This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft File: 9KWwQv5I7rEjvlbb-ejdogweoR0.mft (raw, json) Hash identifier: i8oRvEJNe9/drEeJej7WkqwfbW/bQs23hJScYdPmKm8= Subject key identifier: 0E:07:09:60:12:92:95:39:AC:39:30:D6:F7:DA:9B:68:5E:7A:5F:F1 Authority key identifier: F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D Certificate issuer: /CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d Certificate serial: 019B341FED42942E7ABC22CA35199C669C62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft Manifest number: 1781 Signing time: Fri 19 Dec 2025 01:01:06 +0000 Manifest this update: Fri 19 Dec 2025 01:01:06 +0000 Manifest next update: Sat 20 Dec 2025 01:01:06 +0000 Files and hashes: 1: 9KWwQv5I7rEjvlbb-ejdogweoR0.crl (hash: ywnp6FB60z8v0HSOIEzs5yMFYrI31blLqW9NeJKkauE=) 2: BKaKCrIWJLW3Q862BmZ-Z-FQI78.roa (hash: zGv7kfCx9AyBiy/Vt4g16r88DKiDMl7S2RsrkRbPYxA=) 3: U6yxYsRAOLx1rVOUMfl1bHjQTqE.roa (hash: p5afCkYVQi7asNinB13X4z3pkTkHpo8/a9b5lnTy5To=) 4: hlFLNTPKu_nVGF692xwIYmZW2GU.roa (hash: c5Q2Sew+Iis+NOcJWfVvfa4Ocr0QgEd2RYjfl4HhWNE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:ed:42:94:2e:7a:bc:22:ca:35:19:9c:66:9c:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d Validity Not Before: Dec 19 01:01:06 2025 GMT Not After : Dec 20 01:01:06 2025 GMT Subject: CN=0e07096012929539ac3930d6f7da9b685e7a5ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cf:41:17:cf:6f:76:4f:30:87:2f:3a:a3:1c: b9:c8:05:47:3f:42:8c:ef:86:03:d2:21:38:31:f1: 6b:7e:b7:ce:e7:7f:a6:b4:b0:6e:00:c0:42:63:fd: 87:4c:16:35:f3:67:85:64:87:ae:ad:d3:0b:0b:a0: 5a:79:99:b6:79:bd:79:6d:d6:82:30:de:a8:17:8e: 20:75:f4:ac:65:81:7a:fe:c5:d5:16:59:e0:d5:b4: 1a:a3:8a:3a:32:60:b7:24:dd:d6:17:04:10:4f:2d: 45:9d:14:ca:c3:35:3d:8b:66:43:34:93:f8:5f:f7: f9:68:92:56:61:9b:8c:00:19:ee:93:7f:e0:eb:62: 2e:8f:ac:9a:b9:ad:56:c3:f8:78:5e:cb:1d:2d:a2: b9:e7:1b:32:ff:f5:59:7b:83:99:08:7b:36:0b:c6: a6:3e:a2:d1:9b:52:da:a7:0f:43:6e:ca:ef:9d:47: 89:d7:78:ba:69:6a:f0:3f:fe:26:56:62:95:5a:a9: fc:65:be:8a:2d:47:b1:db:41:2a:e6:f2:b9:74:a9: f7:46:75:91:90:cf:0d:3a:dc:30:0a:4d:e2:56:e7: 12:65:a7:80:31:fd:00:13:f1:aa:56:2a:88:5a:3e: b1:62:cf:e8:51:f9:b7:e5:aa:d0:09:00:25:3e:2f: 2a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:07:09:60:12:92:95:39:AC:39:30:D6:F7:DA:9B:68:5E:7A:5F:F1 X509v3 Authority Key Identifier: keyid:F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:35:e3:a2:3c:73:e4:3e:3c:a5:75:7d:55:a5:e6:13:9d:29: 