This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft File: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft (raw, json) Hash identifier: srADrfeyyaHkf006z8fgb/aoJ2jDTFFHRBneK8AGxAw= Subject key identifier: EE:0B:07:0E:17:77:42:89:CE:CA:EB:71:42:77:DB:33:DD:2D:E7:DD Authority key identifier: 73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9 Certificate issuer: /CN=73d85f8438d73b5668e89cc692646f9487965fa9 Certificate serial: 019B650D60B90B96FAE9366DA4FE77717E0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft Manifest number: 0360 Signing time: Sun 28 Dec 2025 13:02:13 +0000 Manifest this update: Sun 28 Dec 2025 13:02:13 +0000 Manifest next update: Mon 29 Dec 2025 13:02:13 +0000 Files and hashes: 1: c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl (hash: ylLJaTEWO5nEiXx6TaVIaTozJ4DBYgyKtWNRSZKYvrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 13:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:0d:60:b9:0b:96:fa:e9:36:6d:a4:fe:77:71:7e:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73d85f8438d73b5668e89cc692646f9487965fa9 Validity Not Before: Dec 28 13:02:13 2025 GMT Not After : Dec 29 13:02:13 2025 GMT Subject: CN=ee0b070e17774289cecaeb714277db33dd2de7dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:49:1b:be:02:ed:4d:13:65:6e:54:7b:a1:b7: 0c:24:dc:84:d7:e4:ab:27:32:73:34:a1:a7:57:bd: 36:ac:53:70:88:12:70:05:2e:54:01:3c:f4:fd:2a: 1d:6d:38:c8:5c:a0:45:55:00:2b:54:5a:c4:ed:1b: c7:f6:b6:7c:b1:13:62:62:24:9e:01:a1:75:92:1b: a3:39:5e:d4:db:8c:06:ef:fd:b9:07:1a:4e:8b:94: 81:bc:85:49:ee:d4:a4:2a:91:d6:17:2e:64:6d:d1: 2f:80:10:3e:e9:0a:4f:ba:81:e9:be:3c:7d:60:38: 0d:0b:f4:e3:f7:ab:fe:a0:02:aa:90:a4:65:b1:c9: 53:2f:0a:e9:de:f7:ca:2e:b8:09:55:b5:87:18:46: 87:86:d2:be:d3:ba:82:ac:20:6c:61:ef:c6:d1:b8: b8:2d:1e:b4:3d:20:0b:7b:60:9c:ca:bd:d0:57:dd: 87:b8:3a:4c:16:9c:d2:df:c9:7a:bc:2b:7b:78:12: 3a:b2:7d:65:7e:a1:14:00:f4:45:be:07:73:7b:2c: 8f:c8:19:09:9e:e3:0c:08:79:20:71:bd:84:66:f1: 85:16:c6:d6:94:4e:f3:6c:49:be:4a:01:e7:42:c6: 91:63:6e:61:45:5d:b6:f3:d7:ae:81:b9:d4:36:17: 1a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:0B:07:0E:17:77:42:89:CE:CA:EB:71:42:77:DB:33:DD:2D:E7:DD X509v3 Authority Key Identifier: keyid:73:D8:5F:84:38:D7:3B:56:68:E8:9C:C6:92:64:6F:94:87:96:5F:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f6d476-5ec1-427a-82e0-aee0c824099e/1/c9hfhDjXO1Zo6JzGkmRvlIeWX6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:56:ea:25:31:f0:86:f5:c6:b6:67:ac:fb:d5:d2:0e:4c:61: 