This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft File: 9lQZ43AKNrorA5Bsn49NLf2EgHA.mft (raw, json) Hash identifier: 1F7T82xHYOe7nGtl3QOUsz30+Zg77F8lYejc03OKKdQ= Subject key identifier: 28:B1:A6:D9:3B:DE:44:38:0C:B0:5C:02:BB:80:47:A8:93:0E:23:66 Authority key identifier: F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70 Certificate issuer: /CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070 Certificate serial: 019B4438C08D5862FB83949395AB86E12729 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft Manifest number: 0EA7 Signing time: Mon 22 Dec 2025 04:02:08 +0000 Manifest this update: Mon 22 Dec 2025 04:02:08 +0000 Manifest next update: Tue 23 Dec 2025 04:02:08 +0000 Files and hashes: 1: 9lQZ43AKNrorA5Bsn49NLf2EgHA.crl (hash: nTWIPLeukmXPRrpwH7hTLQJdvbz48zl8AdYalcYEFNs=) 2: khAk69GaviX3ISVPskdgmXYxHg0.roa (hash: iZg+JNU8yAUj+GbVfYYrGDVbFREqgvj716gjoOSNlMU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:c0:8d:58:62:fb:83:94:93:95:ab:86:e1:27:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f65419e3700a36ba2b03906c9f8f4d2dfd848070 Validity Not Before: Dec 22 04:02:08 2025 GMT Not After : Dec 23 04:02:08 2025 GMT Subject: CN=28b1a6d93bde44380cb05c02bb8047a8930e2366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c9:ae:fc:5b:b7:08:90:7a:e3:ab:b5:58:b8: ee:bd:f0:2c:83:f7:11:3e:ad:f8:11:46:bc:6e:a1: 89:52:26:4c:df:1d:6f:5c:83:53:8b:05:35:f1:ec: 8b:7d:1c:d1:ab:5a:c5:e6:0e:d9:7f:59:c1:08:14: 7e:02:96:1b:97:d8:e5:2c:bb:f0:d0:41:f2:a4:00: cd:5b:f1:bd:17:33:1f:10:ed:f2:93:5d:1e:c0:6a: 4d:24:a3:a8:77:03:e9:44:3f:bc:40:e2:29:c1:77: 45:82:2b:6a:d7:6f:1f:d4:18:64:5a:73:9c:75:37: 4d:cf:7a:c1:f2:b5:13:bf:cb:61:9d:f1:36:fb:2a: 28:bd:85:a0:a1:2c:94:75:4c:7c:10:2f:4b:a7:15: 4e:a0:55:2a:85:71:d1:72:d6:14:64:9e:d2:20:fb: fa:d9:fc:1c:b1:bf:01:bd:ef:69:b1:70:05:bd:cd: fe:dd:8f:9d:0e:3e:6b:86:e6:62:33:79:86:10:42: f2:a8:69:84:0a:1f:ea:b1:76:96:8b:91:7e:c3:47: 54:a3:5f:1f:06:0d:b5:28:f4:fa:05:ce:65:20:7d: 8d:56:29:23:3d:db:ee:7a:e6:ce:1e:f3:99:29:d9: 93:ff:10:b1:20:ec:7c:9d:32:1b:6e:82:16:a2:ab: f1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B1:A6:D9:3B:DE:44:38:0C:B0:5C:02:BB:80:47:A8:93:0E:23:66 X509v3 Authority Key Identifier: keyid:F6:54:19:E3:70:0A:36:BA:2B:03:90:6C:9F:8F:4D:2D:FD:84:80:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lQZ43AKNrorA5Bsn49NLf2EgHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/449c02-f262-45d3-8f8f-d4b723ed781c/1/9lQZ43AKNrorA5Bsn49NLf2EgHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:fb:71:a8:61:a6:86:65:11:9a:d4:d9:b0:c8:10:aa:a1:14: 