This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft File: 0u9GpBNBlOckI9VyobZtSp0uTBM.mft (raw, json) Hash identifier: kVQ3mppEY5AtP+GpRbwFRWLgA5vGrrlNfzqJWxRZP9M= Subject key identifier: 3B:E3:31:F4:A3:3D:AE:F5:C9:18:AA:1C:B4:1A:FF:6A:DF:8E:10:68 Authority key identifier: D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13 Certificate issuer: /CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13 Certificate serial: 019B3758535C6C95B9842992520B16A716B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft Manifest number: 14C7 Signing time: Fri 19 Dec 2025 16:01:33 +0000 Manifest this update: Fri 19 Dec 2025 16:01:33 +0000 Manifest next update: Sat 20 Dec 2025 16:01:33 +0000 Files and hashes: 1: 0u9GpBNBlOckI9VyobZtSp0uTBM.crl (hash: JFfulB0lD8hivGTbfzFahPoJV0RSKwx+5qnK6DhX26g=) 2: dW_FLnsv0zWikILQzBidDijXgG4.roa (hash: ma0ra8OYlImfY3CwT3NNDf0BfbTV59KzDn/miuP7r78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:58:53:5c:6c:95:b9:84:29:92:52:0b:16:a7:16:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13 Validity Not Before: Dec 19 16:01:33 2025 GMT Not After : Dec 20 16:01:33 2025 GMT Subject: CN=3be331f4a33daef5c918aa1cb41aff6adf8e1068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:96:33:17:43:56:57:3d:da:dc:f7:9b:1e:e7: 85:99:d1:bb:91:a5:65:90:81:55:bd:74:52:8b:77: d1:55:69:d7:50:0b:c8:68:dc:4b:1b:f8:55:e1:69: b1:16:92:26:ba:1c:aa:ce:b8:d4:bf:35:4b:ae:65: 8c:a2:03:e0:96:48:2b:96:f2:85:9d:bf:cb:00:3b: ef:eb:d7:8c:c1:fe:cb:ad:d2:d4:f4:1f:be:45:6a: a1:23:71:85:89:8a:00:5c:93:bb:37:b5:26:c1:b2: 39:ec:6d:b2:51:da:2b:c9:b1:28:4d:d1:59:20:61: f6:7c:85:0b:4f:8d:f5:f0:56:c8:5f:e8:36:76:76: 6a:00:35:f7:1a:f6:5f:72:e4:77:0c:cf:00:a4:fe: 1b:7f:f1:f2:4e:73:31:d9:c4:9d:0b:07:7b:9b:72: 8e:48:30:77:4d:da:79:d5:ee:36:89:39:48:05:53: ce:67:1c:57:bd:ab:97:ee:8d:ed:6e:df:79:5c:7d: 24:55:29:fc:69:3b:1a:29:95:45:97:2f:8a:9c:69: 9e:f9:4d:62:46:b4:3f:19:fc:db:a9:3b:07:ee:2f: f1:9d:83:ce:c9:1b:57:1e:1e:bc:54:07:23:f4:77: 8b:5b:ec:46:a7:0c:53:e7:c3:28:10:e7:74:af:99: 17:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E3:31:F4:A3:3D:AE:F5:C9:18:AA:1C:B4:1A:FF:6A:DF:8E:10:68 X509v3 Authority Key Identifier: keyid:D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d2:8b:f6:41:6c:af:e1:70:dc:ba:5e:c0:9c:21:52:e7:47: aa:9c:79:25:b1:08:fa:70:4a:d8:ce:5a:5f:2f:ee:54:fb:55: 