This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft File: 9TFMH54Rk8ICXLZytSNXOXjSVNk.mft (raw, json) Hash identifier: VQnKsllj7esdRApK5vAYTS6JLoG47fE0Gx9KUBwfUDI= Subject key identifier: 83:7D:FF:A3:AC:5D:7B:E8:40:C2:0C:86:3C:5C:03:54:0B:86:07:33 Authority key identifier: F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9 Certificate issuer: /CN=f5314c1f9e1193c2025cb672b523573978d254d9 Certificate serial: 019B164C443CD6DFC63D86667987CDCED0E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft Manifest number: 0ADD Signing time: Sat 13 Dec 2025 06:00:55 +0000 Manifest this update: Sat 13 Dec 2025 06:00:55 +0000 Manifest next update: Sun 14 Dec 2025 06:00:55 +0000 Files and hashes: 1: 9TFMH54Rk8ICXLZytSNXOXjSVNk.crl (hash: HBnfMzE0joKrAA2/gMLisj64+Uk77O3TMpHEN48XMGQ=) 2: vnQYA6POl1a8tK2ZzQU1CNh2rSU.roa (hash: cwo0eDB9nxSSyKe/qdMpdoKv9t3e96TKN+bq+LM4mpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 06:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:4c:44:3c:d6:df:c6:3d:86:66:79:87:cd:ce:d0:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5314c1f9e1193c2025cb672b523573978d254d9 Validity Not Before: Dec 13 06:00:55 2025 GMT Not After : Dec 14 06:00:55 2025 GMT Subject: CN=837dffa3ac5d7be840c20c863c5c03540b860733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2d:d7:21:a0:10:64:02:a1:76:e8:fe:e1:1e: 7e:9e:1e:d1:fd:af:ab:b4:de:2e:1d:e9:f7:a0:61: ca:a9:09:01:93:ef:a1:54:87:ac:66:58:d2:b3:f9: ee:08:75:67:d0:93:04:9b:89:2e:7a:56:e6:c0:2c: 96:b5:39:f1:35:1d:02:14:40:e3:98:df:c9:4b:22: b4:fb:76:a9:52:e6:7e:e9:1d:e7:7e:b8:1b:a0:51: e3:f7:cc:67:f1:f8:6b:f6:ae:25:ff:f5:48:b9:34: 33:0c:ca:a7:8f:fb:eb:ca:dd:ad:ee:ec:3b:c6:54: 49:cf:4a:73:b6:2e:54:f3:b8:55:8c:89:54:39:89: 5d:76:8d:32:6f:e3:9d:90:4c:71:21:01:44:78:bb: 3e:77:e1:28:c0:bf:32:48:6e:ad:66:4b:ec:82:b6: b3:11:86:9f:25:10:5d:fa:f7:e0:c1:62:89:55:54: 7a:a9:2e:03:15:b8:d5:10:62:f2:a5:47:9f:be:36: 4b:17:68:ad:3e:ee:aa:47:b0:0b:b7:10:ca:e7:2b: fb:d2:0f:2a:1e:9b:6f:25:23:46:10:87:5a:75:1c: 41:a0:cc:30:19:bb:5e:b5:69:f4:0d:20:1a:ff:57: e2:a9:d0:9e:a7:23:c8:58:f3:6c:83:fe:de:ba:81: 31:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:7D:FF:A3:AC:5D:7B:E8:40:C2:0C:86:3C:5C:03:54:0B:86:07:33 X509v3 Authority Key Identifier: keyid:F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:c6:b5:85:82:4c:6f:1f:03:1b:ae:0e:03:e6:01:73:02:cd: 