This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft File: 9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft (raw, json) Hash identifier: sTtEcJ95IrM9yFap3ABK7kLJICRtGILWGKfeZZEkG2I= Subject key identifier: A7:33:1E:61:02:7B:03:C7:42:F5:D9:1E:9B:CF:E3:41:6F:4F:12:11 Authority key identifier: F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66 Certificate issuer: /CN=f4460d6554d581ebb80e39e45015cd7d36d93f66 Certificate serial: 019ABA753E766B83E45F7CED7C0DDF0A6A94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft Manifest number: 1744 Signing time: Tue 25 Nov 2025 10:00:37 +0000 Manifest this update: Tue 25 Nov 2025 10:00:37 +0000 Manifest next update: Wed 26 Nov 2025 10:00:37 +0000 Files and hashes: 1: 9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl (hash: CWvf0cnWBxu/WnsNYlXX1tqP/3T0jqL+oUdmqY17hLw=) 2: LlgzLPbqvndzjINwUyqBSYNVUGU.roa (hash: XoxwnbkJ+YTYL7TqUKVjhOHoVLZf5ofK0CZEjvcyK/8=) 3: PGS1oZw9diLKm80xvba4ttY7lOY.roa (hash: cvoGOrBt83PsBex3WYE3oC8O/LqiWSgJX37kVGMXEQ8=) 4: a9e6waB73R-2gGYR6nbP9rwuh8I.roa (hash: 1oI2gE9eJeYPxxdSHWs9WVzpaBQMrNDfnP1js7RW/p4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 10:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:75:3e:76:6b:83:e4:5f:7c:ed:7c:0d:df:0a:6a:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4460d6554d581ebb80e39e45015cd7d36d93f66 Validity Not Before: Nov 25 10:00:37 2025 GMT Not After : Nov 26 10:00:37 2025 GMT Subject: CN=a7331e61027b03c742f5d91e9bcfe3416f4f1211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:18:0f:df:b0:1b:09:4a:8e:d6:91:0f:6d:cc: 2b:1b:bd:c4:35:61:f2:74:32:f6:b5:1a:92:a4:bf: dc:bf:db:85:69:ee:be:bf:e9:15:a7:85:99:c5:fd: 16:24:14:65:05:19:e4:e2:5a:63:67:da:39:cb:a8: d3:18:8b:53:98:e8:00:5b:f6:e7:84:a2:c2:a9:5c: ea:76:15:c7:43:0b:1f:33:e0:0b:16:d4:e1:14:0f: bb:cb:16:4b:0e:c0:96:77:3b:ab:09:45:45:55:56: 0e:f5:0b:41:6b:a5:d8:de:07:af:d9:cb:27:3a:df: ab:8f:69:1c:b7:39:c7:2c:01:70:d1:39:31:22:60: 72:ae:6f:f5:42:45:28:40:a6:69:af:c4:e1:50:03: f8:76:18:81:07:0a:35:12:95:d4:51:4f:b5:54:99: 48:de:c2:07:05:32:cc:78:c6:f1:23:38:6b:b7:94: 79:b3:52:f8:02:c9:75:df:76:51:a5:9d:a1:51:bd: 06:e2:c0:2c:ed:94:59:ee:18:50:31:5b:25:a0:a5: cf:05:be:3f:90:00:a9:98:04:7c:08:26:73:b8:e0: 96:86:b6:0b:c0:9a:f8:f8:88:07:59:fb:6a:a6:93: 8d:aa:57:8f:12:4a:e2:3d:07:d1:d0:0b:cc:a7:f3: 42:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:33:1E:61:02:7B:03:C7:42:F5:D9:1E:9B:CF:E3:41:6F:4F:12:11 X509v3 Authority Key Identifier: keyid:F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:f4:7a:91:e5:8f:a7:e4:23:52:35:47:f2:b1:91:38:7d:9f: 25:ae:48:20:0e:85:d8:74:c3:49:d2:71:a6:6b:f5:3c:58:b4: df:49:c4:df:53:76:00:9a:71:36:36:e7:ca:67:d6:c0:30:29: cf:1c:3e:fb:e8:2d:ea:c2:80:ce:d7:d8:01:d5:e8:4e:9e:ea: 3f:6f:d4:2d:b9:12:7c:70:54:99:98:86:e4:96:21:35:04:81: 7b:e0:26:ab:f1:d7:8c:58:2e:e4:ac:c5:6f:33:9f:21:36:96: 72:1c:f9:18:90:df:b6:d1:89:55:0d:7f:08:be:cc:5c:9d:67: 60:50:e6:a2:20:d4:a5:9d:d4:3e:a5:f9:e9:97:33:49:88:55: 9c:49:ec:b0:68:e4:68:44:a9:54:14:34:be:14:74:bf:42:ca: 9e:0e:31:ec:8b:d7:6e:c8:27:20:a6:07:da:8d:0d:1c:2e:73: c7:cc:8b:cb:47:00:70:82:1b:49:fa:6b:e5:88:87:3b:f9:72: 58:9c:d0:6c:5d:06:3b:4b:83:a3:48:70:1a:07:db:d1:b1:c0: cf:16:8b:5a:d8:04:9d:b2:cd:f6:9a:2f:42:ba:cd:29:9f:36: 06:16:6c:07:ea:76:cb:4b:ba:2e:26:fe:32:51:72:cb:a5:0e: 4f:bf:9f:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq6dT52a4PkX3ztfA3fCmqUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NDYwZDY1NTRkNTgxZWJiODBlMzllNDUwMTVjZDdkMzZk OTNmNjYwHhcNMjUxMTI1MTAwMDM3WhcNMjUxMTI2MTAwMDM3WjAzMTEwLwYDVQQD EyhhNzMzMWU2MTAyN2IwM2M3NDJmNWQ5MWU5YmNmZTM0MTZmNGYxMjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBgP37AbCUqO1pEPbcwrG73ENWHy dDL2tRqSpL/cv9uFae6+v+kVp4WZxf0WJBRlBRnk4lpjZ9o5y6jTGItTmOgAW/bn hKLCqVzqdhXHQwsfM+ALFtThFA+7yxZLDsCWdzurCUVFVVYO9QtBa6XY3gev2csn Ot+rj2kctznHLAFw0TkxImByrm/1QkUoQKZpr8ThUAP4dhiBBwo1EpXUUU+1VJlI 3sIHBTLMeMbxIzhrt5R5s1L4Asl133ZRpZ2hUb0G4sAs7ZRZ7hhQMVsloKXPBb4/ kACpmAR8CCZzuOCWhrYLwJr4+IgHWftqppONqlePEkriPQfR0AvMp/NCXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKczHmECewPHQvXZHpvP40FvTxIRMB8GA1UdIwQY MBaAFPRGDWVU1YHruA455FAVzX022T9mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUVZTlpWVFZnZXU0RGpua1VCWE5mVGJaUDJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi80NTVmNTYtMWU2Zi00NjdkLWI3MTEt ZWJkZjM4YjAwOTVjLzEvOUVZTlpWVFZnZXU0RGpua1VCWE5mVGJaUDJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi80NTVmNTYtMWU2Zi00NjdkLWI3MTEtZWJkZjM4YjAwOTVj LzEvOUVZTlpWVFZnZXU0RGpua1VCWE5mVGJaUDJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/R6keWP p+QjUjVH8rGROH2fJa5IIA6F2HTDSdJxpmv1PFi030nE31N2AJpxNjbnymfWwDAp zxw+++gt6sKAztfYAdXoTp7qP2/ULbkSfHBUmZiG5JYhNQSBe+Amq/HXjFgu5KzF bzOfITaWchz5GJDfttGJVQ1/CL7MXJ1nYFDmoiDUpZ3UPqX56ZczSYhVnEnssGjk aESpVBQ0vhR0v0LKng4x7IvXbsgnIKYH2o0NHC5zx8yLy0cAcIIbSfpr5YiHO/ly WJzQbF0GO0uDo0hwGgfb0bHAzxaLWtgEnbLN9povQrrNKZ82BhZsB+p2y0u6Lib+ MlFyy6UOT7+f3Q== -----END CERTIFICATE-----Generated at Tue Nov 25 13:39:34 2025 by rpki-client