This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft File: 9QVXghWs7nPBf6MNApXg2N176J0.mft (raw, json) Hash identifier: 2ujmQrfyALZZUFBIZ7F1k5EJf/3JHpPq7N1wtv9Awjk= Subject key identifier: 7E:62:DE:FA:0A:73:DB:28:B8:0F:E9:9C:2E:4B:56:EA:40:1D:7F:3E Authority key identifier: F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D Certificate issuer: /CN=f505578215acee73c17fa30d0295e0d8dd7be89d Certificate serial: 019B2C2F450EAECE1CABC051FBE9F3088E6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft Manifest number: 0708 Signing time: Wed 17 Dec 2025 12:00:53 +0000 Manifest this update: Wed 17 Dec 2025 12:00:53 +0000 Manifest next update: Thu 18 Dec 2025 12:00:53 +0000 Files and hashes: 1: 1-Lbg3ThJkSQ5UEB1CC2J6SJYq7I.roa (hash: MQY60dXinW2RjKa/YH49asbDcYbOnLmhhQbRiFehf0Q=) 2: 9EsFTJPfhrHzuggwv3Tacy86NPc.roa (hash: g+7gpPPFmcqEG/1q7hm3OgzhQxlfCVb68SP9jb1P1Q4=) 3: 9QVXghWs7nPBf6MNApXg2N176J0.crl (hash: Vljbg7cLVHpnNLfk6FrLwQa/k4kazp2y3l7mFs7VYrk=) 4: Pam-mYZhUPxumLyTa-d41AOp2eI.roa (hash: aCi8Qzgn/82AxyGXcRCZJe9cgue7YAZPk3yXhgftdGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:45:0e:ae:ce:1c:ab:c0:51:fb:e9:f3:08:8e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f505578215acee73c17fa30d0295e0d8dd7be89d Validity Not Before: Dec 17 12:00:53 2025 GMT Not After : Dec 18 12:00:53 2025 GMT Subject: CN=7e62defa0a73db28b80fe99c2e4b56ea401d7f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:4f:1d:32:2a:ce:25:ab:57:48:61:65:b4:96: f8:b0:b2:d2:c2:a1:22:f8:b2:d6:26:53:2b:ef:36: 3f:96:97:4a:c9:60:4f:b4:69:67:79:82:87:41:13: d5:bc:42:eb:78:3e:4c:f1:f2:aa:4e:1d:3a:8a:f8: a6:87:97:58:ee:6a:86:9d:05:5f:bd:98:96:5a:f1: 17:84:a5:af:b7:23:2d:cb:37:85:51:db:7d:e5:af: 62:50:f0:3e:b9:0f:35:be:6c:89:31:10:cf:cf:8f: be:a5:b6:2e:ba:88:c0:6c:0d:da:f9:52:45:fb:8e: 79:13:01:a6:af:82:fe:4a:6f:6b:b3:45:a0:b1:69: 8c:70:2e:e1:00:aa:c2:2c:8d:3c:ef:93:c2:a6:72: 63:67:71:0e:62:5b:78:80:2f:41:7e:26:72:4d:1e: 7b:1c:92:2f:10:ab:7b:70:00:72:b0:b9:32:b1:bb: 98:82:0d:57:77:e1:e1:22:e0:f3:a3:0a:98:53:4a: 81:16:5c:2d:f0:05:6e:7a:b6:cd:e3:41:58:66:4a: 82:0e:8c:74:12:d9:c5:8d:0d:bb:ec:10:03:12:3d: 9f:c6:d1:96:f5:d9:37:98:74:84:57:e6:c5:25:d5: 4b:23:cf:85:fa:98:e4:ba:d2:30:79:e1:4e:b3:e9: cd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:62:DE:FA:0A:73:DB:28:B8:0F:E9:9C:2E:4B:56:EA:40:1D:7F:3E X509v3 Authority Key Identifier: keyid:F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:2d:79:20:d7:b3:da:38:a2:95:5c:c4:3c:7e:0d:a8:29:33: 