This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft File: k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft (raw, json) Hash identifier: 3N+gRm9j9kws07KG4o1CvEm9wPwrCW3KAogGNG5qe9g= Subject key identifier: 22:95:B0:2C:E6:4D:BB:9B:50:EC:A4:17:21:FA:43:67:A9:76:87:AF Authority key identifier: 93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20 Certificate issuer: /CN=93d43d499868091bbdc47d95aee1c9099f005620 Certificate serial: 019B0E268FEF81B68021C6D44821EF5545F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 16:02:46 +0000 Manifest this update: Thu 11 Dec 2025 16:02:46 +0000 Manifest next update: Fri 12 Dec 2025 16:02:46 +0000 Files and hashes: 1: d_f-2basXF4ecUjEUuL7_QGvdV8.roa (hash: 3qi4PJf12FWilDaOg+5R4nsdnVGnK/XQkSLQfanFNGo=) 2: k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl (hash: EmkLpNE/yzd6RcVqVfRar6Qgg4dmgs/NCbDk8RWeA+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:8f:ef:81:b6:80:21:c6:d4:48:21:ef:55:45:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93d43d499868091bbdc47d95aee1c9099f005620 Validity Not Before: Dec 11 16:02:46 2025 GMT Not After : Dec 12 16:02:46 2025 GMT Subject: CN=2295b02ce64dbb9b50eca41721fa4367a97687af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:40:63:f9:13:d1:41:bf:d5:3a:38:18:46:70: 19:f5:f9:7b:67:65:b0:cc:bd:d8:37:f0:13:e8:b4: 0f:d3:48:2f:5e:c8:92:97:88:bf:00:ed:6b:eb:b4: 14:f8:27:15:e2:ca:a3:93:8a:0e:6d:fe:e6:1a:29: 32:67:2e:3f:a2:ae:2e:1f:bc:65:0a:1e:7a:81:da: eb:65:15:e0:c1:bc:db:d5:b4:01:38:59:6f:b3:2d: 34:12:3e:93:14:de:b2:f9:3d:4f:8e:0a:c5:b7:bc: 9c:e6:5c:71:48:c5:d0:13:1c:fd:b3:e3:f1:af:32: e5:43:ed:6e:71:17:44:76:3c:e8:fe:f9:b7:24:7e: d0:1a:a7:e1:c2:87:0c:a6:fa:54:b0:9f:e2:45:f7: 8d:62:e9:72:5f:ad:f2:ed:0b:d1:f8:03:76:18:63: ff:6c:bb:1f:e9:85:3c:41:e2:32:9c:28:1c:50:22: 5f:01:7e:2f:33:49:89:49:dc:80:fd:a2:6c:84:ff: 0d:1d:38:4f:a7:d1:6b:3c:32:14:a9:4c:14:52:2c: ad:f8:0f:d6:44:f4:d8:36:46:06:40:c1:c5:c2:bf: 55:70:65:16:9c:a1:71:3d:78:8f:b3:6f:f6:8a:a8: 7c:50:e5:85:69:ee:84:69:08:03:63:47:23:2d:ff: 03:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:95:B0:2C:E6:4D:BB:9B:50:EC:A4:17:21:FA:43:67:A9:76:87:AF X509v3 Authority Key Identifier: keyid:93:D4:3D:49:98:68:09:1B:BD:C4:7D:95:AE:E1:C9:09:9F:00:56:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9Q9SZhoCRu9xH2VruHJCZ8AViA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/6b08c2-5c3a-4288-844b-7fe42ff4dcd8/1/k9Q9SZhoCRu9xH2VruHJCZ8AViA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:c4:8c:ff:14:0f:12:b1:2f:0e:3a:64:f1:50:61:5d:6b:2f: 