This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft File: 9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft (raw, json) Hash identifier: 3wSRb5I/aJKJxjfPRIrxM6x2dj9mKlWXWZDEmWrbaRE= Subject key identifier: 24:57:33:52:14:5F:97:AC:2D:9C:02:3A:67:FC:A0:17:B2:AF:DD:59 Authority key identifier: F6:74:F0:C8:D1:6C:BB:51:0B:BA:1F:E3:AC:46:85:EE:E3:56:F8:E7 Certificate issuer: /CN=f674f0c8d16cbb510bba1fe3ac4685eee356f8e7 Certificate serial: 019B78C9DCB8B923AE5A4BE450059F48C7C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft Manifest number: 0693 Signing time: Thu 01 Jan 2026 09:00:53 +0000 Manifest this update: Thu 01 Jan 2026 09:00:53 +0000 Manifest next update: Fri 02 Jan 2026 09:00:53 +0000 Files and hashes: 1: 9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl (hash: NIEW4OgaqOrnZ2je3pcBSVxwMwjbZRa5DZrpzFPyizE=) 2: l5mP-Fm1NetsfAlEdX_lmjpQoXU.roa (hash: TgrkS8N1S8Ck615gk15sSxKWPZHU7gKSYaKnDDznY4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:c9:dc:b8:b9:23:ae:5a:4b:e4:50:05:9f:48:c7:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f674f0c8d16cbb510bba1fe3ac4685eee356f8e7 Validity Not Before: Jan 1 09:00:53 2026 GMT Not After : Jan 2 09:00:53 2026 GMT Subject: CN=24573352145f97ac2d9c023a67fca017b2afdd59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8f:f5:4b:b2:78:9e:f3:f1:8a:6a:b2:13:70: 21:90:02:1c:05:17:64:14:15:f6:3d:1a:5a:bd:d9: f4:37:b9:73:49:6a:c5:84:47:e6:d2:4d:75:75:8c: bf:09:85:1c:5e:b1:d7:47:91:51:61:94:8b:63:79: df:93:47:bd:0f:93:3c:86:07:56:bc:04:58:07:c2: 6d:82:89:40:06:4e:63:78:bf:43:d3:35:1e:e1:f3: c7:c7:20:39:5a:d4:63:4e:2f:d8:fa:dd:5a:2e:9b: 81:92:54:a4:a0:ba:76:5b:da:dc:52:ae:1a:7d:b0: 77:74:36:7a:96:69:37:69:a7:97:73:e2:b9:05:62: de:3b:61:1c:c5:ad:fd:94:99:13:bc:2e:0c:b6:2d: dd:ed:33:5a:c6:ce:02:a2:6f:e1:db:95:cc:16:a7: fa:c8:17:bc:35:b6:79:99:26:d2:4a:72:65:26:fe: 6e:fc:6e:f0:1c:15:86:83:dd:de:98:b2:a7:dd:d3: 1e:8b:22:d7:2d:6a:c8:10:d0:d5:b9:5b:f8:e5:7a: f5:cf:58:7c:ab:cd:3b:7a:df:d7:47:e4:5f:d8:cd: 07:f0:95:2c:74:5b:3c:4d:2f:44:ea:fa:44:af:00: c3:56:94:3e:51:24:63:ed:65:15:f2:47:7f:c4:1a: 0b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:57:33:52:14:5F:97:AC:2D:9C:02:3A:67:FC:A0:17:B2:AF:DD:59 X509v3 Authority Key Identifier: keyid:F6:74:F0:C8:D1:6C:BB:51:0B:BA:1F:E3:AC:46:85:EE:E3:56:F8:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:ca:38:26:aa:18:12:7e:1d:27:e6:dd:16:28:2f:7c:69:98: