This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft File: 9O9duhAKkrJETz5RLQGlksAZUcI.mft (raw, json) Hash identifier: opTok1rkzDBMH/qqahyPdCVFLfb60NxjclJUacpdGpk= Subject key identifier: 5B:18:27:72:98:4E:91:8A:5D:FA:80:EC:32:58:7A:23:26:1B:04:19 Authority key identifier: F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2 Certificate issuer: /CN=f4ef5dba100a92b2444f3e512d01a592c01951c2 Certificate serial: 019B4B15693966765D209D91B6EF6A1B4169 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft Manifest number: 09FC Signing time: Tue 23 Dec 2025 12:00:52 +0000 Manifest this update: Tue 23 Dec 2025 12:00:52 +0000 Manifest next update: Wed 24 Dec 2025 12:00:52 +0000 Files and hashes: 1: 9O9duhAKkrJETz5RLQGlksAZUcI.crl (hash: N2q2Dl/o49sOol0gPug5tiLhUGlHJsogxfTba2celWo=) 2: AmSXBHT3ckJxS__llRle1pOg_Gk.roa (hash: NGUzsrMFkYpqygz3V48C568ROl1XZloZCRkdB8fnGRs=) 3: RqMgMpdcD54HUHiiovgo2_7eo94.roa (hash: eRUbOt1afNalKvV81WeaR6eAgifd6J7LvG2r3czI9hc=) 4: gzBqFqX-GOiBCBUlEgTsEnHuXvM.roa (hash: d9Lvaxwm2cOVNLGx1WtIoyEgpf/MLPQzSYnTj875od0=) 5: wdTC4RawEs-5fFZUa4R_HIRxO2U.roa (hash: Rtc4DEopTsErPd8Vo2cqobz/fHQCAfYf819UnyzhAlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:15:69:39:66:76:5d:20:9d:91:b6:ef:6a:1b:41:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4ef5dba100a92b2444f3e512d01a592c01951c2 Validity Not Before: Dec 23 12:00:52 2025 GMT Not After : Dec 24 12:00:52 2025 GMT Subject: CN=5b182772984e918a5dfa80ec32587a23261b0419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e4:48:ef:9d:ba:e5:0b:f0:20:79:3e:c1:c8: ac:98:e8:f9:40:c0:f1:9b:1e:ab:ee:d6:2a:1b:1f: 7b:c2:dc:8f:c6:72:52:e7:6e:37:9a:f1:1a:46:cb: d9:96:9a:8a:87:0d:b5:ac:c8:0c:bb:fb:18:db:e5: 31:c0:bc:ce:01:28:4b:d2:8b:d3:60:59:f0:14:b1: 04:0d:d2:9b:83:d7:14:60:f7:e4:81:8c:52:01:46: 9a:a7:c7:ed:2d:58:60:cc:8b:06:39:35:d6:66:c1: 50:10:f0:1e:16:40:78:c2:3c:32:79:22:cf:ff:52: 69:90:76:18:10:d4:37:51:61:6b:c7:eb:c8:70:c8: 12:e2:c9:e1:f3:62:31:4c:94:f5:12:eb:99:85:b7: 08:fb:52:f1:3a:ca:14:d7:ea:f8:7d:d3:f9:e0:f4: 6f:c5:1d:8e:85:95:cd:5f:c3:dd:e4:0a:a0:51:45: 46:77:a8:1e:12:ef:b6:fc:02:f4:cf:37:5b:15:9f: 12:a9:81:d4:fe:50:56:34:b9:53:a3:3f:18:e9:6c: 1c:6c:b2:bd:e2:fa:9f:8b:58:e6:b9:c8:a6:6a:6a: 6f:da:ca:91:53:9a:3d:ea:02:14:bb:49:00:5f:c2: f8:36:fa:61:2e:0a:cd:26:92:6a:a9:d9:e2:e4:03: 20:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:18:27:72:98:4E:91:8A:5D:FA:80:EC:32:58:7A:23:26:1B:04:19 