This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft File: 97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft (raw, json) Hash identifier: 3qmdi8W7vzkx6nBFV14kAc9bKa/hYM+Q3EK2gfO0AJo= Subject key identifier: 99:A4:C7:D1:F1:94:31:64:D5:9A:9C:3E:4E:F8:CA:E0:F1:01:E8:7F Authority key identifier: F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05 Certificate issuer: /CN=f7b7c2e8453ed4c0929c7504baf046043159d105 Certificate serial: 019B1DCECCCEC3E189BF95AF0B44D78BE07E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft Manifest number: 170A Signing time: Sun 14 Dec 2025 17:00:50 +0000 Manifest this update: Sun 14 Dec 2025 17:00:50 +0000 Manifest next update: Mon 15 Dec 2025 17:00:50 +0000 Files and hashes: 1: 97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl (hash: szFnAQfbKoDSxIs5D2G3SSViiRS96N6KVd2L0RNfceo=) 2: BvcR2l7_YlLN1G-PLIU4HFIYDzk.roa (hash: r1MEUEAOwAoEFh1pzdmgOC6wzXGzNLeScD3RSXz3sR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:ce:cc:ce:c3:e1:89:bf:95:af:0b:44:d7:8b:e0:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7b7c2e8453ed4c0929c7504baf046043159d105 Validity Not Before: Dec 14 17:00:50 2025 GMT Not After : Dec 15 17:00:50 2025 GMT Subject: CN=99a4c7d1f1943164d59a9c3e4ef8cae0f101e87f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0c:7b:05:be:f0:43:7b:92:93:c2:6f:5f:1f: 59:2e:17:2e:ba:bb:b7:27:16:e5:ed:52:b0:93:e9: dc:c1:c2:59:0e:78:14:69:db:ce:32:48:ff:67:6c: ad:12:57:47:5c:91:9b:68:75:64:e8:50:8c:4d:11: 45:4d:4c:26:33:7a:30:05:70:90:1c:dc:46:9d:85: e3:4a:18:83:f6:e7:6e:2c:e1:c9:2d:ef:89:27:db: f5:53:8c:ce:e5:68:01:bf:73:ae:b6:fc:92:63:e1: 1f:01:bc:83:c8:96:fb:03:90:bd:02:83:4c:57:80: 11:fe:ec:26:79:66:8f:95:aa:af:07:5e:01:bf:8a: f3:3a:1c:53:34:13:73:ca:1d:c6:d9:75:2b:3a:8f: f8:24:1b:b5:ce:34:8f:28:25:57:b2:0d:15:23:78: 5c:4b:e5:4c:17:c2:52:30:ed:ac:b1:3a:84:3e:c1: cd:a8:89:f2:d9:51:9f:a4:7e:b8:34:a2:cc:44:f2: 62:15:f8:9c:a1:72:46:c5:e0:43:37:a6:56:ca:84: a2:1c:97:8e:87:55:a3:4f:82:87:71:73:96:d8:11: db:d1:3b:44:ea:07:d9:b2:26:d5:80:4d:24:f6:65: 47:b8:8d:af:24:74:35:14:fe:29:1d:12:e5:be:0c: 9c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A4:C7:D1:F1:94:31:64:D5:9A:9C:3E:4E:F8:CA:E0:F1:01:E8:7F X509v3 Authority Key Identifier: keyid:F7:B7:C2:E8:45:3E:D4:C0:92:9C:75:04:BA:F0:46:04:31:59:D1:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/97fC6EU-1MCSnHUEuvBGBDFZ0QU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/661679-ac25-43ee-9cbf-8cf254b48794/1/97fC6EU-1MCSnHUEuvBGBDFZ0QU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:68:ab:e6:25:5a:ac:b7:7a:47:2d:ec:79:43:86:2b:cf:1b: 