This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft File: 9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft (raw, json) Hash identifier: BPPL2OgAy4taOYWZ3bw7OxPYuryqljDxqrToOSBlEQQ= Subject key identifier: DF:BB:7D:F0:BD:7A:EF:BD:D1:74:95:57:E9:63:24:55:C3:9B:67:3D Authority key identifier: F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB Certificate issuer: /CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb Certificate serial: 019B26647EFD909D09454DD1F3C5D098BCA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft Manifest number: 177C Signing time: Tue 16 Dec 2025 09:01:18 +0000 Manifest this update: Tue 16 Dec 2025 09:01:18 +0000 Manifest next update: Wed 17 Dec 2025 09:01:18 +0000 Files and hashes: 1: 9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl (hash: DU6Jue/kJFC1cHPs/O2dfaifg/Gsig72PM11qYTdu/k=) 2: cZzu9h7JCSpAe7ubMeZNqvU_k-M.roa (hash: 9lLGwap+wzAcsgGorlbM31Osi8VLCiKaPunG1+P2vww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:64:7e:fd:90:9d:09:45:4d:d1:f3:c5:d0:98:bc:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb Validity Not Before: Dec 16 09:01:18 2025 GMT Not After : Dec 17 09:01:18 2025 GMT Subject: CN=dfbb7df0bd7aefbdd1749557e9632455c39b673d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:21:57:42:6a:26:10:73:02:df:09:23:14:91: f1:58:97:eb:87:b3:1a:df:73:23:42:ca:d3:de:79: 97:0d:64:49:87:d1:03:85:40:9a:67:f1:63:92:4f: 35:c2:06:7b:d6:51:13:6a:03:07:6a:5b:71:be:6c: dd:4d:69:6c:5b:51:2c:35:5a:2f:f5:23:97:c5:e6: 5f:12:e6:81:74:41:4f:ee:59:e0:cf:ac:8b:ad:b9: 85:5e:39:a2:f3:46:6a:93:be:41:ce:8c:79:a9:b5: f1:6c:c8:a0:53:b8:74:3f:f1:71:02:b6:a8:4c:d3: 53:30:7e:7d:3d:6e:b2:71:4c:a0:b3:08:f4:3e:f9: 57:8f:f1:76:3f:32:f0:a5:69:c6:33:ca:c4:78:99: cd:40:ee:ba:16:57:bf:8d:bc:4f:ca:f9:cf:08:1e: 31:19:76:59:6e:5a:2a:5b:67:e9:75:ea:6c:e0:87: 43:36:18:4a:dd:40:02:4a:d7:6a:85:d9:78:6a:e1: 88:50:da:61:0e:28:e0:ef:15:b6:92:da:98:9a:a1: 18:21:ed:53:f1:11:f0:19:e0:3a:c9:80:e9:d3:95: bd:23:74:bc:9c:ab:eb:d1:38:e7:a1:74:30:ae:b6: 85:32:c0:90:d8:70:04:c8:43:0e:d5:0b:2d:78:3f: 77:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BB:7D:F0:BD:7A:EF:BD:D1:74:95:57:E9:63:24:55:C3:9B:67:3D X509v3 Authority Key Identifier: keyid:F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:f7:0d:14:47:7c:11:72:a2:36:c2:69:f6:e4:85:b1:00:27: fa:62:43:16:1e:2c:fb:1d:9d:3d:12:9c:b5:ff:99:8d:2c:19: 