This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft File: 9qD_yrRKardihf2LFfuprgRywAo.mft (raw, json) Hash identifier: 4yXv7ZeHSliku1zZNCPLvJRwvPwGvYx/4jpxwiBJGr4= Subject key identifier: CE:D4:F9:6E:43:28:EA:86:A8:F6:44:E8:8D:03:43:D4:7B:DC:99:E6 Authority key identifier: F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A Certificate issuer: /CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a Certificate serial: 019B5E9C741A108858EC9DEDDFA079F81298 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft Manifest number: 179B Signing time: Sat 27 Dec 2025 07:01:10 +0000 Manifest this update: Sat 27 Dec 2025 07:01:10 +0000 Manifest next update: Sun 28 Dec 2025 07:01:10 +0000 Files and hashes: 1: 9qD_yrRKardihf2LFfuprgRywAo.crl (hash: eHSMaIolvB2cgL5lCNECMKj92xAiOyjT+uRn0x61HHU=) 2: XPkwDLJHT478MATdbgeUa5gcEiA.roa (hash: DoMDYSGNMC9OU+9UBRPPXJnhTtSu9q09Id+HJ989GvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 07:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5e:9c:74:1a:10:88:58:ec:9d:ed:df:a0:79:f8:12:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6a0ffcab44a6ab76285fd8b15fba9ae0472c00a Validity Not Before: Dec 27 07:01:10 2025 GMT Not After : Dec 28 07:01:10 2025 GMT Subject: CN=ced4f96e4328ea86a8f644e88d0343d47bdc99e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:57:54:b0:5e:73:6e:6c:1d:bc:d0:3d:95:aa: 1f:23:4b:89:70:04:7b:7f:65:53:4b:be:3a:f3:e4: ff:26:8d:e9:ec:35:9c:8d:82:2b:6a:f4:31:79:a8: e8:b5:b1:e5:1e:89:22:96:25:d2:eb:a2:ae:2c:6f: e6:13:dd:ac:f5:5a:5f:94:18:76:0d:b6:ab:0b:71: 94:e3:d7:51:5c:a8:de:13:53:52:0e:5b:16:1b:98: 53:a1:12:2e:23:2d:3c:68:32:ae:e8:f3:5d:ad:73: 70:25:71:17:e8:52:df:e6:5f:15:9c:53:97:ca:21: 96:c4:da:18:47:ee:9d:43:20:bb:e5:d7:f1:ff:28: 0e:65:c9:f7:53:b8:40:5b:15:f0:c9:dc:7a:95:d0: f4:83:9c:37:96:fd:a2:8c:2b:ce:83:92:24:fd:d0: 92:2e:5d:cb:bd:45:31:70:e7:82:98:45:2e:ee:7d: a4:70:04:3f:d4:3d:dc:07:55:f0:ba:3d:06:25:5c: 47:a1:0e:6a:18:b2:fc:9c:55:d1:e1:91:e7:e0:4b: c4:52:d5:54:da:66:3f:f7:1a:c8:17:2e:28:a0:51: 5f:c6:31:ac:b2:d2:30:15:89:a0:6b:51:3b:9d:a5: 16:b3:8e:4e:7c:18:6d:98:d9:c4:b0:0d:82:ff:a2: d0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D4:F9:6E:43:28:EA:86:A8:F6:44:E8:8D:03:43:D4:7B:DC:99:E6 X509v3 Authority Key Identifier: keyid:F6:A0:FF:CA:B4:4A:6A:B7:62:85:FD:8B:15:FB:A9:AE:04:72:C0:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qD_yrRKardihf2LFfuprgRywAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a5e058-f475-47cc-b9ec-ae46094389ba/1/9qD_yrRKardihf2LFfuprgRywAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:03:30:1b:87:52:be:3f:db:c9:f2:65:9d:ff:da:a4:b1:15: 