This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/021cd7-0a1b-49a2-9def-64aeb24cbe98/1/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.mft File: 9lLDECU8Ea-N8dkL6BrOQ31ti_Q.mft (raw, json) Hash identifier: v2EwYvmDeTr0C8bDDVXJ+ax0+MYrlzUlR3iMxAVaICY= Subject key identifier: 92:41:FB:A7:2E:0F:42:76:0C:90:40:91:E8:04:04:DD:76:12:D8:68 Authority key identifier: F6:52:C3:10:25:3C:11:AF:8D:F1:D9:0B:E8:1A:CE:43:7D:6D:8B:F4 Certificate issuer: /CN=f652c310253c11af8df1d90be81ace437d6d8bf4 Certificate serial: 019B5A519C744BB7D66E7BDB51CF1E850485 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/021cd7-0a1b-49a2-9def-64aeb24cbe98/1/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.mft Manifest number: 64 Signing time: Fri 26 Dec 2025 11:00:56 +0000 Manifest this update: Fri 26 Dec 2025 11:00:56 +0000 Manifest next update: Sat 27 Dec 2025 11:00:56 +0000 Files and hashes: 1: 9lLDECU8Ea-N8dkL6BrOQ31ti_Q.crl (hash: sabLmKpWuudkAnUJ8wtmeTq/MsBPMXIN/0AQ+YJCJ38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/021cd7-0a1b-49a2-9def-64aeb24cbe98/1/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/021cd7-0a1b-49a2-9def-64aeb24cbe98/1/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:9c:74:4b:b7:d6:6e:7b:db:51:cf:1e:85:04:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f652c310253c11af8df1d90be81ace437d6d8bf4 Validity Not Before: Dec 26 11:00:56 2025 GMT Not After : Dec 27 11:00:56 2025 GMT Subject: CN=9241fba72e0f42760c904091e80404dd7612d868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4b:21:53:9a:47:69:0e:73:d6:f9:55:77:da: f7:d4:a5:b6:3f:b3:8e:01:ae:5e:42:21:c7:37:97: 1f:56:c4:4c:a2:7c:2e:80:26:37:f3:ed:8e:93:a4: 85:b3:d6:c1:ec:95:c8:6b:55:d4:79:55:c7:51:10: e4:33:72:8a:0f:19:2f:6e:ba:24:44:fc:56:f3:61: 9b:ce:95:09:fb:d3:56:fa:e9:e1:c4:f5:b0:2e:30: 78:3c:71:b3:42:aa:6b:ae:5d:14:9b:dd:c6:01:4b: b2:db:61:ab:db:b8:16:44:b1:3d:bd:42:7c:9b:1b: 99:0b:46:e5:d1:e4:a5:43:9a:23:2d:d3:9a:62:b9: 08:35:2a:39:cd:1c:84:3e:54:74:ae:ea:3a:31:1a: b0:d1:d9:c1:a1:7d:9c:75:a1:25:36:38:3b:76:85: c6:de:90:e6:44:dd:92:7f:37:b9:62:27:b7:40:17: 2f:9b:d9:d4:28:cb:8c:92:1d:45:dd:f6:8f:48:43: 99:3a:0b:ad:7e:cd:e2:c1:89:ad:e0:51:27:64:27: 52:fe:76:92:0d:12:96:f5:46:34:94:62:c5:09:26: 6d:e9:06:80:63:fb:8a:c0:2b:9d:b8:02:7b:6b:f5: 98:30:be:9e:21:8f:5e:0b:b8:c1:04:29:31:fd:df: 9e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:41:FB:A7:2E:0F:42:76:0C:90:40:91:E8:04:04:DD:76:12:D8:68 X509v3 Authority Key Identifier: keyid:F6:52:C3:10:25:3C:11:AF:8D:F1:D9:0B:E8:1A:CE:43:7D:6D:8B:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/021cd7-0a1b-49a2-9def-64aeb24cbe98/1/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/021cd7-0a1b-49a2-9def-64aeb24cbe98/1/9lLDECU8Ea-N8dkL6BrOQ31ti_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:1e:37:96:7d:2d:c5:98:c3:6d:31:12:aa:c9:0c:48:34:27: 69:b6:6d:24:e4:58:76:3b:8c:b0:27:11:77:51:d3:f1:99:25: 04:83:88:f2:0e:b5:96:5a:39:be:93:c6:12:2e:bc:c0:4f:8a: cc:e1:20:ac:a9:7c:ed:8b:4e:34:1a:44:91:3c:a1:66:aa:1c: e5:dd:73:d0:a8:2c:1a:33:25:3d:3c:87:dc:8e:e0:33:fa:12: a2:8f:1b:e3:c8:54:81:2d:03:ee:38:d0:9d:28:cd:7e:e4:34: 72:5d:b2:fd:9c:61:e3:bd:34:fc:9b:22:d5:d7:2a:9c:62:70: c8:3f:d6:60:3f:c6:49:4f:05:b1:43:3a:50:ba:86:59:4c:3a: 97:52:a0:ea:20:0a:7e:5b:8c:c0:29:6f:db:aa:91:cc:4a:f0: b0:1a:48:e1:f5:a2:2f:e2:69:82:3b:54:05:aa:58:bd:51:e3: d3:4d:e3:78:69:8b:9a:7f:de:3a:03:55:41:e1:7d:44:c6:3c: 69:8f:ab:af:e2:ff:b4:f9:a2:0b:9d:32:5f:45:f7:da:fb:b5: 52:75:9a:aa:f4:93:5f:5b:ff:21:93:8b:13:14:27:3a:6c:1a: 8e:e1:7b:d6:bd:57:04:61:59:62:a1:37:75:32:da:50:8a:3c: 62:9f:4a:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUZx0S7fWbnvbUc8ehQSFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NTJjMzEwMjUzYzExYWY4ZGYxZDkwYmU4MWFjZTQzN2Q2 ZDhiZjQwHhcNMjUxMjI2MTEwMDU2WhcNMjUxMjI3MTEwMDU2WjAzMTEwLwYDVQQD Eyg5MjQxZmJhNzJlMGY0Mjc2MGM5MDQwOTFlODA0MDRkZDc2MTJkODY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEshU5pHaQ5z1vlVd9r31KW2P7OO Aa5eQiHHN5cfVsRMonwugCY38+2Ok6SFs9bB7JXIa1XUeVXHURDkM3KKDxkvbrok RPxW82GbzpUJ+9NW+unhxPWwLjB4PHGzQqprrl0Um93GAUuy22Gr27gWRLE9vUJ8 mxuZC0bl0eSlQ5ojLdOaYrkINSo5zRyEPlR0ruo6MRqw0dnBoX2cdaElNjg7doXG 3pDmRN2Sfze5Yie3QBcvm9nUKMuMkh1F3faPSEOZOgutfs3iwYmt4FEnZCdS/naS DRKW9UY0lGLFCSZt6QaAY/uKwCuduAJ7a/WYML6eIY9eC7jBBCkx/d+evQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJB+6cuD0J2DJBAkegEBN12EthoMB8GA1UdIwQY MBaAFPZSwxAlPBGvjfHZC+gazkN9bYv0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWxMREVDVThFYS1OOGRrTDZCck9RMzF0aV9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wMjFjZDctMGExYi00OWEyLTlkZWYt NjRhZWIyNGNiZTk4LzEvOWxMREVDVThFYS1OOGRrTDZCck9RMzF0aV9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8wMjFjZDctMGExYi00OWEyLTlkZWYtNjRhZWIyNGNiZTk4 LzEvOWxMREVDVThFYS1OOGRrTDZCck9RMzF0aV9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUh43ln0t xZjDbTESqskMSDQnabZtJORYdjuMsCcRd1HT8ZklBIOI8g61llo5vpPGEi68wE+K zOEgrKl87YtONBpEkTyhZqoc5d1z0KgsGjMlPTyH3I7gM/oSoo8b48hUgS0D7jjQ nSjNfuQ0cl2y/Zxh4700/Jsi1dcqnGJwyD/WYD/GSU8FsUM6ULqGWUw6l1Kg6iAK fluMwClv26qRzErwsBpI4fWiL+JpgjtUBapYvVHj003jeGmLmn/eOgNVQeF9RMY8 aY+rr+L/tPmiC50yX0X32vu1UnWaqvSTX1v/IZOLExQnOmwajuF71r1XBGFZYqE3 dTLaUIo8Yp9K+g== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:17 2025 by rpki-client