This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json) Hash identifier: NtQk/rkJ10V3HCOQo/XyDp+Ohx+QjwwZOYBj/sWB3QI= Subject key identifier: AD:48:07:47:25:CC:73:EE:1E:53:C8:16:51:15:2E:5F:D5:1F:58:7F Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43 Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043 Certificate serial: 019AFEE8F8CC36DB84647B28EE5617E11023 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft Manifest number: 1766 Signing time: Mon 08 Dec 2025 17:01:12 +0000 Manifest this update: Mon 08 Dec 2025 17:01:12 +0000 Manifest next update: Tue 09 Dec 2025 17:01:12 +0000 Files and hashes: 1: 1-q7Os-ag3LFo7MgF8ZfJghgVfgc.roa (hash: AkqR6A52qHHQpKh+paJEwg0UF7zLNR6BUjxPJEPXBuc=) 2: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: pvk4hHPJqLreRa6JLpKT+geO8SIINUOpZalTrLxAplQ=) 3: X2IXuMlNGoAcrvL_ko43_QrEupI.roa (hash: tb+ePbzsjMAZQXem+oOzrudhMucziUuIqtpyErKmVRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 15:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:e8:f8:cc:36:db:84:64:7b:28:ee:56:17:e1:10:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4e9d53310243187083fdc9609735465b1089043 Validity Not Before: Dec 8 17:01:12 2025 GMT Not After : Dec 9 17:01:12 2025 GMT Subject: CN=ad48074725cc73ee1e53c81651152e5fd51f587f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3a:78:c7:76:c0:89:9f:72:e5:27:d8:bb:a7: e6:76:94:ed:e5:8e:a0:b8:86:90:45:ae:2d:fb:9c: 2a:db:3c:f1:ea:70:35:bf:1a:e2:35:0e:9a:ad:8a: 10:be:39:72:04:3e:6f:27:13:56:d8:bb:0c:d8:80: 95:a1:b9:3e:a1:d4:2d:59:8e:f4:74:dd:3e:15:fe: 85:12:10:25:de:76:a3:2d:ae:62:1e:59:43:9b:f9: 4c:98:f7:8b:bb:5a:b7:77:01:87:70:03:c2:2a:36: 6c:16:0e:86:0a:89:7e:c1:22:58:95:af:c8:f8:a1: 76:d8:3f:7f:01:92:65:f8:29:3c:ce:0b:e3:82:4d: b8:c3:38:9a:32:a5:89:07:8a:ac:44:bd:8f:99:19: 8e:c3:e0:f5:d3:e6:ee:fd:a4:6b:9a:b0:b7:ef:ef: a2:8a:b3:d8:75:da:00:ba:4c:a1:18:d3:40:5b:50: d9:70:cf:21:52:ff:ae:cb:6e:7e:da:04:f3:99:4f: f3:7a:8a:7b:d5:cc:53:1d:94:2a:04:25:14:e2:38: 0d:d7:b8:43:02:90:52:b5:95:6b:c5:f9:ed:de:0e: 8b:53:27:f7:06:af:58:51:1d:d0:10:06:cb:58:1e: bd:18:e5:46:0e:51:5a:99:68:91:45:31:d5:8c:42: 14:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:48:07:47:25:CC:73:EE:1E:53:C8:16:51:15:2E:5F:D5:1F:58:7F X509v3 Authority Key Identifier: keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:25:7b:ed:75:f2:c9:9f:99:0c:e3:a2:20:09:aa:9b:ad:c6: 