This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft File: v9P33PxgiR_DiPpcHb118nuVGeI.mft (raw, json) Hash identifier: Z92H4/QFyLtlMWHUSouaE2/iLRmQLuxmqngdoq/r45Y= Subject key identifier: AD:53:47:A4:B6:2B:9C:29:89:01:28:68:F1:F2:D6:4A:09:7E:B6:E3 Authority key identifier: BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2 Certificate issuer: /CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2 Certificate serial: 019B3A903A9D548FF4528208AE7AD120520F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 07:01:29 +0000 Manifest this update: Sat 20 Dec 2025 07:01:29 +0000 Manifest next update: Sun 21 Dec 2025 07:01:29 +0000 Files and hashes: 1: v9P33PxgiR_DiPpcHb118nuVGeI.crl (hash: 1Do4UwkSo0zC+WLL5itX5hO2t7/08QGRQZDw5czFU4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:3a:9d:54:8f:f4:52:82:08:ae:7a:d1:20:52:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2 Validity Not Before: Dec 20 07:01:29 2025 GMT Not After : Dec 21 07:01:29 2025 GMT Subject: CN=ad5347a4b62b9c2989012868f1f2d64a097eb6e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ca:7a:7d:79:57:fd:c9:0c:e8:e3:ed:aa:b7: 3c:24:61:1a:b9:ae:5e:0d:62:9b:68:ed:48:04:b7: 2d:eb:57:45:30:49:32:df:7f:b2:64:99:fa:e7:86: bd:f2:a6:bf:ca:76:ac:b2:ce:82:e6:02:bc:c1:d9: 73:cc:49:1f:ce:e2:99:f1:2d:84:6e:be:ba:4a:84: ef:7c:27:2e:3e:e0:70:40:a5:34:23:2c:fe:47:33: 8c:54:74:29:32:97:bd:e8:33:e4:e1:d8:f2:64:51: 5a:67:73:05:49:f3:95:a9:f8:b0:b6:c9:06:2b:30: ca:4d:84:0d:e1:f1:e0:8f:68:38:ef:47:46:b7:af: ca:80:cd:13:5f:98:b9:a4:28:bf:9c:6a:b1:fe:ed: 2d:22:0b:f3:51:75:de:43:71:2f:10:eb:e2:e7:d4: 65:74:16:3a:0b:6b:3d:0a:cb:26:73:00:7c:ee:1b: b2:fe:1a:bc:e7:f2:21:75:29:d2:e5:12:16:48:26: e0:7e:52:84:1b:b8:8b:a4:da:f4:31:55:71:56:2e: e2:10:8f:ac:a2:cb:06:ac:e7:5a:43:72:09:0b:e3: 15:85:30:59:49:1d:ed:b9:1d:00:59:c0:e7:4f:49: f5:78:4e:53:43:df:e1:e4:40:7a:60:22:63:27:fe: 03:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:53:47:A4:B6:2B:9C:29:89:01:28:68:F1:F2:D6:4A:09:7E:B6:E3 X509v3 Authority Key Identifier: keyid:BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:30:ab:2b:61:aa:6b:ed:fc:9d:bf:04:08:2f:db:7d:0a:cf: e2:c2:0a:93:94:d5:00:49:15:f3:2a:c1:30:a3:11:b9:ab:49: 58:2b:3c:5c:84:69:6b:40:7f:c7:1a:6c:cf:c8:c0:b6:b3:a2: d0:40:22:d4:d8:d9:a6:b7:34:68:76:c9:5f:66:f2:d3:bf:f2: a1:d3:83:59:16:a8:34:58:34:e5:ec:dd:94:49:c2:2e:2b:a5: fb:fe:5a:07:63:3e:37:00:ed:de:72:f5:78:80:5a:3c:d9:b0: a6:ea:3e:5a:d9:c4:f6:46:a6:20:de:06:7b:44:e7:d0:36:f0: 54:c0:b3:3f:b2:63:19:b4:6d:a8:85:76:4c:1e:0b:27:81:34: b6:c5:ef:42:f6:9c:53:e9:2a:b2:40:dc:b9:40:8b:01:75:d5: ae:09:46:52:91:53:3f:01:38:eb:44:64:df:8d:3c:b2:93:73: 8c:b1:02:e8:e8:d1:c1:8f:e3:9c:55:24:96:cf:6c:28:7d:96: da:9f:f6:6e:92:56:86:8b:35:2f:b5:de:fc:48:86:a5:47:3e: 72:ec:a5:da:67:52:19:cf:09:66:54:77:72:aa:d9:63:5f:9b: 0e:8a:01:cf:62:37:38:ac:8d:3c:8f:73:87:d7:12:21:cf:d2: 9d:77:f3:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kDqdVI/0UoIIrnrRIFIPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZDNmN2RjZmM2MDg5MWZjMzg4ZmE1YzFkYmQ3NWYyN2I5 NTE5ZTIwHhcNMjUxMjIwMDcwMTI5WhcNMjUxMjIxMDcwMTI5WjAzMTEwLwYDVQQD EyhhZDUzNDdhNGI2MmI5YzI5ODkwMTI4NjhmMWYyZDY0YTA5N2ViNmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosp6fXlX/ckM6OPtqrc8JGEaua5e DWKbaO1IBLct61dFMEky33+yZJn654a98qa/ynasss6C5gK8wdlzzEkfzuKZ8S2E br66SoTvfCcuPuBwQKU0Iyz+RzOMVHQpMpe96DPk4djyZFFaZ3MFSfOVqfiwtskG KzDKTYQN4fHgj2g470dGt6/KgM0TX5i5pCi/nGqx/u0tIgvzUXXeQ3EvEOvi59Rl dBY6C2s9CssmcwB87huy/hq85/IhdSnS5RIWSCbgflKEG7iLpNr0MVVxVi7iEI+s ossGrOdaQ3IJC+MVhTBZSR3tuR0AWcDnT0n1eE5TQ9/h5EB6YCJjJ/4D4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1TR6S2K5wpiQEoaPHy1koJfrbjMB8GA1UdIwQY MBaAFL/T99z8YIkfw4j6XB29dfJ7lRniMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjlQMzNQeGdpUl9EaVBwY0hiMTE4bnVWR2VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kM2E2OTUtNWFmZS00NmI2LWJlNTkt NThmZWQyODIyY2EzLzEvdjlQMzNQeGdpUl9EaVBwY0hiMTE4bnVWR2VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9kM2E2OTUtNWFmZS00NmI2LWJlNTktNThmZWQyODIyY2Ez LzEvdjlQMzNQeGdpUl9EaVBwY0hiMTE4bnVWR2VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWjCrK2Gq a+38nb8ECC/bfQrP4sIKk5TVAEkV8yrBMKMRuatJWCs8XIRpa0B/xxpsz8jAtrOi 0EAi1NjZprc0aHbJX2by07/yodODWRaoNFg05ezdlEnCLiul+/5aB2M+NwDt3nL1 eIBaPNmwpuo+WtnE9kamIN4Ge0Tn0DbwVMCzP7JjGbRtqIV2TB4LJ4E0tsXvQvac U+kqskDcuUCLAXXVrglGUpFTPwE460Rk3408spNzjLEC6OjRwY/jnFUkls9sKH2W 2p/2bpJWhos1L7Xe/EiGpUc+cuyl2mdSGc8JZlR3cqrZY1+bDooBz2I3OKyNPI9z h9cSIc/SnXfz/A== -----END CERTIFICATE-----Generated at Sat Dec 20 12:20:11 2025 by rpki-client