This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft File: MRf9In6dzpeAXAPl8zACrqGMN90.mft (raw, json) Hash identifier: Dpka9tnXKwVZCJpL0ByHUd8Z+0Y470IaUmlVw0YgSeM= Subject key identifier: 11:67:4D:CA:6E:5E:A1:24:CA:4F:3D:2A:85:4F:DA:DF:50:AB:CB:A9 Authority key identifier: 31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD Certificate issuer: /CN=3117fd227e9dce97805c03e5f33002aea18c37dd Certificate serial: 019B08FEBD73C473CD6536F69E6850B4F855 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft Manifest number: 16FF Signing time: Wed 10 Dec 2025 16:01:10 +0000 Manifest this update: Wed 10 Dec 2025 16:01:10 +0000 Manifest next update: Thu 11 Dec 2025 16:01:10 +0000 Files and hashes: 1: 8FKyt8eDnO1kLTJD9dF4kktBbnk.roa (hash: 9mNmQ05G/Q2P4wE3xyuelgcW7lRtN/p4eyiaB9oB3rE=) 2: MRf9In6dzpeAXAPl8zACrqGMN90.crl (hash: PJSY1HPIKzsu+r0p9wF13dt8f3VpvZFVJ+gKax6PICQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:fe:bd:73:c4:73:cd:65:36:f6:9e:68:50:b4:f8:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3117fd227e9dce97805c03e5f33002aea18c37dd Validity Not Before: Dec 10 16:01:10 2025 GMT Not After : Dec 11 16:01:10 2025 GMT Subject: CN=11674dca6e5ea124ca4f3d2a854fdadf50abcba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6e:28:8f:78:95:71:c4:68:73:f5:86:e6:b0: d6:b0:9e:9e:0d:f8:18:77:da:54:c1:f6:e2:80:3b: bf:a6:b2:7a:7b:72:62:2e:34:6d:3a:80:71:09:08: 13:f4:60:06:9d:f4:02:58:ed:31:d6:3a:a8:c8:2b: 79:d4:02:de:f4:df:85:23:1f:4f:22:4a:8a:43:7a: db:1d:d5:39:8f:0a:50:ac:3a:15:fd:ef:86:36:b5: 7c:31:c4:cf:34:43:eb:c2:e9:18:2c:76:99:b1:97: 46:ec:29:1b:1a:de:21:99:a6:0f:a5:c7:8d:50:88: 53:3d:7a:ec:0b:7a:9e:d7:eb:26:a1:4d:75:93:6a: b5:12:cc:50:68:a7:52:f5:29:78:3a:24:3e:a6:a5: 46:b8:7f:a8:2f:7b:64:77:59:a6:20:9b:9f:bc:9a: 19:7e:b7:d1:32:01:ce:c9:e6:5d:04:c8:56:11:13: 73:c4:ed:2b:96:8e:86:df:98:1c:de:f2:b4:eb:39: 08:2f:60:43:68:59:ed:78:a5:8e:ee:54:e7:fc:50: 4b:97:c0:82:de:c7:94:be:0e:1b:a9:a3:23:a6:44: ab:07:5b:54:a2:fc:4a:db:bc:14:45:4f:9d:02:42: 41:cd:ae:1b:72:ec:7b:75:df:b0:60:ac:55:19:19: 90:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:67:4D:CA:6E:5E:A1:24:CA:4F:3D:2A:85:4F:DA:DF:50:AB:CB:A9 X509v3 Authority Key Identifier: keyid:31:17:FD:22:7E:9D:CE:97:80:5C:03:E5:F3:30:02:AE:A1:8C:37:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MRf9In6dzpeAXAPl8zACrqGMN90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9f6233-782a-4140-b500-9971907a95a7/1/MRf9In6dzpeAXAPl8zACrqGMN90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:06:90:4e:ea:3b:c4:cf:19:17:20:b4:45:e9:a4:10:a4:a2: 