This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft File: 9L51BK-IrnweNulm1Ztl3EBXJfE.mft (raw, json) Hash identifier: B0mdZWDmfRRUc31DrAQjgHPxeVptWwt6ZYZJ+oulz7g= Subject key identifier: 8F:8B:7D:16:DB:55:55:67:35:32:A5:53:60:D8:3C:23:16:8E:AB:7F Authority key identifier: F4:BE:75:04:AF:88:AE:7C:1E:36:E9:66:D5:9B:65:DC:40:57:25:F1 Certificate issuer: /CN=f4be7504af88ae7c1e36e966d59b65dc405725f1 Certificate serial: 019B59E457E723F50274F2E76E5C0A5FB273 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9L51BK-IrnweNulm1Ztl3EBXJfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft Manifest number: 1504 Signing time: Fri 26 Dec 2025 09:01:35 +0000 Manifest this update: Fri 26 Dec 2025 09:01:35 +0000 Manifest next update: Sat 27 Dec 2025 09:01:35 +0000 Files and hashes: 1: 9L51BK-IrnweNulm1Ztl3EBXJfE.crl (hash: Cad5Z4048Tn46QvdJ58YywdNbOCNQUjO3d8PHXIUhOQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.crl rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft rsync://rpki.ripe.net/repository/DEFAULT/9L51BK-IrnweNulm1Ztl3EBXJfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:57:e7:23:f5:02:74:f2:e7:6e:5c:0a:5f:b2:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4be7504af88ae7c1e36e966d59b65dc405725f1 Validity Not Before: Dec 26 09:01:35 2025 GMT Not After : Dec 27 09:01:35 2025 GMT Subject: CN=8f8b7d16db5555673532a55360d83c23168eab7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:47:37:64:26:1f:1d:59:52:e4:43:40:08:68: de:d7:60:e2:ae:be:39:8b:d0:ba:77:41:f2:b9:d4: 54:f0:6e:62:51:10:81:4f:9d:f0:e1:7e:ce:37:2c: 77:bd:44:37:75:76:49:e6:d1:d1:46:cf:b1:d3:47: ac:df:b0:37:ad:9c:c0:4d:54:61:66:be:9c:6f:e9: 59:cb:c5:bd:a3:9b:a7:65:cb:d7:04:e7:22:c1:50: 32:30:6e:a8:ef:bd:b8:6b:ed:7c:35:c6:09:30:57: 9c:8f:fc:2d:60:f5:6f:19:b1:35:68:59:1a:cf:e1: 8c:10:11:93:89:33:c9:8d:cf:68:ea:2e:73:c1:c0: 5b:37:ff:f5:8e:20:3a:83:b3:7d:c4:2c:27:78:c2: 34:4e:76:e2:34:ef:72:a2:7b:82:5f:ba:49:3d:fd: e5:9c:67:70:42:f1:61:a1:4b:16:83:df:49:c0:f0: 2e:b9:e7:1f:83:5c:72:48:69:31:a7:f0:84:df:17: ec:db:6c:a5:fa:1f:7f:03:f5:95:31:47:73:e6:3a: 7d:b7:bc:a5:73:7f:98:bc:e1:34:1a:75:9b:37:29: da:3e:40:ae:64:b1:91:e3:3a:1b:f2:9f:a0:28:5d: 9e:fd:cb:9e:25:49:f6:fa:c0:f7:76:3e:59:61:d0: 46:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:8B:7D:16:DB:55:55:67:35:32:A5:53:60:D8:3C:23:16:8E:AB:7F X509v3 Authority Key Identifier: keyid:F4:BE:75:04:AF:88:AE:7C:1E:36:E9:66:D5:9B:65:DC:40:57:25:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9L51BK-IrnweNulm1Ztl3EBXJfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/bd7185-b4a2-4cd4-9b56-f12017a23b00/1/9L51BK-IrnweNulm1Ztl3EBXJfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:cb:bd:c6:a3:95:92:84:41:05:90:58:e4:0f:4d:cb:a9:49: 