This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft File: 9fDwfKCmtMssFZ6QRZdFA64ohYE.mft (raw, json) Hash identifier: 9hRuZDjz5FWN1jFg9iRHLZLardoRsvX4b9ar2r1BTaw= Subject key identifier: C9:D5:50:56:B4:DC:B7:91:8B:E3:AE:DD:9B:77:0B:D1:9E:E3:CD:4F Authority key identifier: F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81 Certificate issuer: /CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581 Certificate serial: 019B3AC674E46804793044297959A4051F54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft Manifest number: EE Signing time: Sat 20 Dec 2025 08:00:43 +0000 Manifest this update: Sat 20 Dec 2025 08:00:43 +0000 Manifest next update: Sun 21 Dec 2025 08:00:43 +0000 Files and hashes: 1: 9fDwfKCmtMssFZ6QRZdFA64ohYE.crl (hash: UEJbFIb0+bQ1gYztqmM0uh99WWp0fFTlyNZYPxz8Z3Y=) 2: _TKV-DpdXmei2SR3rrnjoUIFNqQ.roa (hash: R5raBHMEiNG8zclHwaLQB17jXPqQeZzFe9QNn7MrSYM=) 3: c25XUVb4Bk3AvdWuVyNrTQybFGc.roa (hash: j4cV2DVaLOTZm+S8euSjn/Ih9FV1aHPND9PujtBd3s0=) 4: q764NZ2C5xrpkP8LBsmdVe7f1dw.roa (hash: sLViIw17i8ukMTeK1rHQJp904qo/JWVcyaL9gru+PTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:74:e4:68:04:79:30:44:29:79:59:a4:05:1f:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581 Validity Not Before: Dec 20 08:00:43 2025 GMT Not After : Dec 21 08:00:43 2025 GMT Subject: CN=c9d55056b4dcb7918be3aedd9b770bd19ee3cd4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:74:de:00:e4:17:6f:d6:18:b2:09:ff:f7:de: 58:e7:d9:e5:c8:3f:8e:b4:e2:02:c2:c2:95:06:9f: be:6f:b6:33:43:62:78:58:96:97:67:3b:25:f2:5e: fd:80:4f:eb:cc:d0:51:aa:1d:15:f6:c6:92:17:d4: 7b:89:cf:c2:a4:57:0a:72:64:9a:1d:a2:90:2a:01: 6e:98:a0:7c:9d:90:9c:3f:77:77:42:cb:ff:96:17: 87:91:bc:f1:3c:50:77:df:50:e9:89:d5:0f:c6:ea: f9:8f:e5:dc:b2:1b:5c:9b:d9:8a:18:2e:6c:8b:79: 50:79:1e:25:bf:4d:07:65:93:16:a8:53:d4:b5:fa: 5b:70:14:1f:19:4d:99:22:ea:82:36:7d:de:a2:99: 60:d5:47:36:b9:e1:8e:1f:40:a9:2c:b5:0a:c2:2d: 54:2e:33:9b:e1:83:18:57:2c:5f:fa:ae:ca:2e:c3: 65:24:7e:38:4f:e8:fb:32:6f:92:90:1c:cc:fd:9b: 39:2d:c7:dd:ab:29:f2:b9:73:a4:90:26:a2:f2:9c: 9a:b5:02:b7:a7:ea:86:d4:9b:b7:f9:18:53:7f:56: 29:5e:4e:a2:d2:d2:5f:b3:ca:16:4a:0f:16:ae:7b: 8f:36:3e:b3:85:c1:0e:49:e1:ab:99:c2:a9:ad:45: e2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D5:50:56:B4:DC:B7:91:8B:E3:AE:DD:9B:77:0B:D1:9E:E3:CD:4F X509v3 Authority Key Identifier: keyid:F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:9d:86:9c:11:36:07:5d:8b:26:7a:e9:cd:e5:cf:67:89:57: 