This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft File: 9krUXSK1888ucc4KwBB0t80hrFc.mft (raw, json) Hash identifier: kps8ugxlfdnDQNoYBWSYwX/7aMygN7cTfXejfVj1aoA= Subject key identifier: 3A:6C:13:2C:59:31:7E:A8:D1:9F:B8:B1:F6:C2:DF:5E:43:EF:21:CB Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57 Certificate issuer: /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57 Certificate serial: 019B270897E1544AAAB58DAB9A95BFF84F1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft Manifest number: 162C Signing time: Tue 16 Dec 2025 12:00:33 +0000 Manifest this update: Tue 16 Dec 2025 12:00:33 +0000 Manifest next update: Wed 17 Dec 2025 12:00:33 +0000 Files and hashes: 1: 9krUXSK1888ucc4KwBB0t80hrFc.crl (hash: 92X5+1rGXXCIQfvmaeXLGb8wj2kbQ6Yrf3bbxpP7KIc=) 2: mgSfpYYXhzx-YzhWkHnATXB2kdM.roa (hash: jRZKuHYyv7qD4dtktC7M7U3X1Ig58/uIyWzJPwsvUJw=) 3: rNfq-FdDmBkThN1vTMRNxR08DZE.roa (hash: W7X3TtRWNC36QWPCWtaayZ46NgLlqWMrgmB/Yk/phsc=) 4: rnFKFHUDJ2VK_n3nnMWQgvu93Us.roa (hash: ddxwbWDe9h7jTPjb6zGryBRSU7cXly9K/marvCxyA4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:08:97:e1:54:4a:aa:b5:8d:ab:9a:95:bf:f8:4f:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57 Validity Not Before: Dec 16 12:00:33 2025 GMT Not After : Dec 17 12:00:33 2025 GMT Subject: CN=3a6c132c59317ea8d19fb8b1f6c2df5e43ef21cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d4:5f:24:46:93:d0:80:53:8e:84:3f:b7:22: c6:2a:0e:c9:32:27:de:ec:08:b9:be:f6:71:e1:ae: 91:60:b9:8c:17:71:6d:6b:4d:c6:e9:43:2f:6c:82: ac:83:72:4c:85:3f:43:ca:66:e5:cc:ac:3c:7c:f8: e2:bf:12:23:1c:df:29:cf:af:1c:de:ae:5b:0a:f7: 74:7f:cb:33:ae:7f:c4:ab:50:f0:19:88:1b:45:63: fe:ba:55:96:29:a1:5a:6d:cf:e3:7d:b5:ec:f4:9f: 17:c6:6b:61:76:57:b3:91:c4:fd:e9:0e:ad:f8:e9: 2d:1e:bc:c1:c4:c4:2a:8c:5f:54:c7:93:64:db:74: 5a:2b:73:5b:74:50:c5:c5:9e:ac:cc:43:54:b7:76: 4f:91:2d:1f:50:ac:b9:3d:03:60:68:68:37:70:b1: cb:70:bd:72:de:4b:cd:5f:4e:4e:3a:26:f0:d9:84: 84:7d:3d:f3:dd:00:c0:5a:44:a1:5f:82:6a:ef:77: b3:ca:b4:29:ed:d5:27:67:93:91:9a:e7:5f:f3:39: 8c:63:f6:f5:c3:12:c8:da:87:72:93:d6:db:9b:94: b9:6d:86:ac:a5:d5:73:80:95:a5:70:af:9a:c0:55: 64:b8:e8:d7:6b:11:02:a5:fa:19:10:87:32:11:13: 84:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6C:13:2C:59:31:7E:A8:D1:9F:B8:B1:F6:C2:DF:5E:43:EF:21:CB X509v3 Authority Key Identifier: keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:96:0c:ff:8d:eb:c1:3c:84:b9:5e:f1:8b:7d:cf:9f:9a:94: 