This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft File: 9naIfyLs2o0HSBWgvPkfr4GUKr0.mft (raw, json) Hash identifier: x9PvJMMZ0NBcJIU687sXTtyDYlDOH7zs9TPAqG8dRys= Subject key identifier: 0E:52:E4:AE:7C:43:1D:27:31:8D:21:2B:EC:2B:58:3C:D4:60:BD:4E Authority key identifier: F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD Certificate issuer: /CN=f676887f22ecda8d074815a0bcf91faf81942abd Certificate serial: 019B1313FC90ACD98E217B0736716F9C901E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft Manifest number: 0A3D Signing time: Fri 12 Dec 2025 15:00:35 +0000 Manifest this update: Fri 12 Dec 2025 15:00:35 +0000 Manifest next update: Sat 13 Dec 2025 15:00:35 +0000 Files and hashes: 1: 1--aJOHbG2HarYQRIFHME9kGdrI8.roa (hash: e0PFqEIF1I8KQrFh+AG+JLWzJuU3cKKiEgrK5TdCBkw=) 2: 9naIfyLs2o0HSBWgvPkfr4GUKr0.crl (hash: Al9+1dB25mIuqjFF5Z1taqln6AkY2DP17AWsPqDv3hM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 15:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:13:fc:90:ac:d9:8e:21:7b:07:36:71:6f:9c:90:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f676887f22ecda8d074815a0bcf91faf81942abd Validity Not Before: Dec 12 15:00:35 2025 GMT Not After : Dec 13 15:00:35 2025 GMT Subject: CN=0e52e4ae7c431d27318d212bec2b583cd460bd4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:dd:fb:19:2a:bf:6d:ee:fe:5c:96:42:b5:f1: 62:c1:f0:3a:a4:f3:d9:16:43:fc:90:93:bf:f1:90: c1:c6:ed:fc:11:cc:39:9a:07:bb:29:48:c6:ff:7e: 7e:2a:c0:2e:d8:75:31:00:a2:c9:71:6d:15:fe:8d: 33:0e:28:aa:aa:65:d5:b8:8c:f7:17:f3:ce:3d:a4: 15:0b:fb:bf:9c:56:d9:cc:29:e8:e8:84:c5:17:fa: b5:5f:5d:39:b8:12:ba:66:98:39:e3:84:4f:5b:18: 43:e1:3f:06:7c:1f:21:ae:2e:69:8e:c6:34:f9:51: 7f:1a:10:4d:08:14:d2:07:48:8a:fa:29:04:ee:b8: 8f:87:ca:2b:fe:50:b3:b0:5e:ae:73:6c:8d:25:aa: b6:53:e0:24:18:f7:43:94:8c:77:69:88:7f:9c:63: 0d:9d:8a:9d:08:4f:98:48:f7:96:07:18:fb:46:43: ac:ab:2b:06:b2:08:30:50:55:c8:ab:e6:e7:03:23: 2f:cd:ec:a1:c9:59:38:c7:df:c0:08:33:a5:b6:7e: a8:85:6d:3e:46:60:da:3a:c2:dc:bc:d5:9f:96:c3: 0f:2a:b7:57:e0:d4:70:7a:9f:a1:ab:a7:77:56:ab: 87:ec:ba:57:7d:a6:4f:46:47:0f:74:69:70:6f:b3: 4a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:52:E4:AE:7C:43:1D:27:31:8D:21:2B:EC:2B:58:3C:D4:60:BD:4E X509v3 Authority Key Identifier: keyid:F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:e2:61:b8:15:33:e1:dd:af:0d:c9:9b:ec:af:98:00:52:97: a7:8b:9a:fb:35:df:ed:dd:97:94:50:4c:23:f9:50:40:01:22: f6:f8:53:0e:4b:d4:14:b5:d7:8b:2c:07:10:09:b5:9d:63:85: ca:fa:11:03:5e:73:f4:86:7d:60:19:d1:77:b5:ec:e1:74:9c: e9:6d:eb:6a:2e:ed:e6:40:63:76:6d:e6:e7:02:88:0e:43:92: 69:f7:11:ee:2f:8b:6a:c3:fd:56:d4:00:ac:38:7c:bf:62:2c: f9:bb:11:32:cd:f1:94:ed:e9:c7:dd:5b:d2:de:eb:3c:05:88: f8:3e:48:59:10:57:65:5c:d1:ba:24:5a:78:0d:85:c1:db:5a: 6c:6c:ce:2f:84:12:a2:6a:f1:f1:eb:bb:bd:50:6b:bf:39:d6: 78:fc:bb:30:20:19:a3:8c:61:eb:8c:17:68:8c:68:68:6f:12: 27:45:ae:aa:75:10:10:fb:1d:76:4f:f7:10:2a:a2:b1:61:ba: dc:9d:de:72:e9:26:85:74:e3:06:8f:f9:6b:7c:15:ad:85:a9: 16:44:2c:85:ed:6b:c1:cd:cf:b8:f1:03:97:97:39:21:b0:31: f5:cc:16:5f:38:55:75:d7:be:c8:f8:de:f5:3b:f3:f9:c5:a3: 8b:ac:13:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsTE/yQrNmOIXsHNnFvnJAeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NzY4ODdmMjJlY2RhOGQwNzQ4MTVhMGJjZjkxZmFmODE5 NDJhYmQwHhcNMjUxMjEyMTUwMDM1WhcNMjUxMjEzMTUwMDM1WjAzMTEwLwYDVQQD EygwZTUyZTRhZTdjNDMxZDI3MzE4ZDIxMmJlYzJiNTgzY2Q0NjBiZDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/N37GSq/be7+XJZCtfFiwfA6pPPZ FkP8kJO/8ZDBxu38Ecw5mge7KUjG/35+KsAu2HUxAKLJcW0V/o0zDiiqqmXVuIz3 F/POPaQVC/u/nFbZzCno6ITFF/q1X105uBK6Zpg544RPWxhD4T8GfB8hri5pjsY0 +VF/GhBNCBTSB0iK+ikE7riPh8or/lCzsF6uc2yNJaq2U+AkGPdDlIx3aYh/nGMN nYqdCE+YSPeWBxj7RkOsqysGsggwUFXIq+bnAyMvzeyhyVk4x9/ACDOltn6ohW0+ RmDaOsLcvNWflsMPKrdX4NRwep+hq6d3VquH7LpXfaZPRkcPdGlwb7NK8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5S5K58Qx0nMY0hK+wrWDzUYL1OMB8GA1UdIwQY MBaAFPZ2iH8i7NqNB0gVoLz5H6+BlCq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jYmM0YmItOTk5Yy00OTg4LWExZTEt Y2QyZGNiMzU1NjU1LzEvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jYmM0YmItOTk5Yy00OTg4LWExZTEtY2QyZGNiMzU1NjU1 LzEvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3eJhuBUz 4d2vDcmb7K+YAFKXp4ua+zXf7d2XlFBMI/lQQAEi9vhTDkvUFLXXiywHEAm1nWOF yvoRA15z9IZ9YBnRd7Xs4XSc6W3rai7t5kBjdm3m5wKIDkOSafcR7i+LasP9VtQA rDh8v2Is+bsRMs3xlO3px91b0t7rPAWI+D5IWRBXZVzRuiRaeA2FwdtabGzOL4QS omrx8eu7vVBrvznWePy7MCAZo4xh64wXaIxoaG8SJ0WuqnUQEPsddk/3ECqisWG6 3J3ecukmhXTjBo/5a3wVrYWpFkQshe1rwc3PuPEDl5c5IbAx9cwWXzhVdde+yPje 9Tvz+cWji6wTdw== -----END CERTIFICATE-----Generated at Fri Dec 12 19:12:48 2025 by rpki-client