This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft File: 9LdilQ63kWZou_qNG4cFYLHKdzk.mft (raw, json) Hash identifier: EExkumDpE5i5vcshFsw8++t1Z3FS+nuY07pkaxp21Dc= Subject key identifier: 95:5E:3F:24:27:14:66:82:08:53:6D:92:CB:23:A6:37:1A:1E:FD:3A Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Certificate serial: 019B055913EE4F8F7E01CB30DBB6F2ED8C9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft Manifest number: 160A Signing time: Tue 09 Dec 2025 23:01:22 +0000 Manifest this update: Tue 09 Dec 2025 23:01:22 +0000 Manifest next update: Wed 10 Dec 2025 23:01:22 +0000 Files and hashes: 1: 2I_gyEpNZ4JuV81yJRUXBVu-KOA.roa (hash: r49ywNskr+Vb41Ou7x0XARQgE2G5ZH5biPRfE9u4cAc=) 2: 2tZ8QlZM2m2IpNLIvJ0W7pbf-Z0.roa (hash: 9Uhvy9O+l0zHDpQPVkCj98q8JIdj7ZhjiR3rxLVvfII=) 3: 9LdilQ63kWZou_qNG4cFYLHKdzk.crl (hash: 75DKl7k8HCzHOsJURBTGuhjK0Q+hlq7+jNg0A/pfOyI=) 4: Cqe38rpbTYcW3IBIj3GE-axW20k.roa (hash: rFb4HKGqgMrSh0TmO+Kz12Dni5W90nAeu/GsQNE5QbI=) 5: RW6wxE8PmfS_l7583dlKYTuULiM.roa (hash: NA5N2aFRPb0HCLNpvXiULoI8i28V3/zHm+oTFj2hW9U=) 6: XViXWtM4Qca08fEngqnKAjV8_6k.roa (hash: FX1LXPYDV9yZbUiSRuPd/ffSUdla1CU7pMstvEpaovA=) 7: cg5wyW1XUiTE1cAkUrbH-_fslDk.roa (hash: zkUw4K8Y/lRpRyDIEZKZW+jZfl1kW8PgsmLXFHW0Eco=) 8: pYT69ekFAz6AyMxjupc4L7m_By4.roa (hash: Cer1nHXkBg7TmA4VluMF+Bs6hly21XolmwIlPkVMAss=) 9: t292OmKp-GnX0MyFpL72FnDc9MA.roa (hash: uIDL5vQGM8ia+mjLC9CmEE4toRqUWbIawZ8YzQbIFpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 23:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:59:13:ee:4f:8f:7e:01:cb:30:db:b6:f2:ed:8c:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Validity Not Before: Dec 9 23:01:22 2025 GMT Not After : Dec 10 23:01:22 2025 GMT Subject: CN=955e3f242714668208536d92cb23a6371a1efd3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:26:13:ec:cd:ad:bf:99:e3:76:93:4d:e0:a2: 99:63:fc:ec:18:85:43:63:ba:44:ec:c2:25:7c:17: 65:61:d5:da:82:59:b2:9f:ca:3a:f5:8e:e1:20:5e: 01:71:38:aa:74:f0:06:aa:e5:94:23:ab:1e:44:1c: 91:02:5d:c4:8a:63:7f:91:88:1a:f6:b0:d5:83:b1: 65:67:6c:65:58:4e:31:65:24:c5:4e:6c:c6:40:40: e5:e7:95:c4:4e:44:a0:77:07:1c:8b:a5:b2:8f:2e: 80:f4:c8:26:49:54:71:6a:1c:11:95:d5:2c:b9:c7: 93:ba:36:59:28:3e:7a:fe:38:31:37:72:e2:8d:9e: a9:56:4b:87:4d:98:a1:70:b3:31:d1:31:e7:96:af: 1e:1f:af:9c:3a:ae:c3:b2:78:09:ae:ff:07:3a:ee: 12:eb:8f:f7:4c:98:05:1b:79:74:6c:2d:00:77:69: f1:dc:30:95:2a:58:71:42:af:46:41:c7:1e:39:71: ea:50:6d:46:b8:38:03:c1:61:30:bd:c5:0d:62:f3: 64:1d:e6:92:d5:ba:ee:61:31:84:22:f5:d0:3b:2a: 