This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft File: 9pglYdLaF5Avg-_-EySZ-C1S8WM.mft (raw, json) Hash identifier: /MrJxNUaOn4KIacBGHXe/I8rTsL1Tg+gG72POaBJrjo= Subject key identifier: 17:11:06:56:B1:34:64:99:D0:6F:43:2B:8E:77:5C:B5:C8:5C:DA:4B Authority key identifier: F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63 Certificate issuer: /CN=f6982561d2da17902f83effe132499f82d52f163 Certificate serial: 019B51BCEE513583BFC1A0849A23BEFD8BB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft Manifest number: 154C Signing time: Wed 24 Dec 2025 19:01:34 +0000 Manifest this update: Wed 24 Dec 2025 19:01:34 +0000 Manifest next update: Thu 25 Dec 2025 19:01:34 +0000 Files and hashes: 1: 9ab4gsm8HWV3453txi9GuHhETfI.roa (hash: +RCpHHVjRUNbeQhE7D5a86WvNpwACKkVCiWoO5pNIb0=) 2: 9pglYdLaF5Avg-_-EySZ-C1S8WM.crl (hash: It44fRCHn418Y1uyfzeFNSHzJ68sZJ9C9upjVoa0P7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:ee:51:35:83:bf:c1:a0:84:9a:23:be:fd:8b:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6982561d2da17902f83effe132499f82d52f163 Validity Not Before: Dec 24 19:01:34 2025 GMT Not After : Dec 25 19:01:34 2025 GMT Subject: CN=17110656b1346499d06f432b8e775cb5c85cda4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:aa:d7:de:5f:71:83:c5:c4:50:b7:cf:3f:6c: ee:ef:e2:1b:6c:d8:08:6f:af:10:95:b7:0f:ea:f9: cb:96:1a:d5:6d:af:69:15:fb:3c:9c:3c:72:70:4d: 22:9f:84:2f:50:7f:70:6c:7c:e6:af:3e:12:4c:ab: 56:78:a0:d9:7f:f0:75:c9:fd:f9:1d:fe:17:09:d2: 4f:1d:dd:d9:a3:d0:fe:7a:48:11:11:86:0f:23:22: 64:36:00:44:b6:8e:2e:1d:2b:1e:4f:42:4c:3e:7c: 29:7d:0d:a5:bc:15:61:15:0d:6f:d3:f0:6b:cc:b3: 7a:cc:dd:34:fa:82:f0:b2:c2:46:9f:83:7c:bc:b2: 33:64:cd:13:bb:71:b4:3c:b9:b9:1a:e3:dc:60:34: 51:8c:44:2d:c9:8e:05:83:d0:cd:55:fe:76:18:32: a7:2f:cd:67:0c:0d:e7:1c:8a:6f:6c:1e:0b:75:a8: ce:35:47:a1:7a:e3:05:98:16:1c:99:81:39:ed:38: cd:f8:70:41:60:e8:48:09:b6:4a:49:f2:b8:e5:b1: 48:81:0d:d8:05:19:c4:42:b8:26:45:b1:34:2b:f7: 7d:88:6f:65:eb:5d:66:13:14:0b:b4:08:bb:cc:b4: 56:7d:8c:29:6e:bf:97:f7:86:5c:fa:a3:be:29:28: fd:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:11:06:56:B1:34:64:99:D0:6F:43:2B:8E:77:5C:B5:C8:5C:DA:4B X509v3 Authority Key Identifier: keyid:F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:b9:1e:36:82:05:74:47:61:6d:4d:58:f6:af:9f:b5:65:c0: 8c:2a:ff:98:b7:b6:63:1f:6e:24:ef:56:e5:d6:d4:a8:29:0f: 