This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft File: guY1_s7xcQnhrHiy-3IkENhHepw.mft (raw, json) Hash identifier: mo8XBMoksi4tRd92CDccH//3t0wjo0qIFp4usEcgDbo= Subject key identifier: 47:90:6C:69:F4:07:C2:0B:E2:09:29:17:16:8A:FD:66:81:70:47:80 Authority key identifier: 82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C Certificate issuer: /CN=82e635fecef17109e1ac78b2fb722410d8477a9c Certificate serial: 019B4E84F37211DD723091BA1A35686260EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 04:01:34 +0000 Manifest this update: Wed 24 Dec 2025 04:01:34 +0000 Manifest next update: Thu 25 Dec 2025 04:01:34 +0000 Files and hashes: 1: ZBzIfVthsK0IsXsJf3cg7sZHKWM.roa (hash: QAbyT2QSC2brj0n8JNXKmo27qkYMllHPEba5ZlKG1ys=) 2: guY1_s7xcQnhrHiy-3IkENhHepw.crl (hash: hWM0Vk9oO29/o+CseLMoyXzWsxt/UX6ZD2muAciLnQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 04:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:f3:72:11:dd:72:30:91:ba:1a:35:68:62:60:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=82e635fecef17109e1ac78b2fb722410d8477a9c Validity Not Before: Dec 24 04:01:34 2025 GMT Not After : Dec 25 04:01:34 2025 GMT Subject: CN=47906c69f407c20be2092917168afd6681704780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e5:be:8a:d9:4d:cd:44:52:35:39:85:69:89: ac:93:97:0f:f3:de:05:33:e6:8b:fd:17:8f:a5:f9: 3a:9d:74:44:15:7e:2f:c3:30:ee:10:cb:e6:1b:83: 29:f8:70:4e:c0:93:f5:ad:03:f4:3a:d0:11:20:0c: b9:a7:39:0f:5e:42:e0:8b:1d:fe:71:ca:09:68:4b: a6:54:28:9c:16:f2:6a:9b:0f:0a:b2:b3:9e:fa:3e: ee:1f:19:4f:97:f1:94:6a:34:44:90:56:55:57:3f: ba:21:94:c6:10:5d:08:00:86:09:b9:b1:a3:df:78: 32:7d:57:68:23:dc:41:82:c0:ec:10:84:bd:79:bf: fd:03:1b:ca:6d:e7:0f:a6:9f:92:5a:af:53:ff:3c: 2f:f5:37:05:29:96:7f:cd:5d:d4:66:b0:97:d9:59: eb:8d:06:96:f6:1c:92:f0:2e:35:98:89:7c:e7:f3: 33:56:52:4f:c6:8a:97:45:ec:0e:b2:9f:3c:5e:63: ad:54:d0:b0:9a:c1:66:32:4b:4b:c4:f3:67:85:c0: 42:9a:2f:38:21:c9:5a:c6:e6:f0:0d:b9:7e:52:99: 7e:59:18:3e:50:de:34:c8:22:a4:04:9c:68:e0:4f: 31:68:25:5c:25:4e:4d:2e:b2:10:b6:dd:29:9f:59: 08:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:90:6C:69:F4:07:C2:0B:E2:09:29:17:16:8A:FD:66:81:70:47:80 X509v3 Authority Key Identifier: keyid:82:E6:35:FE:CE:F1:71:09:E1:AC:78:B2:FB:72:24:10:D8:47:7A:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guY1_s7xcQnhrHiy-3IkENhHepw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/9f9858-6209-4cf5-b541-a26050ef047e/1/guY1_s7xcQnhrHiy-3IkENhHepw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ca:c1:b9:c5:e3:15:e1:49:59:71:c9:a9:a5:b1:d1:d7:b7: 