This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft File: 9WQDvByHTu8JuKE0QVWrw_BXWxU.mft (raw, json) Hash identifier: V046ql1jPzI3YFXoju+TfGf4lL4DZY0SLduZTzRkZk4= Subject key identifier: 77:BB:A2:43:10:93:43:F5:42:8C:90:9B:91:CB:FD:B8:34:65:E9:37 Authority key identifier: F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15 Certificate issuer: /CN=f56403bc1c874eef09b8a1344155abc3f0575b15 Certificate serial: 019B0F6E1035FFAD6851D6E24128891D20C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft Manifest number: 10E5 Signing time: Thu 11 Dec 2025 22:00:29 +0000 Manifest this update: Thu 11 Dec 2025 22:00:29 +0000 Manifest next update: Fri 12 Dec 2025 22:00:29 +0000 Files and hashes: 1: 9WQDvByHTu8JuKE0QVWrw_BXWxU.crl (hash: o3IGWaZHYmz1YFjERczRdqfVDxPToEsgBXVrCXaSALM=) 2: UpxBSWugieKNTh9apeAkjKNDuVI.roa (hash: bk8A6HGGurxjqbD4+xEVgCvr+MLGdlWXb+9IzJcqkAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:10:35:ff:ad:68:51:d6:e2:41:28:89:1d:20:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f56403bc1c874eef09b8a1344155abc3f0575b15 Validity Not Before: Dec 11 22:00:29 2025 GMT Not After : Dec 12 22:00:29 2025 GMT Subject: CN=77bba243109343f5428c909b91cbfdb83465e937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f2:9b:1d:aa:cd:15:71:ca:4a:8d:b2:4c:9c: 22:19:17:7a:39:21:f5:22:74:20:b8:7c:f0:d9:f7: 3a:98:10:ac:4d:b7:52:c8:29:f1:d5:e8:a1:db:d6: 1b:5d:0f:1a:3f:4d:da:ba:e3:43:97:54:e3:62:ed: 0e:fc:55:f3:2a:f0:59:88:26:27:ea:a0:3b:91:4e: 32:40:75:c0:41:1a:fd:fa:ea:d7:27:ff:b7:0d:b6: 2f:fc:d7:d0:96:d8:5e:9a:a0:80:1a:44:11:70:4e: 5e:23:b6:53:cd:38:75:49:c2:7e:56:57:7a:41:ef: d4:f1:93:32:98:02:26:e1:e1:82:96:c4:1f:a7:62: b1:b7:64:13:61:0b:03:07:65:df:94:4b:c6:1e:83: 5e:1d:af:ff:f8:06:08:07:1c:35:ed:8c:e5:d4:dc: 39:59:80:4e:a4:70:db:8d:b5:29:da:d2:10:58:bf: 52:69:8a:22:3c:04:a8:8f:d3:c5:5a:2a:50:ef:c6: bb:93:58:35:7f:27:08:af:9b:1f:4a:ea:d6:71:d6: c1:45:32:f8:38:44:1e:44:83:ed:e6:cb:7f:fd:8b: 2b:a3:83:e8:84:d5:36:7c:3f:ca:aa:cf:e5:7c:85: a1:50:bc:3f:85:7a:f1:84:6b:b7:1e:be:f1:01:60: f5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:BB:A2:43:10:93:43:F5:42:8C:90:9B:91:CB:FD:B8:34:65:E9:37 X509v3 Authority Key Identifier: keyid:F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:62:b2:45:ac:55:9e:3c:98:25:90:4a:2f:ff:a7:3b:b8:be: 68:a3:3e:bb:39:66:d5:52:5c:fa:6e:90:00:31:11:26:01:d2: f0:1b:5e:49:66:f0:06:4a:80:fa:99:5f:cc:bb:03:0b:2b:ef: 19:45:0b:c6:d6:46:f7:d7:3c:30:65:d6:36:51:08:71:6e:4e: d9:1e:a3:33:bc:73:54:82:29:14:38:6e:94:8c:58:ed:ac:30: a4:a7:85:53:ad:3a:12:7e:1d:62:f5:fc:ce:7d:64:a8:61:14: fb:3b:64:2a:3b:6b:99:01:9b:87:30:20:7b:6e:4a:59:09:0b: 86:84:82:d0:ad:9b:c4:9e:71:20:5f:98:de:f7:e4:59:52:0c: f1:a8:f6:8b:e3:88:c9:51:82:d3:70:7a:d1:6d:48:2d:66:12: 3a:a6:1f:8e:71:67:b3:59:4f:9f:9a:68:c9:4a:29:d8:49:53: d3:31:1d:86:8f:df:db:f7:56:b3:d7:79:41:e7:21:9d:d7:ff: b7:43:77:f6:d6:cd:27:36:91:24:24:00:fc:74:a2:32:29:47: 12:2b:90:52:c3:84:34:5d:08:ef:07:e2:ff:c5:ec:a5:6f:f9: 57:22:c1:ef:ca:45:b5:b2:ea:e1:36:2f:b5:8a:eb:97:77:77: 53:c0:a3:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbhA1/61oUdbiQSiJHSDEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NjQwM2JjMWM4NzRlZWYwOWI4YTEzNDQxNTVhYmMzZjA1 NzViMTUwHhcNMjUxMjExMjIwMDI5WhcNMjUxMjEyMjIwMDI5WjAzMTEwLwYDVQQD Eyg3N2JiYTI0MzEwOTM0M2Y1NDI4YzkwOWI5MWNiZmRiODM0NjVlOTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/KbHarNFXHKSo2yTJwiGRd6OSH1 InQguHzw2fc6mBCsTbdSyCnx1eih29YbXQ8aP03auuNDl1TjYu0O/FXzKvBZiCYn 6qA7kU4yQHXAQRr9+urXJ/+3DbYv/NfQlthemqCAGkQRcE5eI7ZTzTh1ScJ+Vld6 Qe/U8ZMymAIm4eGClsQfp2Kxt2QTYQsDB2XflEvGHoNeHa//+AYIBxw17Yzl1Nw5 WYBOpHDbjbUp2tIQWL9SaYoiPASoj9PFWipQ78a7k1g1fycIr5sfSurWcdbBRTL4 OEQeRIPt5st//Ysro4PohNU2fD/Kqs/lfIWhULw/hXrxhGu3Hr7xAWD1rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHe7okMQk0P1QoyQm5HL/bg0Zek3MB8GA1UdIwQY MBaAFPVkA7wch07vCbihNEFVq8PwV1sVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVdRRHZCeUhUdThKdUtFMFFWV3J3X0JYV3hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xNzQ4NjAtMGM1YS00NGYwLTk3ZTct ZmFiODVlZTU3MDJhLzEvOVdRRHZCeUhUdThKdUtFMFFWV3J3X0JYV3hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8xNzQ4NjAtMGM1YS00NGYwLTk3ZTctZmFiODVlZTU3MDJh LzEvOVdRRHZCeUhUdThKdUtFMFFWV3J3X0JYV3hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALGKyRaxV njyYJZBKL/+nO7i+aKM+uzlm1VJc+m6QADERJgHS8BteSWbwBkqA+plfzLsDCyvv GUULxtZG99c8MGXWNlEIcW5O2R6jM7xzVIIpFDhulIxY7awwpKeFU606En4dYvX8 zn1kqGEU+ztkKjtrmQGbhzAge25KWQkLhoSC0K2bxJ5xIF+Y3vfkWVIM8aj2i+OI yVGC03B60W1ILWYSOqYfjnFns1lPn5poyUop2ElT0zEdho/f2/dWs9d5Qechndf/ t0N39tbNJzaRJCQA/HSiMilHEiuQUsOENF0I7wfi/8XspW/5VyLB78pFtbLq4TYv tYrrl3d3U8CjZw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:16:57 2025 by rpki-client