This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft File: 9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft (raw, json) Hash identifier: 0cJmcwkJWRYBgUnO2esgjDQeXkmjU8leXJTCwwofWyU= Subject key identifier: 5D:25:E7:4B:9C:5C:0D:04:EA:11:22:7A:69:BC:8A:35:81:45:70:41 Authority key identifier: F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB Certificate issuer: /CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb Certificate serial: 019B300BB4BAC48C38E8AFFB1621C16B2D1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 06:00:31 +0000 Manifest this update: Thu 18 Dec 2025 06:00:31 +0000 Manifest next update: Fri 19 Dec 2025 06:00:31 +0000 Files and hashes: 1: 9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl (hash: NFFKFr1wVEp/mn6G6G1C7wL2M7YThDEUEe8CZh4S9wQ=) 2: cZzu9h7JCSpAe7ubMeZNqvU_k-M.roa (hash: 9lLGwap+wzAcsgGorlbM31Osi8VLCiKaPunG1+P2vww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 06:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0b:b4:ba:c4:8c:38:e8:af:fb:16:21:c1:6b:2d:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6acb269fa8a554f5243a3abd68d5b8d76fe5ebb Validity Not Before: Dec 18 06:00:31 2025 GMT Not After : Dec 19 06:00:31 2025 GMT Subject: CN=5d25e74b9c5c0d04ea11227a69bc8a3581457041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cf:b9:e5:1c:c5:ca:0c:10:37:d2:92:37:28: d7:7a:45:e0:b3:b6:fb:3e:7e:2a:78:b8:7a:c5:0f: 62:f3:2f:e1:75:c5:da:1a:8e:78:6c:d5:ca:cb:30: a7:e4:1a:11:30:08:5a:3b:74:0b:2a:5a:92:da:10: 57:e4:00:4b:fb:1c:43:80:91:b0:7e:ef:c9:80:13: 26:21:af:52:90:3b:7a:cc:00:f8:98:f5:de:70:fb: ba:9b:18:6e:50:50:9b:cd:6d:82:c4:99:cb:26:b3: 47:03:63:cd:26:80:78:07:9e:ea:76:b3:31:c0:36: b2:67:0b:14:79:81:21:8a:89:9c:a0:8d:38:a8:3b: b9:d6:2a:54:15:29:12:19:4b:73:cd:34:70:bc:6b: bc:71:ee:59:1e:13:2c:81:ab:42:5b:a8:0f:8c:39: 24:a5:a9:0f:27:60:17:88:ac:0a:5c:fe:bb:ff:78: 4f:58:e0:c1:c2:53:7a:86:bd:3a:f4:c7:be:9d:e3: a4:b9:86:1b:52:8e:b4:ac:50:4f:3f:fe:57:a3:d9: 61:45:dc:88:db:9b:da:95:00:1c:b7:09:84:a6:e0: 10:87:0c:b2:82:22:d1:eb:3c:19:81:b3:66:32:db: 6f:66:d4:45:17:45:c8:3c:74:32:26:b7:af:c9:f1: ea:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:25:E7:4B:9C:5C:0D:04:EA:11:22:7A:69:BC:8A:35:81:45:70:41 X509v3 Authority Key Identifier: keyid:F6:AC:B2:69:FA:8A:55:4F:52:43:A3:AB:D6:8D:5B:8D:76:FE:5E:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2955fd-092a-4ecc-a92f-fbb33a54fade/1/9qyyafqKVU9SQ6Or1o1bjXb-Xrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:20:0c:4f:51:37:0d:be:71:19:11:30:7a:7a:6f:d4:80:1f: 