30:3b:9b:9e:8d:bd:12:55:01:da:12:33:3a:0d:e8:30:92:b0: 25:96:2c:72:8e:af:e9:ee:69:d9:04:05:23:5e:0a:ef:6a:95: 10:61:1a:ea:85:ec:ee:18:56:78:6d:33:a0:9b:74:17:bd:5b: 40:d5:a0:90:08:02:01:14:57:28:64:36:06:d5:7e:ce:31:99: d4:a3:d0:38:df:ad:fd:57:51:fe:83:37:a8:06:7f:bf:33:3b: 27:a2:2e:47:86:4a:41:5f:98:e1:82:ca:72:c8:32:07:e8:f5: c7:ee:b2:a1:2f:87:4d:73:ce:72:9c:e7:0c:7f:75:1c:a6:64: ff:80:18:a4:be:18:02:5b:70:77:6e:58:2e:09:40:2e:43:a4: 1a:4b:90:6e:33:ea:a2:95:6e:8c:41:7f:0d:43:38:8c:6f:06: 70:de:40:91:8c:89:b0:3b:d2:45:5c:93:ec:7a:e7:87:e0:72: f4:97:96:d7:7c:09:bd:45:59:66:ff:97:fc:a9:ee:46:8b:3a: 7f:aa:79:89:da:f8:2c:a1:52:03:a6:8b:0d:c0:34:67:3e:89: 2b:2e:c9:4b:6a:31:a3:d7:cd:90:09:ca:92:e2:92:f9:63:97: 97:59:65:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsI/r1zxHPNZTb2nmhQtPhVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxMTdmZDIyN2U5ZGNlOTc4MDVjMDNlNWYzMzAwMmFlYTE4 YzM3ZGQwHhcNMjUxMjEwMTYwMTEwWhcNMjUxMjExMTYwMTEwWjAzMTEwLwYDVQQD EygxMTY3NGRjYTZlNWVhMTI0Y2E0ZjNkMmE4NTRmZGFkZjUwYWJjYmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G4oj3iVccRoc/WG5rDWsJ6eDfgY d9pUwfbigDu/prJ6e3JiLjRtOoBxCQgT9GAGnfQCWO0x1jqoyCt51ALe9N+FIx9P IkqKQ3rbHdU5jwpQrDoV/e+GNrV8McTPNEPrwukYLHaZsZdG7CkbGt4hmaYPpceN UIhTPXrsC3qe1+smoU11k2q1EsxQaKdS9Sl4OiQ+pqVGuH+oL3tkd1mmIJufvJoZ frfRMgHOyeZdBMhWERNzxO0rlo6G35gc3vK06zkIL2BDaFnteKWO7lTn/FBLl8CC 3seUvg4bqaMjpkSrB1tUovxK27wURU+dAkJBza4bcux7dd+wYKxVGRmQMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFnTcpuXqEkyk89KoVP2t9Qq8upMB8GA1UdIwQY MBaAFDEX/SJ+nc6XgFwD5fMwAq6hjDfdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVJmOUluNmR6cGVBWEFQbDh6QUNycUdNTjkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS85ZjYyMzMtNzgyYS00MTQwLWI1MDAt OTk3MTkwN2E5NWE3LzEvTVJmOUluNmR6cGVBWEFQbDh6QUNycUdNTjkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS85ZjYyMzMtNzgyYS00MTQwLWI1MDAtOTk3MTkwN2E5NWE3 LzEvTVJmOUluNmR6cGVBWEFQbDh6QUNycUdNTjkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjAaQTuo7 xM8ZFyC0RemkEKSiMDubno29ElUB2hIzOg3oMJKwJZYsco6v6e5p2QQFI14K72qV EGEa6oXs7hhWeG0zoJt0F71bQNWgkAgCARRXKGQ2BtV+zjGZ1KPQON+t/VdR/oM3 qAZ/vzM7J6IuR4ZKQV+Y4YLKcsgyB+j1x+6yoS+HTXPOcpznDH91HKZk/4AYpL4Y Altwd25YLglALkOkGkuQbjPqopVujEF/DUM4jG8GcN5AkYyJsDvSRVyT7Hrnh+By 9JeW13wJvUVZZv+X/KnuRos6f6p5idr4LKFSA6aLDcA0Zz6JKy7JS2oxo9fNkAnK kuKS+WOXl1llgw== -----END CERTIFICATE-----Generated at Wed Dec 10 18:24:38 2025 by rpki-client