This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft File: 9F55FBEwzuyFchX5u916Vbr0538.mft (raw, json) Hash identifier: ImtmTyHGia8SZXGj8zqj7JAnBMoHDlFv6lvEMiysn0U= Subject key identifier: 31:CD:19:B3:C3:64:E4:72:2B:26:EE:F7:09:FC:C7:E4:78:0D:D5:A5 Authority key identifier: F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F Certificate issuer: /CN=f45e79141130ceec857215f9bbdd7a55baf4e77f Certificate serial: 019B1A2938F705CF6E92B8B1D139FE84EC5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft Manifest number: 0E42 Signing time: Sun 14 Dec 2025 00:01:07 +0000 Manifest this update: Sun 14 Dec 2025 00:01:07 +0000 Manifest next update: Mon 15 Dec 2025 00:01:07 +0000 Files and hashes: 1: 9F55FBEwzuyFchX5u916Vbr0538.crl (hash: XEVrnrBtXMTTzGHkZavoKpFfTOAivKa3DMSX45ZsZAE=) 2: YyGPwu-_r-eFoNX2ZTx6n9Sl7sU.roa (hash: iag5NIeY+dB9ncpa+rQd04Kk2wb7pISvllYkBby24Kg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:38:f7:05:cf:6e:92:b8:b1:d1:39:fe:84:ec:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f45e79141130ceec857215f9bbdd7a55baf4e77f Validity Not Before: Dec 14 00:01:07 2025 GMT Not After : Dec 15 00:01:07 2025 GMT Subject: CN=31cd19b3c364e4722b26eef709fcc7e4780dd5a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ae:a2:c8:2f:00:a4:ac:1e:d0:d2:1a:cb:87: a9:13:b6:7e:47:76:a8:6f:a9:b6:4c:aa:b9:15:3c: 14:c5:6a:81:48:f4:e9:d5:7e:02:f9:a0:97:a0:c2: db:ab:5b:28:93:4a:a0:2b:b9:a4:20:4a:0d:bb:95: 51:73:5d:b5:29:79:3a:b3:8a:18:1f:1c:70:ed:b1: cf:36:7f:ee:9b:d7:a9:6b:f7:aa:5c:cf:19:04:45: 93:2f:b4:e0:94:5f:8f:f7:35:84:15:17:51:ad:f2: 1c:87:89:78:1e:d7:4f:9f:49:f5:c9:56:19:f4:ff: 44:89:f1:3b:40:9a:66:f8:a9:ee:d3:dc:28:ca:52: 5b:07:f2:47:6a:1d:26:ca:06:96:79:b9:1f:d5:84: fe:0b:cd:35:32:b0:2b:c6:96:05:74:2c:a3:36:b4: 68:62:9a:12:37:f9:ae:30:cd:fd:36:d1:89:d2:0c: 28:01:88:18:d0:7a:a1:dc:99:29:ba:f4:e5:c4:3e: a7:65:95:22:d4:e7:b1:7e:c7:4c:92:51:3e:a9:1d: 78:1b:d4:cd:fa:57:38:fd:3d:6f:41:05:9d:12:f7: c2:00:64:8f:70:92:4a:d2:c7:02:55:85:ed:72:e3: 52:64:cd:ee:86:68:64:c4:31:34:b6:ce:fd:5c:50: d3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:CD:19:B3:C3:64:E4:72:2B:26:EE:F7:09:FC:C7:E4:78:0D:D5:A5 X509v3 Authority Key Identifier: keyid:F4:5E:79:14:11:30:CE:EC:85:72:15:F9:BB:DD:7A:55:BA:F4:E7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9F55FBEwzuyFchX5u916Vbr0538.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ec1b59-9e0a-4ad3-977e-33bd843495f8/1/9F55FBEwzuyFchX5u916Vbr0538.