This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft File: 9rpgBVyyum_cmnX99hk3GwBVk84.mft (raw, json) Hash identifier: uEcPYEPvg0TqWIaU0vzktoRN8k3G69gXnX4Dy8ltzNI= Subject key identifier: 4C:45:08:33:0F:70:CE:EF:75:BD:AA:98:34:FE:3E:23:CC:55:3C:E5 Authority key identifier: F6:BA:60:05:5C:B2:BA:6F:DC:9A:75:FD:F6:19:37:1B:00:55:93:CE Certificate issuer: /CN=f6ba60055cb2ba6fdc9a75fdf619371b005593ce Certificate serial: 019B36B2ADCA328FDF55BBA02CE3DC283C6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft Manifest number: 088C Signing time: Fri 19 Dec 2025 13:00:38 +0000 Manifest this update: Fri 19 Dec 2025 13:00:38 +0000 Manifest next update: Sat 20 Dec 2025 13:00:38 +0000 Files and hashes: 1: 9rpgBVyyum_cmnX99hk3GwBVk84.crl (hash: j8X2nahI9fIJTdwqq2ZLr4cX3HWd6/vQlxGgXIz9Yqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b2:ad:ca:32:8f:df:55:bb:a0:2c:e3:dc:28:3c:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6ba60055cb2ba6fdc9a75fdf619371b005593ce Validity Not Before: Dec 19 13:00:38 2025 GMT Not After : Dec 20 13:00:38 2025 GMT Subject: CN=4c4508330f70ceef75bdaa9834fe3e23cc553ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ac:0f:53:cc:25:c9:1a:e6:bb:ff:2e:4f:83: b0:9e:f9:f3:74:a5:26:79:fd:fd:d4:1e:dc:11:bc: 8b:2f:99:f8:ab:b8:e7:5f:c2:c6:8c:a7:bf:f5:e6: 0c:f6:3c:8e:79:a4:b9:48:a4:d3:28:cd:8a:42:41: 77:2b:5f:2c:0f:17:df:35:be:02:8a:e7:4e:8f:5c: 33:f4:fb:63:c5:87:39:95:ee:97:5f:0a:5c:e8:f7: da:b4:90:1c:90:1c:0a:c9:29:4d:bf:6e:94:82:0b: 8d:16:54:bb:50:5b:2e:3d:fd:eb:a9:72:01:6f:2a: 7c:7c:1e:16:88:c7:7c:58:1b:7c:37:c2:db:86:c2: 7d:cc:b7:25:08:83:09:77:83:89:e6:f4:00:cd:89: 40:9d:4f:31:4a:8f:53:b6:92:a9:e1:99:73:53:62: 2a:59:17:df:8b:4e:d1:70:b7:89:58:fa:eb:02:49: 2a:4b:3a:7f:07:02:49:ba:cc:49:f7:85:dc:82:54: 74:01:3d:44:56:24:d4:e2:f9:1e:a3:d5:73:e9:7c: aa:fb:74:19:87:df:af:55:df:e5:e8:33:8c:ae:2f: 9d:b0:f2:5c:c5:af:a6:91:eb:38:30:93:97:03:df: 91:98:42:15:3f:f8:25:6e:63:4c:c6:3a:15:39:14: bb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:45:08:33:0F:70:CE:EF:75:BD:AA:98:34:FE:3E:23:CC:55:3C:E5 X509v3 Authority Key Identifier: keyid:F6:BA:60:05:5C:B2:BA:6F:DC:9A:75:FD:F6:19:37:1B:00:55:93:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:56:d8:12:d6:4f:2d:7f:2c:e3:08:60:cd:45:c5:22:bb:2c: 9b:ba:d8:5e:30:bb:cc:ed:af:3c:de:e1:55:c0:1f:6c:43:0f: 