This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft File: 9KvMeaNn2cASwWhKhCKZbNxD3nY.mft (raw, json) Hash identifier: jyqHKk9wND+0s/QNBxspz5j21SxlU8YvTGr3DqlmguU= Subject key identifier: 8C:93:77:BD:9A:E5:25:B9:B6:1A:97:18:B8:83:99:BD:E6:BB:35:D4 Authority key identifier: F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76 Certificate issuer: /CN=f4abcc79a367d9c012c1684a8422996cdc43de76 Certificate serial: 019B31C3651A6D2E8315216979FD212FD8D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft Manifest number: 05A1 Signing time: Thu 18 Dec 2025 14:00:47 +0000 Manifest this update: Thu 18 Dec 2025 14:00:47 +0000 Manifest next update: Fri 19 Dec 2025 14:00:47 +0000 Files and hashes: 1: 6vjl9U2iQ2PU377HYgeQNGNavVA.roa (hash: 9lo8xMTqnMTjqGzAvxVHUfsjdWxdily2JUl3SHSBWVE=) 2: 9KvMeaNn2cASwWhKhCKZbNxD3nY.crl (hash: yEG3d0OJtseEKr2v2KeNasVkgdRrywamxWqM3mAd2Xo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 14:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:c3:65:1a:6d:2e:83:15:21:69:79:fd:21:2f:d8:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4abcc79a367d9c012c1684a8422996cdc43de76 Validity Not Before: Dec 18 14:00:47 2025 GMT Not After : Dec 19 14:00:47 2025 GMT Subject: CN=8c9377bd9ae525b9b61a9718b88399bde6bb35d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:17:cb:c1:2b:43:6b:ff:d0:fb:15:65:b8:33: 95:b6:d0:da:02:9a:52:e9:ed:24:1d:24:25:ca:cc: 46:f3:04:3d:61:e1:cf:d1:12:65:6b:73:01:74:d5: b1:d4:2b:09:af:23:0a:e0:8e:64:db:af:94:6c:99: 9e:4d:55:6b:f4:1f:9e:fb:1f:56:31:fd:de:42:a5: 62:f9:d3:3c:f7:1d:93:c7:97:a1:f7:61:ad:7a:2d: 57:65:f3:9a:15:b7:d9:11:49:91:8f:d5:57:f1:33: 57:78:65:4f:cc:a8:06:34:7c:a6:29:f9:d7:d5:06: 7c:80:aa:7b:9b:fb:f0:ee:ba:93:b5:d1:20:52:33: f9:d5:e1:a2:d5:35:92:35:ee:5a:ca:ba:c9:ba:f3: d2:6a:d3:5b:08:fb:b0:4b:51:ba:3f:56:a3:b9:43: a5:67:61:0c:c7:99:55:7e:4f:a4:3b:d5:b7:7e:cc: d1:08:54:cf:ba:72:3c:e3:e4:ae:c2:ba:bc:6b:70: cf:f5:5d:25:00:6f:29:49:c3:0d:98:9a:0a:a6:ad: c8:32:dd:19:f9:72:9e:8f:1a:11:24:e9:a7:fe:b3: 00:a8:e4:f8:0e:b4:d2:5f:f3:ba:ea:46:9f:6c:7a: c4:76:b8:13:ea:38:cd:d2:e2:98:c4:ec:9e:25:b9: 6f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:93:77:BD:9A:E5:25:B9:B6:1A:97:18:B8:83:99:BD:E6:BB:35:D4 X509v3 Authority Key Identifier: keyid:F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:c6:7a:16:89:ad:fb:db:ea:de:39:ca:79:6d:18:bb:f8:a4: 