00:8c:6c:d3:96:40:4e:d9:e4:47:8c:a8:af:2e:bf:17:59:e4: da:97:83:01:66:af:5c:1e:d4:d2:7b:74:af:64:ba:39:a1:79: cd:49:a0:18:66:3a:4e:2a:ba:74:18:5f:72:67:aa:1e:b1:9a: c4:88:08:61:cd:3c:48:91:ec:b6:3a:db:e8:02:69:bf:2f:f2: 86:3e:34:54:e5:d3:ff:68:27:e9:a2:e9:db:a6:ec:d0:b7:58: 5c:0b:09:e7:9e:0d:27:ca:39:db:3d:c3:96:f4:9a:38:97:10: 8f:1b:90:9e:3a:68:07:8e:41:b3:0f:ad:91:4c:e8:9a:bd:49: 43:7a:5a:72:12:9b:33:29:a8:5a:3f:71:65:6c:1b:24:bf:a2: f2:59:4d:91:95:ac:c5:b8:f8:e1:86:e7:ec:ad:c3:a8:b4:cf: 78:3a:13:bc:6a:e9:2d:9e:bc:6b:5a:f4:2b:9e:c6:8a:8a:6c: 9d:f9:37:bd:51:fa:3c:fd:52:25:06:17:93:a2:85:ba:2c:6d: 2d:20:5e:df:7f:7b:6c:e5:b1:b3:58:e5:bf:ce:f8:ac:f6:d4: c3:1c:d7:86:a9:c8:cb:55:28:3e:4b:dd:03:1c:a4:5c:5c:fd: 1d:c2:38:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJo/vgbaAIcbUSCHvVUX1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzZDQzZDQ5OTg2ODA5MWJiZGM0N2Q5NWFlZTFjOTA5OWYw MDU2MjAwHhcNMjUxMjExMTYwMjQ2WhcNMjUxMjEyMTYwMjQ2WjAzMTEwLwYDVQQD EygyMjk1YjAyY2U2NGRiYjliNTBlY2E0MTcyMWZhNDM2N2E5NzY4N2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUBj+RPRQb/VOjgYRnAZ9fl7Z2Ww zL3YN/AT6LQP00gvXsiSl4i/AO1r67QU+CcV4sqjk4oObf7mGikyZy4/oq4uH7xl Ch56gdrrZRXgwbzb1bQBOFlvsy00Ej6TFN6y+T1PjgrFt7yc5lxxSMXQExz9s+Px rzLlQ+1ucRdEdjzo/vm3JH7QGqfhwocMpvpUsJ/iRfeNYulyX63y7QvR+AN2GGP/ bLsf6YU8QeIynCgcUCJfAX4vM0mJSdyA/aJshP8NHThPp9FrPDIUqUwUUiyt+A/W RPTYNkYGQMHFwr9VcGUWnKFxPXiPs2/2iqh8UOWFae6EaQgDY0cjLf8DiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKVsCzmTbubUOykFyH6Q2epdoevMB8GA1UdIwQY MBaAFJPUPUmYaAkbvcR9la7hyQmfAFYgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazlROVNaaG9DUnU5eEgyVnJ1SEpDWjhBVmlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC82YjA4YzItNWMzYS00Mjg4LTg0NGIt N2ZlNDJmZjRkY2Q4LzEvazlROVNaaG9DUnU5eEgyVnJ1SEpDWjhBVmlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC82YjA4YzItNWMzYS00Mjg4LTg0NGItN2ZlNDJmZjRkY2Q4 LzEvazlROVNaaG9DUnU5eEgyVnJ1SEpDWjhBVmlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG8SM/xQP ErEvDjpk8VBhXWsvAIxs05ZATtnkR4yory6/F1nk2peDAWavXB7U0nt0r2S6OaF5 zUmgGGY6Tiq6dBhfcmeqHrGaxIgIYc08SJHstjrb6AJpvy/yhj40VOXT/2gn6aLp 26bs0LdYXAsJ554NJ8o52z3DlvSaOJcQjxuQnjpoB45Bsw+tkUzomr1JQ3pachKb MymoWj9xZWwbJL+i8llNkZWsxbj44Ybn7K3DqLTPeDoTvGrpLZ68a1r0K57Giops nfk3vVH6PP1SJQYXk6KFuixtLSBe3397bOWxs1jlv874rPbUwxzXhqnIy1UoPkvd AxykXFz9HcI4eQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:13:03 2025 by rpki-client