19:26:f9:98:7a:ac:ce:42:af:84:a4:bf:21:0a:fc:3f:19:87: aa:fc:02:11:8b:1b:9a:5e:9c:53:e9:fc:01:c6:dd:de:94:32: 9d:5f:39:32:c8:2f:d3:70:5d:b4:33:1d:8d:59:0d:a7:e7:9b: c1:15:17:63:2a:8a:73:81:88:91:b1:dd:be:78:51:73:d1:60: 6b:e8:c1:22:de:95:6a:38:f0:36:e6:43:89:60:e4:7e:8d:c9: dd:cc:5b:de:34:33:ab:72:90:26:1a:f6:82:97:fc:63:6a:ca: 45:25:a6:d3:e1:5a:e9:48:be:b7:36:86:af:52:09:3e:07:3f: 5f:c8:bd:c4:ac:1e:db:9a:e1:d2:35:cd:77:9e:ce:e0:e7:77: 40:16:bb:30:55:83:79:86:b1:0e:10:00:b5:bf:84:8e:e4:8b: 41:ba:52:9d:89:56:eb:bc:10:d0:b8:7b:4d:fc:77:82:06:a2: e5:fc:1f:e6:d4:87:2f:a5:af:3e:b3:5a:f1:b8:e4:65:bc:10: f5:e3:a8:f0:e8:7f:11:f8:b8:a0:08:e4:68:7a:94:96:8b:8e: b5:67:68:5b:11:41:44:5a:0c:40:31:99:6c:91:9c:d9:12:48: 6c:52:2f:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsWTEQ81t/GPYZmeYfNztDmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MzE0YzFmOWUxMTkzYzIwMjVjYjY3MmI1MjM1NzM5Nzhk MjU0ZDkwHhcNMjUxMjEzMDYwMDU1WhcNMjUxMjE0MDYwMDU1WjAzMTEwLwYDVQQD Eyg4MzdkZmZhM2FjNWQ3YmU4NDBjMjBjODYzYzVjMDM1NDBiODYwNzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC3XIaAQZAKhduj+4R5+nh7R/a+r tN4uHen3oGHKqQkBk++hVIesZljSs/nuCHVn0JMEm4kuelbmwCyWtTnxNR0CFEDj mN/JSyK0+3apUuZ+6R3nfrgboFHj98xn8fhr9q4l//VIuTQzDMqnj/vryt2t7uw7 xlRJz0pzti5U87hVjIlUOYlddo0yb+OdkExxIQFEeLs+d+EowL8ySG6tZkvsgraz EYafJRBd+vfgwWKJVVR6qS4DFbjVEGLypUefvjZLF2itPu6qR7ALtxDK5yv70g8q HptvJSNGEIdadRxBoMwwGbtetWn0DSAa/1fiqdCepyPIWPNsg/7euoExHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIN9/6OsXXvoQMIMhjxcA1QLhgczMB8GA1UdIwQY MBaAFPUxTB+eEZPCAly2crUjVzl40lTZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVRGTUg1NFJrOElDWExaeXRTTlhPWGpTVk5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8xZDA5ZTYtYWU3Yi00MzRjLTk5ZWMt NzM4Yzc0OTJmNzY4LzEvOVRGTUg1NFJrOElDWExaeXRTTlhPWGpTVk5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8xZDA5ZTYtYWU3Yi00MzRjLTk5ZWMtNzM4Yzc0OTJmNzY4 LzEvOVRGTUg1NFJrOElDWExaeXRTTlhPWGpTVk5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8a1hYJM bx8DG64OA+YBcwLNGSb5mHqszkKvhKS/IQr8PxmHqvwCEYsbml6cU+n8Acbd3pQy nV85Msgv03BdtDMdjVkNp+ebwRUXYyqKc4GIkbHdvnhRc9Fga+jBIt6VajjwNuZD iWDkfo3J3cxb3jQzq3KQJhr2gpf8Y2rKRSWm0+Fa6Ui+tzaGr1IJPgc/X8i9xKwe 25rh0jXNd57O4Od3QBa7MFWDeYaxDhAAtb+EjuSLQbpSnYlW67wQ0Lh7Tfx3ggai 5fwf5tSHL6WvPrNa8bjkZbwQ9eOo8Oh/Efi4oAjkaHqUlouOtWdoWxFBRFoMQDGZ bJGc2RJIbFIvdw== -----END CERTIFICATE-----Generated at Sat Dec 13 15:04:46 2025 by rpki-client