This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft File: d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft (raw, json) Hash identifier: Z4lMhvSYYczqkDo7Xvaz8nTwWWBFG1c8F6YzzLPVW+U= Subject key identifier: F4:AA:B5:81:34:57:9C:98:6C:8B:69:38:FF:F3:D6:D9:65:5B:C1:EE Authority key identifier: 77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2 Certificate issuer: /CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2 Certificate serial: 019B243EA0C50FA4CE357A468F2DE8BB9EAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft Manifest number: 104D Signing time: Mon 15 Dec 2025 23:00:42 +0000 Manifest this update: Mon 15 Dec 2025 23:00:42 +0000 Manifest next update: Tue 16 Dec 2025 23:00:42 +0000 Files and hashes: 1: cV_xuUl9XuNAw2Is6z6ZV4oiM48.roa (hash: +2riVPNmAsQH9xrBeRoOTXvYeuCg2sjzB0s7i/rn9hw=) 2: d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl (hash: cSKhuATyj7i5SpL0eWI5xyhlJYUBJR7tTkZafQZav3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 23:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3e:a0:c5:0f:a4:ce:35:7a:46:8f:2d:e8:bb:9e:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2 Validity Not Before: Dec 15 23:00:42 2025 GMT Not After : Dec 16 23:00:42 2025 GMT Subject: CN=f4aab58134579c986c8b6938fff3d6d9655bc1ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d7:a6:06:25:e9:1d:5c:ed:db:94:f6:07:30: a1:c4:fe:b3:74:c5:95:31:7a:b3:bb:95:81:a8:dd: 91:8a:a9:a1:cd:59:a7:d4:fc:b1:67:b9:69:84:a7: 26:a1:1e:60:3d:79:bc:6c:ed:af:63:3a:f2:fd:c6: f9:f7:e6:3a:8e:df:c8:bc:24:26:92:73:18:2f:8f: b7:4d:20:19:b0:59:86:4b:c3:4f:53:ea:dc:40:d9: 8a:2a:0b:50:8a:50:7c:9c:36:0f:ed:ec:09:00:96: ad:79:17:d3:f4:ac:1c:06:61:3d:38:fb:88:68:03: e6:d5:de:a5:77:08:b0:80:15:b6:92:a5:aa:6a:72: 7c:a7:0c:4c:2d:c9:0a:5e:2b:b3:26:bb:8a:63:f5: f8:66:3c:85:fa:b1:b9:c3:e5:50:3c:95:39:2f:8e: a9:e6:19:bf:e4:28:da:a3:4e:be:b2:dc:15:98:9f: 60:99:5b:f7:27:52:8c:92:f6:7a:e9:90:e3:a3:87: c9:b4:24:7c:8f:87:ff:f9:aa:c0:40:e9:8e:ca:63: 7a:44:a2:f5:4c:c5:2b:7e:bc:3d:ef:c3:9e:96:27: cc:24:fc:d2:48:bd:dd:e7:47:28:3e:2a:ea:5d:8c: 03:54:65:b6:e0:e2:ba:ba:b5:a0:f3:45:84:53:55: 44:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AA:B5:81:34:57:9C:98:6C:8B:69:38:FF:F3:D6:D9:65:5B:C1:EE X509v3 Authority Key Identifier: keyid:77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:95:0a:bf:4c:00:b9:88:f9:c5:c5:55:e8:d0:ca:2a:fc:33: 