55:06:3f:8f:fa:44:69:97:e7:89:ed:be:03:23:8c:64:75:a3: 72:8c:c9:76:49:11:7d:ef:1a:52:dc:94:48:1c:6d:79:d7:b3: eb:8d:b8:06:77:1b:e1:f9:1d:82:2e:a5:04:e3:bd:64:37:e1: 70:e1:fa:a8:ca:30:59:1f:66:6a:56:bb:30:61:e6:d3:21:3d: c3:7e:e2:74:22:5b:1b:75:24:d3:68:17:f7:b3:30:f2:f9:2d: 5a:36:3c:51:87:c4:9c:d3:c5:e4:70:d0:af:c7:e6:d8:4b:50: e7:02:3f:8f:8c:00:0f:fe:26:3d:1a:28:14:e2:e9:59:c4:63: 5c:04:96:07:b6:3b:47:4b:9a:7a:c3:49:84:4e:8e:26:63:4d: 3a:b0:fe:f8:12:30:5f:26:b6:73:9f:08:60:08:6f:d7:4f:56: 86:6d:e9:20:59:3e:f6:50:58:b1:30:d7:33:d2:74:a9:53:5a: a3:0b:e7:80:6b:9c:77:c3:45:0c:6e:dd:19:07:fc:05:4e:21: 57:8d:d0:2e:3b:05:af:d8:f8:4a:76:54:a5:b5:97:6b:80:84: f2:5c:f5:3a:7f:ee:0a:32:52:6c:fc:4a:e0:c1:d1:a4:f4:cb: d9:96:02:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxw2UabS6DFSFpef0hL9jZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YWJjYzc5YTM2N2Q5YzAxMmMxNjg0YTg0MjI5OTZjZGM0 M2RlNzYwHhcNMjUxMjE4MTQwMDQ3WhcNMjUxMjE5MTQwMDQ3WjAzMTEwLwYDVQQD Eyg4YzkzNzdiZDlhZTUyNWI5YjYxYTk3MThiODgzOTliZGU2YmIzNWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshfLwStDa//Q+xVluDOVttDaAppS 6e0kHSQlysxG8wQ9YeHP0RJla3MBdNWx1CsJryMK4I5k26+UbJmeTVVr9B+e+x9W Mf3eQqVi+dM89x2Tx5eh92Gtei1XZfOaFbfZEUmRj9VX8TNXeGVPzKgGNHymKfnX 1QZ8gKp7m/vw7rqTtdEgUjP51eGi1TWSNe5ayrrJuvPSatNbCPuwS1G6P1ajuUOl Z2EMx5lVfk+kO9W3fszRCFTPunI84+Suwrq8a3DP9V0lAG8pScMNmJoKpq3IMt0Z +XKejxoRJOmn/rMAqOT4DrTSX/O66kafbHrEdrgT6jjN0uKYxOyeJblvFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyTd72a5SW5thqXGLiDmb3muzXUMB8GA1UdIwQY MBaAFPSrzHmjZ9nAEsFoSoQimWzcQ952MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUt2TWVhTm4yY0FTd1doS2hDS1piTnhEM25ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84OGJmMWUtZDljNS00ZDI0LTk0Yjgt ZGU0NGVlODE0NzBiLzEvOUt2TWVhTm4yY0FTd1doS2hDS1piTnhEM25ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi84OGJmMWUtZDljNS00ZDI0LTk0YjgtZGU0NGVlODE0NzBi LzEvOUt2TWVhTm4yY0FTd1doS2hDS1piTnhEM25ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWcZ6Fomt +9vq3jnKeW0Yu/ikVQY/j/pEaZfnie2+AyOMZHWjcozJdkkRfe8aUtyUSBxtedez 6424Bncb4fkdgi6lBOO9ZDfhcOH6qMowWR9mala7MGHm0yE9w37idCJbG3Uk02gX 97Mw8vktWjY8UYfEnNPF5HDQr8fm2EtQ5wI/j4wAD/4mPRooFOLpWcRjXASWB7Y7 R0uaesNJhE6OJmNNOrD++BIwXya2c58IYAhv109Whm3pIFk+9lBYsTDXM9J0qVNa owvngGucd8NFDG7dGQf8BU4hV43QLjsFr9j4SnZUpbWXa4CE8lz1On/uCjJSbPxK 4MHRpPTL2ZYCXg== -----END CERTIFICATE-----Generated at Thu Dec 18 23:31:04 2025 by rpki-client