This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft File: 9r15bwtjNc_hKKXPm5fudoCC7Y0.mft (raw, json) Hash identifier: z5L9ityQFMWGOx+W5ndI2zoWBxkSYSt6ZNPO4zXPDd8= Subject key identifier: E7:7F:50:7B:ED:E3:7D:99:26:F5:41:32:7F:8D:F2:1E:30:4D:94:3C Authority key identifier: F6:BD:79:6F:0B:63:35:CF:E1:28:A5:CF:9B:97:EE:76:80:82:ED:8D Certificate issuer: /CN=f6bd796f0b6335cfe128a5cf9b97ee768082ed8d Certificate serial: 019B59772748CF0BAD43B2A8002BC0BD4B17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft Manifest number: 028F Signing time: Fri 26 Dec 2025 07:02:19 +0000 Manifest this update: Fri 26 Dec 2025 07:02:19 +0000 Manifest next update: Sat 27 Dec 2025 07:02:19 +0000 Files and hashes: 1: 9r15bwtjNc_hKKXPm5fudoCC7Y0.crl (hash: IG0Liu2yexj3D2DtqdZ61Z4lD5GVxNb+gl4iaMz9Jqg=) 2: RIbTLj7txNwoYxh7oe27Ga8iD9g.roa (hash: b58BSl0OG9Cy3uXrPooEMPlzPzUnf3IVg7gnhdmepqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:27:48:cf:0b:ad:43:b2:a8:00:2b:c0:bd:4b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6bd796f0b6335cfe128a5cf9b97ee768082ed8d Validity Not Before: Dec 26 07:02:19 2025 GMT Not After : Dec 27 07:02:19 2025 GMT Subject: CN=e77f507bede37d9926f541327f8df21e304d943c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1f:29:d3:ec:b1:4b:43:d3:40:67:fb:6f:77: e4:f7:da:27:06:20:62:fc:7c:a1:76:da:24:07:e1: 17:19:29:f5:13:9b:ca:0e:28:27:a4:f4:f1:03:c7: 8b:24:51:e2:3c:7a:2e:0d:f3:12:e0:be:05:2e:85: ff:d6:7e:ca:ad:b9:27:20:94:7b:a6:d3:3b:1c:4e: cf:75:bb:ff:3e:8f:a5:c3:71:57:0e:42:ea:4a:57: 92:66:0f:a5:4b:8d:fd:e9:59:75:37:c3:25:51:f7: 4f:35:65:a9:6e:12:63:c6:b8:45:b1:19:02:2f:b4: 33:7d:4d:51:12:85:99:f1:86:20:a7:33:d2:f0:1e: f2:0c:69:ca:a0:98:fb:1d:9a:21:8c:cf:5f:91:3d: 74:9e:47:d4:c9:e5:ac:42:49:1b:9f:57:ee:3e:b7: 66:61:bf:bc:8b:04:ec:4d:6d:ae:d5:dc:9f:26:84: 7c:30:d7:de:5a:39:97:1f:d7:ae:d6:aa:63:54:91: df:2e:14:23:54:90:66:11:2a:82:69:95:f6:92:83: e1:25:2e:5d:34:2c:99:68:a1:8f:6a:00:9b:a7:c7: 20:8d:ce:ba:59:f8:7e:28:5c:38:a1:aa:7e:21:41: 96:d2:89:8d:db:46:70:e7:78:e0:d2:ca:6a:0b:64: 2d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:7F:50:7B:ED:E3:7D:99:26:F5:41:32:7F:8D:F2:1E:30:4D:94:3C X509v3 Authority Key Identifier: keyid:F6:BD:79:6F:0B:63:35:CF:E1:28:A5:CF:9B:97:EE:76:80:82:ED:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:e1:ed:4b:17:3e:6b:fc:5d:5e:c9:e6:dd:3f:77:94:e3:55: aa:1b:93:c3:1b:36:b4:6c:ac:31:cc:17:75:26:88:b8:6e:11: 74:d1:4f:cf:de:d5:f7:ae:51:e0:cb:9d:6d:a8:47:0a:a6:9f: 09:f5:5e:aa:f8:05:c8:c4:10:c6:c6:b9:35:ed:fa:08:eb:c6: 5a:ed:bd:d0:05:a7:eb:73:f8:c6:ef:db:ca:f1:04:91:e2:53: 07:9c:12:58:a8:69:86:4b:fa:9c:82:f0:bf:fe:a4:d6:8a:62: 4f:9b:69:8e:97:00:53:c6:32:c0:c3:65:44:c7:53:41:39:a8: 04:91:91:cf:56:e3:22:72:ab:49:17:6d:8c:9a:c5:a7:26:9c: 30:a4:68:99:8e:21:b2:89:6a:86:c0:82:9f:e7:17:f1:6d:61: 7e:8f:43:8e:db:2c:81:39:05:25:dc:12:85:58:07:e1:4d:3d: 88:38:ab:6f:58:a5:72:86:fa:aa:2c:7c:30:87:9a:6d:06:eb: 2c:b8:0b:a7:3d:c3:10:af:ab:09:db:b7:74:46:8b:b8:75:3c: 57:f2:e7:5f:e5:8c:d8:32:bc:44:bf:42:04:90:3e:25:4d:14: 79:00:8b:cf:e3:1f:4f:2c:8a:be:b5:1e:48:96:76:27:39:d0: 82:7f:70:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdydIzwutQ7KoACvAvUsXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YmQ3OTZmMGI2MzM1Y2ZlMTI4YTVjZjliOTdlZTc2ODA4 MmVkOGQwHhcNMjUxMjI2MDcwMjE5WhcNMjUxMjI3MDcwMjE5WjAzMTEwLwYDVQQD EyhlNzdmNTA3YmVkZTM3ZDk5MjZmNTQxMzI3ZjhkZjIxZTMwNGQ5NDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2R8p0+yxS0PTQGf7b3fk99onBiBi /HyhdtokB+EXGSn1E5vKDignpPTxA8eLJFHiPHouDfMS4L4FLoX/1n7KrbknIJR7 ptM7HE7Pdbv/Po+lw3FXDkLqSleSZg+lS4396Vl1N8MlUfdPNWWpbhJjxrhFsRkC L7QzfU1REoWZ8YYgpzPS8B7yDGnKoJj7HZohjM9fkT10nkfUyeWsQkkbn1fuPrdm Yb+8iwTsTW2u1dyfJoR8MNfeWjmXH9eu1qpjVJHfLhQjVJBmESqCaZX2koPhJS5d NCyZaKGPagCbp8cgjc66Wfh+KFw4oap+IUGW0omN20Zw53jg0spqC2QtLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOd/UHvt432ZJvVBMn+N8h4wTZQ8MB8GA1UdIwQY MBaAFPa9eW8LYzXP4Silz5uX7naAgu2NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXIxNWJ3dGpOY19oS0tYUG01ZnVkb0NDN1kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lMmM4MjEtNmQwMC00NzcwLWFmMmEt M2VlN2M3MmUwMWViLzEvOXIxNWJ3dGpOY19oS0tYUG01ZnVkb0NDN1kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9lMmM4MjEtNmQwMC00NzcwLWFmMmEtM2VlN2M3MmUwMWVi LzEvOXIxNWJ3dGpOY19oS0tYUG01ZnVkb0NDN1kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+HtSxc+ a/xdXsnm3T93lONVqhuTwxs2tGysMcwXdSaIuG4RdNFPz97V965R4MudbahHCqaf CfVeqvgFyMQQxsa5Ne36COvGWu290AWn63P4xu/byvEEkeJTB5wSWKhphkv6nILw v/6k1opiT5tpjpcAU8YywMNlRMdTQTmoBJGRz1bjInKrSRdtjJrFpyacMKRomY4h solqhsCCn+cX8W1hfo9DjtssgTkFJdwShVgH4U09iDirb1ilcob6qix8MIeabQbr LLgLpz3DEK+rCdu3dEaLuHU8V/LnX+WM2DK8RL9CBJA+JU0UeQCLz+MfTyyKvrUe SJZ2JznQgn9wkw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:19:40 2025 by rpki-client