This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft File: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft (raw, json) Hash identifier: SAx2wgDqy/2wHzZo28PQuuUu8vll/5wegI8zTW3B3hM= Subject key identifier: F4:38:7D:76:08:B7:C0:66:78:0A:3A:01:02:64:AC:5E:EB:37:65:77 Authority key identifier: 73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9 Certificate issuer: /CN=73d85f8438d73b5668e89cc692646f9487965fa9 Certificate serial: 019B38A24B3C2FB271C890A2C84D11747CE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft Manifest number: 0349 Signing time: Fri 19 Dec 2025 22:01:58 +0000 Manifest this update: Fri 19 Dec 2025 22:01:58 +0000 Manifest next update: Sat 20 Dec 2025 22:01:58 +0000 Files and hashes: 1: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl (hash: GkZ0KyLB88SdwslvyTSinnwm4H9zoZpUJv+kMOxzhBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:4b:3c:2f:b2:71:c8:90:a2:c8:4d:11:74:7c:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73d85f8438d73b5668e89cc692646f9487965fa9 Validity Not Before: Dec 19 22:01:58 2025 GMT Not After : Dec 20 22:01:58 2025 GMT Subject: CN=f4387d7608b7c066780a3a010264ac5eeb376577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0a:68:ac:3b:ae:84:aa:7d:b0:44:e1:78:9f: cc:53:a0:3b:bc:26:83:8c:2c:49:64:be:fb:3f:16: 86:67:12:78:1c:22:07:85:c0:17:44:c2:17:28:f9: 70:25:a7:70:f7:c4:17:51:dd:26:ee:fb:41:d8:67: 15:5b:ae:35:1a:f4:50:93:1f:c1:24:15:22:8c:92: c2:b9:4c:2f:9b:f0:e6:7a:1c:5d:f4:71:0a:4d:7d: fb:62:8c:d7:2d:43:21:6c:cc:82:9f:f4:37:3c:59: e8:bb:7e:9c:76:14:f4:20:fc:6e:08:d6:cf:8c:83: f0:22:a1:16:0d:ac:34:27:cc:d8:e5:e7:ef:54:bb: e6:45:9b:c9:03:bb:84:31:0f:9d:06:1b:07:67:2e: 9e:0d:63:34:4c:14:2b:87:85:98:8d:f6:08:82:67: 12:e4:12:e1:74:18:12:ce:d6:30:82:38:8b:c8:e4: 39:c0:f2:e6:82:fc:7c:bc:67:f4:29:81:8c:f0:73: 85:77:c7:41:c9:26:38:61:9e:a6:02:38:af:3f:97: ef:13:1b:6d:94:ec:20:50:de:0a:2d:99:51:7a:3b: cf:96:3a:88:96:8c:65:67:13:7b:c9:b6:d4:82:cc: 70:2c:51:bf:e5:8b:54:74:69:53:2a:f2:4d:3a:03: 1c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:38:7D:76:08:B7:C0:66:78:0A:3A:01:02:64:AC:5E:EB:37:65:77 X509v3 Authority Key Identifier: keyid:73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:46:68:49:bc:89:f9:53:fe:4b:cc:a5:4e:60:1e:ab:a4:3e: a9:31:64:44:d9:29:14:19:06:c7:96:d1:be:ed:be:3e:94:53: 39:dc:7a:3b:b9:cf:1c:ea:fa:c0:ac:4a:d3:43:60:44:e8:96: 18:a1:0a:1a:c4:69:88:1a:4d:b1:37:4a:04:72:ad:3d:bb:15: e1:38:e7:6c:b6:fc:0f:59:1b:47:89:0c:a5:c0:3d:1c:a3:9b: 81:c2:95:2e:34:d4:15:34:7f:aa:c5:15:0e:63:cd:d7:69:df: ca:f3:83:e9:6d:a7:00:4f:3f:e0:0b:66:dc:cf:0a:52:b3:64: 42:35:6b:9e:8a:bf:92:a7:7d:8a:aa:96:46:50:8e:82:b0:ac: ae:03:9d:0e:fd:ff:fa:42:2e:c1:f4:91:bd:51:ff:6a:3c:4b: 1a:82:7a:aa:98:6c:a2:f3:cc:f0:4c:34:db:40:6a:74:4f:06: fd:70:bc:3a:ce:5b:d9:6e:a9:e8:12:90:5e:ce:3d:24:97:e7: f7:8d:76:b5:ec:46:5a:3d:3e:95:90:fa:e8:5b:61:a9:6f:c5: ad:ef:9b:52:95:36:ed:d6:14:14:90:ce:8a:75:ab:cd:ea:08: f4:85:92:fc:02:7f:60:29:51:21:e9:5e:7a:f6:06:82:f7:8c: 7e:14:0c:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oks8L7JxyJCiyE0RdHzhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZDg1Zjg0MzhkNzNiNTY2OGU4OWNjNjkyNjQ2Zjk0ODc5 NjVmYTkwHhcNMjUxMjE5MjIwMTU4WhcNMjUxMjIwMjIwMTU4WjAzMTEwLwYDVQQD EyhmNDM4N2Q3NjA4YjdjMDY2NzgwYTNhMDEwMjY0YWM1ZWViMzc2NTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQporDuuhKp9sETheJ/MU6A7vCaD jCxJZL77PxaGZxJ4HCIHhcAXRMIXKPlwJadw98QXUd0m7vtB2GcVW641GvRQkx/B JBUijJLCuUwvm/Dmehxd9HEKTX37YozXLUMhbMyCn/Q3PFnou36cdhT0IPxuCNbP jIPwIqEWDaw0J8zY5efvVLvmRZvJA7uEMQ+dBhsHZy6eDWM0TBQrh4WYjfYIgmcS 5BLhdBgSztYwgjiLyOQ5wPLmgvx8vGf0KYGM8HOFd8dBySY4YZ6mAjivP5fvExtt lOwgUN4KLZlRejvPljqIloxlZxN7ybbUgsxwLFG/5YtUdGlTKvJNOgMcIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPQ4fXYIt8BmeAo6AQJkrF7rN2V3MB8GA1UdIwQY MBaAFHPYX4Q41ztWaOicxpJkb5SHll+pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzloZmhEalhPMVpvNkp6R2ttUnZsSWVXWDZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9mNmQ0NzYtNWVjMS00MjdhLTgyZTAt YWVlMGM4MjQwOTllLzEvYzloZmhEalhPMVpvNkp6R2ttUnZsSWVXWDZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9mNmQ0NzYtNWVjMS00MjdhLTgyZTAtYWVlMGM4MjQwOTll LzEvYzloZmhEalhPMVpvNkp6R2ttUnZsSWVXWDZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIEZoSbyJ +VP+S8ylTmAeq6Q+qTFkRNkpFBkGx5bRvu2+PpRTOdx6O7nPHOr6wKxK00NgROiW GKEKGsRpiBpNsTdKBHKtPbsV4TjnbLb8D1kbR4kMpcA9HKObgcKVLjTUFTR/qsUV DmPN12nfyvOD6W2nAE8/4Atm3M8KUrNkQjVrnoq/kqd9iqqWRlCOgrCsrgOdDv3/ +kIuwfSRvVH/ajxLGoJ6qphsovPM8Ew020BqdE8G/XC8Os5b2W6p6BKQXs49JJfn 9412texGWj0+lZD66FthqW/Fre+bUpU27dYUFJDOinWrzeoI9IWS/AJ/YClRIele evYGgveMfhQMwQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:36:23 2025 by rpki-client