This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft File: 9XwaqtuDIN2EMjVFjPLFy_RwStY.mft (raw, json) Hash identifier: xezC4KYxd/EtrPnAV/9+QPPkjozQhIemgnOCLt1dDro= Subject key identifier: 8B:6B:6E:0F:71:14:F7:7D:58:FA:70:28:94:F7:E4:B9:0D:C6:F0:2C Authority key identifier: F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6 Certificate issuer: /CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6 Certificate serial: 019B6BE9B8ECD27C1E790B0DB7690F51BD9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft Manifest number: 0990 Signing time: Mon 29 Dec 2025 21:00:37 +0000 Manifest this update: Mon 29 Dec 2025 21:00:37 +0000 Manifest next update: Tue 30 Dec 2025 21:00:37 +0000 Files and hashes: 1: 9XwaqtuDIN2EMjVFjPLFy_RwStY.crl (hash: l7FIG9e1hn9JUeXx5RfyUYMvr9/bsQJuHO5jkKa44Rc=) 2: _uDFPWLhrv5u3Xk-4kqIlFYREDE.roa (hash: 9Mmw31ED2MDyHvlXnlSZHoSwRiyKNLbz2bvW/sip0UM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 21:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:e9:b8:ec:d2:7c:1e:79:0b:0d:b7:69:0f:51:bd:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f57c1aaadb8320dd843235458cf2c5cbf4704ad6 Validity Not Before: Dec 29 21:00:37 2025 GMT Not After : Dec 30 21:00:37 2025 GMT Subject: CN=8b6b6e0f7114f77d58fa702894f7e4b90dc6f02c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7f:81:78:33:e1:d3:6e:98:bd:7b:15:85:dc: 61:1c:eb:1e:7e:f5:d6:2f:bc:30:c4:73:e8:d3:06: 32:99:ff:83:d5:76:64:16:ea:d6:78:65:e9:55:ac: 95:b0:7e:5b:43:8d:d2:33:30:ea:a4:f7:f8:f9:13: ec:cd:84:d2:49:5a:24:f9:74:82:ca:ed:d3:00:7f: 66:78:47:4f:f2:cd:71:50:c7:50:ee:a8:cf:c6:26: fa:e2:d7:f4:5e:ec:32:ac:ec:b2:c6:68:38:9e:4e: 08:ec:d6:6d:fe:48:61:d4:2f:3e:8b:e6:ec:1e:64: d1:9c:11:b7:44:b3:c3:68:81:3a:95:c4:e6:79:30: 0a:6e:f4:2d:08:57:67:0a:e2:a4:52:49:39:2b:a8: f4:df:9a:0d:6f:6c:48:52:f4:29:4d:36:f6:2b:e0: 03:2d:f8:d9:42:41:2d:97:c4:f0:b6:8b:72:a7:aa: 8b:a6:51:db:93:a9:e6:2a:53:b1:48:66:42:df:fc: 0f:32:29:38:72:ac:4d:07:49:92:02:4f:d2:a7:ef: 54:0b:e1:fc:3b:05:72:2d:a4:a9:f2:44:8b:fa:bb: a1:0c:24:33:ab:ec:dd:56:76:a7:71:30:4d:a3:9b: b4:d2:83:ab:50:1e:37:7c:d6:c4:cf:3b:71:e2:b3: 98:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:6B:6E:0F:71:14:F7:7D:58:FA:70:28:94:F7:E4:B9:0D:C6:F0:2C X509v3 Authority Key Identifier: keyid:F5:7C:1A:AA:DB:83:20:DD:84:32:35:45:8C:F2:C5:CB:F4:70:4A:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XwaqtuDIN2EMjVFjPLFy_RwStY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c3e871-20cc-44f4-bfa0-a1856dd7b5d8/1/9XwaqtuDIN2EMjVFjPLFy_RwStY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a2:07:19:83:88:22:42:82:ef:35:5f:73:35:26:62:df:2a: ea:da:b1:40:03:ac:90:aa:94:93:8e:b4:f8:6b:38:90:1e:d6: a9:49:9a:3a:ca:d2:01:9d:5e:10:43:3e:aa:75:d5:4b:34:46: 6b:97:a2:b5:6a:11:44:13:3b:89:f4:92:0f:12:42:76:36:b3: d6:c2:03:1c:84:dd:a2:51:53:41:8a:a7:7a:67:a2:5d:a6:e9: fd:0a:9f:db:99:b1:88:a4:d4:cc:36:57:5d:58:61:b6:ed:ea: 37:ad:e8:b7:cc:eb:b7:91:19:00:f6:06:26:12:e6:dc:03:45: f7:ce:6b:d3:92:c0:28:61:3c:68:37:f4:95:56:e2:23:38:d4: 7e:44:98:b3:06:63:b0:f5:da:25:23:2c:7c:56:de:dd:02:29: f9:17:b7:fc:be:22:bf:51:f4:ae:74:4b:85:af:35:52:d0:e5: 48:b2:0b:5e:1c:22:58:70:10:41:a6:a8:6c:bb:a2:51:f7:82: 4f:3b:64:bb:71:d3:e2:5a:d8:19:68:32:32:b1:8a:83:ce:8f: d2:50:a6:2b:b2:7e:76:cf:32:c7:7d:65:30:03:4a:08:ea:d6: 54:90:db:30:84:2d:ee:17:f4:88:bc:93:74:4f:b8:4a:cf:dd: 7b:7e:9c:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtr6bjs0nweeQsNt2kPUb2bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1N2MxYWFhZGI4MzIwZGQ4NDMyMzU0NThjZjJjNWNiZjQ3 MDRhZDYwHhcNMjUxMjI5MjEwMDM3WhcNMjUxMjMwMjEwMDM3WjAzMTEwLwYDVQQD Eyg4YjZiNmUwZjcxMTRmNzdkNThmYTcwMjg5NGY3ZTRiOTBkYzZmMDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH+BeDPh026YvXsVhdxhHOsefvXW L7wwxHPo0wYymf+D1XZkFurWeGXpVayVsH5bQ43SMzDqpPf4+RPszYTSSVok+XSC yu3TAH9meEdP8s1xUMdQ7qjPxib64tf0XuwyrOyyxmg4nk4I7NZt/khh1C8+i+bs HmTRnBG3RLPDaIE6lcTmeTAKbvQtCFdnCuKkUkk5K6j035oNb2xIUvQpTTb2K+AD LfjZQkEtl8Twtotyp6qLplHbk6nmKlOxSGZC3/wPMik4cqxNB0mSAk/Sp+9UC+H8 OwVyLaSp8kSL+ruhDCQzq+zdVnancTBNo5u00oOrUB43fNbEzztx4rOYgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItrbg9xFPd9WPpwKJT35LkNxvAsMB8GA1UdIwQY MBaAFPV8GqrbgyDdhDI1RYzyxcv0cErWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVh3YXF0dURJTjJFTWpWRmpQTEZ5X1J3U3RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jM2U4NzEtMjBjYy00NGY0LWJmYTAt YTE4NTZkZDdiNWQ4LzEvOVh3YXF0dURJTjJFTWpWRmpQTEZ5X1J3U3RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jM2U4NzEtMjBjYy00NGY0LWJmYTAtYTE4NTZkZDdiNWQ4 LzEvOVh3YXF0dURJTjJFTWpWRmpQTEZ5X1J3U3RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqIHGYOI IkKC7zVfczUmYt8q6tqxQAOskKqUk460+Gs4kB7WqUmaOsrSAZ1eEEM+qnXVSzRG a5eitWoRRBM7ifSSDxJCdjaz1sIDHITdolFTQYqnemeiXabp/Qqf25mxiKTUzDZX XVhhtu3qN63ot8zrt5EZAPYGJhLm3ANF985r05LAKGE8aDf0lVbiIzjUfkSYswZj sPXaJSMsfFbe3QIp+Re3/L4iv1H0rnRLha81UtDlSLILXhwiWHAQQaaobLuiUfeC Tztku3HT4lrYGWgyMrGKg86P0lCmK7J+ds8yx31lMANKCOrWVJDbMIQt7hf0iLyT dE+4Ss/de36cEg== -----END CERTIFICATE-----Generated at Tue Dec 30 02:11:46 2025 by rpki-client