This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft File: D5uga20iZz9_ez0PiJ9HIEQbbgw.mft (raw, json) Hash identifier: iy3XT6KwqFlDmgHsO3LLg6gWqW+oiMbDY8IVyw1Fw9E= Subject key identifier: 9F:E8:6D:73:4A:F4:07:45:63:9F:54:98:6A:85:AB:4A:D4:CF:8A:30 Authority key identifier: 0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C Certificate issuer: /CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c Certificate serial: 019B42B753408208A389608CEAC617EA6119 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft Manifest number: 073C Signing time: Sun 21 Dec 2025 21:01:09 +0000 Manifest this update: Sun 21 Dec 2025 21:01:09 +0000 Manifest next update: Mon 22 Dec 2025 21:01:09 +0000 Files and hashes: 1: D5uga20iZz9_ez0PiJ9HIEQbbgw.crl (hash: 48YmjVTq+wi9CnQYihsu7f72T3yVE0EubU+K/U6k6Ms=) 2: dpEQqFiEzcBminPXKwfV-PABopw.roa (hash: aNr5tdVzzBcZX6IXpoVPaBnNNk42qKTnrWG6P7E7Joo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:53:40:82:08:a3:89:60:8c:ea:c6:17:ea:61:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f9ba06b6d22673f7f7b3d0f889f4720441b6e0c Validity Not Before: Dec 21 21:01:09 2025 GMT Not After : Dec 22 21:01:09 2025 GMT Subject: CN=9fe86d734af40745639f54986a85ab4ad4cf8a30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f4:74:9a:71:86:09:a1:54:12:e7:c3:b7:bf: 49:16:96:bf:b6:6a:33:5c:74:67:11:28:11:0e:d4: 70:e1:ca:e4:db:17:bd:54:4c:e1:38:4c:0d:3c:37: fa:31:cc:d1:ee:fb:68:57:2b:0e:5d:ce:d4:48:97: d0:40:5e:6b:f7:c6:33:aa:22:ff:ea:18:7e:53:35: f3:10:7e:63:48:46:54:31:4b:76:b7:fa:07:15:3e: 2e:d3:93:e6:ce:39:23:00:b0:15:cf:6e:49:3f:18: e5:eb:55:11:c0:bc:31:2e:70:cc:47:36:1e:8b:4c: 61:f9:62:c7:ea:44:f0:5d:74:43:22:bd:18:21:d0: f4:c4:c1:b4:de:69:82:e2:ea:d5:48:df:72:81:1a: 7a:9c:ea:2e:98:b0:7b:1d:f4:b7:d4:e3:a3:2e:91: 59:db:73:4c:66:36:6c:43:22:d6:d3:70:8c:96:06: 2e:ca:75:a4:15:78:fc:32:f4:8f:56:0c:55:c0:7c: 52:58:0c:1d:bf:04:b3:00:37:ba:c0:87:a0:88:91: c8:49:ed:5f:76:b2:df:b2:75:3f:a4:94:81:d3:6a: 7e:49:2a:ab:a2:6f:37:2c:42:38:e9:3f:95:f5:00: 87:1e:62:ee:f5:48:af:c7:b1:82:26:cc:09:04:f2: 28:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E8:6D:73:4A:F4:07:45:63:9F:54:98:6A:85:AB:4A:D4:CF:8A:30 X509v3 Authority Key Identifier: keyid:0F:9B:A0:6B:6D:22:67:3F:7F:7B:3D:0F:88:9F:47:20:44:1B:6E:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5uga20iZz9_ez0PiJ9HIEQbbgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/37c8ff-187f-4d91-b4d6-136656a3ede7/1/D5uga20iZz9_ez0PiJ9HIEQbbgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ed:76:4a:87:6b:96:7c:7d:eb:d7:17:58:68:4e:b2:f9:88: 