6f:4f:45:70:e1:1f:cf:b1:7d:c3:4c:22:9f:fe:1a: af:46:00:aa:cc:55:1c:6c:f7:8c:d2:f8:74:73:1b: ca:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5E:3F:24:27:14:66:82:08:53:6D:92:CB:23:A6:37:1A:1E:FD:3A X509v3 Authority Key Identifier: keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e4:66:2c:4a:c2:ea:80:00:d0:46:c4:c5:dd:da:3d:a8:c6: ac:49:60:6f:92:ae:77:e8:b3:e0:1b:dc:16:49:b4:c4:87:06: 6a:32:19:e6:bf:f9:6b:35:42:82:ab:15:d4:16:0f:a4:ff:ac: 33:c8:d2:70:bd:ef:c9:b5:a3:40:98:49:c6:d7:07:8a:3e:01: c9:f3:3e:85:e3:0b:4e:90:55:0e:0c:9b:c0:6f:08:1c:3d:93: 69:0e:30:31:26:79:53:43:8c:37:45:7b:76:ce:3e:a7:ed:8c: c0:18:87:40:2c:5c:b0:2a:39:7c:58:22:82:bb:78:75:ba:78: 41:63:2e:0d:47:21:97:fe:26:6e:8d:4a:9e:4a:88:89:30:11: 42:f1:56:c4:eb:a0:1c:bc:ad:41:64:2d:a9:f1:ee:8b:15:be: 7f:ac:d9:69:ad:ed:f7:4c:fc:23:b9:49:42:34:c5:a6:be:09: 25:88:13:43:75:13:0e:5a:50:0d:47:25:ed:d5:c1:de:a2:7b: eb:68:19:4e:e9:15:e2:d9:87:ce:70:71:f3:99:6e:c0:09:81: b1:28:71:b8:d5:93:96:a5:72:c2:97:55:d6:e0:41:1f:54:df: c9:4a:ff:db:3e:0a:de:fe:4a:27:ba:f4:92:b8:8b:70:a1:30: 68:c2:94:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsFWRPuT49+Acsw27by7YyfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2Mjk1MGViNzkxNjY2OGJiZmE4ZDFiODcwNTYwYjFj YTc3MzkwHhcNMjUxMjA5MjMwMTIyWhcNMjUxMjEwMjMwMTIyWjAzMTEwLwYDVQQD Eyg5NTVlM2YyNDI3MTQ2NjgyMDg1MzZkOTJjYjIzYTYzNzFhMWVmZDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+CYT7M2tv5njdpNN4KKZY/zsGIVD Y7pE7MIlfBdlYdXaglmyn8o69Y7hIF4BcTiqdPAGquWUI6seRByRAl3EimN/kYga 9rDVg7FlZ2xlWE4xZSTFTmzGQEDl55XETkSgdwcci6Wyjy6A9MgmSVRxahwRldUs uceTujZZKD56/jgxN3LijZ6pVkuHTZihcLMx0THnlq8eH6+cOq7DsngJrv8HOu4S 64/3TJgFG3l0bC0Ad2nx3DCVKlhxQq9GQcceOXHqUG1GuDgDwWEwvcUNYvNkHeaS 1bruYTGEIvXQOypvT0Vw4R/PsX3DTCKf/hqvRgCqzFUcbPeM0vh0cxvKwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVePyQnFGaCCFNtkssjpjcaHv06MB8GA1UdIwQY MBaAFPS3YpUOt5FmaLv6jRuHBWCxync5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAt MmY4ZGYxODdmOThiLzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAtMmY4ZGYxODdmOThi LzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH+RmLErC 6oAA0EbExd3aPajGrElgb5Kud+iz4BvcFkm0xIcGajIZ5r/5azVCgqsV1BYPpP+s M8jScL3vybWjQJhJxtcHij4ByfM+heMLTpBVDgybwG8IHD2TaQ4wMSZ5U0OMN0V7 ds4+p+2MwBiHQCxcsCo5fFgigrt4dbp4QWMuDUchl/4mbo1KnkqIiTARQvFWxOug HLytQWQtqfHuixW+f6zZaa3t90z8I7lJQjTFpr4JJYgTQ3UTDlpQDUcl7dXB3qJ7 62gZTukV4tmHznBx85luwAmBsShxuNWTlqVywpdV1uBBH1TfyUr/2z4K3v5KJ7r0 kriLcKEwaMKUew== -----END CERTIFICATE-----Generated at Wed Dec 10 04:38:36 2025 by rpki-client