This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft File: 9RDHudzJJZg-WbWGzVmrVUviWYI.mft (raw, json) Hash identifier: LjVI7g3DU26AMG9n8lgFrQwHUaFnc6haA9U9HkKlMLw= Subject key identifier: 06:EA:97:43:02:BD:08:02:08:09:11:21:BE:0E:30:59:92:45:6E:05 Authority key identifier: F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82 Certificate issuer: /CN=f510c7b9dcc925983e59b586cd59ab554be25982 Certificate serial: 019B1CF380F07383D06E220550A56F02F737 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft Manifest number: 10 Signing time: Sun 14 Dec 2025 13:01:18 +0000 Manifest this update: Sun 14 Dec 2025 13:01:18 +0000 Manifest next update: Mon 15 Dec 2025 13:01:18 +0000 Files and hashes: 1: 9RDHudzJJZg-WbWGzVmrVUviWYI.crl (hash: TZ3ShDFNYSKfQoxZjw6UVsZvqBLG/lWed84hnYw02fA=) 2: WOHzoz9_3wsG5dPQrnQZY5iJqxA.roa (hash: vp1azStFxo+mPInlylvmSemgZa94N6epgGUZezt+m8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:f3:80:f0:73:83:d0:6e:22:05:50:a5:6f:02:f7:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f510c7b9dcc925983e59b586cd59ab554be25982 Validity Not Before: Dec 14 13:01:18 2025 GMT Not After : Dec 15 13:01:18 2025 GMT Subject: CN=06ea974302bd080208091121be0e305992456e05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:da:64:b0:0d:e9:75:47:5e:21:34:d5:30:27: d8:0b:21:15:3d:ee:40:f3:6f:49:19:d8:cb:b3:d9: db:e2:35:1b:b7:be:db:c4:78:0c:01:af:26:8e:8c: 02:16:9d:d6:61:a9:2c:a1:62:8a:99:54:15:57:78: 24:fa:ee:7d:4d:21:a2:90:2b:f7:be:57:a2:d5:db: a4:50:0b:9e:f8:56:e9:78:e6:e7:5f:48:32:ee:d4: cd:aa:dc:40:22:3c:0b:1e:05:b4:bd:3e:3f:99:39: 11:75:07:73:36:e5:d6:cb:d8:8c:30:22:5c:2e:1e: 70:66:f6:e2:88:1a:ea:7d:fe:78:e3:31:6c:80:01: 28:2c:be:35:81:ec:55:55:e3:5a:fa:c8:c1:3f:5c: c7:94:f6:3b:71:7b:11:82:b4:37:71:45:02:d8:8e: 57:89:31:f2:45:c9:0a:3f:09:6f:4d:f3:ac:99:ef: b8:02:54:61:27:38:57:f4:6d:48:2c:09:d2:28:92: de:3e:e3:02:c0:84:9f:33:e0:a8:cd:51:32:78:15: 78:98:e9:51:30:4f:52:9a:96:30:af:c9:d7:94:07: a3:08:34:41:20:3b:8d:19:bb:d1:81:7d:df:e2:03: 01:a2:a5:0f:73:7d:3a:95:b2:32:50:58:db:1c:27: bb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:EA:97:43:02:BD:08:02:08:09:11:21:BE:0E:30:59:92:45:6E:05 X509v3 Authority Key Identifier: keyid:F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:83:64:e7:27:16:41:e3:dd:8c:13:7c:27:e4:a7:b4:ce:b0: c2:0f:7e:39:01:c3:62:7a:0f:11:6a:09:70:3a:65:39:68:33: 