5b:f7:1a:88:7e:aa:91:ab:24:71:03:21:87:f2:1c:50:b8:0a: f8:20:d2:85:79:db:08:7e:7c:62:b7:f3:a1:16:f6:3d:14:26: cd:c0:32:f4:b0:ca:50:3a:b2:06:85:c7:88:a8:9b:11:50:45: 07:bd:20:07:9a:0a:48:ba:3b:ec:d1:42:7b:57:8f:ba:2c:f2: 78:4b:58:1c:dc:05:b8:29:3c:78:e2:2f:58:3d:6b:38:76:7e: dd:f4:75:01:89:74:8d:5b:4b:26:65:7a:22:a7:fb:67:82:2f: bc:57:fc:e0:ca:8d:57:a5:89:93:cf:c7:90:80:20:96:cb:1e: ea:1c:b3:78:5f:f2:bf:02:6e:8f:a8:a1:e0:9b:bb:12:ed:93: a4:22:53:fa:f6:87:2d:01:86:e2:9f:44:21:7e:f5:6e:8f:48: 72:7d:88:e4:09:60:88:68:9d:ea:80:ff:8b:18:6c:f5:81:27: 30:9b:af:1e:a0:75:51:9c:cc:eb:25:d0:ca:41:e9:8d:ee:12: 3c:79:77:6c:6c:f0:75:82:9c:c3:70:23:c1:02:d5:b3:7d:11: f0:44:fb:b1:b3:96:14:46:76:f3:46:85:25:ab:ef:4c:35:e7: 89:f1:48:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtenHQaEIhY7J3t36B5+BKYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YTBmZmNhYjQ0YTZhYjc2Mjg1ZmQ4YjE1ZmJhOWFlMDQ3 MmMwMGEwHhcNMjUxMjI3MDcwMTEwWhcNMjUxMjI4MDcwMTEwWjAzMTEwLwYDVQQD EyhjZWQ0Zjk2ZTQzMjhlYTg2YThmNjQ0ZTg4ZDAzNDNkNDdiZGM5OWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVdUsF5zbmwdvNA9laofI0uJcAR7 f2VTS7468+T/Jo3p7DWcjYIravQxeajotbHlHokiliXS66KuLG/mE92s9VpflBh2 DbarC3GU49dRXKjeE1NSDlsWG5hToRIuIy08aDKu6PNdrXNwJXEX6FLf5l8VnFOX yiGWxNoYR+6dQyC75dfx/ygOZcn3U7hAWxXwydx6ldD0g5w3lv2ijCvOg5Ik/dCS Ll3LvUUxcOeCmEUu7n2kcAQ/1D3cB1Xwuj0GJVxHoQ5qGLL8nFXR4ZHn4EvEUtVU 2mY/9xrIFy4ooFFfxjGsstIwFYmga1E7naUWs45OfBhtmNnEsA2C/6LQtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7U+W5DKOqGqPZE6I0DQ9R73JnmMB8GA1UdIwQY MBaAFPag/8q0Smq3YoX9ixX7qa4EcsAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXFEX3lyUkthcmRpaGYyTEZmdXByZ1J5d0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9hNWUwNTgtZjQ3NS00N2NjLWI5ZWMt YWU0NjA5NDM4OWJhLzEvOXFEX3lyUkthcmRpaGYyTEZmdXByZ1J5d0FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9hNWUwNTgtZjQ3NS00N2NjLWI5ZWMtYWU0NjA5NDM4OWJh LzEvOXFEX3lyUkthcmRpaGYyTEZmdXByZ1J5d0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArgMwG4dS vj/byfJlnf/apLEVW/caiH6qkaskcQMhh/IcULgK+CDShXnbCH58YrfzoRb2PRQm zcAy9LDKUDqyBoXHiKibEVBFB70gB5oKSLo77NFCe1ePuizyeEtYHNwFuCk8eOIv WD1rOHZ+3fR1AYl0jVtLJmV6Iqf7Z4IvvFf84MqNV6WJk8/HkIAglsse6hyzeF/y vwJuj6ih4Ju7Eu2TpCJT+vaHLQGG4p9EIX71bo9Icn2I5AlgiGid6oD/ixhs9YEn MJuvHqB1UZzM6yXQykHpje4SPHl3bGzwdYKcw3AjwQLVs30R8ET7sbOWFEZ280aF JavvTDXnifFIuw== -----END CERTIFICATE-----Generated at Sat Dec 27 10:50:01 2025 by rpki-client