84:69:e6:69:22:19:78:75:4c:94:1b:86:b2:20:6c:a4:38:3b: f5:04:6d:15:56:b5:f3:d2:63:c3:c4:42:98:77:66:ce:81:0b: 60:29:8f:0b:62:ba:35:df:5c:5b:c5:86:39:b9:41:c0:f7:5b: 98:77:13:17:ce:1d:43:93:55:8d:d2:e3:9a:3b:f6:9b:de:75: c2:15:5e:16:e3:2a:26:42:c4:09:44:4f:8d:bf:30:03:d5:b5: dc:41:3d:0c:09:2a:58:d5:da:ba:1d:3a:02:6d:f6:02:ae:df: 79:af:a7:37:15:e1:98:60:af:fa:58:78:a6:dd:cb:97:11:5b: 96:34:c7:fb:ea:2a:d2:8b:4b:8d:e0:8a:3c:0c:0e:a0:8c:61: 8d:07:5c:3e:c6:ac:1c:d9:08:09:85:a2:4c:c0:87:d7:0b:b9: aa:22:d2:3f:d0:dc:f5:7e:6f:cd:97:51:aa:7f:b7:ce:2d:87: 0c:69:e4:5d:60:a9:b7:d6:e6:1f:c8:82:cf:c9:cc:d3:37:61: 9e:05:e4:84:da:e9:46:9f:c8:e3:9a:41:e6:39:74:42:68:1c: f4:0e:53:a2:c6:4a:8b:71:25:78:b7:b6:5d:f9:2c:fd:c3:6e: 4d:1c:28:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr+6PjMNtuEZHso7lYX4RAjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZTlkNTMzMTAyNDMxODcwODNmZGM5NjA5NzM1NDY1YjEw ODkwNDMwHhcNMjUxMjA4MTcwMTEyWhcNMjUxMjA5MTcwMTEyWjAzMTEwLwYDVQQD EyhhZDQ4MDc0NzI1Y2M3M2VlMWU1M2M4MTY1MTE1MmU1ZmQ1MWY1ODdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTp4x3bAiZ9y5SfYu6fmdpTt5Y6g uIaQRa4t+5wq2zzx6nA1vxriNQ6arYoQvjlyBD5vJxNW2LsM2ICVobk+odQtWY70 dN0+Ff6FEhAl3najLa5iHllDm/lMmPeLu1q3dwGHcAPCKjZsFg6GCol+wSJYla/I +KF22D9/AZJl+Ck8zgvjgk24wziaMqWJB4qsRL2PmRmOw+D10+bu/aRrmrC37++i irPYddoAukyhGNNAW1DZcM8hUv+uy25+2gTzmU/zeop71cxTHZQqBCUU4jgN17hD ApBStZVrxfnt3g6LUyf3Bq9YUR3QEAbLWB69GOVGDlFamWiRRTHVjEIUKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1IB0clzHPuHlPIFlEVLl/VH1h/MB8GA1UdIwQY MBaAFPTp1TMQJDGHCD/clglzVGWxCJBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU9uVk14QWtNWWNJUDl5V0NYTlVaYkVJa0VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yODVmMzItMDNlYS00MTZlLTljYjAt N2U2NjY0OGZjMjY0LzEvOU9uVk14QWtNWWNJUDl5V0NYTlVaYkVJa0VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yODVmMzItMDNlYS00MTZlLTljYjAtN2U2NjY0OGZjMjY0 LzEvOU9uVk14QWtNWWNJUDl5V0NYTlVaYkVJa0VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSV77XXy yZ+ZDOOiIAmqm63GhGnmaSIZeHVMlBuGsiBspDg79QRtFVa189Jjw8RCmHdmzoEL YCmPC2K6Nd9cW8WGOblBwPdbmHcTF84dQ5NVjdLjmjv2m951whVeFuMqJkLECURP jb8wA9W13EE9DAkqWNXauh06Am32Aq7fea+nNxXhmGCv+lh4pt3LlxFbljTH++oq 0otLjeCKPAwOoIxhjQdcPsasHNkICYWiTMCH1wu5qiLSP9Dc9X5vzZdRqn+3zi2H DGnkXWCpt9bmH8iCz8nM0zdhngXkhNrpRp/I45pB5jl0Qmgc9A5TosZKi3EleLe2 Xfks/cNuTRwouA== -----END CERTIFICATE-----Generated at Mon Dec 8 20:53:12 2025 by rpki-client