This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft File: D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft (raw, json) Hash identifier: heCddqdi5xos1PmZ/9Yohd5bLA2x367AeDYexRop3AU= Subject key identifier: 79:37:BF:5B:D7:95:F9:4C:08:67:DA:2D:2A:12:9E:01:C3:6D:1D:D6 Authority key identifier: 0F:D1:D0:CC:53:21:9B:6F:E6:81:E1:89:E5:E9:3D:63:57:73:6C:CF Certificate issuer: /CN=0fd1d0cc53219b6fe681e189e5e93d6357736ccf Certificate serial: 019B3F7F3392D9B717795D3D4554C4D1E659 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft Manifest number: 0199 Signing time: Sun 21 Dec 2025 06:00:59 +0000 Manifest this update: Sun 21 Dec 2025 06:00:59 +0000 Manifest next update: Mon 22 Dec 2025 06:00:59 +0000 Files and hashes: 1: 249HxpirTi_osbw5WvlBrcgIzks.roa (hash: yk0Ki2ByYsC3iFN0F5s91hPx79cwtd3H/FikkHXhlh8=) 2: D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl (hash: oIPFWUf6oJnSXtGQc9xOoCk7CCTZpKEOnJjFbNMh3ho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:33:92:d9:b7:17:79:5d:3d:45:54:c4:d1:e6:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fd1d0cc53219b6fe681e189e5e93d6357736ccf Validity Not Before: Dec 21 06:00:59 2025 GMT Not After : Dec 22 06:00:59 2025 GMT Subject: CN=7937bf5bd795f94c0867da2d2a129e01c36d1dd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8b:31:7b:05:0b:a7:e3:69:75:4e:ff:82:72: 0f:44:35:2c:45:99:e9:e9:1e:60:0a:62:99:20:f9: b7:48:e7:e9:f5:9b:d3:e4:ef:f7:5e:3e:87:e6:4b: a7:10:45:70:6a:1f:0b:06:b5:d9:a2:7d:97:82:af: 53:2d:ff:75:3e:ab:59:f5:a9:86:c9:e8:25:1a:16: ce:89:73:4b:68:b0:eb:31:85:b6:b4:da:14:a6:c2: 39:b6:b7:91:a7:47:ff:a0:10:68:3f:8c:ed:c4:8a: a8:f1:15:79:6b:f2:c8:74:b0:4e:81:d7:5e:88:52: 76:aa:46:66:ed:7b:36:16:17:80:27:d5:48:a7:60: 42:1a:93:27:9b:e4:42:1f:ed:fd:84:00:f4:a1:6f: 3a:fd:96:92:47:65:22:76:e8:fc:80:ab:44:1a:ba: fe:e8:83:36:0c:5b:f9:52:f4:22:cd:ba:d3:3f:e4: 82:f6:1e:89:ec:ba:c3:c5:92:6f:64:f0:b5:0a:3e: 59:ce:a8:99:9a:a7:fc:23:01:af:d5:6e:84:f1:08: bf:7a:aa:eb:76:25:73:55:61:14:f5:e7:c4:3c:a7: 29:5a:0d:0d:5a:09:bf:69:af:07:14:01:2b:18:bd: 1b:a0:d2:d3:fe:ad:60:13:5b:d9:93:4f:e5:98:3c: 81:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:37:BF:5B:D7:95:F9:4C:08:67:DA:2D:2A:12:9E:01:C3:6D:1D:D6 X509v3 Authority Key Identifier: keyid:0F:D1:D0:CC:53:21:9B:6F:E6:81:E1:89:E5:E9:3D:63:57:73:6C:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:ff:34:fb:1e:9c:b9:51:92:f5:18:41:68:8e:be:c8:9a:06: 