This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft File: 9XwaqtuDIN2EMjVFjPLFy_RwStY.mft (raw, json) Hash identifier: HeHyztzorM7MCGj2vAcw8W/zMeF8r8potx6osv/+fZw= Subject key identifier: 71:9D:12:A0:F2:8A:49:2D:76:4B:1E:8E:9F:22:6C:FD:98:70:C0:4E Authority key identifier: F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6 Certificate issuer: /CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6 Certificate serial: 019B31FA48EE56C7CD365F0EECDA3609A584 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft Manifest number: 0972 Signing time: Thu 18 Dec 2025 15:00:44 +0000 Manifest this update: Thu 18 Dec 2025 15:00:44 +0000 Manifest next update: Fri 19 Dec 2025 15:00:44 +0000 Files and hashes: 1: 9XwaqtuDIN2EMjVFjPLFy_RwStY.crl (hash: 5m+MdeifW4eyGHDgYxt8gy9+0qQN7pCH86ls/pbMlPI=) 2: _uDFPWLhrv5u3Xk-4kqIlFYREDE.roa (hash: 9Mmw31ED2MDyHvlXnlSZHoSwRiyKNLbz2bvW/sip0UM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:48:ee:56:c7:cd:36:5f:0e:ec:da:36:09:a5:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6 Validity Not Before: Dec 18 15:00:44 2025 GMT Not After : Dec 19 15:00:44 2025 GMT Subject: CN=719d12a0f28a492d764b1e8e9f226cfd9870c04e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:70:ff:23:00:d7:6b:15:80:78:cf:00:91:4c: 56:02:78:de:a8:89:36:7c:ac:16:72:98:a6:df:33: 5c:86:3a:5d:12:5f:97:54:f7:9e:2d:59:7b:be:e0: bd:37:d1:be:d3:b1:e4:69:8e:73:54:a1:82:62:73: 7a:dc:b5:0e:d1:06:53:d6:22:17:a3:b7:9f:18:8a: 72:0f:56:79:a8:22:3b:b9:ff:4a:bf:e7:cf:e6:5f: 02:c0:1d:d6:cf:58:53:fb:e2:8b:b5:0e:1d:03:9b: d8:66:44:68:3d:c7:f0:b4:bf:f4:f3:e1:67:c3:f5: 81:3d:b3:d1:e6:69:54:a6:c2:b9:d7:a6:81:47:ff: 0b:7f:f3:18:14:97:db:07:3c:5f:7b:48:9e:a8:0d: a0:af:2d:f8:b5:73:be:a8:2b:2a:39:8b:82:5a:18: e9:99:68:6b:e2:16:f3:52:6d:7e:e1:a0:72:83:c3: d5:f3:cd:b5:66:13:3f:06:a3:58:20:bb:e5:6d:b7: c1:bf:4d:2c:30:0c:86:68:f5:b7:1b:7d:f5:8a:dd: 8b:63:dd:1c:cb:f1:67:d9:83:f2:c6:e9:6a:bd:ef: 25:e5:12:8a:83:28:85:b7:5e:37:ad:eb:af:6c:9e: d7:5c:06:21:bb:aa:6f:f4:5c:22:ce:59:97:35:ec: cb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9D:12:A0:F2:8A:49:2D:76:4B:1E:8E:9F:22:6C:FD:98:70:C0:4E X509v3 Authority Key Identifier: keyid:F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:16:7e:19:f0:cc:fa:91:a4:c2:16:18:64:e6:7b:ea:1c:b8: 67:fa:fe:ab:4b:fd:48:07:47:0b:5d:10:75:7b:56:d9:bf:02: bc:62:bf:ab:b8:89:2d:45:b1:cb:f0:d9:a8:14:08:74:71:45: cb:5b:ab:d5:52:a9:63:dd:c1:c1:5f:9a:38:65:f1:d5:14:2f: eb:72:cb:e8:6a:38:f4:01:9d:b1:55:34:a6:61:86:9a:7a:05: bd:e5:a5:a7:0b:36:7a:e1:4b:3f:f9:7c:f9:c5:f4:81:ed:58: 86:92:01:a9:5d:18:83:3b:5e:92:c2:c9:d7:c8:49:52:5e:9a: 95:e3:6e:6e:4d:6c:01:a2:5d:ba:d4:1a:88:e7:4c:ea:8d:50: 4c:71:f0:02:63:b1:a8:55:79:0c:66:50:82:d6:48:86:77:b8: 50:82:75:c6:4f:d6:32:30:19:f8:32:51:c0:cc:bc:ab:34:ae: 3a:bb:78:3d:51:aa:e9:d0:ad:a7:66:a2:06:be:34:8a:8b:6b: 2e:41:f1:ca:33:87:77:cd:5f:f7:54:32:8e:94:e6:a6:bb:7e: 89:47:f8:61:72:63:f4:77:ae:77:03:4a:34:c5:b9:2f:62:35: dd:d3:4c:de:7c:f8:2c:69:5e:6b:40:e7:9f:76:0b:36:64:22: 05:21:e2:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+kjuVsfNNl8O7No2CaWEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1N2MxYWFhZGI4MzIwZGQ4NDMyMzU0NThjZjJjNWNiZjQ3 MDRhZDYwHhcNMjUxMjE4MTUwMDQ0WhcNMjUxMjE5MTUwMDQ0WjAzMTEwLwYDVQQD Eyg3MTlkMTJhMGYyOGE0OTJkNzY0YjFlOGU5ZjIyNmNmZDk4NzBjMDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXD/IwDXaxWAeM8AkUxWAnjeqIk2 fKwWcpim3zNchjpdEl+XVPeeLVl7vuC9N9G+07HkaY5zVKGCYnN63LUO0QZT1iIX o7efGIpyD1Z5qCI7uf9Kv+fP5l8CwB3Wz1hT++KLtQ4dA5vYZkRoPcfwtL/08+Fn w/WBPbPR5mlUpsK516aBR/8Lf/MYFJfbBzxfe0ieqA2gry34tXO+qCsqOYuCWhjp mWhr4hbzUm1+4aByg8PV8821ZhM/BqNYILvlbbfBv00sMAyGaPW3G331it2LY90c y/Fn2YPyxulqve8l5RKKgyiFt143reuvbJ7XXAYhu6pv9FwizlmXNezLVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGdEqDyikktdksejp8ibP2YcMBOMB8GA1UdIwQY MBaAFPV8GqrbgyDdhDI1RYzyxcv0cErWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVh3YXF0dURJTjJFTWpWRmpQTEZ5X1J3U3RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jM2U4NzEtMjBjYy00NGY0LWJmYTAt YTE4NTZkZDdiNWQ4LzEvOVh3YXF0dURJTjJFTWpWRmpQTEZ5X1J3U3RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jM2U4NzEtMjBjYy00NGY0LWJmYTAtYTE4NTZkZDdiNWQ4 LzEvOVh3YXF0dURJTjJFTWpWRmpQTEZ5X1J3U3RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhZ+GfDM +pGkwhYYZOZ76hy4Z/r+q0v9SAdHC10QdXtW2b8CvGK/q7iJLUWxy/DZqBQIdHFF y1ur1VKpY93BwV+aOGXx1RQv63LL6Go49AGdsVU0pmGGmnoFveWlpws2euFLP/l8 +cX0ge1YhpIBqV0YgzteksLJ18hJUl6aleNubk1sAaJdutQaiOdM6o1QTHHwAmOx qFV5DGZQgtZIhne4UIJ1xk/WMjAZ+DJRwMy8qzSuOrt4PVGq6dCtp2aiBr40iotr LkHxyjOHd81f91QyjpTmprt+iUf4YXJj9HeudwNKNMW5L2I13dNM3nz4LGlea0Dn n3YLNmQiBSHijA== -----END CERTIFICATE-----Generated at Thu Dec 18 22:35:32 2025 by rpki-client