:71:71:4F:3F:16 X509v3 Authority Key Identifier: keyid:F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:2b:73:4c:29:06:20:36:89:67:66:82:af:78:bd:8b:85:ca: 53:73:f9:40:23:5e:2c:ef:b2:c5:ca:c4:78:0d:ec:b7:f5:12: 40:2b:68:fd:50:2c:15:e8:03:f9:92:1b:3e:e1:7e:78:e3:f5: c1:a5:79:85:00:eb:e2:aa:d8:19:ec:10:8c:27:9a:18:a3:e8: 25:f6:0a:6c:6b:86:73:51:81:3d:15:22:37:1f:6e:16:59:c0: 77:14:69:b8:29:9b:52:af:7a:ad:0a:41:b7:31:f5:be:25:a8: 8e:2e:d7:ab:78:f7:fa:67:82:a2:15:8f:a4:25:a7:06:42:41: cc:da:d6:ab:61:4d:a0:93:b2:65:87:94:d1:0d:c9:37:3c:49: 61:88:87:a7:4c:3d:49:8e:68:ca:a4:7b:34:ee:41:35:79:0d: 22:21:2b:1b:1c:ab:95:16:36:e7:31:3c:50:55:71:55:6a:07: 82:9d:af:a1:fb:53:89:8f:c3:1e:1c:c1:ea:93:dd:04:9f:be: 8f:bc:f0:6d:99:94:db:fd:0f:93:81:4e:8d:14:1f:5f:39:4c: 7a:8d:13:47:e4:54:e7:fe:bb:91:af:2b:68:21:93:fd:4f:dc: 5c:5d:bc:71:82:0a:63:60:d7:59:4f:7e:be:40:63:d1:ce:ec: 55:8d:36:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsl9fOTvVStVktsSEUJQXv3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZGNiNTc0MWUyOTM1MmRkZDQyNDY5MjcwMTc4NTA2MDA4 YTQxNDAwHhcNMjUxMjE2MDcwMDM0WhcNMjUxMjE3MDcwMDM0WjAzMTEwLwYDVQQD EygyNjRlZmIyYjdhNjQ1NzM5NzYzNTFiYzUyMjMwN2I3MTcxNGYzZjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE1ZYqxn/wCNxwXQO652vp/rRmBd Q/E/yIlX1RZW2j0TwMVG+XIxF2uZ/rjvBgM2cefu8s+p00UgphMhfpWPUX630Oee ml4AW8oFR+E2hDhzdVKFxpKwi/cvWmJGXFzLIIHYS4NfwhwZC0DvlfdO5kxQ37Mj ggkqC8uXOQk6myGG3pcpzROlh7bTh1uwX3u6LStgst0wHd2jQQbXlqjvgi4cUfVe R78/O1VTK81PF2a/J8+1b7uY3x0trVcGuxJHpWZgcJKEMNALEoqPsS4R/qikf3lh sIrwuQ0TFZB9KAf47aQQmxMtMq0iCKduF0PNH/I4HaITmR5waI2w68eh5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZO+yt6ZFc5djUbxSIwe3FxTz8WMB8GA1UdIwQY MBaAFPTctXQeKTUt3UJGknAXhQYAikFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU55MWRCNHBOUzNkUWthU2NCZUZCZ0NLUVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMDczZjEtOTZlZC00YjM1LWEzZjQt ZjgzMDc3Nzk5NDViLzEvOU55MWRCNHBOUzNkUWthU2NCZUZCZ0NLUVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9kMDczZjEtOTZlZC00YjM1LWEzZjQtZjgzMDc3Nzk5NDVi LzEvOU55MWRCNHBOUzNkUWthU2NCZUZCZ0NLUVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJCtzTCkG IDaJZ2aCr3i9i4XKU3P5QCNeLO+yxcrEeA3st/USQCto/VAsFegD+ZIbPuF+eOP1 waV5hQDr4qrYGewQjCeaGKPoJfYKbGuGc1GBPRUiNx9uFlnAdxRpuCmbUq96rQpB tzH1viWoji7Xq3j3+meCohWPpCWnBkJBzNrWq2FNoJOyZYeU0Q3JNzxJYYiHp0w9 SY5oyqR7NO5BNXkNIiErGxyrlRY25zE8UFVxVWoHgp2voftTiY/DHhzB6pPdBJ++ j7zwbZmU2/0Pk4FOjRQfXzlMeo0TR+RU5/67ka8raCGT/U/cXF28cYIKY2DXWU9+ vkBj0c7sVY02Jg== -----END CERTIFICATE-----Generated at Tue Dec 16 16:39:45 2025 by rpki-client