This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft File: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft (raw, json) Hash identifier: cA3Q4R1eVHWglakxSDTxKRwqhbiTUJMp3qNUxryvubY= Subject key identifier: A4:39:84:DC:68:A4:B8:E3:28:CC:85:76:BE:92:A9:4F:0D:2A:A9:C9 Authority key identifier: D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4 Certificate issuer: /CN=d3d4e0da68c1446689419d103711b191ded567f4 Certificate serial: 019B24ACF88EC571B3B764760F138BC66C2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft Manifest number: 088C Signing time: Tue 16 Dec 2025 01:01:14 +0000 Manifest this update: Tue 16 Dec 2025 01:01:14 +0000 Manifest next update: Wed 17 Dec 2025 01:01:14 +0000 Files and hashes: 1: 09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl (hash: 9+XsqrxqnMxhCWxFzsscF/d5Z2Kj6HsACO5CwpZNo/Y=) 2: K7A7C17ACPryQjif4dPHFWCYnmw.roa (hash: yO751NJRBOSn6gMdo40XzsiJt+C4xy6LseVpnpZi3tM=) 3: nkm_AqdgrcdDszFPZGQsvTeQ99w.roa (hash: tWZj3SfE+CRbF9Ic1OICFS30cFtSOef9JMakRYCQj78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:f8:8e:c5:71:b3:b7:64:76:0f:13:8b:c6:6c:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3d4e0da68c1446689419d103711b191ded567f4 Validity Not Before: Dec 16 01:01:14 2025 GMT Not After : Dec 17 01:01:14 2025 GMT Subject: CN=a43984dc68a4b8e328cc8576be92a94f0d2aa9c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8c:46:51:da:d5:54:cd:83:df:19:ea:e6:e7: 7f:f1:ac:7d:9b:8f:37:f8:79:7b:8a:db:ba:88:26: f7:41:a7:08:7b:22:69:e5:b7:fc:25:d0:8b:2c:fe: fc:20:59:a8:88:0c:64:2c:d4:01:ff:f7:23:48:f2: 91:b6:6a:a1:31:f4:41:cf:90:ed:07:78:ab:11:2b: 67:77:97:b3:b9:fb:e4:e9:45:e5:dc:6b:da:37:77: 36:24:6f:fd:e4:6f:bd:9c:32:b9:72:1f:c5:e1:b1: ef:12:97:2b:5f:69:13:f0:1f:48:5d:79:0b:48:b6: 80:74:88:0f:5e:2e:02:22:f2:48:c6:9f:72:70:fe: 69:48:10:7e:fe:1e:ef:38:ac:86:e3:37:95:61:5f: e1:5d:29:e9:79:b8:84:16:de:04:5a:56:99:5f:0e: 97:6d:c6:60:a4:f2:e1:c7:20:ed:ba:1a:88:d5:c4: c1:a6:e9:bc:f1:54:36:aa:31:2b:5e:4d:c8:ca:82: 93:b5:f3:81:0d:07:fe:b8:57:2a:9c:68:d1:42:83: a7:c7:cc:e8:08:46:b1:eb:f1:c7:8e:99:7b:05:99: 0a:77:eb:a3:db:38:fa:2e:dd:28:01:c7:48:07:d9: cb:4c:52:2b:4c:d8:cf:1d:36:21:52:f0:c8:96:eb: 32:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:39:84:DC:68:A4:B8:E3:28:CC:85:76:BE:92:A9:4F:0D:2A:A9:C9 X509v3 Authority Key Identifier: keyid:D3:D4:E0:DA:68:C1:44:66:89:41:9D:10:37:11:B1:91:DE:D5:67:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3815e3-d3a8-4b3c-a4b2-cb344f1800ed/1/09Tg2mjBRGaJQZ0QNxGxkd7VZ_Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:66:97:a0:08:c8:e9:f2:91:b2:1c:7b:10:52:09:b6:e4:e0: c6:4c:af:f8:f2:cb:a3:a4:0f:a2:e1:70:88:d5:98:7f:18:6c: a4:55:bc:95:52:53:e8:16:f0:bf:2e:5d:a5:95:d3:91:ff:48: a0:53:19:17:a1:34:5b:ea:64:ab:07:a9:16:a9:54:a6:ad:22: 03:62:26:16:a4:61:7c:52:ce:5a:c4:d0:8b:20:d9:77:5e:02: a2:65:78:45:13:bc:ea:88:a4:82:a8:25:90:66:45:2d:c8:41: fa:db:70:bf:61:e6:5a:70:fa:3c:1e:5b:49:ba:37:86:80:d2: cf:b0:b9:4a:4c:a9:bb:5b:0e:9e:6a:c2:4b:88:65:6b:fe:17: 9b:03:56:99:80:73:ac:6d:1b:dd:d7:75:ed:d2:67:2d:b9:8a: c1:d7:2f:26:c7:33:7f:5c:68:0a:7d:e8:fe:a0:bd:0d:64:c8: 92:84:e9:31:1a:cd:8f:f9:a6:0a:93:b5:c3:29:4d:c3:f1:1f: 33:fc:98:e6:1f:70:da:e5:a9:98:62:85:1f:69:c0:32:73:fd: 9c:1f:55:41:5d:ab:b1:29:3f:e0:32:5f:c1:cf:c9:bd:23:9d: 20:21:bf:ea:9d:43:de:81:e2:a4:ae:a9:65:75:ab:ea:a0:4b: dc:c9:ca:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrPiOxXGzt2R2DxOLxmwtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZDRlMGRhNjhjMTQ0NjY4OTQxOWQxMDM3MTFiMTkxZGVk NTY3ZjQwHhcNMjUxMjE2MDEwMTE0WhcNMjUxMjE3MDEwMTE0WjAzMTEwLwYDVQQD EyhhNDM5ODRkYzY4YTRiOGUzMjhjYzg1NzZiZTkyYTk0ZjBkMmFhOWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoxGUdrVVM2D3xnq5ud/8ax9m483 +Hl7itu6iCb3QacIeyJp5bf8JdCLLP78IFmoiAxkLNQB//cjSPKRtmqhMfRBz5Dt B3irEStnd5ezufvk6UXl3GvaN3c2JG/95G+9nDK5ch/F4bHvEpcrX2kT8B9IXXkL SLaAdIgPXi4CIvJIxp9ycP5pSBB+/h7vOKyG4zeVYV/hXSnpebiEFt4EWlaZXw6X bcZgpPLhxyDtuhqI1cTBpum88VQ2qjErXk3IyoKTtfOBDQf+uFcqnGjRQoOnx8zo CEax6/HHjpl7BZkKd+uj2zj6Lt0oAcdIB9nLTFIrTNjPHTYhUvDIlusyHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQ5hNxopLjjKMyFdr6SqU8NKqnJMB8GA1UdIwQY MBaAFNPU4NpowURmiUGdEDcRsZHe1Wf0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDlUZzJtakJSR2FKUVowUU54R3hrZDdWWl9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zODE1ZTMtZDNhOC00YjNjLWE0YjIt Y2IzNDRmMTgwMGVkLzEvMDlUZzJtakJSR2FKUVowUU54R3hrZDdWWl9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8zODE1ZTMtZDNhOC00YjNjLWE0YjItY2IzNDRmMTgwMGVk LzEvMDlUZzJtakJSR2FKUVowUU54R3hrZDdWWl9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2aXoAjI 6fKRshx7EFIJtuTgxkyv+PLLo6QPouFwiNWYfxhspFW8lVJT6Bbwvy5dpZXTkf9I oFMZF6E0W+pkqwepFqlUpq0iA2ImFqRhfFLOWsTQiyDZd14ComV4RRO86oikgqgl kGZFLchB+ttwv2HmWnD6PB5bSbo3hoDSz7C5Skypu1sOnmrCS4hla/4XmwNWmYBz rG0b3dd17dJnLbmKwdcvJsczf1xoCn3o/qC9DWTIkoTpMRrNj/mmCpO1wylNw/Ef M/yY5h9w2uWpmGKFH2nAMnP9nB9VQV2rsSk/4DJfwc/JvSOdICG/6p1D3oHipK6p ZXWr6qBL3MnK/g== -----END CERTIFICATE-----Generated at Tue Dec 16 04:45:58 2025 by rpki-client