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:3f:0e:0f:f7:62:f6:40:6d:04:b5:1c:1c:c3:69:93:cb:30: af:29:57:c5:53:3d:1f:bb:58:d3:22:56:33:39:96:69:3d:a3: 75:55:a4:4e:e4:d2:78:85:40:51:df:97:1c:42:4b:46:df:f1: 3c:b7:7c:e9:ea:18:c9:aa:15:9b:f2:5b:32:64:85:95:c9:f0: e1:f0:e5:1e:8a:29:8c:7c:1b:17:a9:85:3c:0f:73:72:ce:43: b1:f4:c4:7f:bb:0e:71:25:41:d3:82:5f:6e:d0:9a:f1:d6:e5: 5c:a9:b3:bd:99:4c:3e:84:42:0b:73:4d:45:53:41:48:cb:1c: fb:95:6d:e1:29:a0:2d:db:b4:c2:7f:c4:fe:8e:e0:4c:c9:35: ad:46:8f:bd:83:5f:46:dd:b9:7b:49:cb:67:78:dd:85:80:0a: 4d:50:15:c6:01:0e:b0:02:5e:df:9b:f7:1d:62:90:ff:42:6c: af:80:38:cd:f0:b8:5c:33:c0:c9:9b:5b:11:ee:6a:71:1b:5e: eb:24:8e:e2:27:e9:d9:ee:b4:e6:d2:19:ee:9b:ef:4e:f7:9c: cb:81:f1:0d:01:da:5d:26:f1:84:7b:45:72:71:bf:67:2b:61: 0b:b2:30:39:a9:55:f8:27:e5:38:4e:a6:11:16:be:ff:01:86: fd:cc:b3:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKTj3Bc9ukrix0Tn+hOxfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NWU3OTE0MTEzMGNlZWM4NTcyMTVmOWJiZGQ3YTU1YmFm NGU3N2YwHhcNMjUxMjE0MDAwMTA3WhcNMjUxMjE1MDAwMTA3WjAzMTEwLwYDVQQD EygzMWNkMTliM2MzNjRlNDcyMmIyNmVlZjcwOWZjYzdlNDc4MGRkNWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsK6iyC8ApKwe0NIay4epE7Z+R3ao b6m2TKq5FTwUxWqBSPTp1X4C+aCXoMLbq1sok0qgK7mkIEoNu5VRc121KXk6s4oY Hxxw7bHPNn/um9epa/eqXM8ZBEWTL7TglF+P9zWEFRdRrfIch4l4HtdPn0n1yVYZ 9P9EifE7QJpm+Knu09woylJbB/JHah0mygaWebkf1YT+C801MrArxpYFdCyjNrRo YpoSN/muMM39NtGJ0gwoAYgY0Hqh3JkpuvTlxD6nZZUi1OexfsdMklE+qR14G9TN +lc4/T1vQQWdEvfCAGSPcJJK0scCVYXtcuNSZM3uhmhkxDE0ts79XFDTGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHNGbPDZORyKybu9wn8x+R4DdWlMB8GA1UdIwQY MBaAFPReeRQRMM7shXIV+bvdelW69Od/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUY1NUZCRXd6dXlGY2hYNXU5MTZWYnIwNTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9lYzFiNTktOWUwYS00YWQzLTk3N2Ut MzNiZDg0MzQ5NWY4LzEvOUY1NUZCRXd6dXlGY2hYNXU5MTZWYnIwNTM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9lYzFiNTktOWUwYS00YWQzLTk3N2UtMzNiZDg0MzQ5NWY4 LzEvOUY1NUZCRXd6dXlGY2hYNXU5MTZWYnIwNTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJT8OD/di 9kBtBLUcHMNpk8swrylXxVM9H7tY0yJWMzmWaT2jdVWkTuTSeIVAUd+XHEJLRt/x PLd86eoYyaoVm/JbMmSFlcnw4fDlHoopjHwbF6mFPA9zcs5DsfTEf7sOcSVB04Jf btCa8dblXKmzvZlMPoRCC3NNRVNBSMsc+5Vt4SmgLdu0wn/E/o7gTMk1rUaPvYNf Rt25e0nLZ3jdhYAKTVAVxgEOsAJe35v3HWKQ/0Jsr4A4zfC4XDPAyZtbEe5qcRte 6ySO4ifp2e605tIZ7pvvTvecy4HxDQHaXSbxhHtFcnG/ZythC7IwOalV+CflOE6m ERa+/wGG/cyzhw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:52:30 2025 by rpki-client