This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft File: 9n7U99NVdSgcF2yuPdy9QMxcHdY.mft (raw, json) Hash identifier: e+hGg6i01G1x4klNLvdt1rTP2HInUD4FQFZXIrRdSAA= Subject key identifier: CD:87:9C:B5:F1:07:C3:11:BD:88:59:12:0D:EA:EA:CF:4B:07:57:EA Authority key identifier: F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6 Certificate issuer: /CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6 Certificate serial: 019B4738DB3BF1BC8C27BECCD4C5A246C6D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 18:01:06 +0000 Manifest this update: Mon 22 Dec 2025 18:01:06 +0000 Manifest next update: Tue 23 Dec 2025 18:01:06 +0000 Files and hashes: 1: 88-pt2hIN1dTOb7W_yyIcsyIKos.roa (hash: rXxfNXMHY0jcVNFeL7a/dvDj6ZDtDB0GLjdB35wLnIg=) 2: 9n7U99NVdSgcF2yuPdy9QMxcHdY.crl (hash: GQB1MrNFT+eCXwbR3/D3quPaK2S7G1Rj9nIogEAQkTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 18:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:38:db:3b:f1:bc:8c:27:be:cc:d4:c5:a2:46:c6:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6 Validity Not Before: Dec 22 18:01:06 2025 GMT Not After : Dec 23 18:01:06 2025 GMT Subject: CN=cd879cb5f107c311bd8859120deaeacf4b0757ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ce:bb:52:8f:3c:e5:68:b9:80:18:38:fb:8a: 03:ea:55:98:19:ee:a1:08:b9:73:fd:86:12:4d:6f: 5c:3f:f4:4d:83:be:0a:0e:55:bb:54:10:6d:7d:57: cb:87:3b:c9:42:86:c5:de:2b:34:4f:4d:87:37:e2: 7e:10:f1:3e:7a:b8:86:48:cb:db:b6:a4:d8:93:80: 6d:83:38:55:a7:3a:f4:24:b5:25:06:b4:49:c6:70: 3f:ac:42:c4:62:84:c9:e3:7b:4e:c3:f1:a1:d1:b0: 40:0c:e1:8d:3c:24:b5:6e:67:d3:e5:dc:17:4c:4d: 52:37:5c:29:3b:39:a7:e8:16:c0:71:99:29:e7:f4: 13:33:18:07:f8:f6:20:27:44:89:86:4a:02:1e:4f: 18:2b:ac:ce:77:47:9a:15:97:05:f9:1d:47:e9:81: 37:fe:88:f9:12:03:86:a6:91:d8:a0:c4:e5:ac:67: 50:83:ee:ab:f1:2f:54:eb:c7:ba:e5:db:eb:bf:a0: 7b:e6:40:8f:cb:9f:61:6c:bf:54:a5:3e:30:1a:73: aa:1d:9d:f7:ec:56:60:fc:74:79:1e:21:eb:d0:6e: da:3e:2f:b9:13:6f:bf:7e:9e:6a:0e:fd:bd:bb:dd: fd:00:cc:20:4e:03:e6:84:54:a2:92:9d:e6:cf:10: 88:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:87:9C:B5:F1:07:C3:11:BD:88:59:12:0D:EA:EA:CF:4B:07:57:EA X509v3 Authority Key Identifier: keyid:F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:41:0c:7f:5b:37:5a:d2:72:dd:77:b6:d1:2c:93:3f:9d:8b: d9:b7:8f:e3:54:67:d2:56:61:31:b6:6e:c5:00:4e:2e:bb:cb: 