4d:25:94:ff:74:b6:3d:61:f5:38:93:46:15:91:82:46:d4:55: 56:bc:90:65:ac:75:03:1e:c1:2f:57:bb:76:97:dc:e3:4e:2a: 25:2a:42:82:0e:44:e4:b7:66:af:a6:14:68:a0:50:75:e8:5e: b8:1b:73:b7:89:bf:2d:0c:fa:9f:64:84:1b:ad:90:68:36:1f: 3e:16:c0:0a:b1:fb:13:4e:5d:1e:75:c1:fb:64:2e:cf:ec:59: 59:93:dc:93:a1:28:02:f9:f3:db:d5:25:63:48:ca:33:2e:46: 3e:9a:fa:24:66:f6:19:59:7f:a7:ce:5a:24:0c:2f:9e:03:81: 26:c5:e8:a8:b9:31:59:20:97:5d:f1:36:95:72:5a:4f:a0:68: 32:16:bf:a7:73:14:35:64:a9:42:bd:fc:fe:04:8a:b5:e4:c9: 0d:09:0e:e0:5d:3d:f7:0e:d6:32:21:d8:b2:70:7d:1b:b2:61: 3a:41:ba:a0:50:ef:99:bc:ee:bc:9c:0b:2f:8b:81:10:60:07: 99:29:3c:83:e4:b0:d5:eb:0f:e4:1a:88:23:67:76:7e:47:cb: e4:25:82:44:6d:38:6c:10:03:2e:84:47:c3:8c:67:36:61:ea: 62:7d:31:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskPqDFD6TONXpGjy3ou56rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZDE4YjBmNjUzNWZjYmJiNDkyZjYwNmNiODgwYmU3YTI2 ZWZjYzIwHhcNMjUxMjE1MjMwMDQyWhcNMjUxMjE2MjMwMDQyWjAzMTEwLwYDVQQD EyhmNGFhYjU4MTM0NTc5Yzk4NmM4YjY5MzhmZmYzZDZkOTY1NWJjMWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59emBiXpHVzt25T2BzChxP6zdMWV MXqzu5WBqN2RiqmhzVmn1PyxZ7lphKcmoR5gPXm8bO2vYzry/cb59+Y6jt/IvCQm knMYL4+3TSAZsFmGS8NPU+rcQNmKKgtQilB8nDYP7ewJAJateRfT9KwcBmE9OPuI aAPm1d6ldwiwgBW2kqWqanJ8pwxMLckKXiuzJruKY/X4ZjyF+rG5w+VQPJU5L46p 5hm/5Cjao06+stwVmJ9gmVv3J1KMkvZ66ZDjo4fJtCR8j4f/+arAQOmOymN6RKL1 TMUrfrw978OelifMJPzSSL3d50coPirqXYwDVGW24OK6urWg80WEU1VE7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSqtYE0V5yYbItpOP/z1tllW8HuMB8GA1UdIwQY MBaAFHfRiw9lNfy7tJL2BsuIC+eibvzCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDlHTEQyVTFfTHUwa3ZZR3k0Z0w1Nkp1X01JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iNzg3M2UtMjQ3NS00NzFkLWIwMzkt MThlY2QwNGE3YjVlLzEvZDlHTEQyVTFfTHUwa3ZZR3k0Z0w1Nkp1X01JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9iNzg3M2UtMjQ3NS00NzFkLWIwMzktMThlY2QwNGE3YjVl LzEvZDlHTEQyVTFfTHUwa3ZZR3k0Z0w1Nkp1X01JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpUKv0wA uYj5xcVV6NDKKvwzTSWU/3S2PWH1OJNGFZGCRtRVVryQZax1Ax7BL1e7dpfc404q JSpCgg5E5Ldmr6YUaKBQdeheuBtzt4m/LQz6n2SEG62QaDYfPhbACrH7E05dHnXB +2Quz+xZWZPck6EoAvnz29UlY0jKMy5GPpr6JGb2GVl/p85aJAwvngOBJsXoqLkx WSCXXfE2lXJaT6BoMha/p3MUNWSpQr38/gSKteTJDQkO4F099w7WMiHYsnB9G7Jh OkG6oFDvmbzuvJwLL4uBEGAHmSk8g+Sw1esP5BqII2d2fkfL5CWCRG04bBADLoRH w4xnNmHqYn0xFQ== -----END CERTIFICATE-----Generated at Tue Dec 16 06:28:06 2025 by rpki-client