This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft File: 9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json) Hash identifier: tPrj+5+cp3e1jvwj+eSLzSInn2efhDm1qT1oxY/W2eo= Subject key identifier: 9D:46:01:6A:37:3D:B9:F0:64:26:F1:98:1A:B5:FF:C1:8F:21:08:34 Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4 Certificate issuer: /CN=f56769a42e44266f037ecb390d4115febe3861a4 Certificate serial: 019B1BE077FD1B59BE0366EDDC796CEE1E49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft Manifest number: 170A Signing time: Sun 14 Dec 2025 08:00:54 +0000 Manifest this update: Sun 14 Dec 2025 08:00:54 +0000 Manifest next update: Mon 15 Dec 2025 08:00:54 +0000 Files and hashes: 1: 6wW68rpEYT5imOHdAJC8iqYgH-8.roa (hash: 2OyXhc87+DnhsUi/Ak2VDrIMxn2fa0IaWGuzCLcLykQ=) 2: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: khA32wAtNk2KIo4ubqvMbrNU99/fnddpOoVae81+Aac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 08:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:e0:77:fd:1b:59:be:03:66:ed:dc:79:6c:ee:1e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4 Validity Not Before: Dec 14 08:00:54 2025 GMT Not After : Dec 15 08:00:54 2025 GMT Subject: CN=9d46016a373db9f06426f1981ab5ffc18f210834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:41:58:17:a1:03:da:e3:03:8f:46:ef:39:58: 8f:bc:7a:eb:27:fc:33:86:dc:ed:49:01:af:5c:c6: 9d:ed:b9:cd:92:4d:51:30:11:85:70:67:01:7a:26: f5:29:4c:c4:8c:89:a3:0f:d1:49:d9:61:03:7c:55: f1:b7:a3:d2:6a:c8:ac:df:06:bb:3c:7c:7d:53:1e: 3a:79:7a:81:5b:62:72:48:2b:b6:0e:cb:35:e0:b6: bb:37:f3:a1:8a:09:35:a8:12:4b:9a:ba:29:88:4e: 92:2f:9b:80:f8:4c:2d:15:76:79:c2:b2:e1:f5:92: 9a:4c:e3:43:a4:47:93:17:b2:a7:ea:4b:da:23:f7: 96:64:9e:ba:19:ce:65:64:ac:da:3b:3f:ad:a3:3d: 56:2c:81:e3:c3:1e:74:60:81:5d:ce:1a:07:6e:0a: 71:50:73:e9:66:7d:43:ad:ad:52:de:87:d7:21:d0: 61:06:37:e2:8e:2e:72:96:ab:4d:0d:4f:98:1b:68: e7:7a:e3:5a:1f:85:9c:6f:d4:f3:f5:c1:37:a5:7d: 01:ab:4e:0d:32:f6:49:17:77:7c:bf:19:ed:f8:35: 9b:d4:38:16:cb:8a:6f:ef:7f:6e:7b:9a:1d:d8:b2: d9:08:0d:92:71:0b:fb:ae:6a:e3:f6:ea:36:f5:2f: 59:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:46:01:6A:37:3D:B9:F0:64:26:F1:98:1A:B5:FF:C1:8F:21:08:34 X509v3 Authority Key Identifier: keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:8c:74:4c:a5:42:c3:73:43:27:50:d9:b8:45:4e:6e:29:bc: 07:8f:dd:8c:9e:89:92:57:ac:17:85:e0:3c:88:52:80:5b:31: 76:2a:dc:9b:b0:13:c5:80:0d:cb:ab:fc:f0:8b:41:b0:d0:63: 3a:5b:3e:3a:bb:69:3f:17:7a:0e:a5:f9:70:bc:44:54:06:21: 4e:ef:42:57:33:80:1f:ba:82:a6:44:9c:d6:f3:31:21:37:f5: ae:9d:99:07:56:ba:13:a0:75:17:97:55:25:fe:72:8b:fd:3c: f2:67:26:8b:fe:26:21:47:9c:e8:16:82:40:81:f5:d6:e6:32: 73:18:05:f7:06:f7:b6:fc:11:a6:63:5f:dc:07:6b:e8:27:9f: 1d:28:dd:f9:e8:52:de:62:06:b8:43:30:7f:d7:a1:a7:45:45: ff:00:a3:7a:0f:db:72:ac:96:2a:9b:65:9e:d3:61:13:76:1c: 16:fe:d2:b1:c3:bf:6f:4f:98:07:ba:e8:9b:00:99:6f:1f:a8: d9:95:82:d1:40:b4:fa:fc:81:50:f4:52:61:d9:33:40:19:24: e5:6e:dd:c7:5a:81:d4:70:64:40:77:f7:6a:c0:a2:70:2d:d2: e7:59:db:a5:c6:8d:9b:e9:0b:3d:2d:24:ec:64:b0:e4:ce:47: 47:cb:f3:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsb4Hf9G1m+A2bt3Hls7h5JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1Njc2OWE0MmU0NDI2NmYwMzdlY2IzOTBkNDExNWZlYmUz ODYxYTQwHhcNMjUxMjE0MDgwMDU0WhcNMjUxMjE1MDgwMDU0WjAzMTEwLwYDVQQD Eyg5ZDQ2MDE2YTM3M2RiOWYwNjQyNmYxOTgxYWI1ZmZjMThmMjEwODM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0FYF6ED2uMDj0bvOViPvHrrJ/wz htztSQGvXMad7bnNkk1RMBGFcGcBeib1KUzEjImjD9FJ2WEDfFXxt6PSasis3wa7 PHx9Ux46eXqBW2JySCu2Dss14La7N/Ohigk1qBJLmropiE6SL5uA+EwtFXZ5wrLh 9ZKaTONDpEeTF7Kn6kvaI/eWZJ66Gc5lZKzaOz+toz1WLIHjwx50YIFdzhoHbgpx UHPpZn1Dra1S3ofXIdBhBjfiji5ylqtNDU+YG2jneuNaH4Wcb9Tz9cE3pX0Bq04N MvZJF3d8vxnt+DWb1DgWy4pv739ue5od2LLZCA2ScQv7rmrj9uo29S9Z9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1GAWo3PbnwZCbxmBq1/8GPIQg0MB8GA1UdIwQY MBaAFPVnaaQuRCZvA37LOQ1BFf6+OGGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMWQyZmQtNGRiZC00MzYyLWFjN2It N2EzZmZiMDBiNzE2LzEvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9hMWQyZmQtNGRiZC00MzYyLWFjN2ItN2EzZmZiMDBiNzE2 LzEvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApYx0TKVC w3NDJ1DZuEVObim8B4/djJ6JklesF4XgPIhSgFsxdircm7ATxYANy6v88ItBsNBj Ols+OrtpPxd6DqX5cLxEVAYhTu9CVzOAH7qCpkSc1vMxITf1rp2ZB1a6E6B1F5dV Jf5yi/088mcmi/4mIUec6BaCQIH11uYycxgF9wb3tvwRpmNf3Adr6CefHSjd+ehS 3mIGuEMwf9ehp0VF/wCjeg/bcqyWKptlntNhE3YcFv7SscO/b0+YB7romwCZbx+o 2ZWC0UC0+vyBUPRSYdkzQBkk5W7dx1qB1HBkQHf3asCicC3S51nbpcaNm+kLPS0k 7GSw5M5HR8vzRg== -----END CERTIFICATE-----Generated at Sun Dec 14 16:10:59 2025 by rpki-client