This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft File: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft (raw, json) Hash identifier: /k984zJfUhS0i/X7LL2On4aZC5RP7Rip9010Gzi6J10= Subject key identifier: 5E:AD:CD:B2:40:EC:A5:F8:EE:E7:85:F7:5A:7D:1E:DD:FA:5B:8F:47 Authority key identifier: F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3 Certificate issuer: /CN=f43bf90808ae7eca063f746a8f1d88865734c8a3 Certificate serial: 019B41A43138F7ACA8D9B4578CF229CEF118 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft Manifest number: 17A4 Signing time: Sun 21 Dec 2025 16:00:38 +0000 Manifest this update: Sun 21 Dec 2025 16:00:38 +0000 Manifest next update: Mon 22 Dec 2025 16:00:38 +0000 Files and hashes: 1: 9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl (hash: jeU6+nn36ggr829S3SnirA/e2sizQhO3K2fP0juo29w=) 2: ROD80653_T-MkjTmqYTdP5M1LUg.roa (hash: lOnwVxDIfeJwEQvoT4QPCm3NmWmOEk6KMpexVgqv54Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 16:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:31:38:f7:ac:a8:d9:b4:57:8c:f2:29:ce:f1:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f43bf90808ae7eca063f746a8f1d88865734c8a3 Validity Not Before: Dec 21 16:00:38 2025 GMT Not After : Dec 22 16:00:38 2025 GMT Subject: CN=5eadcdb240eca5f8eee785f75a7d1eddfa5b8f47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5b:98:d1:52:2d:00:d6:69:c8:d3:c1:35:a7: bd:2b:0d:ec:fd:4e:c6:4e:2a:1a:cb:3f:68:c9:09: c2:af:49:ac:d8:69:a3:c3:89:f2:53:cd:a5:8a:d9: 87:64:9d:d4:f5:34:9f:a2:67:bb:24:b6:47:fd:c1: d6:ca:7d:3a:99:7c:4a:24:c4:45:7f:9d:3f:f0:91: 8e:76:2a:06:0c:80:1e:41:15:91:7a:b1:67:9d:cb: 27:cc:88:57:78:a0:3f:4b:c1:1e:9f:69:4c:b1:64: d8:28:83:a0:6b:aa:a9:ef:4a:6a:20:d1:6e:dc:6f: 21:db:4f:9f:8b:ca:d4:8f:30:6f:b8:86:fb:01:f8: 2e:19:9c:32:65:e8:a8:2b:76:8d:7e:14:58:a2:d6: 47:c6:3e:a3:42:29:0b:17:ef:20:4b:20:25:79:92: c7:ab:51:bf:83:b5:8c:8d:04:23:53:d9:bc:9a:80: cb:d8:9b:7a:ff:67:e0:08:d4:b9:98:b0:3f:8e:57: bf:7d:2e:77:4a:67:2a:51:a4:54:84:e4:e7:29:9c: f0:84:f6:14:d7:ec:0a:67:eb:da:0a:9b:78:d1:7a: 55:50:a1:40:98:76:0e:21:b5:e0:8b:d9:23:be:c2: 92:39:2f:a6:ec:4c:5e:2f:a0:60:04:6d:7a:29:ba: 83:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:AD:CD:B2:40:EC:A5:F8:EE:E7:85:F7:5A:7D:1E:DD:FA:5B:8F:47 X509v3 Authority Key Identifier: keyid:F4:3B:F9:08:08:AE:7E:CA:06:3F:74:6A:8F:1D:88:86:57:34:C8:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a8d943-f082-4b18-b840-389195c4f07b/1/9Dv5CAiufsoGP3Rqjx2Ihlc0yKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:3a:e7:aa:cf:a8:24:7a:47:8c:c4:08:4a:d9:2f:11:fa:a0: