This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/46eec1-86e3-479b-93cf-1035dcc9d489/1/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.mft File: 9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.mft (raw, json) Hash identifier: qe64M9BfVIsuxmrvYsCJnlL/rX3MFNgjlzH3uYu0hE4= Subject key identifier: A5:52:04:4D:C8:CB:12:9E:75:A9:C5:BE:7D:8A:E0:87:37:B5:DE:06 Authority key identifier: F5:19:77:AA:22:77:72:5E:D1:0E:B5:67:4D:5D:A1:D6:62:2F:41:B7 Certificate issuer: /CN=f51977aa2277725ed10eb5674d5da1d6622f41b7 Certificate serial: 019B59ACA1E870E0A19CA18F1ACBC08F4977 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/46eec1-86e3-479b-93cf-1035dcc9d489/1/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.mft Manifest number: 72 Signing time: Fri 26 Dec 2025 08:00:44 +0000 Manifest this update: Fri 26 Dec 2025 08:00:44 +0000 Manifest next update: Sat 27 Dec 2025 08:00:44 +0000 Files and hashes: 1: 9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.crl (hash: jOVk3EDHJ217KF4XWfF+seWDRXYZUxf/S7fCdCgP5J8=) 2: VPTnxDq1yxj21KAMEyNJXCnV97k.roa (hash: oMhWVkQ76OyXPdwoLbpkiQAp4FEu2WM8nljd52fsJxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/46eec1-86e3-479b-93cf-1035dcc9d489/1/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/46eec1-86e3-479b-93cf-1035dcc9d489/1/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.mft rsync://rpki.ripe.net/repository/DEFAULT/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:a1:e8:70:e0:a1:9c:a1:8f:1a:cb:c0:8f:49:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f51977aa2277725ed10eb5674d5da1d6622f41b7 Validity Not Before: Dec 26 08:00:44 2025 GMT Not After : Dec 27 08:00:44 2025 GMT Subject: CN=a552044dc8cb129e75a9c5be7d8ae08737b5de06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7f:73:92:09:8d:99:a8:00:a0:56:7d:46:5f: fc:e9:aa:a4:e8:a4:89:2d:1c:65:68:a3:35:46:5d: a7:e5:27:8e:ec:1e:03:d8:bf:f2:c3:e3:76:5d:20: 6c:c2:5d:31:ed:71:5b:43:a6:6c:58:1a:29:f9:8a: 0a:40:26:91:1b:95:96:ad:85:c8:5b:be:4d:e8:9a: e2:d5:97:b9:05:ed:28:fe:ba:a4:5e:64:d4:e8:07: fc:fb:1a:97:60:0f:3c:a0:4f:cb:68:86:03:81:22: d8:0f:0b:74:ff:0d:79:0f:97:8d:8a:40:86:ad:43: fd:7c:40:ea:42:48:3e:d1:47:b2:1f:b7:87:1e:00: dc:10:48:d5:7e:8f:fe:3d:ec:ab:61:47:d4:2e:59: fb:a3:49:e5:64:e5:71:ae:62:d3:01:33:ba:cf:4f: 03:6f:62:d7:b2:89:70:3c:c2:1c:b6:58:b1:e9:77: 75:b5:c7:54:4b:0f:c6:48:77:3b:77:ee:83:87:7a: 52:41:dd:23:15:d2:16:27:8d:b9:75:49:54:75:06: db:94:e4:35:3b:74:b5:c7:0e:83:32:64:df:99:9e: 61:34:d8:12:66:6f:44:a8:e8:88:03:a6:51:a9:01: fe:1c:fd:d9:9e:e4:b3:47:34:83:0c:83:ee:cd:6c: 1f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:52:04:4D:C8:CB:12:9E:75:A9:C5:BE:7D:8A:E0:87:37:B5:DE:06 X509v3 Authority Key Identifier: