This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft File: 9LdilQ63kWZou_qNG4cFYLHKdzk.mft (raw, json) Hash identifier: jjv5XVV+jDD7Mj0xQN00sMAT8dzozQ56AR6Ty9nO2rU= Subject key identifier: 5C:7D:5E:20:B8:B0:B8:FF:1F:BA:F1:54:94:A3:7B:EA:8D:97:55:6F Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Certificate serial: 019B4136A980C2634CDE14FC4D3BFB06D85D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft Manifest number: 162D Signing time: Sun 21 Dec 2025 14:00:59 +0000 Manifest this update: Sun 21 Dec 2025 14:00:59 +0000 Manifest next update: Mon 22 Dec 2025 14:00:59 +0000 Files and hashes: 1: 1-IwPe-i1cPF2UOTcwnAaTafkpKE.roa (hash: C+s08kE7H/iYDOi2RIoW/em2Fwc3Cw5Ncha5/IZtNds=) 2: 2I_gyEpNZ4JuV81yJRUXBVu-KOA.roa (hash: r49ywNskr+Vb41Ou7x0XARQgE2G5ZH5biPRfE9u4cAc=) 3: 9LdilQ63kWZou_qNG4cFYLHKdzk.crl (hash: BzZi8rCVkVPGjraukvXVWp+V/cYTVIrpLLVMN+VlyXE=) 4: Cqe38rpbTYcW3IBIj3GE-axW20k.roa (hash: rFb4HKGqgMrSh0TmO+Kz12Dni5W90nAeu/GsQNE5QbI=) 5: RW6wxE8PmfS_l7583dlKYTuULiM.roa (hash: NA5N2aFRPb0HCLNpvXiULoI8i28V3/zHm+oTFj2hW9U=) 6: SK64q6IOo6mWG6GKDJh2tKc5K6o.roa (hash: qgKUE1YLTRWnqfYllOlTbd1qqKiMATJhnj7zQQUJZ7A=) 7: XViXWtM4Qca08fEngqnKAjV8_6k.roa (hash: FX1LXPYDV9yZbUiSRuPd/ffSUdla1CU7pMstvEpaovA=) 8: jHB-BKtE4yS4EdAExDjqPYKQ1qE.roa (hash: RrABUIpu4ptZlczjH/fM2s5sz3fOdOO4fUwiVsgsKxY=) 9: pYT69ekFAz6AyMxjupc4L7m_By4.roa (hash: Cer1nHXkBg7TmA4VluMF+Bs6hly21XolmwIlPkVMAss=) 10: plT9sGpYwtx51hS52NQppAnrW3E.roa (hash: s6yoUoG4+g3SpuQlWtBKVieuVvU6+S/6oM2dAh1J0BI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:a9:80:c2:63:4c:de:14:fc:4d:3b:fb:06:d8:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Validity Not Before: Dec 21 14:00:59 2025 GMT Not After : Dec 22 14:00:59 2025 GMT Subject: CN=5c7d5e20b8b0b8ff1fbaf15494a37bea8d97556f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:07:e5:9a:2d:87:27:99:5f:ea:ed:04:af:3e: 2a:ae:07:b2:96:dc:6e:3b:e9:ba:c1:6a:b6:ca:4f: 6f:7c:87:6b:0a:db:ca:d3:59:65:49:37:f1:be:a4: 56:ec:b4:c3:b4:fd:79:d9:dd:56:4a:6b:09:a9:e6: 65:4a:42:5d:15:ab:bd:da:9a:32:8c:30:9a:a8:de: 48:f0:6a:6f:8d:90:2f:37:52:d5:8e:7c:78:3a:45: 41:5b:75:8b:94:ba:9a:3b:2d:64:e5:29:56:c0:8e: d1:39:93:ae:e0:75:ef:92:ab:82:71:62:a7:a9:55: 0b:64:10:10:61:af:6c:85:b4:1c:ef:8c:79:fb:45: 8a:54:32:a4:5a:4f:b7:37:a3:7b:6e:84:df:25:01: 90:1a:ed:f8:13:95:11:25:17:dc:73:42:c8:bc:4e: f9:9a:a9:c2:4b:bc:c3:95:c4:f1:1d:94:1b:54:e1: 74:f0:55:02:fc:3b:3f:38:24:e1:58:4c:f2:42:a2: 06:4f:16:dc:3b:37:e9:d1:6a:f7:f6:b6:ee:f9:55: 61:4c:2f:56:f2:ef:36:fa:43:18:ac:06:8a:f6:11: 