7b:1d:3b:5c:20:fa:60:18:a2:b8:54:3b:dc:d2:ae:74:dc:0e: 5a:49:e5:b2:99:98:fe:6a:34:f3:69:43:32:3c:40:48:b5:f3: 9b:43:8d:5f:97:1e:c8:69:6f:cb:b5:f3:42:38:23:e9:32:cc: ab:9b:10:f0:3c:98:47:3a:a5:08:9d:4c:f1:d2:04:67:36:11: 3e:cd:23:27:4c:d9:9f:43:08:c6:fe:db:6f:5f:15:36:de:c0: 37:20:a2:bf:c4:e6:bb:5d:bd:f2:c2:5f:cc:7a:d8:79:da:1d: 58:aa:d1:70:d7:6e:a5:f0:4c:7b:e2:5e:32:0c:5d:0a:86:e4: 23:66:3a:b9:3d:22:28:c6:e0:c9:7c:cc:70:bb:18:04:cd:30: 06:79:42:66:76:6a:9b:f6:7a:70:76:03:62:87:f1:58:e2:fa: 8e:ff:34:24:ad:ac:36:78:79:69:8a:40:ec:47:64:1d:9b:fc: 26:fa:1c:9d:ba:f4:b2:2f:d4:a2:6e:20:38:5e:b8:00:8a:57: ee:3b:d7:1e:c7:ba:c3:89:16:a0:47:9e:c7:38:4c:d1:00:1c: 23:ec:81:9d:5d:c8:f4:88:43:3e:79:79:4c:7b:8f:34:20:8d: cd:21:50:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H+1ClC56vCLKNRmcZpxiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YTViMDQyZmU0OGVlYjEyM2JlNTZkYmY5ZThkZGEyMGMx ZWExMWQwHhcNMjUxMjE5MDEwMTA2WhcNMjUxMjIwMDEwMTA2WjAzMTEwLwYDVQQD EygwZTA3MDk2MDEyOTI5NTM5YWMzOTMwZDZmN2RhOWI2ODVlN2E1ZmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM9BF89vdk8why86oxy5yAVHP0KM 74YD0iE4MfFrfrfO53+mtLBuAMBCY/2HTBY182eFZIeurdMLC6BaeZm2eb15bdaC MN6oF44gdfSsZYF6/sXVFlng1bQao4o6MmC3JN3WFwQQTy1FnRTKwzU9i2ZDNJP4 X/f5aJJWYZuMABnuk3/g62Iuj6yaua1Ww/h4XssdLaK55xsy//VZe4OZCHs2C8am PqLRm1Lapw9DbsrvnUeJ13i6aWrwP/4mVmKVWqn8Zb6KLUex20Eq5vK5dKn3RnWR kM8NOtwwCk3iVucSZaeAMf0AE/GqViqIWj6xYs/oUfm35arQCQAlPi8qiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4HCWASkpU5rDkw1vfam2heel/xMB8GA1UdIwQY MBaAFPSlsEL+SO6xI75W2/no3aIMHqEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUtXd1F2NUk3ckVqdmxiYi1lamRvZ3dlb1IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zODkyMzEtMmI1Zi00YzllLTk0MWQt YjRiMjg0MzdmZTZjLzEvOUtXd1F2NUk3ckVqdmxiYi1lamRvZ3dlb1IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zODkyMzEtMmI1Zi00YzllLTk0MWQtYjRiMjg0MzdmZTZj LzEvOUtXd1F2NUk3ckVqdmxiYi1lamRvZ3dlb1IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvjXjojxz 5D48pXV9VaXmE50pex07XCD6YBiiuFQ73NKudNwOWknlspmY/mo082lDMjxASLXz m0ONX5ceyGlvy7XzQjgj6TLMq5sQ8DyYRzqlCJ1M8dIEZzYRPs0jJ0zZn0MIxv7b b18VNt7ANyCiv8Tmu1298sJfzHrYedodWKrRcNdupfBMe+JeMgxdCobkI2Y6uT0i KMbgyXzMcLsYBM0wBnlCZnZqm/Z6cHYDYofxWOL6jv80JK2sNnh5aYpA7EdkHZv8 Jvocnbr0si/Uom4gOF64AIpX7jvXHse6w4kWoEeexzhM0QAcI+yBnV3I9IhDPnl5 THuPNCCNzSFQvA== -----END CERTIFICATE-----Generated at Fri Dec 19 09:47:04 2025 by rpki-client