This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft File: 9gcH8oeiMJvuy7hS7kCqgxueeGY.mft (raw, json) Hash identifier: b4SC7GUEwIx0zpX0ZEQbSUSwS0uDlIOU96gJQycqaMQ= Subject key identifier: 25:50:A0:E7:F3:61:67:B5:C9:83:A7:D5:21:43:70:FF:DF:42:00:1C Authority key identifier: F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66 Certificate issuer: /CN=f60707f287a2309beecbb852ee40aa831b9e7866 Certificate serial: 019B45B7FD6FDC31D000D1DA76E2A76F8ED0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft Manifest number: 0E3A Signing time: Mon 22 Dec 2025 11:00:44 +0000 Manifest this update: Mon 22 Dec 2025 11:00:44 +0000 Manifest next update: Tue 23 Dec 2025 11:00:44 +0000 Files and hashes: 1: 1qWzBwVhmQ6zdPJi5w7aMEYeKoc.roa (hash: QUUw5IgATMBX8godfHfSxzPR3Se/paZBDUtUUYMUESM=) 2: 9gcH8oeiMJvuy7hS7kCqgxueeGY.crl (hash: SXQDACuZ1wNu7kEE7odYs3M5kqpOGm/A7uY0Pvmz5H8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b7:fd:6f:dc:31:d0:00:d1:da:76:e2:a7:6f:8e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60707f287a2309beecbb852ee40aa831b9e7866 Validity Not Before: Dec 22 11:00:44 2025 GMT Not After : Dec 23 11:00:44 2025 GMT Subject: CN=2550a0e7f36167b5c983a7d5214370ffdf42001c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7e:d9:69:43:a1:38:44:58:86:08:f7:8a:7d: 4a:c5:93:96:20:3c:85:2e:22:b4:60:0d:0d:92:58: 1b:10:68:16:39:19:c5:85:f9:60:e6:8b:b1:8d:6a: 07:9c:5e:fd:7c:4f:ee:17:75:ce:ab:88:5c:e7:94: 25:b4:4d:2d:51:98:f0:5b:fc:3e:82:33:2a:88:67: 5d:20:d4:5a:5d:4a:61:39:50:02:e0:00:71:90:8c: 12:a4:ad:94:08:8a:a6:62:a3:23:12:18:c6:01:ca: 6c:82:05:bd:2a:6a:14:9a:72:a5:e5:76:93:ae:78: bf:39:d0:a2:d1:d8:0a:e6:39:62:7b:75:74:c0:1f: f6:50:80:22:1f:6d:64:67:d9:ce:f4:74:86:db:95: b9:65:8e:c9:1b:a6:7e:ca:f7:4c:9a:cc:88:aa:1c: da:1b:b0:a3:b2:c2:16:e7:81:fa:71:3a:97:f7:93: 20:be:4c:c2:d8:1a:13:91:3e:b1:58:0e:d9:96:1a: 8b:0a:97:b3:d7:5c:07:6e:33:fb:be:1c:3e:16:7d: 65:52:d6:39:a2:1a:82:f8:a0:3e:ba:e5:f0:1c:79: 0b:66:a0:e0:d8:6b:f7:0d:a4:c4:73:85:85:87:dd: 51:da:94:49:43:e4:d8:f9:6d:da:2b:01:61:fc:3b: 0e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:50:A0:E7:F3:61:67:B5:C9:83:A7:D5:21:43:70:FF:DF:42:00:1C X509v3 Authority Key Identifier: keyid:F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:96:a9:17:b6:ed:07:4d:1d:5b:56:25:6b:95:60:e3:a1:6e: 79:37:1a:df:0e:8b:f5:46:5c:92:53:08:b3:db:da:18:3c:ed: f2:29:3c:94:dd:d0:12:76:47:0f:30:c7:c8:2e:f6:c6:5c:1a: c4:f2:62:37:0f:f7:75:20:5b:a5:da:8e:97:da:77:47:37:4b: c8:4c:68:a8:a2:6c:bd:9a:a9:60:ff:c1:b4:bb:3c:fc:dd:d2: ce:8d:2d:85:82:9b:27:67:aa:d0:51:6e:7a:23:04:a1:c4:43: 7f:1e:99:8a:0d:75:d4:34:9d:bf:05:9b:f1:ee:29:45:b8:c9: 06:8d:0a:b2:4a:42:05:19:f3:0e:4c:4c:61:cb:49:7e:fd:ea: b8:04:f6:e3:6d:77:24:95:6b:3d:9e:92:71:eb:51:18:8b:4e: 42:6b:2e:76:ff:29:a0:03:0e:76:af:5d:23:86:95:2c:e8:03: bc:36:43:8f:6f:20:aa:4b:c1:ed:6b:be:60:ea:e5:36:4d:bc: 06:ef:99:49:91:82:74:a5:bf:0b:be:b5:7d:35:32:dd:ba:08: 9f:92:94:58:7c:97:79:34:02:e4:df:64:7a:ec:88:f1:c4:91: f5:25:2f:1e:f7:ee:e0:96:a3:67:e4:61:01:9a:c1:ed:f7:b2: d1:d5:fd:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFt/1v3DHQANHaduKnb47QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MDcwN2YyODdhMjMwOWJlZWNiYjg1MmVlNDBhYTgzMWI5 ZTc4NjYwHhcNMjUxMjIyMTEwMDQ0WhcNMjUxMjIzMTEwMDQ0WjAzMTEwLwYDVQQD EygyNTUwYTBlN2YzNjE2N2I1Yzk4M2E3ZDUyMTQzNzBmZmRmNDIwMDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq37ZaUOhOERYhgj3in1KxZOWIDyF LiK0YA0NklgbEGgWORnFhflg5ouxjWoHnF79fE/uF3XOq4hc55QltE0tUZjwW/w+ gjMqiGddINRaXUphOVAC4ABxkIwSpK2UCIqmYqMjEhjGAcpsggW9KmoUmnKl5XaT rni/OdCi0dgK5jlie3V0wB/2UIAiH21kZ9nO9HSG25W5ZY7JG6Z+yvdMmsyIqhza G7CjssIW54H6cTqX95MgvkzC2BoTkT6xWA7ZlhqLCpez11wHbjP7vhw+Fn1lUtY5 ohqC+KA+uuXwHHkLZqDg2Gv3DaTEc4WFh91R2pRJQ+TY+W3aKwFh/DsO6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVQoOfzYWe1yYOn1SFDcP/fQgAcMB8GA1UdIwQY MBaAFPYHB/KHojCb7su4Uu5AqoMbnnhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWdjSDhvZWlNSnZ1eTdoUzdrQ3FneHVlZUdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hM2E3MDgtYzY2OS00NzdmLTlkM2It ZTVmYTM1MGY4ZmE4LzEvOWdjSDhvZWlNSnZ1eTdoUzdrQ3FneHVlZUdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9hM2E3MDgtYzY2OS00NzdmLTlkM2ItZTVmYTM1MGY4ZmE4 LzEvOWdjSDhvZWlNSnZ1eTdoUzdrQ3FneHVlZUdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARpapF7bt B00dW1Yla5Vg46FueTca3w6L9UZcklMIs9vaGDzt8ik8lN3QEnZHDzDHyC72xlwa xPJiNw/3dSBbpdqOl9p3RzdLyExoqKJsvZqpYP/BtLs8/N3Szo0thYKbJ2eq0FFu eiMEocRDfx6Zig111DSdvwWb8e4pRbjJBo0KskpCBRnzDkxMYctJfv3quAT24213 JJVrPZ6ScetRGItOQmsudv8poAMOdq9dI4aVLOgDvDZDj28gqkvB7Wu+YOrlNk28 Bu+ZSZGCdKW/C761fTUy3boIn5KUWHyXeTQC5N9keuyI8cSR9SUvHvfu4JajZ+Rh AZrB7fey0dX99g== -----END CERTIFICATE-----Generated at Mon Dec 22 14:29:43 2025 by rpki-client