2d:1a:91:85:8c:3d:66:0e:1e:50:c4:f5:ac:c5:c6:65:db:19: 00:3e:14:54:94:81:22:66:61:52:a4:78:65:ca:09:97:0b:ea: 29:6a:10:87:62:0d:53:77:a0:fe:0a:63:7d:0d:81:ef:83:fd: 91:26:0f:c2:20:86:d0:d4:94:3a:60:08:eb:24:6e:b3:e2:e9: e4:42:f1:6c:fa:4c:79:f7:55:9a:c4:fc:e9:33:f5:a5:d6:18: 1f:ac:e8:6e:ce:e0:30:cd:17:1e:d2:e7:80:ce:fb:99:c7:83: e1:a1:aa:44:bc:a1:6d:4a:fc:cc:89:f4:fa:19:14:f4:1b:dc: 75:c9:15:da:ca:dd:22:42:23:1e:70:25:92:42:6e:ce:6e:4d: 4a:91:ce:04:87:9f:58:43:d7:c7:f1:29:f4:ea:a1:36:79:98: 69:c7:83:de:70:51:77:a1:82:4e:04:0f:66:6f:80:9d:c0:a0: 91:d5:1e:0f:4f:42:55:56:52:b0:6b:c9:13:fc:d1:ff:50:48: ff:bb:b0:36:5b:6a:94:67:a5:a4:cf:60:60:28:58:02:53:7e: e5:12:15:4e:fc:86:37:cb:95:a0:52:51:c2:f7:a4:cd:cb:a2: 21:a6:b8:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlDWC5C5b66TZtpP53cX4KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZDg1Zjg0MzhkNzNiNTY2OGU4OWNjNjkyNjQ2Zjk0ODc5 NjVmYTkwHhcNMjUxMjI4MTMwMjEzWhcNMjUxMjI5MTMwMjEzWjAzMTEwLwYDVQQD EyhlZTBiMDcwZTE3Nzc0Mjg5Y2VjYWViNzE0Mjc3ZGIzM2RkMmRlN2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10kbvgLtTRNlblR7obcMJNyE1+Sr JzJzNKGnV702rFNwiBJwBS5UATz0/SodbTjIXKBFVQArVFrE7RvH9rZ8sRNiYiSe AaF1khujOV7U24wG7/25BxpOi5SBvIVJ7tSkKpHWFy5kbdEvgBA+6QpPuoHpvjx9 YDgNC/Tj96v+oAKqkKRlsclTLwrp3vfKLrgJVbWHGEaHhtK+07qCrCBsYe/G0bi4 LR60PSALe2Ccyr3QV92HuDpMFpzS38l6vCt7eBI6sn1lfqEUAPRFvgdzeyyPyBkJ nuMMCHkgcb2EZvGFFsbWlE7zbEm+SgHnQsaRY25hRV2289eugbnUNhcaqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4LBw4Xd0KJzsrrcUJ32zPdLefdMB8GA1UdIwQY MBaAFHPYX4Q41ztWaOicxpJkb5SHll+pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzloZmhEalhPMVpvNkp6R2ttUnZsSWVXWDZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9mNmQ0NzYtNWVjMS00MjdhLTgyZTAt YWVlMGM4MjQwOTllLzEvYzloZmhEalhPMVpvNkp6R2ttUnZsSWVXWDZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9mNmQ0NzYtNWVjMS00MjdhLTgyZTAtYWVlMGM4MjQwOTll LzEvYzloZmhEalhPMVpvNkp6R2ttUnZsSWVXWDZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2lbqJTHw hvXGtmes+9XSDkxhLRqRhYw9Zg4eUMT1rMXGZdsZAD4UVJSBImZhUqR4ZcoJlwvq KWoQh2INU3eg/gpjfQ2B74P9kSYPwiCG0NSUOmAI6yRus+Lp5ELxbPpMefdVmsT8 6TP1pdYYH6zobs7gMM0XHtLngM77mceD4aGqRLyhbUr8zIn0+hkU9BvcdckV2srd IkIjHnAlkkJuzm5NSpHOBIefWEPXx/Ep9OqhNnmYaceD3nBRd6GCTgQPZm+AncCg kdUeD09CVVZSsGvJE/zR/1BI/7uwNltqlGelpM9gYChYAlN+5RIVTvyGN8uVoFJR wvekzcuiIaa4BQ== -----END CERTIFICATE-----Generated at Sun Dec 28 23:25:26 2025 by rpki-client