This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft File: 9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft (raw, json) Hash identifier: tdzG6NfiOglINi7SFUNrLu7C7cLYN8kTBAW8vbx3fH8= Subject key identifier: 36:92:DE:2F:47:E2:BB:F5:DD:75:53:9F:B4:62:D7:38:F0:71:B9:11 Authority key identifier: F5:D4:12:95:3A:C0:6A:7C:52:CB:26:79:6F:88:06:B1:BB:85:96:17 Certificate issuer: /CN=f5d412953ac06a7c52cb26796f8806b1bb859617 Certificate serial: 019B0E265CA871F24B2CE521F46A7E4F0E03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft Manifest number: 176D Signing time: Thu 11 Dec 2025 16:02:33 +0000 Manifest this update: Thu 11 Dec 2025 16:02:33 +0000 Manifest next update: Fri 12 Dec 2025 16:02:33 +0000 Files and hashes: 1: 9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl (hash: seGWysStGuTy5xJnl0oOqZi9q9P/+m0WTPjjgLsElaA=) 2: iZXergsmx3c-YFSPwK1duaC7zXE.roa (hash: ux75uK3r8KWiMZRMZNyHuR7X45YAulKv87yeHOUi7Zc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:5c:a8:71:f2:4b:2c:e5:21:f4:6a:7e:4f:0e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5d412953ac06a7c52cb26796f8806b1bb859617 Validity Not Before: Dec 11 16:02:33 2025 GMT Not After : Dec 12 16:02:33 2025 GMT Subject: CN=3692de2f47e2bbf5dd75539fb462d738f071b911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4d:09:dc:35:87:fe:ae:1f:24:b9:d3:ae:c2: 7b:cf:21:99:89:87:5d:86:80:df:1d:80:05:5c:c1: 4b:7e:ca:5f:f4:66:26:a9:5c:07:84:f5:4c:a9:3f: 49:63:47:a4:0c:22:1c:4a:a5:43:09:4d:a2:64:f6: a4:dc:e5:a1:24:81:3a:20:3e:91:c0:d6:ff:63:90: f8:4b:b8:67:fe:04:c6:77:cd:57:f2:9d:af:24:ab: 21:90:e6:e0:f4:3a:5f:93:80:e9:86:3c:c9:67:32: ef:bb:7a:4b:32:c3:46:b2:f8:87:fd:0e:35:2c:54: 7f:3d:d5:be:86:57:3c:4c:ea:c1:d7:59:2f:12:e3: 40:d6:46:4a:c3:a3:3c:27:3d:ff:83:66:8e:de:ec: d9:02:13:eb:b8:de:c1:a4:8e:e1:5e:9a:2b:18:05: 0b:55:18:46:85:11:01:c9:6b:ff:47:5f:d6:99:76: b1:79:f9:af:ea:23:8d:15:20:9e:e6:69:cd:8e:c4: 10:f0:09:37:68:86:e1:95:51:e9:a9:cd:20:d4:fd: e8:af:0b:c6:ff:11:75:9d:9c:b0:c0:1d:56:37:93: d3:e7:67:d8:ce:9b:d5:d7:de:fe:85:07:7e:ab:70: 8c:0e:7a:b1:9e:68:69:72:9c:28:b3:00:1d:f6:f3: f6:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:92:DE:2F:47:E2:BB:F5:DD:75:53:9F:B4:62:D7:38:F0:71:B9:11 X509v3 Authority Key Identifier: keyid:F5:D4:12:95:3A:C0:6A:7C:52:CB:26:79:6F:88:06:B1:BB:85:96:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dQSlTrAanxSyyZ5b4gGsbuFlhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d8e64d-9d6c-4149-a69a-79d52dc66926/1/9dQSlTrAanxSyyZ5b4gGsbuFlhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:83:c4:5b:e9:f8:1e:99:43:04:6e:d6:6b:6a:a0:af:44:52: fb:98:5f:eb:a0:d9:05:4b:7b:73:c1:08:1d:72:69:97:59:f3: 91:6d:e0:37:4c:66:39:ed:1c:fa:a6:4b:b3:e3:d6:3e:d3:92: 10:af:f7:82:58:4c:29:28:a6:8a:2c:b3:8d:b1:0d:9e:9a:3d: b2:93:4c:6b:f6:3e:e5:b7:6f:68:4a:58:72:e7:8c:c6:e1:77: 68:2b:0d:fc:7a:d2:1f:f1:7b:21:a8:75:29:66:fc:2b:ed:4a: 3b:e1:d5:4e:10:b6:71:5e:3b:6b:5b:3f:41:d9:1c:0a:47:83: 1a:3f:74:91:52:74:b5:5f:8a:76:8c:26:07:e8:52:f4:83:e3: 95:9f:58:dc:0b:5f:be:34:52:8a:7f:df:7b:27:f9:c2:f0:fa: 35:bf:84:c0:d9:4d:00:1e:d8:97:c2:66:be:ae:61:b7:9f:f0: e7:a8:17:e3:76:b1:e7:f4:9c:e3:49:d1:85:b8:63:d3:31:a1: 46:95:84:b9:50:b3:07:dc:2a:37:87:36:d4:85:70:5c:09:c8: 98:f8:e5:18:49:50:05:db:26:d1:46:4e:40:13:83:a1:aa:b0: c5:d1:5d:d0:36:df:9d:a1:4d:85:08:d3:ca:37:00:7e:cc:61: b3:3f:f7:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJlyocfJLLOUh9Gp+Tw4DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZDQxMjk1M2FjMDZhN2M1MmNiMjY3OTZmODgwNmIxYmI4 NTk2MTcwHhcNMjUxMjExMTYwMjMzWhcNMjUxMjEyMTYwMjMzWjAzMTEwLwYDVQQD EygzNjkyZGUyZjQ3ZTJiYmY1ZGQ3NTUzOWZiNDYyZDczOGYwNzFiOTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2U0J3DWH/q4fJLnTrsJ7zyGZiYdd hoDfHYAFXMFLfspf9GYmqVwHhPVMqT9JY0ekDCIcSqVDCU2iZPak3OWhJIE6ID6R wNb/Y5D4S7hn/gTGd81X8p2vJKshkObg9Dpfk4DphjzJZzLvu3pLMsNGsviH/Q41 LFR/PdW+hlc8TOrB11kvEuNA1kZKw6M8Jz3/g2aO3uzZAhPruN7BpI7hXporGAUL VRhGhREByWv/R1/WmXaxefmv6iONFSCe5mnNjsQQ8Ak3aIbhlVHpqc0g1P3orwvG /xF1nZywwB1WN5PT52fYzpvV197+hQd+q3CMDnqxnmhpcpwoswAd9vP2EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDaS3i9H4rv13XVTn7Ri1zjwcbkRMB8GA1UdIwQY MBaAFPXUEpU6wGp8UssmeW+IBrG7hZYXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWRRU2xUckFhbnhTeXlaNWI0Z0dzYnVGbGhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kOGU2NGQtOWQ2Yy00MTQ5LWE2OWEt NzlkNTJkYzY2OTI2LzEvOWRRU2xUckFhbnhTeXlaNWI0Z0dzYnVGbGhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9kOGU2NGQtOWQ2Yy00MTQ5LWE2OWEtNzlkNTJkYzY2OTI2 LzEvOWRRU2xUckFhbnhTeXlaNWI0Z0dzYnVGbGhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuYPEW+n4 HplDBG7Wa2qgr0RS+5hf66DZBUt7c8EIHXJpl1nzkW3gN0xmOe0c+qZLs+PWPtOS EK/3glhMKSimiiyzjbENnpo9spNMa/Y+5bdvaEpYcueMxuF3aCsN/HrSH/F7Iah1 KWb8K+1KO+HVThC2cV47a1s/QdkcCkeDGj90kVJ0tV+KdowmB+hS9IPjlZ9Y3Atf vjRSin/feyf5wvD6Nb+EwNlNAB7Yl8Jmvq5ht5/w56gX43ax5/Sc40nRhbhj0zGh RpWEuVCzB9wqN4c21IVwXAnImPjlGElQBdsm0UZOQBODoaqwxdFd0DbfnaFNhQjT yjcAfsxhsz/3HA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:32:04 2025 by rpki-client