2a:e0:d7:98:68:2a:37:14:c1:35:13:60:01:32:6e:44:2e:be: 11:5a:d9:24:58:07:bc:b2:9e:a6:18:ff:3b:b7:88:00:f6:f7: de:a2:b7:87:4c:e6:50:cc:dd:ae:3e:b7:94:d9:a4:8b:a2:67: fc:8b:6b:f2:b7:30:7d:be:5a:d1:c1:65:a9:2d:61:c8:eb:3e: 4f:27:71:d6:ee:2d:33:32:e8:4d:e2:a5:ef:39:de:8b:c9:a7: da:c7:1f:b1:5a:37:6d:0c:fb:d3:67:ff:bd:10:90:69:a0:0c: 3d:c8:f8:8f:16:97:e0:08:2f:92:e0:05:c7:c3:2c:43:c7:54: ae:38:7e:c2:db:b8:3e:d4:6a:ec:b2:d8:1b:87:29:4a:51:9b: 4e:30:6b:aa:e8:40:5c:fd:6b:94:4e:1d:5e:70:f2:1b:a9:5f: bf:69:62:58:da:d0:14:f0:8e:a3:c9:98:9a:05:2e:9f:2e:18: d3:e5:7c:f5:69:3a:88:e1:f4:85:c1:d1:bb:14:41:49:87:76: d1:26:19:f9:c6:01:26:10:e7:09:45:7a:08:1d:42:e3:58:a9: 0b:01:18:36:ca:65:3e:b9:4b:63:8f:f4:1e:aa:5a:45:9b:fe: 9b:0f:16:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL0UOrs4cq8BR++nzCI5sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MDU1NzgyMTVhY2VlNzNjMTdmYTMwZDAyOTVlMGQ4ZGQ3 YmU4OWQwHhcNMjUxMjE3MTIwMDUzWhcNMjUxMjE4MTIwMDUzWjAzMTEwLwYDVQQD Eyg3ZTYyZGVmYTBhNzNkYjI4YjgwZmU5OWMyZTRiNTZlYTQwMWQ3ZjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9E8dMirOJatXSGFltJb4sLLSwqEi +LLWJlMr7zY/lpdKyWBPtGlneYKHQRPVvELreD5M8fKqTh06ivimh5dY7mqGnQVf vZiWWvEXhKWvtyMtyzeFUdt95a9iUPA+uQ81vmyJMRDPz4++pbYuuojAbA3a+VJF +455EwGmr4L+Sm9rs0WgsWmMcC7hAKrCLI0875PCpnJjZ3EOYlt4gC9BfiZyTR57 HJIvEKt7cABysLkysbuYgg1Xd+HhIuDzowqYU0qBFlwt8AVuerbN40FYZkqCDox0 EtnFjQ277BADEj2fxtGW9dk3mHSEV+bFJdVLI8+F+pjkutIweeFOs+nN7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5i3voKc9souA/pnC5LVupAHX8+MB8GA1UdIwQY MBaAFPUFV4IVrO5zwX+jDQKV4Njde+idMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVFWWGdoV3M3blBCZjZNTkFwWGcyTjE3NkowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy80OWU5NzQtZDcyNC00Y2FmLTlhMDQt ZjBjOWQ2NDE3ZWU3LzEvOVFWWGdoV3M3blBCZjZNTkFwWGcyTjE3NkowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy80OWU5NzQtZDcyNC00Y2FmLTlhMDQtZjBjOWQ2NDE3ZWU3 LzEvOVFWWGdoV3M3blBCZjZNTkFwWGcyTjE3NkowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFi15INez 2jiilVzEPH4NqCkzKuDXmGgqNxTBNRNgATJuRC6+EVrZJFgHvLKephj/O7eIAPb3 3qK3h0zmUMzdrj63lNmki6Jn/Itr8rcwfb5a0cFlqS1hyOs+Tydx1u4tMzLoTeKl 7znei8mn2scfsVo3bQz702f/vRCQaaAMPcj4jxaX4AgvkuAFx8MsQ8dUrjh+wtu4 PtRq7LLYG4cpSlGbTjBrquhAXP1rlE4dXnDyG6lfv2liWNrQFPCOo8mYmgUuny4Y 0+V89Wk6iOH0hcHRuxRBSYd20SYZ+cYBJhDnCUV6CB1C41ipCwEYNsplPrlLY4/0 HqpaRZv+mw8Wfw== -----END CERTIFICATE-----Generated at Wed Dec 17 22:10:12 2025 by rpki-client