This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft File: 9X3FmWyBeMDeLqIEme696t5AI-s.mft (raw, json) Hash identifier: VbRJcJ9QwfH7vCGc5MQ4E949S/U39h2Mfvs/6NPytcA= Subject key identifier: 5C:FE:38:57:46:99:6B:79:16:02:E7:2B:88:D8:E8:94:9A:0D:1C:B3 Authority key identifier: F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB Certificate issuer: /CN=f57dc5996c8178c0de2ea20499eebdeade4023eb Certificate serial: 019B3C1077E40C6E520748BB9CBA3969CFC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 14:01:10 +0000 Manifest this update: Sat 20 Dec 2025 14:01:10 +0000 Manifest next update: Sun 21 Dec 2025 14:01:10 +0000 Files and hashes: 1: 9X3FmWyBeMDeLqIEme696t5AI-s.crl (hash: z+lKtxs5XWM88IRh5PNuOrCbD0pGbaSXQsX0bgXkPTw=) 2: Ja-1OHflBPV5uzkrzsrUkckcSDQ.roa (hash: 5hTfi5zIdy0pksBzayRUkBZiz92X7DgH1Hnbmun+ujM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:77:e4:0c:6e:52:07:48:bb:9c:ba:39:69:cf:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f57dc5996c8178c0de2ea20499eebdeade4023eb Validity Not Before: Dec 20 14:01:10 2025 GMT Not After : Dec 21 14:01:10 2025 GMT Subject: CN=5cfe385746996b791602e72b88d8e8949a0d1cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d7:5d:18:9b:43:db:f7:12:b7:29:a5:34:c7: 77:dc:f6:75:37:e7:f8:87:cd:c6:77:e5:f3:8a:59: 4f:af:17:e6:e1:de:9a:14:5c:8c:d1:11:55:c6:94: c0:91:7c:73:25:e6:d0:41:8a:e4:97:a4:bf:ca:8d: 02:15:60:b2:a7:93:26:e5:2b:67:fe:14:b7:a9:37: a1:f2:a7:c2:6b:1c:a6:d6:3d:8f:c2:28:38:b2:85: 23:e4:7b:95:5b:87:3a:5c:fc:29:96:97:65:15:a7: c7:6a:3c:0d:32:55:20:54:8b:b7:9b:9d:bf:a3:fd: cf:c8:b7:d6:77:da:11:bd:d7:da:b4:02:51:6f:07: 68:e8:dd:a1:95:f0:6d:5b:17:8a:62:b2:14:27:a1: 35:14:16:d2:9b:15:a2:7c:9f:6e:fa:6f:fa:b3:73: 76:c3:b8:68:5e:7b:45:f3:41:b0:1d:36:86:1a:43: cb:9e:c9:7f:3b:22:7a:38:87:fc:86:65:6b:67:43: b1:00:1c:e5:ed:ef:6d:2c:df:8d:bb:7d:90:a8:01: 3e:69:42:33:b0:f6:11:19:03:08:08:5f:dc:e8:78: 61:1f:86:1c:67:04:c7:48:c0:03:c0:37:c0:87:45: 41:ff:66:a1:ca:41:54:86:a0:16:8d:06:f3:eb:ac: bf:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:FE:38:57:46:99:6B:79:16:02:E7:2B:88:D8:E8:94:9A:0D:1C:B3 X509v3 Authority Key Identifier: keyid:F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:30:25:a7:d5:61:c9:61:8b:52:b5:78:dc:bb:91:f1:4a:88: 3c:ea:3f:76:ae:7c:ef:af:2c:82:73:e6:eb:1b:a4:c0:63:8c: 