28:39:13:87:e4:f6:bc:1a:63:1f:f9:e0:63:75:e2:79:ff:e6: 1e:f3:fe:bd:02:ca:0c:f9:e0:3e:60:33:69:ae:15:3f:f5:eb: 5b:d4:7d:56:a9:d2:eb:54:95:76:3a:13:8b:25:1e:04:a7:9e: 1e:65:0f:63:9d:4d:01:ad:bd:60:71:8c:5d:5f:5c:cc:04:2e: a1:4b:43:56:0f:ed:2a:4c:0d:77:ec:d5:56:22:2e:62:49:00: a9:cf:39:57:6b:a5:a6:76:d1:70:98:6c:fa:87:10:8e:f7:c8: 6a:ea:af:80:50:75:ff:4c:f5:72:e0:85:63:f4:eb:41:b2:c5: f9:ad:e0:a6:32:2a:5b:01:9b:39:4a:d3:51:5a:1e:2a:ce:47: f4:ac:59:d5:e3:73:5e:85:55:09:f5:d9:5e:3d:33:ad:5a:4d: d3:4a:f6:eb:b5:0d:70:e2:33:4e:fd:b2:f8:8b:dd:bc:54:5b: 05:e6:a1:29:56:22:77:d6:f0:be:f2:a6:87:0a:e1:36:7f:d1: 1e:be:c5:57:de:2a:29:d6:84:ac:4d:f6:9d:8e:79:ac:7d:9d: 77:da:89:0f:95:0e:80:d7:8a:1a:50:5e:48:6e:f6:9c:0e:2e: e6:72:cd:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdzszOw+GJv5WvC0TXi+B+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YjdjMmU4NDUzZWQ0YzA5MjljNzUwNGJhZjA0NjA0MzE1 OWQxMDUwHhcNMjUxMjE0MTcwMDUwWhcNMjUxMjE1MTcwMDUwWjAzMTEwLwYDVQQD Eyg5OWE0YzdkMWYxOTQzMTY0ZDU5YTljM2U0ZWY4Y2FlMGYxMDFlODdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gx7Bb7wQ3uSk8JvXx9ZLhcuuru3 Jxbl7VKwk+ncwcJZDngUadvOMkj/Z2ytEldHXJGbaHVk6FCMTRFFTUwmM3owBXCQ HNxGnYXjShiD9uduLOHJLe+JJ9v1U4zO5WgBv3OutvySY+EfAbyDyJb7A5C9AoNM V4AR/uwmeWaPlaqvB14Bv4rzOhxTNBNzyh3G2XUrOo/4JBu1zjSPKCVXsg0VI3hc S+VMF8JSMO2ssTqEPsHNqIny2VGfpH64NKLMRPJiFficoXJGxeBDN6ZWyoSiHJeO h1WjT4KHcXOW2BHb0TtE6gfZsibVgE0k9mVHuI2vJHQ1FP4pHRLlvgyc9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmkx9HxlDFk1ZqcPk74yuDxAeh/MB8GA1UdIwQY MBaAFPe3wuhFPtTAkpx1BLrwRgQxWdEFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTdmQzZFVS0xTUNTbkhVRXV2QkdCREZaMFFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82NjE2NzktYWMyNS00M2VlLTljYmYt OGNmMjU0YjQ4Nzk0LzEvOTdmQzZFVS0xTUNTbkhVRXV2QkdCREZaMFFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC82NjE2NzktYWMyNS00M2VlLTljYmYtOGNmMjU0YjQ4Nzk0 LzEvOTdmQzZFVS0xTUNTbkhVRXV2QkdCREZaMFFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXGir5iVa rLd6Ry3seUOGK88bKDkTh+T2vBpjH/ngY3Xief/mHvP+vQLKDPngPmAzaa4VP/Xr W9R9VqnS61SVdjoTiyUeBKeeHmUPY51NAa29YHGMXV9czAQuoUtDVg/tKkwNd+zV ViIuYkkAqc85V2ulpnbRcJhs+ocQjvfIauqvgFB1/0z1cuCFY/TrQbLF+a3gpjIq WwGbOUrTUVoeKs5H9KxZ1eNzXoVVCfXZXj0zrVpN00r267UNcOIzTv2y+IvdvFRb BeahKVYid9bwvvKmhwrhNn/RHr7FV94qKdaErE32nY55rH2dd9qJD5UOgNeKGlBe SG72nA4u5nLN6g== -----END CERTIFICATE-----Generated at Sun Dec 14 22:56:23 2025 by rpki-client