1d:f8:a9:b9:a7:3f:02:92:f5:60:77:20:41:c5:55:1c:2c:ad: 2c:e5:7c:46:ff:a7:f1:dd:3f:c9:c0:df:e9:d6:28:1f:3e:80: e8:25:2e:c8:2d:de:eb:1e:80:01:94:97:10:a8:62:9f:21:f7: 8d:44:43:5f:21:cf:75:a9:fa:76:70:de:4f:8d:bf:8c:55:58: 2f:36:8e:ed:d7:5c:59:e2:c6:00:71:3a:f8:9d:1f:4c:0d:c4: 7b:58:57:e8:c7:90:1b:94:2c:f6:88:60:f4:00:7a:7c:4d:7e: fc:fd:93:d6:fc:dd:59:79:32:61:38:0c:d2:65:95:ef:c4:94: b4:f1:97:3d:21:f1:b2:4b:61:41:1a:20:c3:9d:39:aa:96:b8: f9:03:bb:d9:71:02:85:a9:9d:f3:c5:f5:01:d1:0c:f9:c9:8b: 1f:9a:00:eb:2d:92:df:78:69:e1:83:3e:bc:f0:b5:76:96:6e: 37:a9:7e:a2:d1:10:55:4f:1c:00:e5:a8:cc:b6:88:ff:9e:cb: 92:45:33:bc:b7:3a:16:eb:ac:29:a8:19:06:70:db:a3:c5:3a: b5:2a:02:80:13:80:97:2b:21:aa:82:91:02:9d:30:4c:a9:40: de:e1:b5:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt1NAggijiWCM6sYX6mEZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOWJhMDZiNmQyMjY3M2Y3ZjdiM2QwZjg4OWY0NzIwNDQx YjZlMGMwHhcNMjUxMjIxMjEwMTA5WhcNMjUxMjIyMjEwMTA5WjAzMTEwLwYDVQQD Eyg5ZmU4NmQ3MzRhZjQwNzQ1NjM5ZjU0OTg2YTg1YWI0YWQ0Y2Y4YTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivR0mnGGCaFUEufDt79JFpa/tmoz XHRnESgRDtRw4crk2xe9VEzhOEwNPDf6MczR7vtoVysOXc7USJfQQF5r98YzqiL/ 6hh+UzXzEH5jSEZUMUt2t/oHFT4u05PmzjkjALAVz25JPxjl61URwLwxLnDMRzYe i0xh+WLH6kTwXXRDIr0YIdD0xMG03mmC4urVSN9ygRp6nOoumLB7HfS31OOjLpFZ 23NMZjZsQyLW03CMlgYuynWkFXj8MvSPVgxVwHxSWAwdvwSzADe6wIegiJHISe1f drLfsnU/pJSB02p+SSqrom83LEI46T+V9QCHHmLu9Uivx7GCJswJBPIoywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/obXNK9AdFY59UmGqFq0rUz4owMB8GA1UdIwQY MBaAFA+boGttImc/f3s9D4ifRyBEG24MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDV1Z2EyMGlaejlfZXowUGlKOUhJRVFiYmd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zN2M4ZmYtMTg3Zi00ZDkxLWI0ZDYt MTM2NjU2YTNlZGU3LzEvRDV1Z2EyMGlaejlfZXowUGlKOUhJRVFiYmd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zN2M4ZmYtMTg3Zi00ZDkxLWI0ZDYtMTM2NjU2YTNlZGU3 LzEvRDV1Z2EyMGlaejlfZXowUGlKOUhJRVFiYmd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnO12Sodr lnx969cXWGhOsvmIHfipuac/ApL1YHcgQcVVHCytLOV8Rv+n8d0/ycDf6dYoHz6A 6CUuyC3e6x6AAZSXEKhinyH3jURDXyHPdan6dnDeT42/jFVYLzaO7ddcWeLGAHE6 +J0fTA3Ee1hX6MeQG5Qs9ohg9AB6fE1+/P2T1vzdWXkyYTgM0mWV78SUtPGXPSHx skthQRogw505qpa4+QO72XEChamd88X1AdEM+cmLH5oA6y2S33hp4YM+vPC1dpZu N6l+otEQVU8cAOWozLaI/57LkkUzvLc6FuusKagZBnDbo8U6tSoCgBOAlyshqoKR Ap0wTKlA3uG1fA== -----END CERTIFICATE-----Generated at Mon Dec 22 00:50:40 2025 by rpki-client