This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft File: 9H0DN3zBCPRAkSa5oMIBYyQhxko.mft (raw, json) Hash identifier: jfbe38MQagU4aDc2I7/LBRRkg1+GMz+jmOwGQSXBkac= Subject key identifier: 32:0F:BA:AD:11:DF:41:8F:59:F8:2C:02:11:15:2F:7D:C7:DC:DA:69 Authority key identifier: F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A Certificate issuer: /CN=f47d03377cc108f4409126b9a0c201632421c64a Certificate serial: 019B5A8839E87D51182C822B41D7AD590330 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft Manifest number: 1793 Signing time: Fri 26 Dec 2025 12:00:35 +0000 Manifest this update: Fri 26 Dec 2025 12:00:35 +0000 Manifest next update: Sat 27 Dec 2025 12:00:35 +0000 Files and hashes: 1: 9H0DN3zBCPRAkSa5oMIBYyQhxko.crl (hash: UnPk33ZaknvJiHZ3pmjYrR506+cJ+0l2D6cfNApPnvA=) 2: ZL6u0lt8luh-HpDXiPpT0bFGVhg.roa (hash: IHYYygZIFZcrdO0BJNXMBnkNRaemns60cAeVsiOtyzw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:39:e8:7d:51:18:2c:82:2b:41:d7:ad:59:03:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f47d03377cc108f4409126b9a0c201632421c64a Validity Not Before: Dec 26 12:00:35 2025 GMT Not After : Dec 27 12:00:35 2025 GMT Subject: CN=320fbaad11df418f59f82c0211152f7dc7dcda69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c0:50:cb:a0:10:46:4d:eb:7d:a2:b3:2c:d3: d2:7c:59:b2:af:0b:39:1c:4a:bc:a6:95:1f:ef:45: 07:dd:61:37:42:3b:60:ff:38:11:ff:74:dc:87:37: c0:1d:13:45:0c:1f:29:a5:fa:9c:28:7d:36:dd:e2: bc:70:ed:a5:d3:da:25:2f:81:60:33:4b:c9:3b:ea: e7:82:dc:b5:ad:36:6c:92:73:bd:ad:b0:27:b5:25: 53:51:17:24:73:93:ba:e8:71:82:cf:7c:3f:71:03: a6:67:6f:13:46:98:0d:eb:f4:54:c2:07:23:98:61: f8:24:b8:f1:a3:f5:ba:01:c8:f2:d3:9a:67:d6:21: d3:9e:f2:0a:3a:95:22:5b:cb:08:d6:72:98:c5:9f: 95:78:a2:cc:4b:a6:47:8f:5c:06:d0:cb:ad:14:ce: fa:e6:b1:57:5a:b2:5d:6f:a1:75:d2:ab:99:95:2f: 39:55:12:41:16:0a:55:fb:40:13:99:03:6d:c2:42: 93:1a:e9:cd:cc:fa:2d:31:fb:57:75:71:64:0f:f2: 93:3e:48:df:e3:f6:bd:95:c0:37:78:86:99:a4:7d: 4a:31:59:63:ba:52:e3:e9:4c:40:36:16:43:ec:9a: a7:9e:95:d1:44:54:15:ab:33:75:9c:3d:e5:20:26: 96:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:0F:BA:AD:11:DF:41:8F:59:F8:2C:02:11:15:2F:7D:C7:DC:DA:69 X509v3 Authority Key Identifier: keyid:F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:fb:54:39:cf:9f:5d:2d:38:ba:f6:76:50:49:c2:3d:89:0e: 8f:e7:e3:7c:63:e2:af:22:3c:f5:9e:5d:f9:2e:9c:d3:70:a7: 