This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft File: 9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft (raw, json) Hash identifier: ZPsbm4BnS9vgDJKBwQiQwlDIw3hwKP3BfRvb/HuE9ck= Subject key identifier: 54:F5:8E:6D:D9:E1:CF:EE:2A:0B:C2:2C:A9:F8:68:5C:B6:ED:49:16 Authority key identifier: F6:74:F0:C8:D1:6C:BB:51:0B:BA:1F:E3:AC:46:85:EE:E3:56:F8:E7 Certificate issuer: /CN=f674f0c8d16cbb510bba1fe3ac4685eee356f8e7 Certificate serial: 019B3CEC67E38EAE9835ABB0D1D9279CC8CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft Manifest number: 0673 Signing time: Sat 20 Dec 2025 18:01:24 +0000 Manifest this update: Sat 20 Dec 2025 18:01:24 +0000 Manifest next update: Sun 21 Dec 2025 18:01:24 +0000 Files and hashes: 1: 9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl (hash: P+qEy0ZUT1l7fReDfD3z5xMR2ybPxvK4tBRqoOl/2pc=) 2: tjboCeupGoWMhzNMAbe1acyZSfo.roa (hash: 4a1e4ZJ2rm6Y1i2yYMJDPx5U9pmumE35uvRPVX+uXuM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:67:e3:8e:ae:98:35:ab:b0:d1:d9:27:9c:c8:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f674f0c8d16cbb510bba1fe3ac4685eee356f8e7 Validity Not Before: Dec 20 18:01:24 2025 GMT Not After : Dec 21 18:01:24 2025 GMT Subject: CN=54f58e6dd9e1cfee2a0bc22ca9f8685cb6ed4916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ff:00:8f:73:a2:37:c1:59:ef:26:5c:40:d6: 40:d1:90:5e:f9:e2:35:49:69:1f:e3:61:62:31:86: c8:52:08:84:2d:2b:d4:ed:b2:90:19:5c:df:ee:20: 66:ba:8b:ff:e8:96:51:5f:3d:03:03:01:14:b7:eb: a8:9e:f2:d2:b5:4b:69:4b:fe:d4:6a:38:78:7d:68: 5f:72:5e:83:af:77:2f:5b:0a:1b:16:40:27:03:83: 34:98:02:42:a1:06:5f:e3:e4:35:01:c0:bc:86:09: d0:4a:5c:34:10:17:9e:0f:9c:42:88:ae:b9:cc:7f: 2d:b3:db:12:48:b6:06:f8:ae:23:6a:79:31:6c:f7: 46:96:18:5d:f1:1e:34:a8:93:03:5f:22:fe:2f:f7: 1b:c0:31:9c:dd:c9:9e:4e:e6:36:68:24:4f:a6:93: 1b:4d:50:58:3a:bb:a9:d5:90:33:de:af:0b:97:05: 70:23:27:f4:8e:2c:be:d4:4a:b6:e1:ff:75:c7:39: 09:5d:4b:2f:6b:14:be:6f:ec:c9:96:c6:fc:b3:40: db:cd:13:2d:26:86:50:2c:71:f6:9f:98:4b:ca:18: 48:b4:47:6f:e0:53:76:da:dc:de:63:a5:f4:43:c3: 43:64:e8:d9:9e:d3:52:88:a2:6c:84:ac:f2:e9:c7: 96:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F5:8E:6D:D9:E1:CF:EE:2A:0B:C2:2C:A9:F8:68:5C:B6:ED:49:16 X509v3 Authority Key Identifier: keyid:F6:74:F0:C8:D1:6C:BB:51:0B:BA:1F:E3:AC:46:85:EE:E3:56:F8:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:dc:92:17:c4:10:76:d9:51:62:ad:49:93:12:9f:5f:ab:ee: ef:d1:0b:39:fd:11:0e:e8:d7:0c:ec:b3:1e:12:4d:16:a7:76: 87:d9:eb:8c:18:e7:28:04:09:d2:81:2e:0d:0a:0f:2d:0a:a7: 73:1b:aa:4e:f3:c8:be:11:e0:e5:f2:49:1d:65:ea:01:7a:b2: d6:ae:71:82:0e:ba:95:d5:b1:d0:32:c8:b9:33:79:ec:07:48: 84:fc:d7:fb:a3:8c:81:6f:ac:e6:62:26:31:68:9d:14:48:9a: af:45:fe:af:60:88:d8:01:bc:8d:0a:21:45:b3:86:c0:2a:1d: 89:42:e2:ac:93:01:d6:4e:bc:38:50:71:8f:c7:2b:45:0a:2f: f5:c8:61:cb:f1:e4:fc:33:cb:4b:a4:ce:61:c7:5d:a3:d3:7e: 8b:43:8b:da:0c:10:3b:4a:a0:d2:e9:e6:3a:d7:86:b9:19:ed: 8e:78:6f:82:9d:ff:ac:ec:6d:70:c3:88:d1:1d:52:f1:84:b8: 0b:dc:3e:a6:a5:f7:9d:5a:c5:3f:77:e3:6a:4a:88:ed:c8:ce: 75:5a:44:95:26:ee:2a:63:ca:f3:3e:71:c1:e8:6c:8b:9a:62: 52:da:21:b4:34:53:ec:fe:a6:1f:f6:b0:b3:59:76:3f:63:ba: 57:14:58:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87Gfjjq6YNauw0dknnMjMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NzRmMGM4ZDE2Y2JiNTEwYmJhMWZlM2FjNDY4NWVlZTM1 NmY4ZTcwHhcNMjUxMjIwMTgwMTI0WhcNMjUxMjIxMTgwMTI0WjAzMTEwLwYDVQQD Eyg1NGY1OGU2ZGQ5ZTFjZmVlMmEwYmMyMmNhOWY4Njg1Y2I2ZWQ0OTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP8Aj3OiN8FZ7yZcQNZA0ZBe+eI1 SWkf42FiMYbIUgiELSvU7bKQGVzf7iBmuov/6JZRXz0DAwEUt+uonvLStUtpS/7U ajh4fWhfcl6Dr3cvWwobFkAnA4M0mAJCoQZf4+Q1AcC8hgnQSlw0EBeeD5xCiK65 zH8ts9sSSLYG+K4jankxbPdGlhhd8R40qJMDXyL+L/cbwDGc3cmeTuY2aCRPppMb TVBYOrup1ZAz3q8LlwVwIyf0jiy+1Eq24f91xzkJXUsvaxS+b+zJlsb8s0DbzRMt JoZQLHH2n5hLyhhItEdv4FN22tzeY6X0Q8NDZOjZntNSiKJshKzy6ceWjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFT1jm3Z4c/uKgvCLKn4aFy27UkWMB8GA1UdIwQY MBaAFPZ08MjRbLtRC7of46xGhe7jVvjnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW5Ud3lORnN1MUVMdWhfanJFYUY3dU5XLU9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xNjI1NjAtYjRjNS00ZjBkLTljMDYt MThiZGY4ODQ3NDE4LzEvOW5Ud3lORnN1MUVMdWhfanJFYUY3dU5XLU9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8xNjI1NjAtYjRjNS00ZjBkLTljMDYtMThiZGY4ODQ3NDE4 LzEvOW5Ud3lORnN1MUVMdWhfanJFYUY3dU5XLU9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActySF8QQ dtlRYq1JkxKfX6vu79ELOf0RDujXDOyzHhJNFqd2h9nrjBjnKAQJ0oEuDQoPLQqn cxuqTvPIvhHg5fJJHWXqAXqy1q5xgg66ldWx0DLIuTN57AdIhPzX+6OMgW+s5mIm MWidFEiar0X+r2CI2AG8jQohRbOGwCodiULirJMB1k68OFBxj8crRQov9chhy/Hk /DPLS6TOYcddo9N+i0OL2gwQO0qg0unmOteGuRntjnhvgp3/rOxtcMOI0R1S8YS4 C9w+pqX3nVrFP3fjakqI7cjOdVpElSbuKmPK8z5xwehsi5piUtohtDRT7P6mH/aw s1l2P2O6VxRY4g== -----END CERTIFICATE-----Generated at Sun Dec 21 04:10:48 2025 by rpki-client