7c:4a:05:ec:fb:38:0b:20:07:25:a1:fe:99:2c:90:68:bc:5b: c9:77:60:d2:2b:0d:55:11:69:84:22:b2:c4:14:ca:cd:ab:cf: 7d:62:74:45:8d:23:ae:3a:d8:ef:06:b4:51:3e:8b:9c:56:76: 6a:6b:b4:9f:36:1e:23:35:d4:36:7f:41:7f:f2:0f:cb:12:43: 0f:15:62:06:2f:53:02:0e:7d:d3:e6:07:01:f3:8a:2c:bf:e5: 82:48:a1:46:d9:70:42:e0:c7:ea:e2:77:e0:73:b7:88:84:1e: 2d:b3:b5:35:f4:8e:46:8d:27:b9:6e:d1:6f:e4:d6:16:3c:49: e9:bd:12:cd:ef:ac:43:09:e4:0e:46:f1:0b:89:20:14:bf:8f: bd:33:34:bc:58:f2:72:fb:c1:31:16:ac:3d:23:e9:a0:cb:30: 15:8d:c3:f1:26:10:67:4a:85:30:4f:ce:8b:82:d7:99:36:ed: 0a:b5:ed:5b:cf:01:0a:7f:50:e6:62:ec:72:14:a7:35:01:af: 08:df:81:fe:08:9c:2b:bd:3a:b5:2b:f8:e9:45:8b:ad:1e:5a: ca:b1:53:c9:64:8e:9d:5e:0a:36:4b:94:a6:ed:fa:08:f5:e7: 5e:c8:dc:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOMCNWGL7g5STlauG4ScpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NTQxOWUzNzAwYTM2YmEyYjAzOTA2YzlmOGY0ZDJkZmQ4 NDgwNzAwHhcNMjUxMjIyMDQwMjA4WhcNMjUxMjIzMDQwMjA4WjAzMTEwLwYDVQQD EygyOGIxYTZkOTNiZGU0NDM4MGNiMDVjMDJiYjgwNDdhODkzMGUyMzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsmu/Fu3CJB646u1WLjuvfAsg/cR Pq34EUa8bqGJUiZM3x1vXINTiwU18eyLfRzRq1rF5g7Zf1nBCBR+ApYbl9jlLLvw 0EHypADNW/G9FzMfEO3yk10ewGpNJKOodwPpRD+8QOIpwXdFgitq128f1BhkWnOc dTdNz3rB8rUTv8thnfE2+yoovYWgoSyUdUx8EC9LpxVOoFUqhXHRctYUZJ7SIPv6 2fwcsb8Bve9psXAFvc3+3Y+dDj5rhuZiM3mGEELyqGmECh/qsXaWi5F+w0dUo18f Bg21KPT6Bc5lIH2NVikjPdvueubOHvOZKdmT/xCxIOx8nTIbboIWoqvxlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCixptk73kQ4DLBcAruAR6iTDiNmMB8GA1UdIwQY MBaAFPZUGeNwCja6KwOQbJ+PTS39hIBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80NDljMDItZjI2Mi00NWQzLThmOGYt ZDRiNzIzZWQ3ODFjLzEvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny80NDljMDItZjI2Mi00NWQzLThmOGYtZDRiNzIzZWQ3ODFj LzEvOWxRWjQzQUtOcm9yQTVCc240OU5MZjJFZ0hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPtxqGGm hmURmtTZsMgQqqEUfEoF7Ps4CyAHJaH+mSyQaLxbyXdg0isNVRFphCKyxBTKzavP fWJ0RY0jrjrY7wa0UT6LnFZ2amu0nzYeIzXUNn9Bf/IPyxJDDxViBi9TAg590+YH AfOKLL/lgkihRtlwQuDH6uJ34HO3iIQeLbO1NfSORo0nuW7Rb+TWFjxJ6b0Sze+s QwnkDkbxC4kgFL+PvTM0vFjycvvBMRasPSPpoMswFY3D8SYQZ0qFME/Oi4LXmTbt CrXtW88BCn9Q5mLschSnNQGvCN+B/gicK706tSv46UWLrR5ayrFTyWSOnV4KNkuU pu36CPXnXsjcVw== -----END CERTIFICATE-----Generated at Mon Dec 22 06:12:35 2025 by rpki-client