This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft File: _9YayMVuOP32EjgDbHNUcnADRjE.mft (raw, json) Hash identifier: 4nU1AovYZaHAzN873/WdhtCCkFKzHTWRJOj17hl7Bj0= Subject key identifier: 7C:71:3B:06:B7:1E:97:4A:EA:CB:5F:04:C2:EC:C2:A0:E2:D9:90:94 Authority key identifier: FF:D6:1A:C8:C5:6E:38:FD:F6:12:38:03:6C:73:54:72:70:03:46:31 Certificate issuer: /CN=ffd61ac8c56e38fdf61238036c73547270034631 Certificate serial: 019B624264775036961389EB9DE20FF4D383 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft Manifest number: 179B Signing time: Sun 28 Dec 2025 00:01:16 +0000 Manifest this update: Sun 28 Dec 2025 00:01:16 +0000 Manifest next update: Mon 29 Dec 2025 00:01:16 +0000 Files and hashes: 1: _9YayMVuOP32EjgDbHNUcnADRjE.crl (hash: T7KvwFiKVx5Y2PV6VJVG1KAoEUFuPokbBp7psRDXF3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:42:64:77:50:36:96:13:89:eb:9d:e2:0f:f4:d3:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffd61ac8c56e38fdf61238036c73547270034631 Validity Not Before: Dec 28 00:01:16 2025 GMT Not After : Dec 29 00:01:16 2025 GMT Subject: CN=7c713b06b71e974aeacb5f04c2ecc2a0e2d99094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:be:03:87:60:69:0d:5a:eb:ec:c1:31:33:d5: 97:c3:83:ac:27:25:3e:cb:02:ae:bb:47:09:a3:1c: 3d:d8:b7:17:3f:c9:fc:9b:ff:1a:a5:59:19:c6:51: db:c5:3d:da:d1:ff:3c:d7:82:a6:72:34:46:05:8a: f3:b1:f2:8d:93:84:bd:e2:50:5e:f3:48:04:6a:76: 4a:39:02:b1:74:42:39:8e:26:d2:a3:40:f5:20:fd: 4f:33:c7:03:b7:ba:46:cc:0a:a3:06:83:58:db:c3: d2:5d:06:f0:25:ab:d5:36:b0:78:01:42:48:eb:3f: f2:81:ab:3c:f2:87:8a:df:c8:e3:24:31:ec:1f:b4: 93:0e:13:78:88:06:82:b0:76:cb:1b:3f:a9:1f:1a: 30:3c:85:b9:92:94:d2:8b:95:bd:ab:7d:f6:ab:a0: 2e:21:34:fc:71:56:79:3c:d7:04:e6:31:cc:93:ac: 4b:25:47:9f:aa:8f:ed:b5:9f:e0:59:64:60:c9:8d: eb:30:b9:af:39:24:b3:c1:cd:f5:09:07:cd:0c:2e: 62:bf:f0:f3:23:74:e5:0d:76:a9:a3:fa:cb:68:9d: 18:41:9b:4d:0f:f3:81:ba:4a:0e:e2:36:79:f2:1a: 6b:f7:cb:3c:cd:ac:88:16:3a:b3:c4:aa:e3:72:ae: cf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:71:3B:06:B7:1E:97:4A:EA:CB:5F:04:C2:EC:C2:A0:E2:D9:90:94 X509v3 Authority Key Identifier: keyid:FF:D6:1A:C8:C5:6E:38:FD:F6:12:38:03:6C:73:54:72:70:03:46:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9YayMVuOP32EjgDbHNUcnADRjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/14d7b8-afce-45a1-b272-04d96fa83d07/1/_9YayMVuOP32EjgDbHNUcnADRjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:af:1d:01:a7:75:24:a5:f0:12:27:c0:11:8c:1b:ce:81:9f: