This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft File: 9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft (raw, json) Hash identifier: 1E8OgPOcc3yOhialPxorS8cr+khJ+Ljz4ElU+kHwetk= Subject key identifier: 9B:AA:AE:3E:C9:27:8B:1E:4D:93:EC:C8:6D:4F:7C:7A:FD:E1:2B:F4 Authority key identifier: F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47 Certificate issuer: /CN=f539a07ef47f805cca07c10ae187c93968808c47 Certificate serial: 019B74B5B80227F9873AE4025E34D9F87B70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft Manifest number: 057B Signing time: Wed 31 Dec 2025 14:00:24 +0000 Manifest this update: Wed 31 Dec 2025 14:00:24 +0000 Manifest next update: Thu 01 Jan 2026 14:00:24 +0000 Files and hashes: 1: 9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl (hash: I+vTPs+lQDDcRjE/eP15izidSlbndq5pmmNHdFjjpyU=) 2: hQ_4ttT47iSzyY-pXhE0Zk2VRI8.roa (hash: lla8JTSaGgyqrA7kZsNxFenXInFs3bsEJhodvXrTuiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 14:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:b5:b8:02:27:f9:87:3a:e4:02:5e:34:d9:f8:7b:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f539a07ef47f805cca07c10ae187c93968808c47 Validity Not Before: Dec 31 14:00:24 2025 GMT Not After : Jan 1 14:00:24 2026 GMT Subject: CN=9baaae3ec9278b1e4d93ecc86d4f7c7afde12bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bd:4a:02:b7:85:a2:62:bd:ed:96:a9:fd:0d: d6:6c:a8:54:34:c5:18:5e:e7:b8:7d:4b:d7:af:d5: d9:0e:cd:56:09:85:b7:e8:10:4e:53:bd:74:fd:f1: 28:ca:af:e9:ff:40:51:14:5e:d2:77:dd:e9:fa:99: 60:eb:39:8e:75:8f:f9:be:c3:e5:3f:ae:24:f3:ca: 46:19:aa:47:36:af:10:38:62:96:f2:f3:0c:f1:5c: 09:30:ef:61:6f:38:e9:28:f8:6c:dc:84:51:cc:cc: 06:97:7f:c5:6e:88:aa:eb:3f:68:f4:55:63:51:b5: d3:f1:59:1d:da:1e:bf:ca:6f:2e:ff:f3:58:5c:e7: a5:03:72:0b:10:9b:12:a9:64:73:50:54:0e:86:9c: 6b:de:d1:5c:8f:28:32:6c:fa:15:b9:b1:96:5a:25: 30:80:e9:a3:c1:43:5e:ed:c3:91:92:80:ee:90:87: 41:23:db:f3:04:a8:4b:ed:54:93:3e:5e:ed:9e:df: e0:8d:63:5a:d0:6a:01:f7:09:6f:e3:0a:f3:ab:3d: e2:60:33:73:f7:0d:70:29:18:22:a2:66:cb:2b:ea: 90:33:9f:06:4c:ab:a4:dc:d8:21:5d:6c:10:f2:17: 2e:c1:d9:96:00:dd:99:cc:f0:90:6e:6d:c1:8b:5d: c5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:AA:AE:3E:C9:27:8B:1E:4D:93:EC:C8:6D:4F:7C:7A:FD:E1:2B:F4 X509v3 Authority Key Identifier: keyid:F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:ac:4f:84:c8:9d:3a:f1:2d:3e:e2:0d:65:63:fd:80:cb:56: 