This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft File: cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft (raw, json) Hash identifier: palqDbtaXbHhlilQebogK4mcdxgbKWpotFJGp3yiuPw= Subject key identifier: E1:47:A0:D0:66:06:92:74:7C:FA:14:10:5C:35:5C:4B:87:D0:F0:1B Authority key identifier: 70:7F:7E:E6:AB:9C:F4:48:F9:94:93:67:FB:7C:0E:DE:10:73:F9:7F Certificate issuer: /CN=707f7ee6ab9cf448f9949367fb7c0ede1073f97f Certificate serial: 019B104A5A9CA1FA71E574C849E267B5CC29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft Manifest number: 1772 Signing time: Fri 12 Dec 2025 02:01:06 +0000 Manifest this update: Fri 12 Dec 2025 02:01:06 +0000 Manifest next update: Sat 13 Dec 2025 02:01:06 +0000 Files and hashes: 1: cH9-5quc9Ej5lJNn-3wO3hBz-X8.crl (hash: 76uxMcZY+ZgwcMsgJnCAbQPqyDEwfbykFVI2RQMvCrM=) 2: gEcPKMyXsq8EnU4MPoFeY2Uidb0.roa (hash: 43PR1hTJL7tXyu9/IcMkUlMdJ9SOinPx2dKMQk9nNKw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.crl rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:4a:5a:9c:a1:fa:71:e5:74:c8:49:e2:67:b5:cc:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=707f7ee6ab9cf448f9949367fb7c0ede1073f97f Validity Not Before: Dec 12 02:01:06 2025 GMT Not After : Dec 13 02:01:06 2025 GMT Subject: CN=e147a0d0660692747cfa14105c355c4b87d0f01b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9e:5b:be:12:77:68:d9:04:7b:bb:d0:9a:a4: 72:6f:02:cb:e6:7d:76:57:4b:26:db:92:40:9e:a2: 79:33:a3:85:b2:63:bf:ff:ac:6d:23:cf:14:f8:fa: fd:7d:9f:76:56:24:7e:8a:06:91:b2:90:ed:c4:3e: 30:58:72:fc:ea:94:23:fa:a9:e7:04:fa:e7:44:91: 31:0f:96:67:1e:4a:3a:34:7f:bf:f9:30:2b:f5:b1: 7a:38:67:09:1e:fd:12:21:ed:ca:65:c4:de:8d:8b: 46:ef:54:ea:fd:6e:b6:6d:66:df:ec:ab:ca:84:72: 93:ec:97:f7:a0:05:d3:17:5b:29:04:36:4a:ea:ec: 81:08:ec:74:ac:b9:45:ea:dc:25:a1:f1:16:07:89: 33:d1:6a:6b:9f:3c:82:4a:84:cb:c1:30:6f:f4:3c: 88:de:29:da:62:f9:18:32:da:52:5d:e0:7b:24:8d: 31:dc:92:a4:30:33:16:40:f4:78:33:31:6b:14:cc: 74:0c:ac:b5:2c:1a:7a:71:22:0e:2b:88:91:76:a6: 06:21:c3:98:ee:1d:15:b1:ac:78:48:91:73:ad:e4: b0:7e:05:67:95:b0:01:20:e0:2b:54:55:fc:b3:c7: fc:d5:1f:e5:61:2e:a0:80:1a:74:3b:35:e8:19:0a: 25:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:47:A0:D0:66:06:92:74:7C:FA:14:10:5C:35:5C:4B:87:D0:F0:1B X509v3 Authority Key Identifier: keyid:70:7F:7E:E6:AB:9C:F4:48:F9:94:93:67:FB:7C:0E:DE:10:73:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:ef:a6:49:66:8a:98:38:88:3e:6a:a1:e7:28:8e:ac:a9:c3: 