This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft File: 9PerRYfmkCLl4rwkEHtQHQMcNyA.mft (raw, json) Hash identifier: aWyLZCiabaUdC7PdrZtCLliFtdi32qTO6xiHLvwBgYo= Subject key identifier: EC:F0:96:65:90:73:AE:80:1B:B4:C8:29:4F:CA:BC:25:73:F7:61:3E Authority key identifier: F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20 Certificate issuer: /CN=f4f7ab4587e69022e5e2bc24107b501d031c3720 Certificate serial: 019B35A109EAF5F7F7F93AA6DF3F0ECB1A1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft Manifest number: 178D Signing time: Fri 19 Dec 2025 08:01:44 +0000 Manifest this update: Fri 19 Dec 2025 08:01:44 +0000 Manifest next update: Sat 20 Dec 2025 08:01:44 +0000 Files and hashes: 1: 9PerRYfmkCLl4rwkEHtQHQMcNyA.crl (hash: ECURi2IFl5IwlyrfoRoD7ixcgWQ7Gdv094ALUBkVpj4=) 2: HjzoahI6pyoFvP1ahRTakCdHZL4.roa (hash: gQHNv9As0iCn+ZAtcLVQ3zoAJ3Ne/2k5eR6SdkKMktQ=) 3: bH_KNyzPL_yx3OPEWTRFLsAi8nE.roa (hash: 72jCdlITtcwR18704/NTzfyeqmvwBsSw2iB9YQtGN+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a1:09:ea:f5:f7:f7:f9:3a:a6:df:3f:0e:cb:1a:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f7ab4587e69022e5e2bc24107b501d031c3720 Validity Not Before: Dec 19 08:01:44 2025 GMT Not After : Dec 20 08:01:44 2025 GMT Subject: CN=ecf096659073ae801bb4c8294fcabc2573f7613e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6d:a1:b8:4e:32:dd:11:e5:17:0f:b9:c3:06: 85:02:79:12:4a:98:d4:c6:ce:4e:61:32:86:87:cc: 30:6c:51:8d:cf:30:39:d3:a6:bf:72:c2:e1:c1:77: f7:33:05:44:84:70:c8:68:67:d3:23:33:58:a5:21: d3:ee:2a:56:02:bb:1e:b4:dd:b2:39:e5:68:f8:32: 96:88:11:b1:01:c0:26:2a:c6:2e:a7:ce:cf:8c:ff: 01:a7:da:bb:de:e6:85:bb:1c:fa:08:93:fa:aa:00: e3:13:a9:1e:e6:1b:50:a9:7a:d1:a9:91:00:aa:7c: 86:70:3b:29:99:f9:90:2c:2a:e2:64:5f:10:c2:33: 7b:d0:8f:94:dd:f5:4a:9a:21:ed:54:cc:93:2c:14: d2:c7:f2:62:d4:63:e1:52:91:69:12:bf:b4:a9:44: 11:24:84:1e:b0:b1:a8:c8:8f:71:d5:2a:9f:88:14: ac:e2:69:66:db:af:c4:96:1a:3e:d9:18:3f:e7:b9: 64:6f:2b:2c:d8:15:71:18:7f:ca:35:bb:ae:3e:3f: c8:f0:a9:cf:f5:73:7d:a4:2f:a8:6f:3e:20:f0:45: 22:18:05:94:1e:ea:26:e2:25:15:44:1c:f9:09:4f: 3d:69:e4:25:5f:a0:2e:5d:58:ca:88:33:58:10:6a: 2d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F0:96:65:90:73:AE:80:1B:B4:C8:29:4F:CA:BC:25:73:F7:61:3E X509v3 Authority Key Identifier: keyid:F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:75:76:7e:55:6c:41:54:f8:93:3d:cd:83:4c:66:9e:28:e2: e5:90:b5:db:4e:10:34:a3:bd:c0:2b:d5:83:63:d1:2b:ba:e9: ec:a9:83:d8:6f:25:79:90:28:84:25:4a:b5:6e:4f:64:89:cd: f6:9e:7e:d6:29:94:a5:f0:13:5b:1b:27:a1:57:38:60:e7:4e: fe:7f:66:1d:a1:06:0e:54:df:23:69:b0:d7:f1:52:70:0a:33: a5:a2:83:a9:30:af:62:42:b5:86:54:de:2c:2a:c7:9e:9d:8d: 3c:b6:20:d0:0b:bf:b1:b7:51:de:0c:19:9a:b5:18:1a:6f:bf: c5:78:0c:83:83:fd:9c:1c:44:1c:09:ec:1b:ca:f2:ec:61:a7: f3:3e:9e:c4:70:0c:e4:bc:31:5a:98:a7:6a:6a:27:90:34:e3: ab:74:9e:be:81:30:9a:a6:38:9f:cb:ab:01:07:dd:d2:fb:06: 36:87:6a:97:5f:36:ef:85:e7:54:9f:46:4d:09:a1:15:7f:cc: 51:99:6d:8b:14:02:f3:c6:f9:53:58:38:2f:91:40:c1:5d:45: 28:42:60:69:eb:aa:be:73:0b:e2:21:82:85:41:84:04:a8:a4: ac:e8:27:99:53:1a:ab:b7:52:61:2c:21:85:19:e1:27:08:73: 2f:81:64:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oQnq9ff3+Tqm3z8OyxocMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZjdhYjQ1ODdlNjkwMjJlNWUyYmMyNDEwN2I1MDFkMDMx YzM3MjAwHhcNMjUxMjE5MDgwMTQ0WhcNMjUxMjIwMDgwMTQ0WjAzMTEwLwYDVQQD EyhlY2YwOTY2NTkwNzNhZTgwMWJiNGM4Mjk0ZmNhYmMyNTczZjc2MTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr22huE4y3RHlFw+5wwaFAnkSSpjU xs5OYTKGh8wwbFGNzzA506a/csLhwXf3MwVEhHDIaGfTIzNYpSHT7ipWArsetN2y OeVo+DKWiBGxAcAmKsYup87PjP8Bp9q73uaFuxz6CJP6qgDjE6ke5htQqXrRqZEA qnyGcDspmfmQLCriZF8QwjN70I+U3fVKmiHtVMyTLBTSx/Ji1GPhUpFpEr+0qUQR JIQesLGoyI9x1SqfiBSs4mlm26/Elho+2Rg/57lkbyss2BVxGH/KNbuuPj/I8KnP 9XN9pC+obz4g8EUiGAWUHuom4iUVRBz5CU89aeQlX6AuXVjKiDNYEGotdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzwlmWQc66AG7TIKU/KvCVz92E+MB8GA1UdIwQY MBaAFPT3q0WH5pAi5eK8JBB7UB0DHDcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVBlclJZZm1rQ0xsNHJ3a0VIdFFIUU1jTnlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83N2Y0ZjAtYjgzMy00N2I3LWEzYzct ZWY3MTBlYzdiMmZlLzEvOVBlclJZZm1rQ0xsNHJ3a0VIdFFIUU1jTnlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83N2Y0ZjAtYjgzMy00N2I3LWEzYzctZWY3MTBlYzdiMmZl LzEvOVBlclJZZm1rQ0xsNHJ3a0VIdFFIUU1jTnlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB3V2flVs QVT4kz3Ng0xmniji5ZC1204QNKO9wCvVg2PRK7rp7KmD2G8leZAohCVKtW5PZInN 9p5+1imUpfATWxsnoVc4YOdO/n9mHaEGDlTfI2mw1/FScAozpaKDqTCvYkK1hlTe LCrHnp2NPLYg0Au/sbdR3gwZmrUYGm+/xXgMg4P9nBxEHAnsG8ry7GGn8z6exHAM 5LwxWpinamonkDTjq3SevoEwmqY4n8urAQfd0vsGNodql18274XnVJ9GTQmhFX/M UZltixQC88b5U1g4L5FAwV1FKEJgaeuqvnML4iGChUGEBKikrOgnmVMaq7dSYSwh hRnhJwhzL4Fkng== -----END CERTIFICATE-----Generated at Fri Dec 19 13:37:51 2025 by rpki-client