2a:51:56:6d:8d:ae:93:d0:90:21:e4:21:75:d0:56:e7:ea:d2: 4d:f0:82:6b:2a:ab:40:9a:01:8a:4e:cd:c5:66:e8:1a:e3:11: 4d:0a:5e:13:fa:41:1c:45:ab:db:8a:f6:3f:35:85:c1:02:5e: fe:1c:b9:6d:d2:4f:0b:a5:95:56:60:d7:5c:a2:f8:11:46:8b: a5:23:11:8c:02:83:42:d4:e6:c1:84:fd:c5:15:bb:c2:72:04: d4:06:f0:e7:25:52:11:a1:16:57:e8:fd:c3:d9:ad:12:68:82: 53:09:6a:2a:42:99:5a:ca:27:b9:23:c6:97:c6:22:1b:0e:40: 5e:19:8a:07:21:65:71:df:5f:6b:ac:93:de:24:10:91:5b:6f: a0:c6:5c:05:86:8c:08:5b:0a:a1:1d:e3:28:ed:3b:6d:4b:b1: d6:74:f3:58:17:49:ef:54:21:98:dc:c3:f7:74:72:63:94:69: e4:ef:2f:c3:5b:ab:46:ad:25:9c:29:f7:ae:cb:72:99:77:7e: 06:39:5c:9f:4d:c0:a2:ad:df:96:0b:8a:9b:04:37:82:f8:95: b2:dc:51:6e:35:1f:e2:02:07:b5:97:bd:97:45:8b:31:9d:d3: e2:ba:6d:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5FfnI/UCdPLnblwKX7JzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YmU3NTA0YWY4OGFlN2MxZTM2ZTk2NmQ1OWI2NWRjNDA1 NzI1ZjEwHhcNMjUxMjI2MDkwMTM1WhcNMjUxMjI3MDkwMTM1WjAzMTEwLwYDVQQD Eyg4ZjhiN2QxNmRiNTU1NTY3MzUzMmE1NTM2MGQ4M2MyMzE2OGVhYjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEc3ZCYfHVlS5ENACGje12Dirr45 i9C6d0HyudRU8G5iURCBT53w4X7ONyx3vUQ3dXZJ5tHRRs+x00es37A3rZzATVRh Zr6cb+lZy8W9o5unZcvXBOciwVAyMG6o7724a+18NcYJMFecj/wtYPVvGbE1aFka z+GMEBGTiTPJjc9o6i5zwcBbN//1jiA6g7N9xCwneMI0TnbiNO9yonuCX7pJPf3l nGdwQvFhoUsWg99JwPAuuecfg1xySGkxp/CE3xfs22yl+h9/A/WVMUdz5jp9t7yl c3+YvOE0GnWbNynaPkCuZLGR4zob8p+gKF2e/cueJUn2+sD3dj5ZYdBGJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+LfRbbVVVnNTKlU2DYPCMWjqt/MB8GA1UdIwQY MBaAFPS+dQSviK58HjbpZtWbZdxAVyXxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUw1MUJLLUlybndlTnVsbTFadGwzRUJYSmZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9iZDcxODUtYjRhMi00Y2Q0LTliNTYt ZjEyMDE3YTIzYjAwLzEvOUw1MUJLLUlybndlTnVsbTFadGwzRUJYSmZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9iZDcxODUtYjRhMi00Y2Q0LTliNTYtZjEyMDE3YTIzYjAw LzEvOUw1MUJLLUlybndlTnVsbTFadGwzRUJYSmZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsu9xqOV koRBBZBY5A9Ny6lJKlFWbY2uk9CQIeQhddBW5+rSTfCCayqrQJoBik7NxWboGuMR TQpeE/pBHEWr24r2PzWFwQJe/hy5bdJPC6WVVmDXXKL4EUaLpSMRjAKDQtTmwYT9 xRW7wnIE1Abw5yVSEaEWV+j9w9mtEmiCUwlqKkKZWsonuSPGl8YiGw5AXhmKByFl cd9fa6yT3iQQkVtvoMZcBYaMCFsKoR3jKO07bUux1nTzWBdJ71QhmNzD93RyY5Rp 5O8vw1urRq0lnCn3rstymXd+Bjlcn03Aoq3flguKmwQ3gviVstxRbjUf4gIHtZe9 l0WLMZ3T4rpttA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:34 2025 by rpki-client