8f:bc:54:d8:d6:61:16:e8:59:f7:cc:41:56:ba:10:ad:ed:cd: 0a:2b:af:6e:2b:b0:d9:3d:50:3d:4c:e4:4c:dd:ad:1f:87:b6: dd:c9:ca:f7:7a:be:b4:79:ed:32:bb:dc:d9:f7:30:43:19:4c: fb:a9:e5:16:93:af:d0:f3:57:99:39:a1:d8:c6:58:ad:23:b3: 18:e0:01:94:eb:46:6c:0e:2b:3c:91:5d:53:82:68:f2:ce:23: 83:f8:ea:29:33:d1:9c:0c:8f:55:92:85:87:5a:80:96:3c:1f: ea:47:cb:e8:9b:f3:18:f4:14:e3:7f:5b:c0:66:39:ea:f4:1c: 64:8f:8a:a4:28:0a:57:e7:12:5e:b8:8e:d8:8c:6e:04:6c:c9: 1c:6e:b2:c2:51:50:15:28:1f:b5:46:95:ae:73:87:59:33:f4: c7:78:b1:7a:ef:9e:45:1c:fd:d9:42:16:de:30:27:bc:16:9c: 8b:56:db:c6:00:c3:82:97:47:3b:49:88:fa:98:9e:8b:50:f2: 03:93:22:e2:5e:bc:ac:7a:09:d1:6e:2d:fc:a1:63:5c:3c:3b: 41:ff:ea:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvO5RNYO/waCEmiO+/Yu5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OTgyNTYxZDJkYTE3OTAyZjgzZWZmZTEzMjQ5OWY4MmQ1 MmYxNjMwHhcNMjUxMjI0MTkwMTM0WhcNMjUxMjI1MTkwMTM0WjAzMTEwLwYDVQQD EygxNzExMDY1NmIxMzQ2NDk5ZDA2ZjQzMmI4ZTc3NWNiNWM4NWNkYTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzarX3l9xg8XEULfPP2zu7+IbbNgI b68QlbcP6vnLlhrVba9pFfs8nDxycE0in4QvUH9wbHzmrz4STKtWeKDZf/B1yf35 Hf4XCdJPHd3Zo9D+ekgREYYPIyJkNgBEto4uHSseT0JMPnwpfQ2lvBVhFQ1v0/Br zLN6zN00+oLwssJGn4N8vLIzZM0Tu3G0PLm5GuPcYDRRjEQtyY4Fg9DNVf52GDKn L81nDA3nHIpvbB4LdajONUeheuMFmBYcmYE57TjN+HBBYOhICbZKSfK45bFIgQ3Y BRnEQrgmRbE0K/d9iG9l611mExQLtAi7zLRWfYwpbr+X94Zc+qO+KSj9WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcRBlaxNGSZ0G9DK453XLXIXNpLMB8GA1UdIwQY MBaAFPaYJWHS2heQL4Pv/hMkmfgtUvFjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXBnbFlkTGFGNUF2Zy1fLUV5U1otQzFTOFdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wZDJiZTktZGEwYi00NjcyLTliMTQt ODczMTRkZjdkZWI0LzEvOXBnbFlkTGFGNUF2Zy1fLUV5U1otQzFTOFdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8wZDJiZTktZGEwYi00NjcyLTliMTQtODczMTRkZjdkZWI0 LzEvOXBnbFlkTGFGNUF2Zy1fLUV5U1otQzFTOFdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMLkeNoIF dEdhbU1Y9q+ftWXAjCr/mLe2Yx9uJO9W5dbUqCkPj7xU2NZhFuhZ98xBVroQre3N Ciuvbiuw2T1QPUzkTN2tH4e23cnK93q+tHntMrvc2fcwQxlM+6nlFpOv0PNXmTmh 2MZYrSOzGOABlOtGbA4rPJFdU4Jo8s4jg/jqKTPRnAyPVZKFh1qAljwf6kfL6Jvz GPQU439bwGY56vQcZI+KpCgKV+cSXriO2IxuBGzJHG6ywlFQFSgftUaVrnOHWTP0 x3ixeu+eRRz92UIW3jAnvBaci1bbxgDDgpdHO0mI+piei1DyA5Mi4l68rHoJ0W4t /KFjXDw7Qf/qrA== -----END CERTIFICATE-----Generated at Wed Dec 24 21:47:14 2025 by rpki-client