This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft File: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft (raw, json) Hash identifier: samEmxygR01yckBgjHgREbs+d/qDjHPaDyy+9XxEf9k= Subject key identifier: 09:ED:57:F5:58:70:11:3E:5A:B0:74:C8:15:B1:22:5E:C4:5E:3B:09 Authority key identifier: F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54 Certificate issuer: /CN=f709528b8828b4d826355e2c52237d642071cd54 Certificate serial: 019B495E0DEB2932321B2171FEAE0B6B0EFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft Manifest number: 0773 Signing time: Tue 23 Dec 2025 04:00:59 +0000 Manifest this update: Tue 23 Dec 2025 04:00:59 +0000 Manifest next update: Wed 24 Dec 2025 04:00:59 +0000 Files and hashes: 1: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl (hash: iDahG5cjyNp3ooZ1oambL4WCUWmyLp08TK+8Iz2fOJM=) 2: iKhGCzGlkdUH-YeR40es_shy-iQ.roa (hash: UctZx1wGvAAr9xLOczqP8p1as4JR/y4gz7WSAX7sYrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5e:0d:eb:29:32:32:1b:21:71:fe:ae:0b:6b:0e:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f709528b8828b4d826355e2c52237d642071cd54 Validity Not Before: Dec 23 04:00:59 2025 GMT Not After : Dec 24 04:00:59 2025 GMT Subject: CN=09ed57f55870113e5ab074c815b1225ec45e3b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a8:ad:16:46:53:e1:b6:bd:e1:c6:7f:a2:b4: 44:93:49:27:09:c3:d7:c0:aa:9b:47:da:a7:e4:0b: 6e:19:4b:93:31:d4:bf:be:35:47:82:0f:32:9b:48: 44:20:71:80:7f:4f:1c:1a:2f:b7:1a:e5:aa:bd:4d: 3c:f9:98:cc:93:9a:a5:de:ca:43:e1:c1:a8:3c:0d: 27:96:c4:4d:fc:de:06:07:d5:7b:a1:4d:c7:d6:14: 6a:9e:e0:fe:7c:e9:53:44:6c:e8:29:b7:f2:47:0d: aa:18:b1:9e:c1:d8:15:93:57:7d:82:98:f3:d9:9b: e0:38:2e:ba:70:5d:18:75:1d:ec:fd:bb:07:fa:47: 3d:bb:25:ac:70:e6:ae:e3:c6:a6:8b:00:ab:22:eb: 15:6d:35:bc:65:9d:48:31:c6:2d:66:17:8d:b3:b2: c8:33:b5:e8:05:d0:2e:ab:c5:78:a2:61:af:03:96: 11:9f:56:a5:08:23:ea:b9:c8:f7:ca:b4:4b:d3:18: 70:22:46:3f:ae:9a:c6:bb:10:a5:d0:d9:a1:95:f0: a0:a5:f8:93:d3:06:e2:f7:43:90:35:c5:97:13:33: aa:95:8d:48:6b:ed:80:c2:f3:1a:e3:7c:97:22:c1: b1:02:85:0d:81:be:f3:3b:df:4d:0d:65:37:94:8f: 07:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:ED:57:F5:58:70:11:3E:5A:B0:74:C8:15:B1:22:5E:C4:5E:3B:09 X509v3 Authority Key Identifier: keyid:F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:31:b5:7e:85:5d:38:ee:c5:e5:8f:95:87:dd:34:90:9a:17: 