9b:48:c0:c6:ed:03:21:74:43:52:21:ea:04:09:45:c3:72:5b: f3:fc:01:47:bf:bc:fc:cc:d3:88:16:a3:0c:07:d2:b4:f2:75: c6:0c:ad:ce:54:0f:e7:43:e1:76:f0:79:70:a3:1a:ce:fb:06: 25:d1:46:31:9d:20:50:63:ea:9d:7b:5c:ae:5a:a6:2f:89:62: 01:12:d9:2e:e8:7b:78:43:99:e5:bd:c2:5a:8d:3c:b5:24:4f: 8a:7a:16:e8:a1:52:d8:fc:bc:04:81:68:f6:5e:58:1f:e4:65: 74:84:e9:f1:ab:84:31:2d:9e:b4:dc:f8:11:af:2e:98:7f:5c: ec:68:53:9b:68:06:98:01:56:5e:2b:8f:06:1c:1a:bd:1c:46: 63:7a:00:5b:c3:f2:77:b1:e1:41:fa:9d:f1:65:af:80:94:a5: 1e:c2:ef:95:0c:6d:96:32:f4:51:df:e1:6c:72:16:1d:68:ef: 6f:e8:22:93:9b:82:9f:94:a4:62:88:83:cb:24:8c:ee:68:76: 05:6c:cf:a9:b4:96:54:50:48:41:d1:53:eb:03:f4:3e:35:5c: 72:d2:05:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3WFNcbJW5hCmSUgsWpxa2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZWY0NmE0MTM0MTk0ZTcyNDIzZDU3MmExYjY2ZDRhOWQy ZTRjMTMwHhcNMjUxMjE5MTYwMTMzWhcNMjUxMjIwMTYwMTMzWjAzMTEwLwYDVQQD EygzYmUzMzFmNGEzM2RhZWY1YzkxOGFhMWNiNDFhZmY2YWRmOGUxMDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupYzF0NWVz3a3PebHueFmdG7kaVl kIFVvXRSi3fRVWnXUAvIaNxLG/hV4WmxFpImuhyqzrjUvzVLrmWMogPglkgrlvKF nb/LADvv69eMwf7LrdLU9B++RWqhI3GFiYoAXJO7N7UmwbI57G2yUdorybEoTdFZ IGH2fIULT4318FbIX+g2dnZqADX3GvZfcuR3DM8ApP4bf/HyTnMx2cSdCwd7m3KO SDB3Tdp51e42iTlIBVPOZxxXvauX7o3tbt95XH0kVSn8aTsaKZVFly+KnGme+U1i RrQ/GfzbqTsH7i/xnYPOyRtXHh68VAcj9HeLW+xGpwxT58MoEOd0r5kX0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvjMfSjPa71yRiqHLQa/2rfjhBoMB8GA1UdIwQY MBaAFNLvRqQTQZTnJCPVcqG2bUqdLkwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHU5R3BCTkJsT2NrSTlWeW9iWnRTcDB1VEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82NDUzYzQtNjY4Ny00ZWY5LTlmZGMt YTg4YmI3ODA1YjA5LzEvMHU5R3BCTkJsT2NrSTlWeW9iWnRTcDB1VEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS82NDUzYzQtNjY4Ny00ZWY5LTlmZGMtYTg4YmI3ODA1YjA5 LzEvMHU5R3BCTkJsT2NrSTlWeW9iWnRTcDB1VEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdKL9kFs r+Fw3LpewJwhUudHqpx5JbEI+nBK2M5aXy/uVPtVm0jAxu0DIXRDUiHqBAlFw3Jb 8/wBR7+8/MzTiBajDAfStPJ1xgytzlQP50PhdvB5cKMazvsGJdFGMZ0gUGPqnXtc rlqmL4liARLZLuh7eEOZ5b3CWo08tSRPinoW6KFS2Py8BIFo9l5YH+RldITp8auE MS2etNz4Ea8umH9c7GhTm2gGmAFWXiuPBhwavRxGY3oAW8Pyd7HhQfqd8WWvgJSl HsLvlQxtljL0Ud/hbHIWHWjvb+gik5uCn5SkYoiDyySM7mh2BWzPqbSWVFBIQdFT 6wP0PjVcctIFUg== -----END CERTIFICATE-----Generated at Sat Dec 20 00:22:31 2025 by rpki-client