83:54:89:d4:ee:c8:53:95:70:c9:2e:89:77:a4:a5:b7:1f:34: f6:af:fa:f7:62:fc:a8:da:cc:d1:a4:a9:b2:17:2b:11:28:3a: 28:96:29:8a:37:91:48:53:7a:af:5d:de:a3:5a:af:a8:18:bb: 6b:9e:63:f3:9f:ae:27:71:fd:34:45:7f:11:0d:5a:c5:60:d9: d8:ba:41:0b:6a:ae:78:40:bf:17:f3:2b:2e:85:dd:4e:14:25: c8:4d:43:f2:de:e1:63:ce:02:e8:72:91:c0:6a:c5:e7:b1:8b: a2:0a:6a:9c:c0:7b:36:bb:52:5e:3b:36:e9:dc:d7:c6:0e:d2: f1:e0:0d:1a:31:59:47:03:66:e9:e8:a4:be:a1:00:aa:c3:79: 79:4c:f8:1a:5d:05:59:28:16:1a:cc:07:6a:3b:0a:75:9d:a5: 59:d0:23:d5:6f:c9:c9:04:cb:82:c7:9c:88:45:19:56:95:09: df:e7:c5:ad:42:d0:93:57:85:9a:3e:70:9e:a0:d3:0f:47:6a: 23:b7:85:10:f0:68:f6:58:2d:53:4f:cb:e0:e4:fb:92:03:5c: 23:d0:7a:14:64:4d:f6:e3:91:68:8a:43:41:75:f6:4c:b1:11: 55:cb:8c:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xnTkaAR5MEQpeVmkBR9UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZjBmMDdjYTBhNmI0Y2IyYzE1OWU5MDQ1OTc0NTAzYWUy ODg1ODEwHhcNMjUxMjIwMDgwMDQzWhcNMjUxMjIxMDgwMDQzWjAzMTEwLwYDVQQD EyhjOWQ1NTA1NmI0ZGNiNzkxOGJlM2FlZGQ5Yjc3MGJkMTllZTNjZDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHTeAOQXb9YYsgn/995Y59nlyD+O tOICwsKVBp++b7YzQ2J4WJaXZzsl8l79gE/rzNBRqh0V9saSF9R7ic/CpFcKcmSa HaKQKgFumKB8nZCcP3d3Qsv/lheHkbzxPFB331DpidUPxur5j+Xcshtcm9mKGC5s i3lQeR4lv00HZZMWqFPUtfpbcBQfGU2ZIuqCNn3eoplg1Uc2ueGOH0CpLLUKwi1U LjOb4YMYVyxf+q7KLsNlJH44T+j7Mm+SkBzM/Zs5LcfdqynyuXOkkCai8pyatQK3 p+qG1Ju3+RhTf1YpXk6i0tJfs8oWSg8WrnuPNj6zhcEOSeGrmcKprUXiEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnVUFa03LeRi+Ou3Zt3C9Ge481PMB8GA1UdIwQY MBaAFPXw8HygprTLLBWekEWXRQOuKIWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZEd2ZLQ210TXNzRlo2UVJaZEZBNjRvaFlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lYjBkOTEtNzA4Yy00OTEwLTg0Zjkt MzIzNDg2Y2EwNTQwLzEvOWZEd2ZLQ210TXNzRlo2UVJaZEZBNjRvaFlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9lYjBkOTEtNzA4Yy00OTEwLTg0ZjktMzIzNDg2Y2EwNTQw LzEvOWZEd2ZLQ210TXNzRlo2UVJaZEZBNjRvaFlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANp2GnBE2 B12LJnrpzeXPZ4lXg1SJ1O7IU5VwyS6Jd6Sltx809q/692L8qNrM0aSpshcrESg6 KJYpijeRSFN6r13eo1qvqBi7a55j85+uJ3H9NEV/EQ1axWDZ2LpBC2queEC/F/Mr LoXdThQlyE1D8t7hY84C6HKRwGrF57GLogpqnMB7NrtSXjs26dzXxg7S8eANGjFZ RwNm6eikvqEAqsN5eUz4Gl0FWSgWGswHajsKdZ2lWdAj1W/JyQTLgseciEUZVpUJ 3+fFrULQk1eFmj5wnqDTD0dqI7eFEPBo9lgtU0/L4OT7kgNcI9B6FGRN9uORaIpD QXX2TLERVcuMNQ== -----END CERTIFICATE-----Generated at Sat Dec 20 15:04:38 2025 by rpki-client