2a:1a:74:49:c5:0e:6b:b8:56:b8:71:13:bc:ec:2d:f0:2b:46: 69:c2:c7:c2:c0:f5:0a:85:6e:31:b7:50:5f:76:57:f4:ac:c7: ba:64:30:7f:13:32:43:cc:3a:7b:e1:cd:16:f0:60:e8:c4:ac: eb:95:84:85:16:fb:10:83:37:18:b9:48:e0:52:5c:51:4f:bf: f1:42:c9:18:d4:67:3c:fa:50:d3:99:9b:dc:95:15:29:07:19: 52:f0:a7:fd:c6:8e:8c:05:68:f0:80:ef:c8:6e:c8:0f:60:ed: 14:12:bd:ac:d9:8c:c0:40:17:62:cc:56:fc:66:3e:3f:c3:5d: e2:b4:b8:a4:b8:0d:dc:d9:53:0a:eb:be:c4:55:33:20:c8:01: 8a:f7:ee:f0:d6:3f:e1:af:c0:aa:a2:17:a9:07:c2:d4:19:4e: c2:f7:a6:01:60:ec:19:97:02:3e:6b:23:64:83:23:e8:16:85: e9:40:c2:ae:0a:3e:28:db:55:64:8d:31:5b:47:ae:17:08:11: 8b:ea:12:e4:74:ab:a4:4e:8c:8a:de:37:e6:6e:9e:8f:16:83: 39:9f:46:17:17:8d:e2:0d:42:81:14:dc:5c:3f:ad:bc:94:fd: eb:bc:57:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fzOS2bcXeV09RVTE0eZZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZDFkMGNjNTMyMTliNmZlNjgxZTE4OWU1ZTkzZDYzNTc3 MzZjY2YwHhcNMjUxMjIxMDYwMDU5WhcNMjUxMjIyMDYwMDU5WjAzMTEwLwYDVQQD Eyg3OTM3YmY1YmQ3OTVmOTRjMDg2N2RhMmQyYTEyOWUwMWMzNmQxZGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04sxewULp+NpdU7/gnIPRDUsRZnp 6R5gCmKZIPm3SOfp9ZvT5O/3Xj6H5kunEEVwah8LBrXZon2Xgq9TLf91PqtZ9amG yeglGhbOiXNLaLDrMYW2tNoUpsI5treRp0f/oBBoP4ztxIqo8RV5a/LIdLBOgdde iFJ2qkZm7Xs2FheAJ9VIp2BCGpMnm+RCH+39hAD0oW86/ZaSR2Uiduj8gKtEGrr+ 6IM2DFv5UvQizbrTP+SC9h6J7LrDxZJvZPC1Cj5ZzqiZmqf8IwGv1W6E8Qi/eqrr diVzVWEU9efEPKcpWg0NWgm/aa8HFAErGL0boNLT/q1gE1vZk0/lmDyB6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHk3v1vXlflMCGfaLSoSngHDbR3WMB8GA1UdIwQY MBaAFA/R0MxTIZtv5oHhieXpPWNXc2zPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDlIUXpGTWhtMl9tZ2VHSjVlazlZMWR6Yk04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83ZWU0NDItMGVkNS00MzAzLTk2YmQt NDEwYjk5NjZlMjA1LzEvRDlIUXpGTWhtMl9tZ2VHSjVlazlZMWR6Yk04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi83ZWU0NDItMGVkNS00MzAzLTk2YmQtNDEwYjk5NjZlMjA1 LzEvRDlIUXpGTWhtMl9tZ2VHSjVlazlZMWR6Yk04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANf80+x6c uVGS9RhBaI6+yJoGKhp0ScUOa7hWuHETvOwt8CtGacLHwsD1CoVuMbdQX3ZX9KzH umQwfxMyQ8w6e+HNFvBg6MSs65WEhRb7EIM3GLlI4FJcUU+/8ULJGNRnPPpQ05mb 3JUVKQcZUvCn/caOjAVo8IDvyG7ID2DtFBK9rNmMwEAXYsxW/GY+P8Nd4rS4pLgN 3NlTCuu+xFUzIMgBivfu8NY/4a/AqqIXqQfC1BlOwvemAWDsGZcCPmsjZIMj6BaF 6UDCrgo+KNtVZI0xW0euFwgRi+oS5HSrpE6Mit435m6ejxaDOZ9GFxeN4g1CgRTc XD+tvJT967xXJQ== -----END CERTIFICATE-----Generated at Sun Dec 21 11:10:12 2025 by rpki-client