1b:f6:7a:c5:2e:d1:ad:c9:06:47:8f:7b:ea:43:bf:9c:9c:ac: 80:d4:02:8f:58:63:41:22:6e:e2:94:a2:7c:88:2c:c1:42:7e: 11:e7:ff:49:ac:c0:ca:f3:fe:20:8e:dc:c4:fc:51:6d:8a:f3: 5b:33:3d:c7:bf:8e:55:01:f9:27:bf:b8:f2:39:0f:11:86:88: b1:c1:26:3b:fc:2a:d2:f1:ac:74:56:ae:4d:fc:d4:80:4d:b7: 49:25:2f:6e:02:f0:d4:6a:1f:87:23:27:91:27:0a:35:93:c5: 73:f3:7c:3a:af:69:42:d6:80:42:e7:52:39:cb:80:c8:d8:a7: f8:b3:4f:7d:44:93:bc:8b:e7:d4:eb:ed:ad:15:68:eb:0c:0a: ac:6c:04:2b:37:7d:94:dc:11:7b:c4:a2:53:e6:34:cb:c5:03: a4:7d:31:6d:06:87:0b:1e:ee:c5:79:95:b5:47:b2:7a:d8:e6: b9:a5:c1:35:a0:00:40:14:7b:8c:9b:9f:f6:d0:86:87:46:56: 05:0c:e1:ee:b1:c1:f8:43:32:c7:7d:5a:0b:ef:02:47:0d:04: 3d:25:9b:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmZH79kJ0JRU3R88XQmLyjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YWNiMjY5ZmE4YTU1NGY1MjQzYTNhYmQ2OGQ1YjhkNzZm ZTVlYmIwHhcNMjUxMjE2MDkwMTE4WhcNMjUxMjE3MDkwMTE4WjAzMTEwLwYDVQQD EyhkZmJiN2RmMGJkN2FlZmJkZDE3NDk1NTdlOTYzMjQ1NWMzOWI2NzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiFXQmomEHMC3wkjFJHxWJfrh7Ma 33MjQsrT3nmXDWRJh9EDhUCaZ/Fjkk81wgZ71lETagMHaltxvmzdTWlsW1EsNVov 9SOXxeZfEuaBdEFP7lngz6yLrbmFXjmi80Zqk75Bzox5qbXxbMigU7h0P/FxArao TNNTMH59PW6ycUygswj0PvlXj/F2PzLwpWnGM8rEeJnNQO66Fle/jbxPyvnPCB4x GXZZbloqW2fpdeps4IdDNhhK3UACStdqhdl4auGIUNphDijg7xW2ktqYmqEYIe1T 8RHwGeA6yYDp05W9I3S8nKvr0TjnoXQwrraFMsCQ2HAEyEMO1QsteD93uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+7ffC9eu+90XSVV+ljJFXDm2c9MB8GA1UdIwQY MBaAFPassmn6ilVPUkOjq9aNW412/l67MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXF5eWFmcUtWVTlTUTZPcjFvMWJqWGItWHJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yOTU1ZmQtMDkyYS00ZWNjLWE5MmYt ZmJiMzNhNTRmYWRlLzEvOXF5eWFmcUtWVTlTUTZPcjFvMWJqWGItWHJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8yOTU1ZmQtMDkyYS00ZWNjLWE5MmYtZmJiMzNhNTRmYWRl LzEvOXF5eWFmcUtWVTlTUTZPcjFvMWJqWGItWHJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArvcNFEd8 EXKiNsJp9uSFsQAn+mJDFh4s+x2dPRKctf+ZjSwZG/Z6xS7RrckGR4976kO/nJys gNQCj1hjQSJu4pSifIgswUJ+Eef/SazAyvP+II7cxPxRbYrzWzM9x7+OVQH5J7+4 8jkPEYaIscEmO/wq0vGsdFauTfzUgE23SSUvbgLw1GofhyMnkScKNZPFc/N8Oq9p QtaAQudSOcuAyNin+LNPfUSTvIvn1OvtrRVo6wwKrGwEKzd9lNwRe8SiU+Y0y8UD pH0xbQaHCx7uxXmVtUeyetjmuaXBNaAAQBR7jJuf9tCGh0ZWBQzh7rHB+EMyx31a C+8CRw0EPSWbXg== -----END CERTIFICATE-----Generated at Tue Dec 16 12:15:16 2025 by rpki-client