This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft File: 9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft (raw, json) Hash identifier: X4huJW0i2S2sQda4FyljiwAPeaVMM/lUWtKK5R0k6i8= Subject key identifier: D6:79:9C:9E:4D:8F:26:B4:C0:7A:9C:6B:72:78:97:BF:79:23:17:E6 Authority key identifier: F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D Certificate issuer: /CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d Certificate serial: 019B5976EA97ACAFB7103AEEF3F7C46D6E94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft Manifest number: 0603 Signing time: Fri 26 Dec 2025 07:02:04 +0000 Manifest this update: Fri 26 Dec 2025 07:02:04 +0000 Manifest next update: Sat 27 Dec 2025 07:02:04 +0000 Files and hashes: 1: 9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl (hash: 8CrsLiL30v/cpo82J+0gd5onzlBPD52RQTMAwxXS9eE=) 2: pcJxxqpyhZF6JL4G4VK7HBS4yYA.roa (hash: PZShrCQ10JtHGLNXwnmCPSpnucUc5Ex85jH4ClAc2jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:ea:97:ac:af:b7:10:3a:ee:f3:f7:c4:6d:6e:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d Validity Not Before: Dec 26 07:02:04 2025 GMT Not After : Dec 27 07:02:04 2025 GMT Subject: CN=d6799c9e4d8f26b4c07a9c6b727897bf792317e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7d:8c:0c:1b:1a:7d:ab:59:67:4c:7c:33:c8: 55:7a:5f:c9:a5:79:d4:21:81:ad:ce:69:c9:24:41: d7:ad:be:78:44:10:1c:72:e3:bc:03:67:7b:4b:e7: 86:37:2a:3c:cc:1f:b5:37:41:d6:5c:d7:35:99:1a: 31:8b:57:d0:6e:6e:de:06:10:57:6c:8a:99:f0:db: db:6d:ed:c3:78:da:44:64:0c:4a:be:26:fb:32:1e: 8b:15:e8:8c:92:f4:ed:36:20:29:94:88:a1:6d:97: de:b8:58:34:69:b9:fd:8f:e4:3b:a0:d8:8f:a2:53: 41:91:27:98:5c:2c:ee:7f:b2:a7:06:e5:53:fb:66: ee:68:3a:ef:c5:69:2d:54:da:90:bc:0d:9c:72:3c: 78:dd:31:3c:79:6c:68:d8:02:42:84:af:20:68:46: 9b:23:cc:7e:cd:5b:75:be:66:31:6e:e5:76:a7:af: 99:3b:94:de:47:b3:90:47:59:4e:05:33:54:f9:73: da:c8:a4:c4:d8:37:e0:4b:25:ab:b0:96:97:28:29: f6:78:56:47:5b:05:06:a0:68:2b:42:34:aa:5c:a6: 20:3c:53:f0:2f:d8:2a:1d:da:32:03:9e:68:08:b0: 5a:83:d3:27:cd:99:88:5b:4f:54:ef:e3:b1:c5:5a: 16:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:79:9C:9E:4D:8F:26:B4:C0:7A:9C:6B:72:78:97:BF:79:23:17:E6 X509v3 Authority Key Identifier: keyid:F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ea:69:c9:b4:32:00:33:42:ed:51:08:90:c2:4b:25:1f:b2: 0a:69:4c:a8:8b:49:46:8a:ba:31:7b:95:2d:47:c2:70:46:e0: 55:b4:74:22:f6:fd:ef:a5:b5:60:58:7d:e4:b6:01:4f:db:fd: 95:59:9e:f1:95:24:3e:d6:e3:9f:b6:36:5b:8f:a4:0c:93:ad: 70:b4:00:f1:09:24:ff:8b:8c:4e:3e:6f:5f:74:f1:0f:28:3e: e3:48:e6:ba:7c:4d:59:c2:c1:d5:da:bb:2f:00:45:fd:04:3c: 1d:41:cc:16:13:5a:f1:7f:a1:61:12:28:d1:e1:17:38:3c:d7: fc:f2:3e:69:41:07:a0:eb:95:33:80:75:ee:be:88:3f:81:39: 32:e9:ba:3a:92:0b:f4:57:b1:d4:70:17:cd:8a:2c:b9:fb:63: 7c:ff:27:99:2e:4e:ef:06:bb:4b:38:ec:86:1e:f7:13:86:6f: 59:5f:d5:63:2b:61:eb:33:18:ea:4f:af:72:00:8d:46:58:76: b6:ca:e8:cd:2b:86:21:13:4b:ff:2d:33:52:77:5e:32:35:c6: 49:40:11:53:c8:d6:4b:7d:25:98:49:6e:0b:79:a2:38:2c:ee: 94:97:17:18:3f:03:6a:2e:d1:aa:57:b5:b5:e9:ea:8d:e0:9e: d0:fd:62:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZduqXrK+3EDru8/fEbW6UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZGZmOGIxYmQwNzI0YmExMzBmODZiODQ4ZTMzY2FlYThl OWYxMWQwHhcNMjUxMjI2MDcwMjA0WhcNMjUxMjI3MDcwMjA0WjAzMTEwLwYDVQQD EyhkNjc5OWM5ZTRkOGYyNmI0YzA3YTljNmI3Mjc4OTdiZjc5MjMxN2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn2MDBsafatZZ0x8M8hVel/JpXnU IYGtzmnJJEHXrb54RBAccuO8A2d7S+eGNyo8zB+1N0HWXNc1mRoxi1fQbm7eBhBX bIqZ8Nvbbe3DeNpEZAxKvib7Mh6LFeiMkvTtNiAplIihbZfeuFg0abn9j+Q7oNiP olNBkSeYXCzuf7KnBuVT+2buaDrvxWktVNqQvA2ccjx43TE8eWxo2AJChK8gaEab I8x+zVt1vmYxbuV2p6+ZO5TeR7OQR1lOBTNU+XPayKTE2DfgSyWrsJaXKCn2eFZH WwUGoGgrQjSqXKYgPFPwL9gqHdoyA55oCLBag9MnzZmIW09U7+OxxVoWKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZ5nJ5Njya0wHqca3J4l795IxfmMB8GA1UdIwQY MBaAFPTf+LG9ByS6Ew+GuEjjPK6o6fEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5fNHNiMEhKTG9URDRhNFNPTThycWpwOFIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xNzI3MmQtMjIzNC00MmNlLWI1MWIt NzRmNmEyZWFlMTc1LzEvOU5fNHNiMEhKTG9URDRhNFNPTThycWpwOFIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8xNzI3MmQtMjIzNC00MmNlLWI1MWItNzRmNmEyZWFlMTc1 LzEvOU5fNHNiMEhKTG9URDRhNFNPTThycWpwOFIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOppybQy ADNC7VEIkMJLJR+yCmlMqItJRoq6MXuVLUfCcEbgVbR0Ivb976W1YFh95LYBT9v9 lVme8ZUkPtbjn7Y2W4+kDJOtcLQA8Qkk/4uMTj5vX3TxDyg+40jmunxNWcLB1dq7 LwBF/QQ8HUHMFhNa8X+hYRIo0eEXODzX/PI+aUEHoOuVM4B17r6IP4E5Mum6OpIL 9Fex1HAXzYosuftjfP8nmS5O7wa7Szjshh73E4ZvWV/VYyth6zMY6k+vcgCNRlh2 tsrozSuGIRNL/y0zUndeMjXGSUARU8jWS30lmEluC3miOCzulJcXGD8Dai7Rqle1 tenqjeCe0P1iGg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:36 2025 by rpki-client