This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft File: 9nKGX4FRC5RVt-qbyMfa15k9U5o.mft (raw, json) Hash identifier: Ik25VPBuLe/HszjLX4xZpvCbb4VLaNtUYxu8er4cXFU= Subject key identifier: 2B:6D:C9:D1:34:10:EC:E2:8A:16:10:CB:25:BB:D3:45:5B:61:12:05 Authority key identifier: F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A Certificate issuer: /CN=f672865f81510b9455b7ea9bc8c7dad7993d539a Certificate serial: 019B4A399AD6A6A0C2177FD1A707B325BD47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft Manifest number: CA Signing time: Tue 23 Dec 2025 08:00:47 +0000 Manifest this update: Tue 23 Dec 2025 08:00:47 +0000 Manifest next update: Wed 24 Dec 2025 08:00:47 +0000 Files and hashes: 1: 9nKGX4FRC5RVt-qbyMfa15k9U5o.crl (hash: LyJwUUenjo/mPA0ZilkQILyYwzBmlkXHEcKI/5uKkdk=) 2: eRy2kmfW8UDcIPq4LHplflCvw9A.roa (hash: ZWExOEe6M7iJ72nBf8q960kB6kZXayCU4gvOM3MlPx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 08:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:39:9a:d6:a6:a0:c2:17:7f:d1:a7:07:b3:25:bd:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f672865f81510b9455b7ea9bc8c7dad7993d539a Validity Not Before: Dec 23 08:00:47 2025 GMT Not After : Dec 24 08:00:47 2025 GMT Subject: CN=2b6dc9d13410ece28a1610cb25bbd3455b611205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a6:ec:32:dc:96:44:3f:57:1b:5f:98:4a:39: a9:d5:cc:d9:31:be:26:95:32:1c:f7:ef:e3:1b:74: 0c:96:6a:41:8d:24:d5:7a:ad:a2:de:9d:00:05:c3: fd:cc:0d:41:b2:f4:bb:73:d0:c2:a3:79:c1:c7:da: 5e:8d:ed:59:57:ef:b3:98:89:ac:e6:51:88:7c:90: f7:ce:f1:cc:66:06:29:e7:d6:91:09:a0:e9:3e:38: 7d:81:de:d3:dc:f5:57:cb:23:ce:76:62:48:e7:63: 61:04:d7:49:06:b4:47:70:a9:92:ca:87:3e:4e:4a: 61:e8:5c:8d:54:fb:a3:29:65:3e:2e:07:25:ed:ce: c3:1d:1d:fd:e3:4c:18:36:f2:5b:4a:3d:7c:91:f7: c4:7e:dd:bd:60:f5:40:20:4c:54:f8:b2:56:92:7f: d0:0b:4c:9d:4c:96:f3:b6:58:c6:a9:81:8b:a8:74: 11:af:4a:a4:08:51:fc:99:35:0c:19:f7:42:9f:20: f0:8a:d4:57:50:84:07:a9:64:c2:db:a7:24:91:28: d4:88:8b:a4:39:38:f5:3f:b4:97:33:3a:28:a9:bb: f6:e8:a7:78:4e:3c:09:55:c0:c5:fa:60:94:bb:af: c7:42:92:2b:19:1c:f1:1f:2d:36:d0:af:7a:59:1b: 17:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:6D:C9:D1:34:10:EC:E2:8A:16:10:CB:25:BB:D3:45:5B:61:12:05 X509v3 Authority Key Identifier: keyid:F6:72:86:5F:81:51:0B:94:55:B7:EA:9B:C8:C7:DA:D7:99:3D:53:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nKGX4FRC5RVt-qbyMfa15k9U5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/14351c-b1ed-418e-bae4-a19227097ff3/1/9nKGX4FRC5RVt-qbyMfa15k9U5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:53:34:fa:10:3d:c9:9a:ca:61:33:4c:81:eb:bb:5a:74:e5: 