b3:09:43:a6:42:48:d3:53:06:2c:15:ad:78:f8:79:ce:3a:2c: 09:9d:e7:71:68:4f:11:52:a2:2e:22:a4:46:b4:85:2f:74:0c: fe:72:3b:c0:c5:f6:a5:89:e9:28:37:28:c3:d8:2d:fc:a7:a4: bd:7b:69:4b:ee:2f:33:c4:29:80:4c:78:93:1e:93:91:a2:a5: 92:ef:f0:80:b7:3a:17:c4:18:4a:ee:2e:7e:c4:0e:d7:8b:6e: f0:2b:8e:34:4b:88:19:36:cf:68:8a:98:96:b5:e8:81:de:2e: 29:ec:07:06:f3:70:cc:10:dd:65:42:a1:d2:87:69:ce:6e:23: 90:0b:50:5e:5c:5a:76:68:92:ad:0a:f3:b0:7e:a2:92:a5:20: 09:b9:cf:e2:45:ae:aa:b9:e6:82:5b:ce:5b:5a:3e:ab:52:70: 37:2e:9e:8f:38:a7:86:ef:a9:9a:c8:85:b7:64:7f:31:0c:1b: 5b:32:b9:eb:e5:3e:c0:66:0b:60:ac:30:df:60:d3:c0:ad:01: 29:df:bb:7a:e2:b7:58:13:14:05:d6:79:8e:29:cb:11:43:8c: 0f:28:c1:16:58:15:32:97:f2:23:d0:65:fa:e2:60:9e:8f:71: de:11:e1:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpDE496yo2bRXjPIpzvEYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0M2JmOTA4MDhhZTdlY2EwNjNmNzQ2YThmMWQ4ODg2NTcz NGM4YTMwHhcNMjUxMjIxMTYwMDM4WhcNMjUxMjIyMTYwMDM4WjAzMTEwLwYDVQQD Eyg1ZWFkY2RiMjQwZWNhNWY4ZWVlNzg1Zjc1YTdkMWVkZGZhNWI4ZjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11uY0VItANZpyNPBNae9Kw3s/U7G Tioayz9oyQnCr0ms2Gmjw4nyU82litmHZJ3U9TSfome7JLZH/cHWyn06mXxKJMRF f50/8JGOdioGDIAeQRWRerFnncsnzIhXeKA/S8Een2lMsWTYKIOga6qp70pqINFu 3G8h20+fi8rUjzBvuIb7AfguGZwyZeioK3aNfhRYotZHxj6jQikLF+8gSyAleZLH q1G/g7WMjQQjU9m8moDL2Jt6/2fgCNS5mLA/jle/fS53SmcqUaRUhOTnKZzwhPYU 1+wKZ+vaCpt40XpVUKFAmHYOIbXgi9kjvsKSOS+m7ExeL6BgBG16KbqDSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6tzbJA7KX47ueF91p9Ht36W49HMB8GA1UdIwQY MBaAFPQ7+QgIrn7KBj90ao8diIZXNMijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUR2NUNBaXVmc29HUDNScWp4MklobGMweUtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hOGQ5NDMtZjA4Mi00YjE4LWI4NDAt Mzg5MTk1YzRmMDdiLzEvOUR2NUNBaXVmc29HUDNScWp4MklobGMweUtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9hOGQ5NDMtZjA4Mi00YjE4LWI4NDAtMzg5MTk1YzRmMDdi LzEvOUR2NUNBaXVmc29HUDNScWp4MklobGMweUtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTrnqs+o JHpHjMQIStkvEfqgswlDpkJI01MGLBWtePh5zjosCZ3ncWhPEVKiLiKkRrSFL3QM /nI7wMX2pYnpKDcow9gt/KekvXtpS+4vM8QpgEx4kx6TkaKlku/wgLc6F8QYSu4u fsQO14tu8CuONEuIGTbPaIqYlrXogd4uKewHBvNwzBDdZUKh0odpzm4jkAtQXlxa dmiSrQrzsH6ikqUgCbnP4kWuqrnmglvOW1o+q1JwNy6ejzinhu+pmsiFt2R/MQwb WzK56+U+wGYLYKww32DTwK0BKd+7euK3WBMUBdZ5jinLEUOMDyjBFlgVMpfyI9Bl +uJgno9x3hHhzA== -----END CERTIFICATE-----Generated at Mon Dec 22 01:03:02 2025 by rpki-client