3b:b5:86:04:76:b7:ad:92:20:5d:fb:b9:a2:c7:49:d5:df:7b: 89:b8:cb:85:49:1e:dc:ed:df:52:03:db:56:a8:fa:aa:73:1c: 54:35:d7:bc:37:6d:35:15:46:c2:78:4a:cf:97:4d:85:b0:0d: 1f:ce:c1:a4:26:c7:a7:f4:f8:f1:b5:2b:36:72:e6:7d:c8:35: ee:0b:45:e0:9b:de:98:85:6f:9d:bd:e6:e1:d3:d9:9b:f5:e6: 36:59:53:2b:d9:62:a0:3e:a3:d8:12:67:73:ed:44:2f:a1:57: 2a:f4:47:54:0c:09:79:ae:55:60:fc:51:b9:a8:ff:f8:d7:4e: 37:f7:38:14:c9:1d:9c:c5:c1:d4:da:c8:f2:2d:d2:8f:09:ee: cb:0d:6d:04:6c:65:a1:d3:0b:1a:5a:ac:89:43:1e:b5:f8:61: 60:d4:d1:7e:79:38:6f:45:cf:50:a9:72:33:6c:e7:a3:9b:e6: 69:0d:cf:a4:53:e6:25:ce:89:bc:10:cd:fd:30:42:92:15:16: 49:45:5e:65:e0:dc:30:7b:28:ce:9c:1e:5f:03:ce:45:43:58: 42:45:3e:17:09:1d:e6:56:37:b8:c9:4e:72:14:a5:1c:c4:ba: 24:89:b6:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswC7S6xIw46K/7FiHBay0aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YWNiMjY5ZmE4YTU1NGY1MjQzYTNhYmQ2OGQ1YjhkNzZm ZTVlYmIwHhcNMjUxMjE4MDYwMDMxWhcNMjUxMjE5MDYwMDMxWjAzMTEwLwYDVQQD Eyg1ZDI1ZTc0YjljNWMwZDA0ZWExMTIyN2E2OWJjOGEzNTgxNDU3MDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8+55RzFygwQN9KSNyjXekXgs7b7 Pn4qeLh6xQ9i8y/hdcXaGo54bNXKyzCn5BoRMAhaO3QLKlqS2hBX5ABL+xxDgJGw fu/JgBMmIa9SkDt6zAD4mPXecPu6mxhuUFCbzW2CxJnLJrNHA2PNJoB4B57qdrMx wDayZwsUeYEhiomcoI04qDu51ipUFSkSGUtzzTRwvGu8ce5ZHhMsgatCW6gPjDkk pakPJ2AXiKwKXP67/3hPWODBwlN6hr069Me+neOkuYYbUo60rFBPP/5Xo9lhRdyI 25valQActwmEpuAQhwyygiLR6zwZgbNmMttvZtRFF0XIPHQyJrevyfHqcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0l50ucXA0E6hEiemm8ijWBRXBBMB8GA1UdIwQY MBaAFPassmn6ilVPUkOjq9aNW412/l67MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXF5eWFmcUtWVTlTUTZPcjFvMWJqWGItWHJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yOTU1ZmQtMDkyYS00ZWNjLWE5MmYt ZmJiMzNhNTRmYWRlLzEvOXF5eWFmcUtWVTlTUTZPcjFvMWJqWGItWHJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8yOTU1ZmQtMDkyYS00ZWNjLWE5MmYtZmJiMzNhNTRmYWRl LzEvOXF5eWFmcUtWVTlTUTZPcjFvMWJqWGItWHJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANSAMT1E3 Db5xGREwenpv1IAfO7WGBHa3rZIgXfu5osdJ1d97ibjLhUke3O3fUgPbVqj6qnMc VDXXvDdtNRVGwnhKz5dNhbANH87BpCbHp/T48bUrNnLmfcg17gtF4JvemIVvnb3m 4dPZm/XmNllTK9lioD6j2BJnc+1EL6FXKvRHVAwJea5VYPxRuaj/+NdON/c4FMkd nMXB1NrI8i3Sjwnuyw1tBGxlodMLGlqsiUMetfhhYNTRfnk4b0XPUKlyM2zno5vm aQ3PpFPmJc6JvBDN/TBCkhUWSUVeZeDcMHsozpweXwPORUNYQkU+Fwkd5lY3uMlO chSlHMS6JIm2aw== -----END CERTIFICATE-----Generated at Thu Dec 18 15:24:03 2025 by rpki-client