8d:e3:34:43:d1:25:1b:77:b9:2d:47:80:a4:59:43:f7:27:21: af:f5:7d:43:63:c1:53:dc:06:3f:8a:e0:81:90:c7:a1:c3:e0: c8:ac:61:f4:0b:6d:95:94:05:af:3f:63:3e:62:98:b0:45:82: 80:87:75:b3:bf:a7:d3:9b:31:1e:98:00:ed:ef:08:03:a7:58: b7:7e:a5:2f:ab:ce:94:3a:65:7f:9f:fc:9a:45:2d:aa:74:57: 6a:6b:d3:97:61:43:07:3f:ab:0d:87:33:57:3a:fc:c2:96:9a: c4:ab:b4:a0:34:d4:14:82:d4:8b:b3:3e:8d:93:56:75:7a:b6: 57:9a:98:89:9d:ac:8a:48:06:5a:c1:77:61:de:d7:97:14:09: e6:0d:fa:5a:66:fa:5b:8f:79:45:a1:d1:6d:ad:35:59:02:fc: f6:b5:08:dc:14:81:4f:25:ce:40:1a:d5:2f:be:28:f2:e5:c6: 4c:8e:46:44:a7:5d:3f:d6:75:32:22:1d:0e:5c:a8:57:3a:25: ef:87:3c:5f:fb:90:bf:1e:b2:a6:b6:ae:17:d1:d0:57:db:b2: b2:da:0c:c9:de:9a:cc:fb:3f:1c:da:84:5a:42:1e:75:c3:a0: 6d:c8:10:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQSlqcofpx5XTISeJntcwpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwN2Y3ZWU2YWI5Y2Y0NDhmOTk0OTM2N2ZiN2MwZWRlMTA3 M2Y5N2YwHhcNMjUxMjEyMDIwMTA2WhcNMjUxMjEzMDIwMTA2WjAzMTEwLwYDVQQD EyhlMTQ3YTBkMDY2MDY5Mjc0N2NmYTE0MTA1YzM1NWM0Yjg3ZDBmMDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ5bvhJ3aNkEe7vQmqRybwLL5n12 V0sm25JAnqJ5M6OFsmO//6xtI88U+Pr9fZ92ViR+igaRspDtxD4wWHL86pQj+qnn BPrnRJExD5ZnHko6NH+/+TAr9bF6OGcJHv0SIe3KZcTejYtG71Tq/W62bWbf7KvK hHKT7Jf3oAXTF1spBDZK6uyBCOx0rLlF6twlofEWB4kz0WprnzyCSoTLwTBv9DyI 3inaYvkYMtpSXeB7JI0x3JKkMDMWQPR4MzFrFMx0DKy1LBp6cSIOK4iRdqYGIcOY 7h0Vsax4SJFzreSwfgVnlbABIOArVFX8s8f81R/lYS6ggBp0OzXoGQolQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFHoNBmBpJ0fPoUEFw1XEuH0PAbMB8GA1UdIwQY MBaAFHB/fuarnPRI+ZSTZ/t8Dt4Qc/l/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0g5LTVxdWM5RWo1bEpObi0zd08zaEJ6LVg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8zYjQ1YjMtMThhNC00N2Y4LTgyNjQt ZjcwOGJjNzBlNmVlLzEvY0g5LTVxdWM5RWo1bEpObi0zd08zaEJ6LVg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni8zYjQ1YjMtMThhNC00N2Y4LTgyNjQtZjcwOGJjNzBlNmVl LzEvY0g5LTVxdWM5RWo1bEpObi0zd08zaEJ6LVg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAme+mSWaK mDiIPmqh5yiOrKnDjeM0Q9ElG3e5LUeApFlD9ychr/V9Q2PBU9wGP4rggZDHocPg yKxh9AttlZQFrz9jPmKYsEWCgId1s7+n05sxHpgA7e8IA6dYt36lL6vOlDplf5/8 mkUtqnRXamvTl2FDBz+rDYczVzr8wpaaxKu0oDTUFILUi7M+jZNWdXq2V5qYiZ2s ikgGWsF3Yd7XlxQJ5g36Wmb6W495RaHRba01WQL89rUI3BSBTyXOQBrVL74o8uXG TI5GRKddP9Z1MiIdDlyoVzol74c8X/uQvx6yprauF9HQV9uystoMyd6azPs/HNqE WkIedcOgbcgQhg== -----END CERTIFICATE-----Generated at Fri Dec 12 04:02:39 2025 by rpki-client