eb:e6:71:7e:06:9a:3d:91:3a:7f:dc:2b:0d:73:2c:c8:de:13: 0b:03:68:a7:d6:f3:83:02:3c:dc:48:b5:46:39:c3:d3:52:97: 10:af:94:f5:a4:f6:d8:bb:15:ce:06:81:cb:97:02:3b:1e:76: 87:42:ef:4b:6e:18:f6:95:c3:7e:3e:b4:3f:f6:a5:29:a0:0b: 71:77:96:2a:99:a3:3e:61:6c:07:82:dc:f1:47:ff:42:f7:ec: 0f:50:0e:59:3a:5e:22:9a:24:5f:61:85:1d:f1:1f:ad:b2:7e: f5:34:89:48:99:e8:e5:7a:40:90:fa:7f:78:a7:bb:ce:e9:d0: 9e:1e:3b:b1:6c:12:f8:17:e1:4e:fe:0c:de:2e:54:2f:0b:69: 6c:6d:5b:8a:53:73:0f:b9:26:f3:d4:81:dd:80:7d:05:40:52: c2:74:f7:d5:e1:4f:e2:17:51:ff:e1:08:cd:4f:67:bd:dc:c9: 09:98:03:72:d4:83:3a:ea:16:4d:04:f0:35:38:e1:cf:07:c4: 17:3a:19:a1:67:ab:44:57:e2:7f:a2:1f:a1:2a:4e:61:9b:5e: d3:27:21:da:0a:77:98:60:6d:2c:a0:1e:52:2c:c2:0a:f1:7d: 82:7e:5e:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4ydy4uSOuWkvkUAWfSMfGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NzRmMGM4ZDE2Y2JiNTEwYmJhMWZlM2FjNDY4NWVlZTM1 NmY4ZTcwHhcNMjYwMTAxMDkwMDUzWhcNMjYwMTAyMDkwMDUzWjAzMTEwLwYDVQQD EygyNDU3MzM1MjE0NWY5N2FjMmQ5YzAyM2E2N2ZjYTAxN2IyYWZkZDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo/1S7J4nvPximqyE3AhkAIcBRdk FBX2PRpavdn0N7lzSWrFhEfm0k11dYy/CYUcXrHXR5FRYZSLY3nfk0e9D5M8hgdW vARYB8JtgolABk5jeL9D0zUe4fPHxyA5WtRjTi/Y+t1aLpuBklSkoLp2W9rcUq4a fbB3dDZ6lmk3aaeXc+K5BWLeO2Ecxa39lJkTvC4Mti3d7TNaxs4Com/h25XMFqf6 yBe8NbZ5mSbSSnJlJv5u/G7wHBWGg93emLKn3dMeiyLXLWrIENDVuVv45Xr1z1h8 q807et/XR+Rf2M0H8JUsdFs8TS9E6vpErwDDVpQ+USRj7WUV8kd/xBoLRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRXM1IUX5esLZwCOmf8oBeyr91ZMB8GA1UdIwQY MBaAFPZ08MjRbLtRC7of46xGhe7jVvjnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW5Ud3lORnN1MUVMdWhfanJFYUY3dU5XLU9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xNjI1NjAtYjRjNS00ZjBkLTljMDYt MThiZGY4ODQ3NDE4LzEvOW5Ud3lORnN1MUVMdWhfanJFYUY3dU5XLU9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8xNjI1NjAtYjRjNS00ZjBkLTljMDYtMThiZGY4ODQ3NDE4 LzEvOW5Ud3lORnN1MUVMdWhfanJFYUY3dU5XLU9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP8o4JqoY En4dJ+bdFigvfGmY6+ZxfgaaPZE6f9wrDXMsyN4TCwNop9bzgwI83Ei1RjnD01KX EK+U9aT22LsVzgaBy5cCOx52h0LvS24Y9pXDfj60P/alKaALcXeWKpmjPmFsB4Lc 8Uf/QvfsD1AOWTpeIpokX2GFHfEfrbJ+9TSJSJno5XpAkPp/eKe7zunQnh47sWwS +BfhTv4M3i5ULwtpbG1bilNzD7km89SB3YB9BUBSwnT31eFP4hdR/+EIzU9nvdzJ CZgDctSDOuoWTQTwNTjhzwfEFzoZoWerRFfif6IfoSpOYZte0ych2gp3mGBtLKAe UizCCvF9gn5eqQ== -----END CERTIFICATE-----Generated at Thu Jan 1 18:02:59 2026 by rpki-client