09:45:49:14:2b:95:dc:47:69:06:a2:95:13:82:9f:be:af:4b: d3:eb:f7:34:68:48:29:68:a9:61:98:26:5b:6f:16:df:fe:f4: dd:2f:79:57:81:54:19:05:5a:32:2b:e7:15:2a:6f:51:39:87: 9f:39:fd:b9:21:8c:61:69:62:c5:8d:98:c1:dd:3f:0a:ef:61: 85:81:9e:ea:c8:71:ac:04:d3:df:a8:2f:78:4e:04:27:08:1e: 33:18:77:2a:99:1c:ae:56:22:d9:30:b5:1a:0b:10:81:9f:ad: 6b:c8:47:af:c3:26:e8:88:e6:f7:72:91:73:55:59:e6:d8:4f: 89:89:a7:41:32:bc:19:1c:33:c2:5f:1e:98:90:ea:6b:c4:e1: c0:d1:11:b6:52:10:bc:df:c7:b7:c8:ef:25:cb:69:d2:43:64: 0a:fe:d3:8f:d3:f4:a1:96:fc:d8:ca:6c:53:1e:14:2b:a5:af: dd:9e:33:07:78:31:ba:e1:55:a0:b1:34:bc:9e:0b:89:55:60: 04:81:1b:4b:0e:9b:92:2a:5c:62:5e:f5:00:8e:66:5f:b5:ff: 85:35:ae:2e:c3:00:48:81:0d:99:fa:e9:9d:09:93:94:be:8b: dc:ef:65:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKOZrWpqDCF3/RpwezJb1HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NzI4NjVmODE1MTBiOTQ1NWI3ZWE5YmM4YzdkYWQ3OTkz ZDUzOWEwHhcNMjUxMjIzMDgwMDQ3WhcNMjUxMjI0MDgwMDQ3WjAzMTEwLwYDVQQD EygyYjZkYzlkMTM0MTBlY2UyOGExNjEwY2IyNWJiZDM0NTViNjExMjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqbsMtyWRD9XG1+YSjmp1czZMb4m lTIc9+/jG3QMlmpBjSTVeq2i3p0ABcP9zA1BsvS7c9DCo3nBx9peje1ZV++zmIms 5lGIfJD3zvHMZgYp59aRCaDpPjh9gd7T3PVXyyPOdmJI52NhBNdJBrRHcKmSyoc+ Tkph6FyNVPujKWU+Lgcl7c7DHR3940wYNvJbSj18kffEft29YPVAIExU+LJWkn/Q C0ydTJbztljGqYGLqHQRr0qkCFH8mTUMGfdCnyDwitRXUIQHqWTC26ckkSjUiIuk OTj1P7SXMzooqbv26Kd4TjwJVcDF+mCUu6/HQpIrGRzxHy020K96WRsXawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCttydE0EOziihYQyyW700VbYRIFMB8GA1UdIwQY MBaAFPZyhl+BUQuUVbfqm8jH2teZPVOaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW5LR1g0RlJDNVJWdC1xYnlNZmExNWs5VTVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xNDM1MWMtYjFlZC00MThlLWJhZTQt YTE5MjI3MDk3ZmYzLzEvOW5LR1g0RlJDNVJWdC1xYnlNZmExNWs5VTVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xNDM1MWMtYjFlZC00MThlLWJhZTQtYTE5MjI3MDk3ZmYz LzEvOW5LR1g0RlJDNVJWdC1xYnlNZmExNWs5VTVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ1M0+hA9 yZrKYTNMgeu7WnTlCUVJFCuV3EdpBqKVE4Kfvq9L0+v3NGhIKWipYZgmW28W3/70 3S95V4FUGQVaMivnFSpvUTmHnzn9uSGMYWlixY2Ywd0/Cu9hhYGe6shxrATT36gv eE4EJwgeMxh3KpkcrlYi2TC1GgsQgZ+ta8hHr8Mm6Ijm93KRc1VZ5thPiYmnQTK8 GRwzwl8emJDqa8ThwNERtlIQvN/Ht8jvJctp0kNkCv7Tj9P0oZb82MpsUx4UK6Wv 3Z4zB3gxuuFVoLE0vJ4LiVVgBIEbSw6bkipcYl71AI5mX7X/hTWuLsMASIENmfrp nQmTlL6L3O9lUQ== -----END CERTIFICATE-----Generated at Tue Dec 23 16:47:07 2025 by rpki-client