This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft File: h9tx9pGbDvmO78mWSSiodRAjagM.mft (raw, json) Hash identifier: 9imDBYr9LvljfEidB6yhO+mFbdMNXPG+hc6vUh2XZGs= Subject key identifier: 06:51:D3:60:6C:18:32:C7:DF:98:80:B6:0A:E0:55:9A:A6:E1:71:48 Authority key identifier: 87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03 Certificate issuer: /CN=87db71f6919b0ef98eefc9964928a87510236a03 Certificate serial: 019B755A68A362E719720DD19E6DD75E737F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft Manifest number: 0C59 Signing time: Wed 31 Dec 2025 17:00:17 +0000 Manifest this update: Wed 31 Dec 2025 17:00:17 +0000 Manifest next update: Thu 01 Jan 2026 17:00:17 +0000 Files and hashes: 1: h9tx9pGbDvmO78mWSSiodRAjagM.crl (hash: 2bkOPOGGnuDHGwh/6MuGCdBWaICRb/bHc6koXsZfmbM=) 2: k9VkkHu7wqpz0IelVxE8bU-qY6o.roa (hash: vCMb7FvkUh1quiKigDU5pU3f6Rl+/OZ8cn/L/kTas88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 16:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:5a:68:a3:62:e7:19:72:0d:d1:9e:6d:d7:5e:73:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87db71f6919b0ef98eefc9964928a87510236a03 Validity Not Before: Dec 31 17:00:17 2025 GMT Not After : Jan 1 17:00:17 2026 GMT Subject: CN=0651d3606c1832c7df9880b60ae0559aa6e17148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:61:13:96:27:88:d1:38:a7:1d:bb:4b:fc:ba: fc:57:33:54:58:13:93:b8:39:26:c5:a4:e6:7f:31: 49:f2:00:18:b8:5d:a1:b2:66:ab:ff:96:c0:73:f2: 7a:a5:52:01:9b:02:ec:67:bd:9c:0a:08:06:db:61: 44:a9:fa:82:38:bb:16:0c:c4:f9:40:2e:d8:b3:9e: c4:75:57:82:ac:d7:3f:07:04:af:ac:05:1a:b4:67: 68:9c:c1:26:25:86:ce:91:29:ab:8e:aa:73:3a:b2: e4:c0:86:19:5d:22:44:ae:9b:e0:97:e3:8d:fe:64: 7d:30:c0:45:94:c0:1d:c6:52:90:f8:c2:2f:fb:87: 25:e8:dc:8c:2b:62:c9:e6:09:8a:10:aa:df:59:94: 53:0b:6b:64:5b:93:75:2e:c6:2e:c4:b6:42:c1:7e: 87:26:0e:dd:03:c2:c3:5e:19:44:e7:09:26:64:74: 3d:8d:d0:ed:75:d9:33:02:cb:a2:bf:7f:60:33:dc: 83:fa:a4:19:62:7c:c4:13:b4:a5:99:4c:ec:db:bf: d6:46:4c:50:e2:29:0c:8f:3a:67:fb:af:e6:eb:55: f1:8b:04:89:bd:3f:12:7a:1a:87:90:8c:41:3a:87: aa:51:a6:ad:bd:17:4b:7f:ab:52:0b:43:c7:5b:0f: b1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:51:D3:60:6C:18:32:C7:DF:98:80:B6:0A:E0:55:9A:A6:E1:71:48 X509v3 Authority Key Identifier: keyid:87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:1e:c9:5c:b5:1d:78:85:58:1f:f9:6b:3b:f0:5f:7b:fa:1e: 