This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft File: 9fgHODUdz8da-ZaZOikpw3E0ogg.mft (raw, json) Hash identifier: ILBFu8WsTTWgcJlm8IaUfQG7RDUbMyWHIA/ALM3vV58= Subject key identifier: 52:53:94:C5:04:54:1F:DC:75:0D:9F:4E:E6:64:0D:E2:42:09:A7:64 Authority key identifier: F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08 Certificate issuer: /CN=f5f80738351dcfc75af996993a2929c37134a208 Certificate serial: 019B27ADEF17D9AF89BF4941F721EE570911 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft Manifest number: 1177 Signing time: Tue 16 Dec 2025 15:01:08 +0000 Manifest this update: Tue 16 Dec 2025 15:01:08 +0000 Manifest next update: Wed 17 Dec 2025 15:01:08 +0000 Files and hashes: 1: 2Qdf3KbNG5NqoZJX8HW2axOKIks.roa (hash: aZGBYQ1YtddzlVOGQVr+1nQgozPaUhvPhqEz391ISKs=) 2: 9fgHODUdz8da-ZaZOikpw3E0ogg.crl (hash: 4sBkrSL0E93H/H6hw9+CK7ntSkwgveh3SoCzEClte8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ad:ef:17:d9:af:89:bf:49:41:f7:21:ee:57:09:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f80738351dcfc75af996993a2929c37134a208 Validity Not Before: Dec 16 15:01:08 2025 GMT Not After : Dec 17 15:01:08 2025 GMT Subject: CN=525394c504541fdc750d9f4ee6640de24209a764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ad:44:fb:9f:8e:1f:b3:7a:34:1c:6f:72:92: 45:84:6f:1d:1c:16:dd:ca:8f:9d:c2:f1:b9:21:7e: fe:37:e1:41:10:c1:00:f0:98:ca:f4:f1:69:9f:95: a2:2c:2e:87:52:ea:f9:00:9d:46:8f:4f:03:43:f5: 91:e2:08:7b:60:44:7c:91:b1:c9:6a:a4:64:a0:17: f2:0b:a4:1d:a3:b3:5e:a7:5b:0d:e6:46:4e:3a:1c: c8:fb:2d:3d:62:82:2a:c4:58:7c:99:3f:7e:11:ae: 87:64:74:a6:db:b3:64:b2:5d:b9:24:3f:9b:e6:9f: 88:bb:45:f0:f8:16:c8:f2:b2:4c:f4:e5:8f:14:e8: ec:2f:d7:73:6d:d1:2a:7f:23:45:5e:30:0d:b6:f7: 21:d0:6f:66:fd:d3:ef:7a:8b:7d:e6:85:b5:c6:c8: 29:24:d1:26:24:2e:09:ac:8e:86:c9:c0:81:ea:ef: 60:0c:db:42:a8:52:a3:9d:ae:53:c3:9f:9b:bd:a1: ef:03:88:c8:3a:46:bb:4a:cc:48:5d:bc:cb:cb:a6: d0:69:08:4f:b9:bf:55:bb:f7:42:e1:24:27:27:25: cc:fb:24:29:c4:c0:e1:c1:5f:8a:0f:8f:0a:81:c4: 56:33:2d:9f:4a:3c:10:04:a9:a9:1b:58:10:df:b3: 29:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:53:94:C5:04:54:1F:DC:75:0D:9F:4E:E6:64:0D:E2:42:09:A7:64 X509v3 Authority Key Identifier: keyid:F5:F8:07:38:35:1D:CF:C7:5A:F9:96:99:3A:29:29:C3:71:34:A2:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fgHODUdz8da-ZaZOikpw3E0ogg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/a4d378-485c-4b51-a726-ea8411d572ae/1/9fgHODUdz8da-ZaZOikpw3E0ogg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f4:d3:e0:95:c6:68:52:a6:68:00:d1:3c:10:a2:aa:4d:7a: 