29:89:5d:d0:2b:31:b1:9e:54:60:3a:14:de:50:08:bd:d0:c5: 1a:bd:f6:c1:04:a4:0f:79:f2:da:20:c0:3b:91:91:b9:29:22: 3f:07:ef:f2:03:62:a0:78:8d:8e:50:14:2b:8a:5a:c9:48:f6: 00:1c:72:26:ef:2b:a7:09:2f:f0:83:c9:1d:ab:e3:0f:83:7d: b9:24:f5:de:a7:d2:f6:68:55:cd:f7:86:65:d7:f5:0f:7e:06: 3e:ae:80:44:4e:02:35:38:01:ef:e8:e6:9e:94:ff:4f:4f:c6: e0:a6:84:3b:df:c1:a3:8d:50:5d:52:44:0a:dc:2f:30:6b:7b: c1:03:e1:ec:d4:05:9c:38:50:45:20:77:f5:55:4c:7d:8c:7c: 39:70:7e:ed:b7:6a:a1:bc:21:76:54:69:a5:02:0a:4c:5d:88: 1a:0b:ac:34:34:0e:7d:31:95:4a:7d:39:f8:52:71:da:9b:e0: ce:20:f4:5d:b3:78:f9:86:05:66:17:77:07:e3:0a:67:60:cc: 07:a7:23:85:a4:fe:d9:ac:59:d1:d4:49:51:09:6f:e7:18:e3: 3a:04:ef:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EHfkDG5SB0i7nLo5ac/EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1N2RjNTk5NmM4MTc4YzBkZTJlYTIwNDk5ZWViZGVhZGU0 MDIzZWIwHhcNMjUxMjIwMTQwMTEwWhcNMjUxMjIxMTQwMTEwWjAzMTEwLwYDVQQD Eyg1Y2ZlMzg1NzQ2OTk2Yjc5MTYwMmU3MmI4OGQ4ZTg5NDlhMGQxY2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tddGJtD2/cStymlNMd33PZ1N+f4 h83Gd+XzillPrxfm4d6aFFyM0RFVxpTAkXxzJebQQYrkl6S/yo0CFWCyp5Mm5Stn /hS3qTeh8qfCaxym1j2Pwig4soUj5HuVW4c6XPwplpdlFafHajwNMlUgVIu3m52/ o/3PyLfWd9oRvdfatAJRbwdo6N2hlfBtWxeKYrIUJ6E1FBbSmxWifJ9u+m/6s3N2 w7hoXntF80GwHTaGGkPLnsl/OyJ6OIf8hmVrZ0OxABzl7e9tLN+Nu32QqAE+aUIz sPYRGQMICF/c6HhhH4YcZwTHSMADwDfAh0VB/2ahykFUhqAWjQbz66y/IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFz+OFdGmWt5FgLnK4jY6JSaDRyzMB8GA1UdIwQY MBaAFPV9xZlsgXjA3i6iBJnuvereQCPrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVgzRm1XeUJlTURlTHFJRW1lNjk2dDVBSS1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82N2UzYWMtYzMzMi00ZDEzLTgzZWYt YzdiMTBkNTA1Y2ZlLzEvOVgzRm1XeUJlTURlTHFJRW1lNjk2dDVBSS1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My82N2UzYWMtYzMzMi00ZDEzLTgzZWYtYzdiMTBkNTA1Y2Zl LzEvOVgzRm1XeUJlTURlTHFJRW1lNjk2dDVBSS1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDAlp9Vh yWGLUrV43LuR8UqIPOo/dq58768sgnPm6xukwGOMKYld0CsxsZ5UYDoU3lAIvdDF Gr32wQSkD3ny2iDAO5GRuSkiPwfv8gNioHiNjlAUK4payUj2ABxyJu8rpwkv8IPJ HavjD4N9uST13qfS9mhVzfeGZdf1D34GPq6ARE4CNTgB7+jmnpT/T0/G4KaEO9/B o41QXVJECtwvMGt7wQPh7NQFnDhQRSB39VVMfYx8OXB+7bdqobwhdlRppQIKTF2I GgusNDQOfTGVSn05+FJx2pvgziD0XbN4+YYFZhd3B+MKZ2DMB6cjhaT+2axZ0dRJ UQlv5xjjOgTvKg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:24:56 2025 by rpki-client