20:79:e0:a9:4f:fb:0c:56:b6:89:b1:0e:1a:d5:a4: bf:77:81:76:aa:e5:11:09:a2:be:47:b6:3d:fc:ce: ff:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:7D:5E:20:B8:B0:B8:FF:1F:BA:F1:54:94:A3:7B:EA:8D:97:55:6F X509v3 Authority Key Identifier: keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:e0:67:55:1d:0c:18:c1:a2:89:aa:1d:b2:7a:3d:d8:24:48: 9d:76:6f:aa:21:fb:36:5f:a2:d7:e9:45:4b:69:d6:2a:72:b9: 22:28:49:9f:50:41:ac:9a:54:25:cc:56:ec:8a:3c:f9:8b:5d: 00:2b:e4:c2:48:22:64:83:0e:65:83:d5:a8:e7:25:ee:ca:0e: 4c:27:93:cd:52:76:c6:46:f8:fb:f8:fb:6d:fc:95:c4:e8:7f: 2a:63:a5:93:6c:c3:b8:18:83:d6:1f:ec:bf:46:ad:d9:f1:a7: ae:5e:d5:3e:20:36:c2:a9:38:7e:4c:f3:33:5a:11:60:52:bf: c3:2f:4a:08:ec:59:05:02:8e:5a:de:94:fd:1e:a3:88:d7:74: d7:c5:06:b7:85:b1:30:d5:01:2f:ef:88:00:14:86:12:d8:cb: 29:ce:15:00:bc:ae:f3:9d:8a:83:2a:20:4c:4a:6f:d5:af:07: 75:20:8e:2d:46:84:7e:38:ac:e4:f1:f7:68:cf:1d:45:1a:04: b5:9a:8a:84:c8:f0:e7:6a:05:98:4a:c3:52:c1:26:ab:16:24: 63:4d:5d:8b:b8:26:b0:92:bc:e4:3a:52:a6:d3:41:8a:d6:e5: 3c:0f:66:fe:af:b6:40:4a:1f:7f:eb:8f:61:33:c4:ca:43:74: 7c:4b:3c:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNqmAwmNM3hT8TTv7BthdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2Mjk1MGViNzkxNjY2OGJiZmE4ZDFiODcwNTYwYjFj YTc3MzkwHhcNMjUxMjIxMTQwMDU5WhcNMjUxMjIyMTQwMDU5WjAzMTEwLwYDVQQD Eyg1YzdkNWUyMGI4YjBiOGZmMWZiYWYxNTQ5NGEzN2JlYThkOTc1NTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAflmi2HJ5lf6u0Erz4qrgeyltxu O+m6wWq2yk9vfIdrCtvK01llSTfxvqRW7LTDtP152d1WSmsJqeZlSkJdFau92poy jDCaqN5I8GpvjZAvN1LVjnx4OkVBW3WLlLqaOy1k5SlWwI7ROZOu4HXvkquCcWKn qVULZBAQYa9shbQc74x5+0WKVDKkWk+3N6N7boTfJQGQGu34E5URJRfcc0LIvE75 mqnCS7zDlcTxHZQbVOF08FUC/Ds/OCThWEzyQqIGTxbcOzfp0Wr39rbu+VVhTC9W 8u82+kMYrAaK9hEgeeCpT/sMVraJsQ4a1aS/d4F2quURCaK+R7Y9/M7/oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFx9XiC4sLj/H7rxVJSje+qNl1VvMB8GA1UdIwQY MBaAFPS3YpUOt5FmaLv6jRuHBWCxync5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAt MmY4ZGYxODdmOThiLzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAtMmY4ZGYxODdmOThi LzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+BnVR0M GMGiiaodsno92CRInXZvqiH7Nl+i1+lFS2nWKnK5IihJn1BBrJpUJcxW7Io8+Ytd ACvkwkgiZIMOZYPVqOcl7soOTCeTzVJ2xkb4+/j7bfyVxOh/KmOlk2zDuBiD1h/s v0at2fGnrl7VPiA2wqk4fkzzM1oRYFK/wy9KCOxZBQKOWt6U/R6jiNd018UGt4Wx MNUBL++IABSGEtjLKc4VALyu852KgyogTEpv1a8HdSCOLUaEfjis5PH3aM8dRRoE tZqKhMjw52oFmErDUsEmqxYkY01di7gmsJK85DpSptNBitblPA9m/q+2QEoff+uP YTPEykN0fEs8Uw== -----END CERTIFICATE-----Generated at Mon Dec 22 00:03:46 2025 by rpki-client