72:33:7d:ff:07:1f:46:f8:12:f0:50:5e:a9:0d:e1:a9:95:99: 2e:ca:1b:ad:fc:05:cb:57:9d:84:60:31:07:8b:06:f1:ab:9d: cf:15:f7:91:75:66:50:f9:27:f0:30:4e:36:90:f4:64:e4:94: 8d:a9:20:09:f6:01:27:b4:04:ea:65:1b:30:bb:2c:58:34:21: bf:fe:c9:79:68:bc:e9:13:67:ac:96:fd:dc:23:da:60:08:b8: ee:d4:91:79:b7:9c:0e:35:f6:b1:dd:1f:b6:86:a4:dc:b1:ee: 29:1b:ab:8b:73:ff:cf:52:6f:45:4b:ca:db:0c:0b:9f:c2:45: d2:1a:3c:ee:ab:73:43:fa:26:8a:a1:b0:e2:63:e5:39:0c:5e: 33:05:ac:ac:56:29:42:17:a0:b6:08:bd:10:16:db:c5:30:81: ea:6c:bb:24:12:f2:9f:cc:db:e6:d8:73:ed:ea:9e:b5:5a:3a: ff:1e:e7:3d:5c:79:60:78:68:64:52:94:e5:cc:5a:11:d7:b9: 67:a0:5a:e2:e9:d1:82:26:61:62:47:91:af:0d:f1:c8:81:69: ad:14:70:5d:30:5a:a7:35:42:b4:15:00:4c:6d:b5:76:ec:9e: 21:e7:96:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnre8X2a+Jv0lB9yHuVwkRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZjgwNzM4MzUxZGNmYzc1YWY5OTY5OTNhMjkyOWMzNzEz NGEyMDgwHhcNMjUxMjE2MTUwMTA4WhcNMjUxMjE3MTUwMTA4WjAzMTEwLwYDVQQD Eyg1MjUzOTRjNTA0NTQxZmRjNzUwZDlmNGVlNjY0MGRlMjQyMDlhNzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt61E+5+OH7N6NBxvcpJFhG8dHBbd yo+dwvG5IX7+N+FBEMEA8JjK9PFpn5WiLC6HUur5AJ1Gj08DQ/WR4gh7YER8kbHJ aqRkoBfyC6Qdo7Nep1sN5kZOOhzI+y09YoIqxFh8mT9+Ea6HZHSm27Nksl25JD+b 5p+Iu0Xw+BbI8rJM9OWPFOjsL9dzbdEqfyNFXjANtvch0G9m/dPveot95oW1xsgp JNEmJC4JrI6GycCB6u9gDNtCqFKjna5Tw5+bvaHvA4jIOka7SsxIXbzLy6bQaQhP ub9Vu/dC4SQnJyXM+yQpxMDhwV+KD48KgcRWMy2fSjwQBKmpG1gQ37MpEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJTlMUEVB/cdQ2fTuZkDeJCCadkMB8GA1UdIwQY MBaAFPX4Bzg1Hc/HWvmWmTopKcNxNKIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZnSE9EVWR6OGRhLVphWk9pa3B3M0Uwb2dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9hNGQzNzgtNDg1Yy00YjUxLWE3MjYt ZWE4NDExZDU3MmFlLzEvOWZnSE9EVWR6OGRhLVphWk9pa3B3M0Uwb2dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9hNGQzNzgtNDg1Yy00YjUxLWE3MjYtZWE4NDExZDU3MmFl LzEvOWZnSE9EVWR6OGRhLVphWk9pa3B3M0Uwb2dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvTT4JXG aFKmaADRPBCiqk16cjN9/wcfRvgS8FBeqQ3hqZWZLsobrfwFy1edhGAxB4sG8aud zxX3kXVmUPkn8DBONpD0ZOSUjakgCfYBJ7QE6mUbMLssWDQhv/7JeWi86RNnrJb9 3CPaYAi47tSRebecDjX2sd0ftoak3LHuKRuri3P/z1JvRUvK2wwLn8JF0ho87qtz Q/omiqGw4mPlOQxeMwWsrFYpQhegtgi9EBbbxTCB6my7JBLyn8zb5thz7eqetVo6 /x7nPVx5YHhoZFKU5cxaEde5Z6Ba4unRgiZhYkeRrw3xyIFprRRwXTBapzVCtBUA TG21duyeIeeWSQ== -----END CERTIFICATE-----Generated at Wed Dec 17 00:11:32 2025 by rpki-client