e4:8e:a4:2d:03:90:78:a2:1d:a9:17:64:d8:48:23:3c:55:91: 8c:94:db:7c:91:bf:1c:4e:28:04:19:66:e3:5c:5b:5b:89:2c: c2:c6:37:27:b9:2d:8d:55:c5:4a:6d:3f:60:ef:8f:54:1e:cb: b1:0a:f1:ac:be:66:d3:a8:5b:c9:c6:35:36:64:fa:3d:f7:96: c5:9c:3b:11:65:af:fd:b0:d8:69:c0:ce:fc:be:61:8b:d4:03: 69:ed:1c:0c:af:0b:dc:8f:66:41:7f:85:df:cc:67:26:bc:28: f8:16:6d:88:de:1a:50:20:f5:e7:de:91:61:7d:14:0e:a7:63: 67:35:fd:f8:d8:91:bb:53:1c:9b:e1:34:26:da:4d:96:27:f2: 14:13:e5:94:28:04:cd:f9:ae:e6:9c:03:cf:23:ee:e7:87:e4: 3b:aa:2c:c4:46:ee:66:06:74:c4:7e:45:48:89:5b:d3:40:f9: fe:26:7d:77:9d:79:39:b5:8d:2b:2e:1f:d1:5a:1b:76:07:d1: 80:60:b6:ba:5b:ad:27:a3:d9:67:e7:8e:b3:f7:af:41:fd:7b: af:c0:67:16:c0:03:49:41:ac:2a:d3:91:7f:ff:6c:a8:8b:c9: fb:a7:f7:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiQmR3UDaWE4nrneIP9NODMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZDYxYWM4YzU2ZTM4ZmRmNjEyMzgwMzZjNzM1NDcyNzAw MzQ2MzEwHhcNMjUxMjI4MDAwMTE2WhcNMjUxMjI5MDAwMTE2WjAzMTEwLwYDVQQD Eyg3YzcxM2IwNmI3MWU5NzRhZWFjYjVmMDRjMmVjYzJhMGUyZDk5MDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkL4Dh2BpDVrr7MExM9WXw4OsJyU+ ywKuu0cJoxw92LcXP8n8m/8apVkZxlHbxT3a0f8814KmcjRGBYrzsfKNk4S94lBe 80gEanZKOQKxdEI5jibSo0D1IP1PM8cDt7pGzAqjBoNY28PSXQbwJavVNrB4AUJI 6z/ygas88oeK38jjJDHsH7STDhN4iAaCsHbLGz+pHxowPIW5kpTSi5W9q332q6Au ITT8cVZ5PNcE5jHMk6xLJUefqo/ttZ/gWWRgyY3rMLmvOSSzwc31CQfNDC5iv/Dz I3TlDXapo/rLaJ0YQZtND/OBukoO4jZ58hpr98s8zayIFjqzxKrjcq7PSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxxOwa3HpdK6stfBMLswqDi2ZCUMB8GA1UdIwQY MBaAFP/WGsjFbjj99hI4A2xzVHJwA0YxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzlZYXlNVnVPUDMyRWpnRGJITlVjbkFEUmpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8xNGQ3YjgtYWZjZS00NWExLWIyNzIt MDRkOTZmYTgzZDA3LzEvXzlZYXlNVnVPUDMyRWpnRGJITlVjbkFEUmpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8xNGQ3YjgtYWZjZS00NWExLWIyNzItMDRkOTZmYTgzZDA3 LzEvXzlZYXlNVnVPUDMyRWpnRGJITlVjbkFEUmpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQa8dAad1 JKXwEifAEYwbzoGf5I6kLQOQeKIdqRdk2EgjPFWRjJTbfJG/HE4oBBlm41xbW4ks wsY3J7ktjVXFSm0/YO+PVB7LsQrxrL5m06hbycY1NmT6PfeWxZw7EWWv/bDYacDO /L5hi9QDae0cDK8L3I9mQX+F38xnJrwo+BZtiN4aUCD1596RYX0UDqdjZzX9+NiR u1Mcm+E0JtpNlifyFBPllCgEzfmu5pwDzyPu54fkO6osxEbuZgZ0xH5FSIlb00D5 /iZ9d515ObWNKy4f0VobdgfRgGC2ulutJ6PZZ+eOs/evQf17r8BnFsADSUGsKtOR f/9sqIvJ+6f3gw== -----END CERTIFICATE-----Generated at Sun Dec 28 06:42:58 2025 by rpki-client