keyid:F5:19:77:AA:22:77:72:5E:D1:0E:B5:67:4D:5D:A1:D6:62:2F:41:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/46eec1-86e3-479b-93cf-1035dcc9d489/1/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/46eec1-86e3-479b-93cf-1035dcc9d489/1/9Rl3qiJ3cl7RDrVnTV2h1mIvQbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:c0:4e:07:2a:ac:c1:c8:39:3a:e6:ae:94:5e:bc:01:cc:64: 38:2c:57:b6:2d:3e:ed:1d:a2:59:4a:ac:6d:12:18:79:c8:df: b6:ed:51:67:ad:a5:c4:c6:0a:43:ca:8e:6c:a3:2d:f5:50:71: f9:2d:7e:3f:5f:f6:d6:a2:44:2a:fd:c7:5f:9a:da:10:a6:e5: ba:0d:5d:f2:26:0f:db:ec:a7:a5:b2:4b:e1:c7:d3:bb:6d:22: de:a8:61:31:13:24:4f:9f:03:0f:06:46:96:ed:c1:cc:a6:24: 3a:a3:fb:de:ff:92:55:c6:db:a5:d2:3f:0d:14:a4:84:2b:68: c0:06:fb:1f:7e:75:13:db:36:b4:ab:9c:11:a8:bb:a8:45:a1: 2c:23:d1:ac:b0:a4:01:83:26:60:ab:45:7d:ec:96:7a:6c:ed: 72:3d:7e:e2:3b:11:1f:63:75:1b:61:58:82:69:b4:f3:7e:3a: 7f:c9:68:8a:42:2f:0b:a8:05:13:df:24:a1:83:6b:5c:1f:ed: 02:f0:4d:95:31:09:5d:fb:83:10:82:40:a2:00:5e:12:f8:2a: b0:ad:e3:02:99:c4:50:a5:68:05:32:7a:59:cc:ad:3f:57:6f: 03:f1:8b:2c:34:0a:16:65:9e:66:c4:ef:1e:ed:f1:c9:62:26: e2:91:c5:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrKHocOChnKGPGsvAj0l3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MTk3N2FhMjI3NzcyNWVkMTBlYjU2NzRkNWRhMWQ2NjIy ZjQxYjcwHhcNMjUxMjI2MDgwMDQ0WhcNMjUxMjI3MDgwMDQ0WjAzMTEwLwYDVQQD EyhhNTUyMDQ0ZGM4Y2IxMjllNzVhOWM1YmU3ZDhhZTA4NzM3YjVkZTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzn9zkgmNmagAoFZ9Rl/86aqk6KSJ LRxlaKM1Rl2n5SeO7B4D2L/yw+N2XSBswl0x7XFbQ6ZsWBop+YoKQCaRG5WWrYXI W75N6Jri1Ze5Be0o/rqkXmTU6Af8+xqXYA88oE/LaIYDgSLYDwt0/w15D5eNikCG rUP9fEDqQkg+0UeyH7eHHgDcEEjVfo/+PeyrYUfULln7o0nlZOVxrmLTATO6z08D b2LXsolwPMIctlix6Xd1tcdUSw/GSHc7d+6Dh3pSQd0jFdIWJ425dUlUdQbblOQ1 O3S1xw6DMmTfmZ5hNNgSZm9EqOiIA6ZRqQH+HP3ZnuSzRzSDDIPuzWwfCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVSBE3IyxKedanFvn2K4Ic3td4GMB8GA1UdIwQY MBaAFPUZd6oid3Je0Q61Z01dodZiL0G3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVJsM3FpSjNjbDdSRHJWblRWMmgxbUl2UWJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80NmVlYzEtODZlMy00NzliLTkzY2Yt MTAzNWRjYzlkNDg5LzEvOVJsM3FpSjNjbDdSRHJWblRWMmgxbUl2UWJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi80NmVlYzEtODZlMy00NzliLTkzY2YtMTAzNWRjYzlkNDg5 LzEvOVJsM3FpSjNjbDdSRHJWblRWMmgxbUl2UWJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMBOByqs wcg5OuaulF68AcxkOCxXti0+7R2iWUqsbRIYecjftu1RZ62lxMYKQ8qObKMt9VBx +S1+P1/21qJEKv3HX5raEKblug1d8iYP2+ynpbJL4cfTu20i3qhhMRMkT58DDwZG lu3BzKYkOqP73v+SVcbbpdI/DRSkhCtowAb7H351E9s2tKucEai7qEWhLCPRrLCk AYMmYKtFfeyWemztcj1+4jsRH2N1G2FYgmm08346f8loikIvC6gFE98koYNrXB/t AvBNlTEJXfuDEIJAogBeEvgqsK3jApnEUKVoBTJ6WcytP1dvA/GLLDQKFmWeZsTv Hu3xyWIm4pHF7Q== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:36 2025 by rpki-client