7c:a7:c3:30:75:1e:c4:40:67:83:ef:6e:bf:52:91:a4:3e:ba: ae:6c:91:6e:b1:3c:5d:cd:8d:46:4a:d2:c7:d1:7d:a6:f5:30: 21:3f:4e:82:18:e2:e7:16:ac:4e:6b:07:1b:60:b6:a9:6e:9c: 10:20:fd:83:d4:de:6c:8f:bc:2e:90:95:64:e1:f4:a7:39:aa: 0e:f4:a3:eb:58:1d:cd:b1:92:d3:be:1e:73:cc:e4:03:bd:e0: 7e:96:52:2c:af:9b:15:9b:24:dc:1e:ed:51:33:6c:b6:76:8b: 41:7b:7a:fd:11:42:ad:09:62:e4:09:7f:e3:89:a4:5a:e9:53: 88:b6:79:02:c6:a2:f6:17:f0:a4:0b:60:32:b2:27:6a:4f:71: 31:e2:83:78:6e:88:55:e9:fa:cf:59:b3:80:3a:cc:55:37:1e: 0d:2c:8a:96:f0:15:fc:ce:5f:6a:af:f6:ac:61:8f:73:7a:91: 5a:55:5b:22:c8:56:19:4b:2b:53:d5:14:eb:a8:84:fb:2b:2a: 4b:2e:43:96:87:be:4a:33:e2:8c:47:53:38:55:a7:35:6c:4e: 24:a6:9a:55:74:6d:41:d6:9c:69:32:d6:c0:b4:eb:8e:ec:5e: 60:70:3b:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnCJfhVEqqtY2rmpW/+E8bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NGFkNDVkMjJiNWYzY2YyZTcxY2UwYWMwMTA3NGI3Y2Qy MWFjNTcwHhcNMjUxMjE2MTIwMDMzWhcNMjUxMjE3MTIwMDMzWjAzMTEwLwYDVQQD EygzYTZjMTMyYzU5MzE3ZWE4ZDE5ZmI4YjFmNmMyZGY1ZTQzZWYyMWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytRfJEaT0IBTjoQ/tyLGKg7JMife 7Ai5vvZx4a6RYLmMF3Fta03G6UMvbIKsg3JMhT9DymblzKw8fPjivxIjHN8pz68c 3q5bCvd0f8szrn/Eq1DwGYgbRWP+ulWWKaFabc/jfbXs9J8XxmthdlezkcT96Q6t +OktHrzBxMQqjF9Ux5Nk23RaK3NbdFDFxZ6szENUt3ZPkS0fUKy5PQNgaGg3cLHL cL1y3kvNX05OOibw2YSEfT3z3QDAWkShX4Jq73ezyrQp7dUnZ5ORmudf8zmMY/b1 wxLI2odyk9bbm5S5bYaspdVzgJWlcK+awFVkuOjXaxECpfoZEIcyEROE6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDpsEyxZMX6o0Z+4sfbC315D7yHLMB8GA1UdIwQY MBaAFPZK1F0itfPPLnHOCsAQdLfNIaxXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWtyVVhTSzE4ODh1Y2M0S3dCQjB0ODBockZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9lZTNiODQtMjdkNy00ZGM3LThmM2Qt Njk5YjIzNGZjNzhjLzEvOWtyVVhTSzE4ODh1Y2M0S3dCQjB0ODBockZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9lZTNiODQtMjdkNy00ZGM3LThmM2QtNjk5YjIzNGZjNzhj LzEvOWtyVVhTSzE4ODh1Y2M0S3dCQjB0ODBockZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFpYM/43r wTyEuV7xi33Pn5qUfKfDMHUexEBng+9uv1KRpD66rmyRbrE8Xc2NRkrSx9F9pvUw IT9Oghji5xasTmsHG2C2qW6cECD9g9TebI+8LpCVZOH0pzmqDvSj61gdzbGS074e c8zkA73gfpZSLK+bFZsk3B7tUTNstnaLQXt6/RFCrQli5Al/44mkWulTiLZ5Asai 9hfwpAtgMrInak9xMeKDeG6IVen6z1mzgDrMVTceDSyKlvAV/M5faq/2rGGPc3qR WlVbIshWGUsrU9UU66iE+ysqSy5Dloe+SjPijEdTOFWnNWxOJKaaVXRtQdacaTLW wLTrjuxeYHA7FQ== -----END CERTIFICATE-----Generated at Tue Dec 16 15:28:23 2025 by rpki-client