This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft File: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft (raw, json) Hash identifier: z3zLf7IYcMhg0KrPm59S7MOmdofqbDxBhnBHzqYjNbQ= Subject key identifier: A2:97:74:5B:F2:36:6F:71:A3:A3:B7:78:F0:49:12:8B:7E:C1:EC:A6 Authority key identifier: F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89 Certificate issuer: /CN=f4c64994e24d4aefdc42a8831fe0dce20d604689 Certificate serial: 019B3AC6F163AC59BB6F54876329BC3FFFB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 08:01:14 +0000 Manifest this update: Sat 20 Dec 2025 08:01:14 +0000 Manifest next update: Sun 21 Dec 2025 08:01:14 +0000 Files and hashes: 1: 9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl (hash: lLoUFYiok96CEPOV2pmPvONXolK4Y2n21AzGuWE/7fI=) 2: bRo1FpRQdGW3rrEgf9LP2ZyYMbs.roa (hash: ZwgslFPNqU25lgzTk3XOIv2Nozx6fjcmPWKTGmYvfPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:f1:63:ac:59:bb:6f:54:87:63:29:bc:3f:ff:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4c64994e24d4aefdc42a8831fe0dce20d604689 Validity Not Before: Dec 20 08:01:14 2025 GMT Not After : Dec 21 08:01:14 2025 GMT Subject: CN=a297745bf2366f71a3a3b778f049128b7ec1eca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:38:26:6c:8a:ea:90:18:84:67:19:9f:1f:4a: e3:1a:5e:4e:c0:9e:7c:84:a4:c8:c2:0f:1d:8d:f4: d8:bc:38:50:68:09:65:b8:f3:78:8f:a1:a8:e5:39: f5:33:c5:86:5a:94:0c:ef:c2:2f:d1:37:ba:22:d9: 89:ca:01:44:eb:b7:20:d1:b3:34:e6:ac:39:d1:9f: 1c:ff:f3:af:63:4b:2d:06:64:4a:26:dd:0d:18:3c: 96:e2:0d:38:1f:34:5f:f6:a6:6f:9b:3c:b7:8d:d0: 1b:46:7a:59:8e:be:e1:ad:d3:bd:b5:ac:67:f9:9e: a9:a5:c9:f4:c8:0c:6a:a4:f7:cc:3a:96:af:4f:8c: 55:67:8c:c5:e7:a1:a4:8c:2c:2b:9c:25:03:70:9c: 3e:9b:f6:89:5c:91:09:cc:03:25:a5:d5:3b:44:fb: c6:5e:4b:57:83:2b:e7:5f:e5:5c:f5:a1:20:e6:08: c3:14:11:1e:ed:d9:79:c9:2a:94:9f:24:bb:c0:07: f7:60:ee:1f:d7:2e:43:a4:59:9a:e7:72:e1:f6:40: ef:73:17:85:dc:65:93:9b:a8:94:8f:46:e1:29:8e: f8:04:7b:10:16:4c:f3:88:56:d6:93:81:3e:aa:03: 85:c8:ea:7a:9b:10:b7:32:a8:56:be:4a:48:da:7f: e7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:97:74:5B:F2:36:6F:71:A3:A3:B7:78:F0:49:12:8B:7E:C1:EC:A6 X509v3 Authority Key Identifier: keyid:F4:C6:49:94:E2:4D:4A:EF:DC:42:A8:83:1F:E0:DC:E2:0D:60:46:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9MZJlOJNSu_cQqiDH-Dc4g1gRok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/64658d-d5eb-489b-bc15-3855698fb57f/1/9MZJlOJNSu_cQqiDH-Dc4g1gRok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:50:0f:74:7c:22:29:ee:35:dc:d3:92:a8:86:2b:0e:3c:77: 