This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft File: 9YQK34T7C3WOuopaE1qYA5Pov3M.mft (raw, json) Hash identifier: Wlx46OKhfmg1Ti+CKd4hKHHIR/xnfHUAGKai/gBKyTU= Subject key identifier: 53:E8:31:A4:67:49:B5:8E:C9:44:95:9E:41:AC:14:58:FC:77:8C:4F Authority key identifier: F5:84:0A:DF:84:FB:0B:75:8E:BA:8A:5A:13:5A:98:03:93:E8:BF:73 Certificate issuer: /CN=f5840adf84fb0b758eba8a5a135a980393e8bf73 Certificate serial: 019B56AB9894B67E260C6F980D63CBA75A24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft Manifest number: 0341 Signing time: Thu 25 Dec 2025 18:00:44 +0000 Manifest this update: Thu 25 Dec 2025 18:00:44 +0000 Manifest next update: Fri 26 Dec 2025 18:00:44 +0000 Files and hashes: 1: 9YQK34T7C3WOuopaE1qYA5Pov3M.crl (hash: Tvijz8qUGbLhALRn7jJxU8w8mNkyxoJ4boRS1OVrTQc=) 2: ug_6Y8ki9EP25vsoMMlfyRj48uY.roa (hash: iRz3po2Z+C7i19HNQJqYaoWDRng24eOA7rSUnQMnMPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.crl rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:ab:98:94:b6:7e:26:0c:6f:98:0d:63:cb:a7:5a:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5840adf84fb0b758eba8a5a135a980393e8bf73 Validity Not Before: Dec 25 18:00:44 2025 GMT Not After : Dec 26 18:00:44 2025 GMT Subject: CN=53e831a46749b58ec944959e41ac1458fc778c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0e:d7:96:8d:56:ab:ce:22:08:a6:9e:45:dd: fa:7e:32:86:d8:03:1c:ce:da:1b:e2:f0:03:c2:1f: 73:7e:b3:a5:48:8b:dd:5a:6e:2b:ae:6f:7f:d2:fe: 00:e4:2a:d0:d6:1f:c1:d5:0a:c7:26:71:b3:89:f5: d1:4a:56:76:74:61:73:40:4a:e4:fb:d9:13:30:af: f3:40:f0:93:70:ee:3c:8a:c4:34:1a:f4:4b:26:4d: 8c:b0:d5:9e:7d:7f:4e:ab:ad:81:6d:29:e9:4d:d7: 03:42:47:eb:91:2b:21:b6:c9:5d:a9:d8:05:fd:73: 66:fe:0d:38:b7:fc:fa:b9:f8:6e:d3:94:68:34:6d: a2:fd:31:b9:b7:49:a9:da:d4:98:28:61:a2:75:8c: 65:2e:5b:71:72:fb:09:25:ba:3e:bb:3e:df:15:dd: 03:40:a1:fb:71:20:83:67:e7:7e:ac:37:fb:89:1e: b4:b2:10:b2:8f:c7:50:a8:2d:38:68:a1:cd:7c:1f: c9:bc:8e:fe:c7:d3:2d:c1:cc:a3:1b:08:ff:ca:26: 03:8c:46:a1:d0:56:e0:bf:51:b7:f5:1b:d9:56:a5: f1:1a:73:cd:71:04:cf:95:d4:7a:e9:fa:75:3d:32: 63:0a:b6:1a:f4:4d:1a:c1:88:2d:e7:9e:7d:a7:9b: 30:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E8:31:A4:67:49:B5:8E:C9:44:95:9E:41:AC:14:58:FC:77:8C:4F X509v3 Authority Key Identifier: keyid:F5:84:0A:DF:84:FB:0B:75:8E:BA:8A:5A:13:5A:98:03:93:E8:BF:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YQK34T7C3WOuopaE1qYA5Pov3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4f687f-42fe-47ae-a0db-4c5960ddeb37/1/9YQK34T7C3WOuopaE1qYA5Pov3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:26:4c:8c:38:f6:fb:42:b3:98:a3:b9:84:46:d0:81:82:1c: a5:2c:66:aa:31:f5:e3:69:d5:96:48:bc:9f:5f:2c:a7:ad:38: 63:3d:22:dd:b6:5b:0b:d1:42:92:ae:46:14:f4:7b:fa:91:99: 12:f8:15:53:8e:5f:cc:79:db:0c:ef:b4:3f:83:19:e2:3c:64: 34:c1:e1:65:76:6f:c9:3a:fb:d6:12:73:d2:34:13:52:bf:f4: 92:89:15:38:7d:a6:7e:54:16:c6:b4:95:be:67:e9:97:8d:ac: 17:75:0c:f5:c7:2e:f4:54:fa:6b:6c:8a:49:5f:12:df:bf:2e: b5:0c:b6:be:0e:55:0b:15:d7:b0:14:30:1d:ca:be:6e:14:a2: 54:2e:96:dd:2f:26:57:84:73:da:14:0f:92:ce:6c:96:c6:92: 12:9a:e8:c9:9e:66:10:b3:d8:f4:3a:d2:2f:15:14:c0:de:46: e3:c0:83:51:c3:6f:83:b4:9d:f6:b8:38:b4:b4:d3:1e:d6:1c: d1:6f:87:3e:d3:5f:7f:37:73:9e:7d:5e:04:17:b3:c8:eb:f9: 85:69:61:01:f6:79:a0:69:ba:86:17:af:45:c4:0f:75:5f:70: 61:00:8d:01:2e:bb:be:7d:a4:3d:12:43:a5:2d:4d:4f:ae:d1: b0:fe:3c:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWq5iUtn4mDG+YDWPLp1okMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ODQwYWRmODRmYjBiNzU4ZWJhOGE1YTEzNWE5ODAzOTNl OGJmNzMwHhcNMjUxMjI1MTgwMDQ0WhcNMjUxMjI2MTgwMDQ0WjAzMTEwLwYDVQQD Eyg1M2U4MzFhNDY3NDliNThlYzk0NDk1OWU0MWFjMTQ1OGZjNzc4YzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApA7Xlo1Wq84iCKaeRd36fjKG2AMc ztob4vADwh9zfrOlSIvdWm4rrm9/0v4A5CrQ1h/B1QrHJnGzifXRSlZ2dGFzQErk +9kTMK/zQPCTcO48isQ0GvRLJk2MsNWefX9Oq62BbSnpTdcDQkfrkSshtsldqdgF /XNm/g04t/z6ufhu05RoNG2i/TG5t0mp2tSYKGGidYxlLltxcvsJJbo+uz7fFd0D QKH7cSCDZ+d+rDf7iR60shCyj8dQqC04aKHNfB/JvI7+x9MtwcyjGwj/yiYDjEah 0Fbgv1G39RvZVqXxGnPNcQTPldR66fp1PTJjCrYa9E0awYgt5559p5swOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPoMaRnSbWOyUSVnkGsFFj8d4xPMB8GA1UdIwQY MBaAFPWECt+E+wt1jrqKWhNamAOT6L9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVlRSzM0VDdDM1dPdW9wYUUxcVlBNVBvdjNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS80ZjY4N2YtNDJmZS00N2FlLWEwZGIt NGM1OTYwZGRlYjM3LzEvOVlRSzM0VDdDM1dPdW9wYUUxcVlBNVBvdjNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS80ZjY4N2YtNDJmZS00N2FlLWEwZGItNGM1OTYwZGRlYjM3 LzEvOVlRSzM0VDdDM1dPdW9wYUUxcVlBNVBvdjNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjCZMjDj2 +0KzmKO5hEbQgYIcpSxmqjH142nVlki8n18sp604Yz0i3bZbC9FCkq5GFPR7+pGZ EvgVU45fzHnbDO+0P4MZ4jxkNMHhZXZvyTr71hJz0jQTUr/0kokVOH2mflQWxrSV vmfpl42sF3UM9ccu9FT6a2yKSV8S378utQy2vg5VCxXXsBQwHcq+bhSiVC6W3S8m V4Rz2hQPks5slsaSEproyZ5mELPY9DrSLxUUwN5G48CDUcNvg7Sd9rg4tLTTHtYc 0W+HPtNffzdznn1eBBezyOv5hWlhAfZ5oGm6hhevRcQPdV9wYQCNAS67vn2kPRJD pS1NT67RsP483Q== -----END CERTIFICATE-----Generated at Thu Dec 25 19:39:34 2025 by rpki-client