This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft File: 9GRgXq8UuLXSjujQdsHjc491glM.mft (raw, json) Hash identifier: IYVtYAqpEZmgYL9yAevSkghSVOfaJSuYgY9E9Oh7XSI= Subject key identifier: 2F:2E:0B:F5:B2:A9:12:B5:18:C6:73:61:D0:A7:D5:57:96:83:BD:CF Authority key identifier: F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53 Certificate issuer: /CN=f464605eaf14b8b5d28ee8d076c1e3738f758253 Certificate serial: 019B4023C5FA7D4BFA7800B79A3DA81539A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft Manifest number: 1248 Signing time: Sun 21 Dec 2025 09:00:44 +0000 Manifest this update: Sun 21 Dec 2025 09:00:44 +0000 Manifest next update: Mon 22 Dec 2025 09:00:44 +0000 Files and hashes: 1: 9GRgXq8UuLXSjujQdsHjc491glM.crl (hash: wCX7+x3K4pjjskM3QFmdo8/eO5jPbDcMa5/ttCag6aU=) 2: olrnyQQfOhnKpr2co2Em_3dR--o.roa (hash: rp8wShqRa1Zo54SX2Szk+upU5GSFmN+Gac4fff3lsc4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 09:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:23:c5:fa:7d:4b:fa:78:00:b7:9a:3d:a8:15:39:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f464605eaf14b8b5d28ee8d076c1e3738f758253 Validity Not Before: Dec 21 09:00:44 2025 GMT Not After : Dec 22 09:00:44 2025 GMT Subject: CN=2f2e0bf5b2a912b518c67361d0a7d5579683bdcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d3:92:36:b6:86:3a:92:ef:7b:53:af:95:c1: 75:21:5e:1d:5f:fa:77:77:8c:7c:69:73:c3:70:c1: 96:62:18:5b:af:40:06:aa:ce:56:bc:ff:b3:81:f7: f0:08:13:63:c6:63:d8:85:71:56:ba:9f:ef:2e:a8: 8d:80:9b:71:bf:86:93:92:13:a5:d0:a5:24:4d:13: 3d:29:33:88:c5:bf:1b:ef:a4:d1:8e:70:c7:ce:73: b1:f3:50:32:3a:1b:9e:b7:c5:a0:99:52:a9:80:9d: 01:cd:d0:33:95:c0:b2:36:3a:24:88:40:f9:c8:d9: 99:87:82:f5:81:bb:67:cf:cd:c5:40:92:df:17:e1: ff:54:48:0e:c9:0b:67:61:3b:cd:fe:33:6d:12:4e: ec:96:2b:5d:ec:4d:37:04:9a:23:2b:18:a6:cd:b2: 79:0c:2b:20:e4:f5:7d:e3:db:fb:4b:51:29:64:1a: df:52:ce:a1:e8:e8:b5:b8:27:6b:74:2c:f4:29:1e: d6:7d:e8:78:44:56:2f:6c:bb:55:e0:5d:41:89:8a: e7:96:1d:0a:4c:ca:2e:92:f9:a3:15:cc:51:d4:15: c1:a0:51:05:e4:18:b1:40:22:1a:28:b8:4d:b0:6b: 8e:6d:6a:4b:7b:0c:9e:22:bc:65:9c:53:7a:31:b0: 95:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:2E:0B:F5:B2:A9:12:B5:18:C6:73:61:D0:A7:D5:57:96:83:BD:CF X509v3 Authority Key Identifier: keyid:F4:64:60:5E:AF:14:B8:B5:D2:8E:E8:D0:76:C1:E3:73:8F:75:82:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GRgXq8UuLXSjujQdsHjc491glM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/51e98d-d48e-45a1-9303-e2d8647fe5dd/1/9GRgXq8UuLXSjujQdsHjc491glM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:34:fa:7c:e5:d0:79:70:80:ce:e1:e2:16:35:46:bf:cb:f6: c1:fe:0d:0f:50:35:ee:18:4e:90:23:19:22:82:40:a4:27:c9: 6c:4f:3c:81:11:12:9d:64:8f:d9:c2:fb:bd:aa:30:0e:62:6e: c8:52:df:21:7f:e7:ba:7b:e4:9a:28:06:e0:1a:4c:e2:1a:05: 46:c5:c9:a8:16:b3:16:5d:97:34:66:6f:6d:7e:af:90:dc:88: 96:6d:d8:a9:58:0b:11:ab:3d:a2:5e:25:cf:e6:e7:3e:4d:d4: 39:03:db:75:8b:d7:8a:eb:1a:f5:98:ec:31:d5:ff:8e:69:7c: e2:91:20:c3:de:24:e4:0c:8c:e1:c1:8f:1b:60:38:2b:ff:6e: 9a:5b:d2:24:d4:45:32:49:85:f4:3f:61:fe:10:19:3d:11:52: ce:3f:10:4e:5d:4c:ae:95:62:19:41:f7:17:81:fc:7c:7b:12: 4f:79:47:5f:6d:d2:3f:bb:78:58:fa:53:22:14:02:00:9a:f4: 27:d1:e8:68:3d:e2:74:85:c5:f8:26:78:ec:ab:18:8a:80:58: 75:87:5a:f5:67:9e:05:74:08:fa:51:ab:c4:d5:81:50:2d:65: c1:a6:6d:4c:d2:67:a4:89:34:f2:fb:32:67:9c:6b:d0:f6:0a: 66:64:cc:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAI8X6fUv6eAC3mj2oFTmiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NjQ2MDVlYWYxNGI4YjVkMjhlZThkMDc2YzFlMzczOGY3 NTgyNTMwHhcNMjUxMjIxMDkwMDQ0WhcNMjUxMjIyMDkwMDQ0WjAzMTEwLwYDVQQD EygyZjJlMGJmNWIyYTkxMmI1MThjNjczNjFkMGE3ZDU1Nzk2ODNiZGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29OSNraGOpLve1OvlcF1IV4dX/p3 d4x8aXPDcMGWYhhbr0AGqs5WvP+zgffwCBNjxmPYhXFWup/vLqiNgJtxv4aTkhOl 0KUkTRM9KTOIxb8b76TRjnDHznOx81AyOhuet8WgmVKpgJ0BzdAzlcCyNjokiED5 yNmZh4L1gbtnz83FQJLfF+H/VEgOyQtnYTvN/jNtEk7slitd7E03BJojKximzbJ5 DCsg5PV949v7S1EpZBrfUs6h6Oi1uCdrdCz0KR7Wfeh4RFYvbLtV4F1BiYrnlh0K TMoukvmjFcxR1BXBoFEF5BixQCIaKLhNsGuObWpLewyeIrxlnFN6MbCVfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8uC/WyqRK1GMZzYdCn1VeWg73PMB8GA1UdIwQY MBaAFPRkYF6vFLi10o7o0HbB43OPdYJTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUdSZ1hxOFV1TFhTanVqUWRzSGpjNDkxZ2xNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81MWU5OGQtZDQ4ZS00NWExLTkzMDMt ZTJkODY0N2ZlNWRkLzEvOUdSZ1hxOFV1TFhTanVqUWRzSGpjNDkxZ2xNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi81MWU5OGQtZDQ4ZS00NWExLTkzMDMtZTJkODY0N2ZlNWRk LzEvOUdSZ1hxOFV1TFhTanVqUWRzSGpjNDkxZ2xNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjT6fOXQ eXCAzuHiFjVGv8v2wf4ND1A17hhOkCMZIoJApCfJbE88gRESnWSP2cL7vaowDmJu yFLfIX/nunvkmigG4BpM4hoFRsXJqBazFl2XNGZvbX6vkNyIlm3YqVgLEas9ol4l z+bnPk3UOQPbdYvXiusa9ZjsMdX/jml84pEgw94k5AyM4cGPG2A4K/9umlvSJNRF MkmF9D9h/hAZPRFSzj8QTl1MrpViGUH3F4H8fHsST3lHX23SP7t4WPpTIhQCAJr0 J9HoaD3idIXF+CZ47KsYioBYdYda9WeeBXQI+lGrxNWBUC1lwaZtTNJnpIk08vsy Z5xr0PYKZmTMIg== -----END CERTIFICATE-----Generated at Sun Dec 21 15:01:12 2025 by rpki-client