8b:d3:55:e4:71:e2:dd:04:ca:65:c1:2f:41:66:a8:98:1f:00: 0a:15:64:8a:a3:0a:8e:26:74:ea:4c:55:f7:44:e5:b5:56:77: 21:c0:43:4a:b9:c8:8a:bf:55:3d:bc:bc:3a:ce:9c:aa:30:69: e2:75:d9:c3:5c:f6:74:48:e4:1b:49:b7:c4:72:54:01:99:bd: 73:c1:c7:f8:98:80:50:88:c1:68:90:6f:34:f1:29:18:cd:5a: 3a:f0:73:e8:b8:a8:39:b4:49:dc:fc:b3:29:71:22:67:65:19: 99:92:2e:40:ca:1a:42:bb:63:45:a9:52:09:d3:68:ee:10:2e: a8:3f:f1:4d:98:19:87:05:d8:0e:34:51:9c:b1:db:46:cf:66: 48:13:89:ac:07:5f:9b:fe:3c:0c:bf:51:29:36:62:a7:94:e6: 5b:cd:8b:b0:f9:bc:47:30:1e:d7:f0:2b:fa:34:93:64:66:87: d4:d4:11:28:50:1b:ca:d9:77:dd:24:6e:88:c8:44:9d:bc:5f: 70:c4:e8:e7:6f:f0:50:4d:66:c3:27:89:7d:74:04:b2:33:2f: 73:e3:94:9d:6a:43:7b:e0:6e:a4:42:da:ea:8e:01:37:1e:0c: f7:e8:f0:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1WmijYucZcg3Rnm3XXnN/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZGI3MWY2OTE5YjBlZjk4ZWVmYzk5NjQ5MjhhODc1MTAy MzZhMDMwHhcNMjUxMjMxMTcwMDE3WhcNMjYwMTAxMTcwMDE3WjAzMTEwLwYDVQQD EygwNjUxZDM2MDZjMTgzMmM3ZGY5ODgwYjYwYWUwNTU5YWE2ZTE3MTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GETlieI0TinHbtL/Lr8VzNUWBOT uDkmxaTmfzFJ8gAYuF2hsmar/5bAc/J6pVIBmwLsZ72cCggG22FEqfqCOLsWDMT5 QC7Ys57EdVeCrNc/BwSvrAUatGdonMEmJYbOkSmrjqpzOrLkwIYZXSJErpvgl+ON /mR9MMBFlMAdxlKQ+MIv+4cl6NyMK2LJ5gmKEKrfWZRTC2tkW5N1LsYuxLZCwX6H Jg7dA8LDXhlE5wkmZHQ9jdDtddkzAsuiv39gM9yD+qQZYnzEE7SlmUzs27/WRkxQ 4ikMjzpn+6/m61XxiwSJvT8SehqHkIxBOoeqUaatvRdLf6tSC0PHWw+xjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZR02BsGDLH35iAtgrgVZqm4XFIMB8GA1UdIwQY MBaAFIfbcfaRmw75ju/JlkkoqHUQI2oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDl0eDlwR2JEdm1PNzhtV1NTaW9kUkFqYWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9lZjYyNzctNzBiNS00MzQ4LWE1ODIt OTA0YTA4MDMxYTlmLzEvaDl0eDlwR2JEdm1PNzhtV1NTaW9kUkFqYWdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9lZjYyNzctNzBiNS00MzQ4LWE1ODItOTA0YTA4MDMxYTlm LzEvaDl0eDlwR2JEdm1PNzhtV1NTaW9kUkFqYWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAox7JXLUd eIVYH/lrO/Bfe/oei9NV5HHi3QTKZcEvQWaomB8AChVkiqMKjiZ06kxV90TltVZ3 IcBDSrnIir9VPby8Os6cqjBp4nXZw1z2dEjkG0m3xHJUAZm9c8HH+JiAUIjBaJBv NPEpGM1aOvBz6LioObRJ3PyzKXEiZ2UZmZIuQMoaQrtjRalSCdNo7hAuqD/xTZgZ hwXYDjRRnLHbRs9mSBOJrAdfm/48DL9RKTZip5TmW82LsPm8RzAe1/Ar+jSTZGaH 1NQRKFAbytl33SRuiMhEnbxfcMTo52/wUE1mwyeJfXQEsjMvc+OUnWpDe+BupELa 6o4BNx4M9+jwFA== -----END CERTIFICATE-----Generated at Wed Dec 31 21:05:56 2025 by rpki-client