39:35:12:03:b0:8d:d9:7d:2b:72:b6:72:d4:ea:59:e2:f3:93: d8:2b:62:81:66:20:e7:5d:2d:7e:04:c6:8c:93:b1:9e:99:0a: 06:44:b2:ee:83:bd:25:73:bc:0a:31:9f:bd:fb:78:52:cb:d3: 01:e8:79:93:d1:df:e8:be:d6:6b:59:08:c7:8c:2f:9b:90:6b: 1f:55:8d:c2:13:b8:54:bc:f4:50:ff:0d:61:7a:0c:ef:81:de: 06:2e:a9:ca:12:7f:7c:31:f3:5d:98:a6:21:48:f7:66:76:94: ac:c2:b1:5c:db:5a:8b:64:d0:91:5f:6a:ed:65:2d:2e:86:48: 36:5b:5b:87:cd:94:02:9b:18:74:f9:c4:c4:87:32:fd:68:67: 51:cd:78:3e:9e:f0:d2:3b:81:35:88:a6:37:7d:a2:98:e8:c0: d6:a5:48:30:b9:9e:a5:6b:2f:14:4b:59:56:a9:45:09:10:c1: 89:90:e3:84:8c:5d:f1:13:6e:76:3d:46:94:6e:9f:d4:13:e6: 0c:69:72:45:b0:e3:75:2c:db:f8:6f:18:42:80:1d:53:84:33: 42:31:97:59:6d:a3:97:97:ad:2c:d6:ea:04:5f:29:06:5b:4e: 9a:19:4e:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xvFjrFm7b1SHYym8P/+yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YzY0OTk0ZTI0ZDRhZWZkYzQyYTg4MzFmZTBkY2UyMGQ2 MDQ2ODkwHhcNMjUxMjIwMDgwMTE0WhcNMjUxMjIxMDgwMTE0WjAzMTEwLwYDVQQD EyhhMjk3NzQ1YmYyMzY2ZjcxYTNhM2I3NzhmMDQ5MTI4YjdlYzFlY2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DgmbIrqkBiEZxmfH0rjGl5OwJ58 hKTIwg8djfTYvDhQaAlluPN4j6Go5Tn1M8WGWpQM78Iv0Te6ItmJygFE67cg0bM0 5qw50Z8c//OvY0stBmRKJt0NGDyW4g04HzRf9qZvmzy3jdAbRnpZjr7hrdO9taxn +Z6ppcn0yAxqpPfMOpavT4xVZ4zF56GkjCwrnCUDcJw+m/aJXJEJzAMlpdU7RPvG XktXgyvnX+Vc9aEg5gjDFBEe7dl5ySqUnyS7wAf3YO4f1y5DpFma53Lh9kDvcxeF 3GWTm6iUj0bhKY74BHsQFkzziFbWk4E+qgOFyOp6mxC3MqhWvkpI2n/nXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKXdFvyNm9xo6O3ePBJEot+weymMB8GA1UdIwQY MBaAFPTGSZTiTUrv3EKogx/g3OINYEaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU1aSmxPSk5TdV9jUXFpREgtRGM0ZzFnUm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy82NDY1OGQtZDVlYi00ODliLWJjMTUt Mzg1NTY5OGZiNTdmLzEvOU1aSmxPSk5TdV9jUXFpREgtRGM0ZzFnUm9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy82NDY1OGQtZDVlYi00ODliLWJjMTUtMzg1NTY5OGZiNTdm LzEvOU1aSmxPSk5TdV9jUXFpREgtRGM0ZzFnUm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIFAPdHwi Ke413NOSqIYrDjx3OTUSA7CN2X0rcrZy1OpZ4vOT2CtigWYg510tfgTGjJOxnpkK BkSy7oO9JXO8CjGfvft4UsvTAeh5k9Hf6L7Wa1kIx4wvm5BrH1WNwhO4VLz0UP8N YXoM74HeBi6pyhJ/fDHzXZimIUj3ZnaUrMKxXNtai2TQkV9q7WUtLoZINltbh82U ApsYdPnExIcy/WhnUc14Pp7w0juBNYimN32imOjA1qVIMLmepWsvFEtZVqlFCRDB iZDjhIxd8RNudj1GlG6f1BPmDGlyRbDjdSzb+G8YQoAdU4QzQjGXWW2jl5etLNbq BF8pBltOmhlObA== -----END CERTIFICATE-----Generated at Sat Dec 20 13:17:07 2025 by rpki-client