86:68:7e:69:cf:8c:46:5b:89:ec:55:21:a8:a7:9e:e9:35:54: d6:e9:b3:98:ab:bb:c2:b1:d1:84:36:9b:2e:28:91:40:f7:a2: 55:ca:98:a3:b8:94:74:b4:5d:c2:ec:ce:9b:2c:43:ad:de:4f: da:25:51:73:e3:72:31:d2:29:bb:79:83:21:39:52:bb:1e:aa: d9:f2:3e:e7:af:3d:5a:7e:e0:f5:e1:4d:61:6e:bc:0d:5d:76: 4a:6a:28:db:b7:74:e1:d4:1c:f0:22:dd:64:96:8a:da:95:41: 4b:38:9b:1d:c9:01:8a:b9:10:95:10:57:4b:4c:64:f6:bd:70: e7:7d:d4:5b:e0:55:a8:e5:6a:cc:e9:e6:29:e6:fa:85:6e:86: 78:3b:87:c1:c1:9a:bb:10:24:be:aa:1f:b6:6b:52:48:88:20: a7:aa:19:8e:52:fb:9c:79:13:cb:af:99:ca:6d:77:63:aa:31: b7:1e:82:b9:fd:df:33:fa:cf:bc:70:30:c7:2f:20:a8:c9:40: b5:aa:96:bd:00:14:80:a3:7f:1f:3f:01:d2:83:08:42:5d:1f: ae:b0:61:d8:86:2a:f5:df:60:b0:60:5d:98:98:3b:cd:ab:b6: bc:5f:85:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt0tbgCJ/mHOuQCXjTZ+HtwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MzlhMDdlZjQ3ZjgwNWNjYTA3YzEwYWUxODdjOTM5Njg4 MDhjNDcwHhcNMjUxMjMxMTQwMDI0WhcNMjYwMTAxMTQwMDI0WjAzMTEwLwYDVQQD Eyg5YmFhYWUzZWM5Mjc4YjFlNGQ5M2VjYzg2ZDRmN2M3YWZkZTEyYmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu71KAreFomK97Zap/Q3WbKhUNMUY Xue4fUvXr9XZDs1WCYW36BBOU710/fEoyq/p/0BRFF7Sd93p+plg6zmOdY/5vsPl P64k88pGGapHNq8QOGKW8vMM8VwJMO9hbzjpKPhs3IRRzMwGl3/Fboiq6z9o9FVj UbXT8Vkd2h6/ym8u//NYXOelA3ILEJsSqWRzUFQOhpxr3tFcjygybPoVubGWWiUw gOmjwUNe7cORkoDukIdBI9vzBKhL7VSTPl7tnt/gjWNa0GoB9wlv4wrzqz3iYDNz 9w1wKRgiombLK+qQM58GTKuk3NghXWwQ8hcuwdmWAN2ZzPCQbm3Bi13FhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuqrj7JJ4seTZPsyG1PfHr94Sv0MB8GA1UdIwQY MBaAFPU5oH70f4BcygfBCuGHyTlogIxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVRtZ2Z2Ul9nRnpLQjhFSzRZZkpPV2lBakVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS81ZjBhYzEtMjA1ZC00OTc1LWFhZGUt NTAzYTlmYzU5YTIwLzEvOVRtZ2Z2Ul9nRnpLQjhFSzRZZkpPV2lBakVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS81ZjBhYzEtMjA1ZC00OTc1LWFhZGUtNTAzYTlmYzU5YTIw LzEvOVRtZ2Z2Ul9nRnpLQjhFSzRZZkpPV2lBakVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxqxPhMid OvEtPuINZWP9gMtWhmh+ac+MRluJ7FUhqKee6TVU1umzmKu7wrHRhDabLiiRQPei VcqYo7iUdLRdwuzOmyxDrd5P2iVRc+NyMdIpu3mDITlSux6q2fI+5689Wn7g9eFN YW68DV12Smoo27d04dQc8CLdZJaK2pVBSzibHckBirkQlRBXS0xk9r1w533UW+BV qOVqzOnmKeb6hW6GeDuHwcGauxAkvqoftmtSSIggp6oZjlL7nHkTy6+Zym13Y6ox tx6Cuf3fM/rPvHAwxy8gqMlAtaqWvQAUgKN/Hz8B0oMIQl0frrBh2IYq9d9gsGBd mJg7zau2vF+FhA== -----END CERTIFICATE-----Generated at Wed Dec 31 21:46:26 2025 by rpki-client