This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft File: 9-CSr_r5tUhOAJmap_HO8ax7QJM.mft (raw, json) Hash identifier: DfWY8n29uDp4OZgvahpSbXRU0LG3f6m9rBY4yUNMaZs= Subject key identifier: 5D:0B:55:C2:52:D9:BB:BD:95:50:03:5B:14:E5:18:39:64:39:37:BB Authority key identifier: F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93 Certificate issuer: /CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093 Certificate serial: 019B1A6032279E6B3D2BA37C7DEA66DBC7DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft Manifest number: 177C Signing time: Sun 14 Dec 2025 01:01:10 +0000 Manifest this update: Sun 14 Dec 2025 01:01:10 +0000 Manifest next update: Mon 15 Dec 2025 01:01:10 +0000 Files and hashes: 1: 9-CSr_r5tUhOAJmap_HO8ax7QJM.crl (hash: BH2Eu7F9FMsqUsstugqB6WhxDLQJuA/nivjTYwZ9JlA=) 2: s1tohRSZu__XAcftU1RiatFR4dQ.roa (hash: VEmypovoGht5ITUXKfWFpiCHNX0Yi9nhk6KgNzb6xkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:60:32:27:9e:6b:3d:2b:a3:7c:7d:ea:66:db:c7:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7e092affaf9b5484e00999aa7f1cef1ac7b4093 Validity Not Before: Dec 14 01:01:10 2025 GMT Not After : Dec 15 01:01:10 2025 GMT Subject: CN=5d0b55c252d9bbbd9550035b14e51839643937bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:43:22:f7:28:9d:a3:a9:97:97:9b:6f:f4:03: 0f:b8:94:06:a8:db:36:8a:b4:fc:0b:30:e4:a5:2b: 8c:bd:51:19:51:3a:47:4c:91:4a:6b:92:be:1d:cf: 25:7b:70:84:63:c4:49:5b:67:bd:98:90:43:2c:66: 89:33:3a:fb:bc:5a:b5:25:3c:84:e9:61:d4:1e:2e: 72:e7:4c:13:95:4f:e5:c6:67:fd:1c:5a:4a:30:fa: 0e:87:91:8c:95:ad:83:b4:3d:b2:1b:fe:0d:fc:d9: d1:05:3d:c3:88:86:e8:b8:da:a4:44:5b:1a:08:3c: 6b:59:fc:99:f8:86:96:79:2a:ae:26:59:14:c8:83: 2d:ef:05:0e:0e:bb:54:87:1f:df:30:ff:ca:75:20: 1c:86:b0:6a:91:39:c2:3d:de:ec:3d:f9:b2:20:4a: 90:24:ec:a6:f4:87:21:e2:1e:b8:e6:bc:c4:e8:87: 71:80:d3:51:3a:4b:2e:74:41:8b:43:f0:0e:75:6a: 11:fb:90:98:62:1d:84:9d:41:7e:37:1d:b0:2d:25: 3c:90:f7:2c:9a:3f:09:87:22:7c:6a:0c:ea:c2:d7: ca:32:33:3a:53:0d:16:61:35:b0:7e:cd:ea:e8:0d: 6c:59:b8:15:d7:fb:de:35:89:8f:02:f0:4e:5c:9e: 4b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0B:55:C2:52:D9:BB:BD:95:50:03:5B:14:E5:18:39:64:39:37:BB X509v3 Authority Key Identifier: keyid:F7:E0:92:AF:FA:F9:B5:48:4E:00:99:9A:A7:F1:CE:F1:AC:7B:40:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-CSr_r5tUhOAJmap_HO8ax7QJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ec9092-1bc2-4aad-ad3a-10ff9ee2a8c2/1/9-CSr_r5tUhOAJmap_HO8ax7QJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:c3:a2:8b:11:f7:cf:a2:83:d2:4d:0b:f1:35:74:7f:82:b3: ee:a3:d9:15:90:d5:2d:86:3d:f0:5b:94:3d:ee:60:4f:b5:82: ba:f2:85:b6:6c:3d:c2:33:de:c9:24:74:87:3a:06:46:68:f2: a8:c2:a2:8d:5d:57:a7:60:f8:b9:b0:d7:30:ec:94:9c:5e:0a: 94:a6:4e:8e:40:83:12:d4:19:7b:14:b8:69:7b:26:09:be:69: 4f:90:b6:6d:2b:71:ea:a4:3b:dd:c4:0f:e0:ad:83:dc:3a:2b: 86:23:d1:38:58:bd:73:78:c0:d4:52:0f:e8:ad:ec:eb:e8:56: 2c:d0:74:bb:e7:1e:fd:e2:76:64:3d:8f:1f:5b:20:da:18:d4: 1d:ac:57:9f:cc:4e:ff:7e:b7:0b:a8:f1:da:2c:7a:96:fd:52: 43:70:c4:1e:b6:ba:74:98:30:a5:4b:29:e2:8c:90:0e:53:d1: 3f:55:a4:b2:38:8d:cb:fd:7b:a2:c3:0d:4d:60:24:3c:17:0a: 08:fa:6d:60:b5:05:f0:49:16:f1:54:8e:b2:b4:59:81:01:ee: 25:27:00:53:b2:38:75:09:17:11:da:39:fb:b1:1e:f6:61:a4: 28:b2:b5:32:4d:bc:56:3f:74:2c:8f:d3:f0:c4:54:79:48:b4: 7e:4b:d5:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaYDInnms9K6N8fepm28faMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZTA5MmFmZmFmOWI1NDg0ZTAwOTk5YWE3ZjFjZWYxYWM3 YjQwOTMwHhcNMjUxMjE0MDEwMTEwWhcNMjUxMjE1MDEwMTEwWjAzMTEwLwYDVQQD Eyg1ZDBiNTVjMjUyZDliYmJkOTU1MDAzNWIxNGU1MTgzOTY0MzkzN2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkMi9yido6mXl5tv9AMPuJQGqNs2 irT8CzDkpSuMvVEZUTpHTJFKa5K+Hc8le3CEY8RJW2e9mJBDLGaJMzr7vFq1JTyE 6WHUHi5y50wTlU/lxmf9HFpKMPoOh5GMla2DtD2yG/4N/NnRBT3DiIbouNqkRFsa CDxrWfyZ+IaWeSquJlkUyIMt7wUODrtUhx/fMP/KdSAchrBqkTnCPd7sPfmyIEqQ JOym9Ich4h645rzE6IdxgNNROksudEGLQ/AOdWoR+5CYYh2EnUF+Nx2wLSU8kPcs mj8JhyJ8agzqwtfKMjM6Uw0WYTWwfs3q6A1sWbgV1/veNYmPAvBOXJ5LfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0LVcJS2bu9lVADWxTlGDlkOTe7MB8GA1UdIwQY MBaAFPfgkq/6+bVITgCZmqfxzvGse0CTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOS1DU3JfcjV0VWhPQUptYXBfSE84YXg3UUpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lYzkwOTItMWJjMi00YWFkLWFkM2Et MTBmZjllZTJhOGMyLzEvOS1DU3JfcjV0VWhPQUptYXBfSE84YXg3UUpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9lYzkwOTItMWJjMi00YWFkLWFkM2EtMTBmZjllZTJhOGMy LzEvOS1DU3JfcjV0VWhPQUptYXBfSE84YXg3UUpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEsOiixH3 z6KD0k0L8TV0f4Kz7qPZFZDVLYY98FuUPe5gT7WCuvKFtmw9wjPeySR0hzoGRmjy qMKijV1Xp2D4ubDXMOyUnF4KlKZOjkCDEtQZexS4aXsmCb5pT5C2bStx6qQ73cQP 4K2D3DorhiPROFi9c3jA1FIP6K3s6+hWLNB0u+ce/eJ2ZD2PH1sg2hjUHaxXn8xO /363C6jx2ix6lv1SQ3DEHra6dJgwpUsp4oyQDlPRP1WksjiNy/17osMNTWAkPBcK CPptYLUF8EkW8VSOsrRZgQHuJScAU7I4dQkXEdo5+7Ee9mGkKLK1Mk28Vj90LI/T 8MRUeUi0fkvVCQ== -----END CERTIFICATE-----Generated at Sun Dec 14 03:26:01 2025 by rpki-client