This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft File: 1-9JdpktGOvOLRE_zcxGxVm31_LI.mft (raw, json) Hash identifier: dTWU/JlibKwdTCjV20mpJA/b0dTdOXQNZd+rC0zU8w8= Subject key identifier: 4C:C2:A7:39:23:B1:D4:A7:15:42:27:2E:37:76:EC:37:6C:FA:57:08 Authority key identifier: FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2 Certificate issuer: /CN=fbd25da64b463af38b444ff37311b1566df5fcb2 Certificate serial: 019B21ABA252C092CF26395F871E90774745 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft Manifest number: 177B Signing time: Mon 15 Dec 2025 11:00:54 +0000 Manifest this update: Mon 15 Dec 2025 11:00:54 +0000 Manifest next update: Tue 16 Dec 2025 11:00:54 +0000 Files and hashes: 1: 1-9JdpktGOvOLRE_zcxGxVm31_LI.crl (hash: J4vkO7vgz2tIWILBKvxLQ78geHaphGPoHFUbHaQVoj4=) 2: 3GvpHIxxSBOh_JH9oQawEJfN78g.roa (hash: m/cK1kN4KKcnsjbPKB2PXLCdGbbG3lcfoo431XMf3kI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ab:a2:52:c0:92:cf:26:39:5f:87:1e:90:77:47:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbd25da64b463af38b444ff37311b1566df5fcb2 Validity Not Before: Dec 15 11:00:54 2025 GMT Not After : Dec 16 11:00:54 2025 GMT Subject: CN=4cc2a73923b1d4a71542272e3776ec376cfa5708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c7:3d:19:bf:91:85:15:ba:c0:f8:1f:16:22: 82:a3:46:b9:46:30:43:34:68:cb:af:d6:2a:1b:70: bc:d7:eb:da:25:aa:8a:35:f3:2b:6f:1d:8a:22:76: b8:80:a6:05:86:1c:b3:11:db:9e:d9:18:74:8c:c4: e8:b4:f2:9b:b6:16:0c:21:cd:52:e2:4b:6d:a1:c8: 36:a7:0d:4d:57:b9:7d:f7:7f:29:c5:1c:09:d6:80: e8:7e:dd:bf:d1:5f:86:91:a7:d2:9e:26:33:03:06: 77:5a:14:37:b0:dc:5c:8e:63:34:11:06:e4:8a:e4: fc:cd:9c:b2:17:7e:54:d9:7f:2c:7b:7c:3c:98:1f: 92:47:e8:1c:70:c0:49:2e:f3:5f:be:30:bf:f2:08: 6d:5d:f7:d6:25:c9:93:00:ed:8b:b6:b3:a8:ba:33: bf:ae:92:f5:0c:ae:7c:eb:a2:66:cd:8e:0f:8d:cc: 6a:06:09:6f:dd:52:04:61:71:aa:53:3d:0a:75:de: 56:32:59:0c:38:8b:b4:7b:f8:6e:59:ba:a1:e5:ba: 12:8f:4c:bf:c9:20:8b:2c:bd:5b:12:06:05:46:92: 9f:69:46:7f:0c:46:8b:08:4e:d3:a4:79:1e:30:db: 54:31:ec:f8:04:08:49:9f:70:dd:fc:e7:20:29:cb: 51:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C2:A7:39:23:B1:D4:A7:15:42:27:2E:37:76:EC:37:6C:FA:57:08 X509v3 Authority Key Identifier: keyid:FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:59:f0:79:a0:5d:37:bb:09:6c:e4:ba:e6:69:8b:b2:bc:0f: 6e:96:2f:09:9a:46:07:9e:05:55:bb:c2:7d:e6:a3:6b:4b:f3: a3:03:9d:5e:d9:d5:60:0a:29:20:27:08:13:16:5d:91:f3:cb: 4e:8a:4b:06:79:a0:cb:14:0a:1f:1b:c5:a2:30:2e:30:4a:71: 97:32:93:a9:53:d6:5c:60:00:bf:21:96:67:3b:5f:21:f4:1d: 49:b7:ab:de:44:71:ab:fe:b7:52:87:28:f9:9a:fd:3e:0e:bd: 9a:9a:57:ff:39:ff:b1:9e:f0:9b:50:ba:31:4a:2a:b6:bf:0b: f4:44:58:25:d6:d9:85:79:2f:fd:4e:7e:45:34:3d:05:76:8e: dd:44:cf:2a:e8:41:2a:ea:0d:e0:04:66:1a:29:7f:62:b7:e6: ba:ed:85:72:63:da:31:f6:1f:80:3d:be:08:65:c3:c8:f3:76: 04:7b:3c:f1:bf:a6:eb:05:2b:e9:66:bf:b3:50:6e:98:57:bd: cf:8d:01:4b:ff:6f:8e:a5:a1:ed:88:df:bb:c1:9b:f9:a2:43: fd:0d:b3:98:b9:99:63:eb:03:bb:da:9f:63:ab:b4:21:51:c8: db:0b:29:2d:85:3e:9e:90:2f:7c:2a:2a:e4:8d:74:ff:79:de: 84:f8:b7:17 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZshq6JSwJLPJjlfhx6Qd0dFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZDI1ZGE2NGI0NjNhZjM4YjQ0NGZmMzczMTFiMTU2NmRm NWZjYjIwHhcNMjUxMjE1MTEwMDU0WhcNMjUxMjE2MTEwMDU0WjAzMTEwLwYDVQQD Eyg0Y2MyYTczOTIzYjFkNGE3MTU0MjI3MmUzNzc2ZWMzNzZjZmE1NzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcc9Gb+RhRW6wPgfFiKCo0a5RjBD NGjLr9YqG3C81+vaJaqKNfMrbx2KIna4gKYFhhyzEdue2Rh0jMTotPKbthYMIc1S 4kttocg2pw1NV7l9938pxRwJ1oDoft2/0V+GkafSniYzAwZ3WhQ3sNxcjmM0EQbk iuT8zZyyF35U2X8se3w8mB+SR+gccMBJLvNfvjC/8ghtXffWJcmTAO2LtrOoujO/ rpL1DK5866JmzY4PjcxqBglv3VIEYXGqUz0Kdd5WMlkMOIu0e/huWbqh5boSj0y/ ySCLLL1bEgYFRpKfaUZ/DEaLCE7TpHkeMNtUMez4BAhJn3Dd/OcgKctRlQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEzCpzkjsdSnFUInLjd27Dds+lcIMB8GA1UdIwQY MBaAFPvSXaZLRjrzi0RP83MRsVZt9fyyMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS05SmRwa3RHT3ZPTFJFX3pjeEd4Vm0zMV9MSS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvZmE2NWU4LWU1OTctNDczOC04Mzk2 LTgyNWVjMTA3NWRlNi8xLzEtOUpkcGt0R092T0xSRV96Y3hHeFZtMzFfTEkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQxL2ZhNjVlOC1lNTk3LTQ3MzgtODM5Ni04MjVlYzEwNzVk ZTYvMS8xLTlKZHBrdEdPdk9MUkVfemN4R3hWbTMxX0xJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm1nw eaBdN7sJbOS65mmLsrwPbpYvCZpGB54FVbvCfeaja0vzowOdXtnVYAopICcIExZd kfPLTopLBnmgyxQKHxvFojAuMEpxlzKTqVPWXGAAvyGWZztfIfQdSber3kRxq/63 Uoco+Zr9Pg69mppX/zn/sZ7wm1C6MUoqtr8L9ERYJdbZhXkv/U5+RTQ9BXaO3UTP KuhBKuoN4ARmGil/Yrfmuu2FcmPaMfYfgD2+CGXDyPN2BHs88b+m6wUr6Wa/s1Bu mFe9z40BS/9vjqWh7Yjfu8Gb+aJD/Q2zmLmZY+sDu9qfY6u0IVHI2wspLYU+npAv fCoq5I10/3nehPi3Fw== -----END CERTIFICATE-----Generated at Mon Dec 15 21:56:53 2025 by rpki-client