X509v3 Authority Key Identifier: keyid:F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:4c:a6:8c:ea:6a:f6:4e:93:62:d4:85:c7:64:1b:f6:37:5c: 5a:67:bb:9c:b4:0d:0b:50:0c:22:d1:da:f9:ab:ef:2b:aa:1a: 7c:a5:75:ae:8e:22:43:eb:05:e6:86:47:63:ef:8a:90:bc:7c: 87:aa:69:57:cc:82:a9:0e:25:7e:df:b9:3f:78:17:16:77:9e: aa:2a:44:18:3d:19:68:80:38:05:3e:0a:f2:fb:f6:24:e7:04: 74:8e:cb:44:8c:60:69:90:08:84:17:88:bb:3f:4c:c6:2f:23: db:50:20:cd:26:ed:14:c9:a6:da:ff:00:eb:34:29:62:52:38: 68:18:2f:f9:60:45:3b:1f:00:f5:37:55:9c:f3:08:32:1d:e7: 4a:fb:a7:11:19:ff:f6:41:ea:b5:76:06:fe:f8:b3:d6:83:f8: 46:e1:7a:fc:ad:72:8d:28:3a:8e:5c:c5:f4:c6:e0:4c:4f:85: 7c:99:a4:d9:18:40:69:6a:bf:09:ff:8a:50:11:7b:c0:4c:2a: 09:3b:19:9e:d2:16:d7:67:4e:fd:fb:d6:7a:a0:42:a4:e9:20: 0c:38:08:52:c7:fc:99:70:44:f9:b1:bf:40:13:7e:db:ce:8b: ef:32:e8:79:0d:5c:14:18:5b:64:71:b3:60:8e:3a:e4:06:0e: ab:d1:91:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLFWk5ZnZdIJ2Rtu9qG0FpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZWY1ZGJhMTAwYTkyYjI0NDRmM2U1MTJkMDFhNTkyYzAx OTUxYzIwHhcNMjUxMjIzMTIwMDUyWhcNMjUxMjI0MTIwMDUyWjAzMTEwLwYDVQQD Eyg1YjE4Mjc3Mjk4NGU5MThhNWRmYTgwZWMzMjU4N2EyMzI2MWIwNDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApORI75265QvwIHk+wcismOj5QMDx mx6r7tYqGx97wtyPxnJS5243mvEaRsvZlpqKhw21rMgMu/sY2+UxwLzOAShL0ovT YFnwFLEEDdKbg9cUYPfkgYxSAUaap8ftLVhgzIsGOTXWZsFQEPAeFkB4wjwyeSLP /1JpkHYYENQ3UWFrx+vIcMgS4snh82IxTJT1EuuZhbcI+1LxOsoU1+r4fdP54PRv xR2OhZXNX8Pd5AqgUUVGd6geEu+2/AL0zzdbFZ8SqYHU/lBWNLlToz8Y6WwcbLK9 4vqfi1jmucimampv2sqRU5o96gIUu0kAX8L4NvphLgrNJpJqqdni5AMgfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsYJ3KYTpGKXfqA7DJYeiMmGwQZMB8GA1UdIwQY MBaAFPTvXboQCpKyRE8+US0BpZLAGVHCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iMzViZTEtNjY3My00ODExLWE3MDct YWQwMjdlOTVjNWM3LzEvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9iMzViZTEtNjY3My00ODExLWE3MDctYWQwMjdlOTVjNWM3 LzEvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzUymjOpq 9k6TYtSFx2Qb9jdcWme7nLQNC1AMItHa+avvK6oafKV1ro4iQ+sF5oZHY++KkLx8 h6ppV8yCqQ4lft+5P3gXFneeqipEGD0ZaIA4BT4K8vv2JOcEdI7LRIxgaZAIhBeI uz9Mxi8j21AgzSbtFMmm2v8A6zQpYlI4aBgv+WBFOx8A9TdVnPMIMh3nSvunERn/ 9kHqtXYG/viz1oP4RuF6/K1yjSg6jlzF9MbgTE+FfJmk2RhAaWq/Cf+KUBF7wEwq CTsZntIW12dO/fvWeqBCpOkgDDgIUsf8mXBE+bG/QBN+286L7zLoeQ1cFBhbZHGz YI465AYOq9GR/Q== -----END CERTIFICATE-----Generated at Tue Dec 23 13:10:44 2025 by rpki-client