79:06:fe:72:1a:2f:38:21:66:9f:6d:49:8b:8e:67:62:9a:b6: d3:fe:cb:89:5f:30:ed:bf:2d:b4:2f:a5:0e:35:f9:5a:19:b7: bf:a8:0a:6a:5c:5e:8a:e2:3f:15:73:e1:d8:29:4b:bc:4f:6f: 14:1b:b7:58:b6:dd:02:b3:4e:d0:43:32:da:6b:85:02:22:ab: 30:70:eb:79:06:47:e2:48:ef:11:1b:3f:5a:3d:04:c5:a5:ce: 93:d2:0c:6f:60:c6:39:23:64:4c:5f:19:0c:b7:66:3d:09:6f: 7d:8a:af:23:7f:38:6e:42:49:77:34:b4:36:ef:18:8d:a6:19: fd:61:d8:8e:3d:be:dd:ff:b3:56:ef:1a:b1:bc:af:0b:db:99: 99:70:53:8e:a7:de:ff:ec:9d:c2:1b:57:a7:c8:6f:20:dc:88: 3b:8a:9f:ec:31:50:ab:03:b7:93:e8:1e:06:6b:8a:fa:48:59: ba:03:c8:0a:41:f3:2e:66:6e:c8:57:5d:99:fe:15:59:fb:cc: d0:61:c5:d4:92:66:ff:7c:0b:a3:40:fe:2d:0f:11:19:f9:cf: e4:7c:0f:9e:81:b0:1e:a5:a9:1a:d9:9c:c5:eb:8a:cd:4f:7d: 03:03:78:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXg3rKTIyGyFx/q4Law77MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MDk1MjhiODgyOGI0ZDgyNjM1NWUyYzUyMjM3ZDY0MjA3 MWNkNTQwHhcNMjUxMjIzMDQwMDU5WhcNMjUxMjI0MDQwMDU5WjAzMTEwLwYDVQQD EygwOWVkNTdmNTU4NzAxMTNlNWFiMDc0YzgxNWIxMjI1ZWM0NWUzYjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaitFkZT4ba94cZ/orREk0knCcPX wKqbR9qn5AtuGUuTMdS/vjVHgg8ym0hEIHGAf08cGi+3GuWqvU08+ZjMk5ql3spD 4cGoPA0nlsRN/N4GB9V7oU3H1hRqnuD+fOlTRGzoKbfyRw2qGLGewdgVk1d9gpjz 2ZvgOC66cF0YdR3s/bsH+kc9uyWscOau48amiwCrIusVbTW8ZZ1IMcYtZheNs7LI M7XoBdAuq8V4omGvA5YRn1alCCPqucj3yrRL0xhwIkY/rprGuxCl0NmhlfCgpfiT 0wbi90OQNcWXEzOqlY1Ia+2AwvMa43yXIsGxAoUNgb7zO99NDWU3lI8HnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAntV/VYcBE+WrB0yBWxIl7EXjsJMB8GA1UdIwQY MBaAFPcJUouIKLTYJjVeLFIjfWQgcc1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXdsU2k0Z290TmdtTlY0c1VpTjlaQ0J4elZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yZDlkODAtYjhiZi00NjVhLWEyOTEt OWY3NGZhY2FlOGYxLzEvOXdsU2k0Z290TmdtTlY0c1VpTjlaQ0J4elZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8yZDlkODAtYjhiZi00NjVhLWEyOTEtOWY3NGZhY2FlOGYx LzEvOXdsU2k0Z290TmdtTlY0c1VpTjlaQ0J4elZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVjG1foVd OO7F5Y+Vh900kJoXeQb+chovOCFmn21Ji45nYpq20/7LiV8w7b8ttC+lDjX5Whm3 v6gKalxeiuI/FXPh2ClLvE9vFBu3WLbdArNO0EMy2muFAiKrMHDreQZH4kjvERs/ Wj0ExaXOk9IMb2DGOSNkTF8ZDLdmPQlvfYqvI384bkJJdzS0Nu8YjaYZ/WHYjj2+ 3f+zVu8asbyvC9uZmXBTjqfe/+ydwhtXp8hvINyIO4qf7DFQqwO3k+geBmuK+khZ ugPICkHzLmZuyFddmf4VWfvM0GHF1JJm/3wLo0D+LQ8RGfnP5HwPnoGwHqWpGtmc xeuKzU99AwN46g== -----END CERTIFICATE-----Generated at Tue Dec 23 07:50:35 2025 by rpki-client