18:7b:ae:fb:36:5a:75:19:59:a3:9a:51:02:d4:d5:65:ed:6c: 23:91:43:76:51:7e:60:8a:c9:0c:c9:ee:86:54:16:09:60:6e: 94:62:d4:c5:04:17:08:09:51:d4:f4:70:b5:53:c9:23:42:48: 7e:c8:6f:23:4e:01:85:bb:64:10:dc:a3:4c:01:b7:2f:33:44: eb:4a:f2:0d:4c:41:90:a0:d0:44:39:d5:c9:7d:18:2b:8c:a4: 0d:ad:87:cc:40:0f:f9:6d:a7:37:07:98:5e:51:3b:1e:ef:7c: 18:65:6a:aa:98:e8:8f:fc:59:01:e1:fa:e6:8a:e4:92:4c:f7: b7:e7:88:8b:06:cc:94:59:a6:93:e0:2b:c7:8a:f0:be:d4:79: ad:f8:7c:d6:e2:f8:07:69:0c:93:f3:ff:0f:c2:e2:fe:8d:b9: a3:b6:eb:0e:a9:d8:74:b4:db:52:7d:38:02:38:13:66:45:d6: 0e:6f:8c:f1:2c:cb:18:21:79:97:7c:ae:ed:30:fb:17:c3:4d: 41:b4:53:c4:7d:11:05:9f:bd:bb:f4:5f:00:8c:7a:64:7b:31: 7b:cb:3b:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHONs78byMJ77M1MWiRsbTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2N2VkNGY3ZDM1NTc1MjgxYzE3NmNhZTNkZGNiZDQwY2M1 YzFkZDYwHhcNMjUxMjIyMTgwMTA2WhcNMjUxMjIzMTgwMTA2WjAzMTEwLwYDVQQD EyhjZDg3OWNiNWYxMDdjMzExYmQ4ODU5MTIwZGVhZWFjZjRiMDc1N2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM67Uo885Wi5gBg4+4oD6lWYGe6h CLlz/YYSTW9cP/RNg74KDlW7VBBtfVfLhzvJQobF3is0T02HN+J+EPE+eriGSMvb tqTYk4BtgzhVpzr0JLUlBrRJxnA/rELEYoTJ43tOw/Gh0bBADOGNPCS1bmfT5dwX TE1SN1wpOzmn6BbAcZkp5/QTMxgH+PYgJ0SJhkoCHk8YK6zOd0eaFZcF+R1H6YE3 /oj5EgOGppHYoMTlrGdQg+6r8S9U68e65dvrv6B75kCPy59hbL9UpT4wGnOqHZ33 7FZg/HR5HiHr0G7aPi+5E2+/fp5qDv29u939AMwgTgPmhFSikp3mzxCI8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2HnLXxB8MRvYhZEg3q6s9LB1fqMB8GA1UdIwQY MBaAFPZ+1PfTVXUoHBdsrj3cvUDMXB3WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW43VTk5TlZkU2djRjJ5dVBkeTlRTXhjSGRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9iNjJlNzctMzU3YS00YWFkLWJiMjct ZjQ0ODVhZWQ3NDI5LzEvOW43VTk5TlZkU2djRjJ5dVBkeTlRTXhjSGRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9iNjJlNzctMzU3YS00YWFkLWJiMjctZjQ0ODVhZWQ3NDI5 LzEvOW43VTk5TlZkU2djRjJ5dVBkeTlRTXhjSGRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUEMf1s3 WtJy3Xe20SyTP52L2beP41Rn0lZhMbZuxQBOLrvLGHuu+zZadRlZo5pRAtTVZe1s I5FDdlF+YIrJDMnuhlQWCWBulGLUxQQXCAlR1PRwtVPJI0JIfshvI04BhbtkENyj TAG3LzNE60ryDUxBkKDQRDnVyX0YK4ykDa2HzEAP+W2nNweYXlE7Hu98GGVqqpjo j/xZAeH65orkkkz3t+eIiwbMlFmmk+Arx4rwvtR5rfh81uL4B2kMk/P/D8Li/o25 o7brDqnYdLTbUn04AjgTZkXWDm+M8SzLGCF5l3yu7TD7F8NNQbRTxH0RBZ+9u/Rf AIx6ZHsxe8s7HQ== -----END CERTIFICATE-----Generated at Tue Dec 23 01:57:38 2025 by rpki-client