83:08:a0:79:22:e0:d7:b9:25:d7:6c:ba:a8:88:2b:c5:e9:a0: ab:1c:ca:b2:d3:7a:11:1c:b7:6b:80:70:74:e4:85:e8:00:46: 59:7c:bf:d6:d7:aa:a3:42:e4:19:d4:2e:94:d6:4a:16:e6:e0: 82:8f:91:48:61:aa:33:6b:82:a8:10:bd:80:6e:ba:0c:f9:e3: 4f:03:57:b1:15:f1:06:9b:f6:b7:fa:45:55:24:d6:55:0b:5a: fd:51:c5:a3:e0:e5:44:67:3f:9f:10:18:ef:f9:1c:0b:55:a2: 0f:3e:8a:38:1f:be:9f:e6:e4:81:1b:89:38:2c:4d:ed:76:3b: 7d:49:3c:b6:79:d5:5f:cc:6f:08:f8:49:7f:70:c5:b0:b6:f8: 79:1b:a9:78:15:cd:34:10:47:f4:22:98:1d:1e:d0:7f:8a:d0: 8a:d2:5a:0a:ad:15:0c:29:ff:57:22:50:95:4b:ee:98:cd:6c: 22:c2:bc:5a:f2:42:5f:03:2b:8e:71:27:ee:92:7e:9b:aa:4c: 4a:bb:c8:21:ab:5f:80:77:c8:27:63:95:8a:fd:2a:18:f5:d3: c4:24:0c:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2sq3KMo/fVbugLOPcKDxsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YmE2MDA1NWNiMmJhNmZkYzlhNzVmZGY2MTkzNzFiMDA1 NTkzY2UwHhcNMjUxMjE5MTMwMDM4WhcNMjUxMjIwMTMwMDM4WjAzMTEwLwYDVQQD Eyg0YzQ1MDgzMzBmNzBjZWVmNzViZGFhOTgzNGZlM2UyM2NjNTUzY2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKwPU8wlyRrmu/8uT4OwnvnzdKUm ef391B7cEbyLL5n4q7jnX8LGjKe/9eYM9jyOeaS5SKTTKM2KQkF3K18sDxffNb4C iudOj1wz9PtjxYc5le6XXwpc6PfatJAckBwKySlNv26UgguNFlS7UFsuPf3rqXIB byp8fB4WiMd8WBt8N8LbhsJ9zLclCIMJd4OJ5vQAzYlAnU8xSo9TtpKp4ZlzU2Iq WRffi07RcLeJWPrrAkkqSzp/BwJJusxJ94XcglR0AT1EViTU4vkeo9Vz6Xyq+3QZ h9+vVd/l6DOMri+dsPJcxa+mkes4MJOXA9+RmEIVP/glbmNMxjoVORS7dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExFCDMPcM7vdb2qmDT+PiPMVTzlMB8GA1UdIwQY MBaAFPa6YAVcsrpv3Jp1/fYZNxsAVZPOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXJwZ0JWeXl1bV9jbW5YOTloazNHd0JWazg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS82YTY0NTktMjMyMC00NTM0LWE5MjYt NGY5ZDk4OGJkMWQzLzEvOXJwZ0JWeXl1bV9jbW5YOTloazNHd0JWazg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS82YTY0NTktMjMyMC00NTM0LWE5MjYtNGY5ZDk4OGJkMWQz LzEvOXJwZ0JWeXl1bV9jbW5YOTloazNHd0JWazg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApFbYEtZP LX8s4whgzUXFIrssm7rYXjC7zO2vPN7hVcAfbEMPgwigeSLg17kl12y6qIgrxemg qxzKstN6ERy3a4BwdOSF6ABGWXy/1teqo0LkGdQulNZKFubggo+RSGGqM2uCqBC9 gG66DPnjTwNXsRXxBpv2t/pFVSTWVQta/VHFo+DlRGc/nxAY7/kcC1WiDz6KOB++ n+bkgRuJOCxN7XY7fUk8tnnVX8xvCPhJf3DFsLb4eRupeBXNNBBH9CKYHR7Qf4rQ itJaCq0VDCn/VyJQlUvumM1sIsK8WvJCXwMrjnEn7pJ+m6pMSrvIIatfgHfIJ2OV iv0qGPXTxCQMdA== -----END CERTIFICATE-----Generated at Fri Dec 19 22:09:42 2025 by rpki-client