55:4c:c9:6b:35:f0:2a:a7:9e:63:ba:d2:16:91:5f:b5:8b:25: df:29:05:17:ee:74:8c:0a:cc:24:db:7e:a9:4b:06:5d:13:f2: 14:5e:e1:a0:7f:87:fc:d2:f9:1f:26:98:0b:fd:90:aa:09:26: ec:3d:51:72:d4:df:6e:93:45:61:ba:6e:93:ac:75:f8:d7:d1: e5:ac:8d:c7:d9:67:c3:54:cd:bf:62:e7:03:f2:e2:4f:48:3b: 4f:aa:7e:e8:0c:7c:8e:b9:6a:dc:40:4a:47:4a:f6:da:22:0f: 1e:4d:5f:a4:42:4e:48:75:84:c5:0c:50:85:60:ff:07:c0:d0: 98:fe:28:a5:cd:c0:b3:71:c4:b4:97:2a:59:1d:71:c2:0e:22: 8c:2b:1c:05:a8:35:7c:79:bc:2b:57:eb:3a:44:66:f0:eb:63: 71:5f:27:ee:21:ae:fc:2a:25:4f:b3:6a:72:a4:b8:2d:4b:89: 94:da:71:1c:fc:91:62:83:31:dc:03:f0:3c:67:90:da:8b:d1: d2:d7:20:47:c7:b4:d1:e1:14:71:17:c9:10:f7:f7:01:31:cb: 2a:84:04:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsc84Dwc4PQbiIFUKVvAvc3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MTBjN2I5ZGNjOTI1OTgzZTU5YjU4NmNkNTlhYjU1NGJl MjU5ODIwHhcNMjUxMjE0MTMwMTE4WhcNMjUxMjE1MTMwMTE4WjAzMTEwLwYDVQQD EygwNmVhOTc0MzAyYmQwODAyMDgwOTExMjFiZTBlMzA1OTkyNDU2ZTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NpksA3pdUdeITTVMCfYCyEVPe5A 829JGdjLs9nb4jUbt77bxHgMAa8mjowCFp3WYaksoWKKmVQVV3gk+u59TSGikCv3 vlei1dukUAue+FbpeObnX0gy7tTNqtxAIjwLHgW0vT4/mTkRdQdzNuXWy9iMMCJc Lh5wZvbiiBrqff544zFsgAEoLL41gexVVeNa+sjBP1zHlPY7cXsRgrQ3cUUC2I5X iTHyRckKPwlvTfOsme+4AlRhJzhX9G1ILAnSKJLePuMCwISfM+CozVEyeBV4mOlR ME9SmpYwr8nXlAejCDRBIDuNGbvRgX3f4gMBoqUPc306lbIyUFjbHCe7UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbql0MCvQgCCAkRIb4OMFmSRW4FMB8GA1UdIwQY MBaAFPUQx7ncySWYPlm1hs1Zq1VL4lmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVJESHVkekpKWmctV2JXR3pWbXJWVXZpV1lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hMGI1OGMtMzcxOS00NzczLTkyMDYt YTFiMmI2YTcwMjcyLzEvOVJESHVkekpKWmctV2JXR3pWbXJWVXZpV1lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9hMGI1OGMtMzcxOS00NzczLTkyMDYtYTFiMmI2YTcwMjcy LzEvOVJESHVkekpKWmctV2JXR3pWbXJWVXZpV1lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYYNk5ycW QePdjBN8J+SntM6wwg9+OQHDYnoPEWoJcDplOWgzVUzJazXwKqeeY7rSFpFftYsl 3ykFF+50jArMJNt+qUsGXRPyFF7hoH+H/NL5HyaYC/2Qqgkm7D1RctTfbpNFYbpu k6x1+NfR5ayNx9lnw1TNv2LnA/LiT0g7T6p+6Ax8jrlq3EBKR0r22iIPHk1fpEJO SHWExQxQhWD/B8DQmP4opc3As3HEtJcqWR1xwg4ijCscBag1fHm8K1frOkRm8Otj cV8n7iGu/ColT7NqcqS4LUuJlNpxHPyRYoMx3APwPGeQ2ovR0tcgR8e00eEUcRfJ EPf3ATHLKoQErw== -----END CERTIFICATE-----Generated at Sun Dec 14 18:52:12 2025 by rpki-client