54:78:40:46:6c:1b:68:bc:35:cb:39:3a:e9:a3:e6:6e:e4:54: 70:87:00:90:a7:21:e0:9e:ef:b3:db:19:85:b1:f2:49:77:1d: 3c:b3:98:7a:63:0f:1d:31:8b:3e:4d:96:44:5e:93:a2:ed:f9: e3:4f:5a:61:9e:f2:54:05:9a:a5:71:70:96:5b:f0:07:69:19: b6:64:49:35:b6:45:cd:33:3a:4a:44:7d:a6:50:7b:48:fd:b5: 2b:8a:f8:59:42:3f:d3:ec:2c:67:06:c6:58:76:6e:3d:34:7e: e2:4b:f5:48:e2:1e:5d:a0:b4:50:66:27:36:c0:61:2c:27:7d: 7c:94:3c:1e:15:0f:0c:be:40:86:9b:0d:0b:16:16:6b:65:66: 7f:9b:de:32:80:c8:b4:95:fc:cc:a0:4f:48:a8:99:8c:31:9f: a3:23:2e:a9:58:5c:25:79:43:4e:27:68:d4:db:24:8e:11:e9: 8d:d9:7f:cf:e6:5c:69:00:e8:7b:0e:c5:2c:71:9c:1f:01:d6: 9c:29:82:f2:18:ff:c7:16:f6:e3:31:1e:15:f1:05:c0:0c:6e: ed:10:0e:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiDnofVEYLIIrQdetWQMwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0N2QwMzM3N2NjMTA4ZjQ0MDkxMjZiOWEwYzIwMTYzMjQy MWM2NGEwHhcNMjUxMjI2MTIwMDM1WhcNMjUxMjI3MTIwMDM1WjAzMTEwLwYDVQQD EygzMjBmYmFhZDExZGY0MThmNTlmODJjMDIxMTE1MmY3ZGM3ZGNkYTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cBQy6AQRk3rfaKzLNPSfFmyrws5 HEq8ppUf70UH3WE3Qjtg/zgR/3TchzfAHRNFDB8ppfqcKH023eK8cO2l09olL4Fg M0vJO+rngty1rTZsknO9rbAntSVTURckc5O66HGCz3w/cQOmZ28TRpgN6/RUwgcj mGH4JLjxo/W6Acjy05pn1iHTnvIKOpUiW8sI1nKYxZ+VeKLMS6ZHj1wG0MutFM76 5rFXWrJdb6F10quZlS85VRJBFgpV+0ATmQNtwkKTGunNzPotMftXdXFkD/KTPkjf 4/a9lcA3eIaZpH1KMVljulLj6UxANhZD7JqnnpXRRFQVqzN1nD3lICaWDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIPuq0R30GPWfgsAhEVL33H3NppMB8GA1UdIwQY MBaAFPR9Azd8wQj0QJEmuaDCAWMkIcZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUgwRE4zekJDUFJBa1NhNW9NSUJZeVFoeGtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84YmM0NjktZjdlMy00MGM0LWFmYzgt ZTFkMGZkZDViZmY1LzEvOUgwRE4zekJDUFJBa1NhNW9NSUJZeVFoeGtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84YmM0NjktZjdlMy00MGM0LWFmYzgtZTFkMGZkZDViZmY1 LzEvOUgwRE4zekJDUFJBa1NhNW9NSUJZeVFoeGtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEftUOc+f XS04uvZ2UEnCPYkOj+fjfGPiryI89Z5d+S6c03CnVHhARmwbaLw1yzk66aPmbuRU cIcAkKch4J7vs9sZhbHySXcdPLOYemMPHTGLPk2WRF6Tou35409aYZ7yVAWapXFw llvwB2kZtmRJNbZFzTM6SkR9plB7SP21K4r4WUI/0+wsZwbGWHZuPTR+4kv1SOIe XaC0UGYnNsBhLCd9fJQ8HhUPDL5AhpsNCxYWa2Vmf5veMoDItJX8zKBPSKiZjDGf oyMuqVhcJXlDTido1NskjhHpjdl/z+ZcaQDoew7FLHGcHwHWnCmC8hj/xxb24zEe FfEFwAxu7RAOzw== -----END CERTIFICATE-----Generated at Fri Dec 26 17:43:24 2025 by rpki-client