5e:7f:ed:67:83:bf:59:51:98:90:eb:f7:d5:0a:1b:1b:1a:d1: a1:6e:67:41:3b:9c:c1:d9:a2:91:75:b9:2e:51:3b:a1:bf:52: 03:db:24:6d:1e:7c:ce:25:0e:87:e2:12:57:42:b8:1c:1d:2c: 61:87:91:a0:a6:0b:de:aa:46:8f:23:a6:ed:7f:d3:69:d3:14: 40:23:25:2a:92:dc:1a:d8:1a:96:56:0c:81:08:e5:47:74:6b: c3:1f:dd:b4:28:f1:bd:ec:b8:a0:f2:d3:40:f8:c8:73:f0:66: d8:38:34:7d:6c:e9:54:13:d6:2c:81:63:f1:f4:01:c7:00:cb: fa:25:2c:5e:82:f1:88:85:17:bf:d7:a0:81:28:63:7f:bc:47: 65:54:8c:f3:ae:0c:1b:c9:78:33:db:72:3e:77:b5:df:0e:2d: 93:cd:0b:09:09:dc:32:dd:66:80:9f:2c:e9:82:65:67:11:48: 25:9c:27:88:97:3a:b6:5f:e6:ff:9b:11:3b:18:3b:f3:49:ab: dc:c8:9f:9c:b6:3b:f8:b6:91:cd:61:3f:58:f1:80:65:61:15: 21:04:11:81:d3:af:5b:f5:a5:f1:2b:02:8c:c8:98:52:05:27: 65:1b:53:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhPNyEd1yMJG6GjVoYmDvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyZTYzNWZlY2VmMTcxMDllMWFjNzhiMmZiNzIyNDEwZDg0 NzdhOWMwHhcNMjUxMjI0MDQwMTM0WhcNMjUxMjI1MDQwMTM0WjAzMTEwLwYDVQQD Eyg0NzkwNmM2OWY0MDdjMjBiZTIwOTI5MTcxNjhhZmQ2NjgxNzA0NzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+W+itlNzURSNTmFaYmsk5cP894F M+aL/RePpfk6nXREFX4vwzDuEMvmG4Mp+HBOwJP1rQP0OtARIAy5pzkPXkLgix3+ ccoJaEumVCicFvJqmw8KsrOe+j7uHxlPl/GUajREkFZVVz+6IZTGEF0IAIYJubGj 33gyfVdoI9xBgsDsEIS9eb/9AxvKbecPpp+SWq9T/zwv9TcFKZZ/zV3UZrCX2Vnr jQaW9hyS8C41mIl85/MzVlJPxoqXRewOsp88XmOtVNCwmsFmMktLxPNnhcBCmi84 IclaxubwDbl+Upl+WRg+UN40yCKkBJxo4E8xaCVcJU5NLrIQtt0pn1kIwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEeQbGn0B8IL4gkpFxaK/WaBcEeAMB8GA1UdIwQY MBaAFILmNf7O8XEJ4ax4svtyJBDYR3qcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3VZMV9zN3hjUW5ockhpeS0zSWtFTmhIZXB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS85Zjk4NTgtNjIwOS00Y2Y1LWI1NDEt YTI2MDUwZWYwNDdlLzEvZ3VZMV9zN3hjUW5ockhpeS0zSWtFTmhIZXB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS85Zjk4NTgtNjIwOS00Y2Y1LWI1NDEtYTI2MDUwZWYwNDdl LzEvZ3VZMV9zN3hjUW5ockhpeS0zSWtFTmhIZXB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbMrBucXj FeFJWXHJqaWx0de3Xn/tZ4O/WVGYkOv31QobGxrRoW5nQTucwdmikXW5LlE7ob9S A9skbR58ziUOh+ISV0K4HB0sYYeRoKYL3qpGjyOm7X/TadMUQCMlKpLcGtgallYM gQjlR3Rrwx/dtCjxvey4oPLTQPjIc/Bm2Dg0fWzpVBPWLIFj8fQBxwDL+iUsXoLx iIUXv9eggShjf7xHZVSM864MG8l4M9tyPne13w4tk80LCQncMt1mgJ8s6YJlZxFI JZwniJc6tl/m/5sROxg780mr3MifnLY7+LaRzWE/WPGAZWEVIQQRgdOvW/Wl8SsC jMiYUgUnZRtTyA== -----END CERTIFICATE-----Generated at Wed Dec 24 11:29:38 2025 by rpki-client