This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft File: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft (raw, json) Hash identifier: xNxCdl41jDi2aQFQdNYwYJy1Z1Xg3P3U34hDbrMOOFE= Subject key identifier: DE:12:6D:8F:47:D1:AA:B6:D8:68:96:AF:50:D8:7A:73:85:F3:6A:CC Authority key identifier: F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D Certificate issuer: /CN=f457c020cdc22b68da26a469f6ffa6b448370d1d Certificate serial: 019B3DFE4EE68E626863CFDA0E3E654AF5B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft Manifest number: 0B6A Signing time: Sat 20 Dec 2025 23:00:34 +0000 Manifest this update: Sat 20 Dec 2025 23:00:34 +0000 Manifest next update: Sun 21 Dec 2025 23:00:34 +0000 Files and hashes: 1: 9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl (hash: r7QvKjm2MkmV4Pn2guMuiShgfilbR2zhTQzysWOsvmU=) 2: rVvEPxI-l2KV5RW4qoRYscyYDw4.roa (hash: 0O6ssmxEK7LDtpVncPYWugPc3GeZirxznz/PZThAqb0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:4e:e6:8e:62:68:63:cf:da:0e:3e:65:4a:f5:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f457c020cdc22b68da26a469f6ffa6b448370d1d Validity Not Before: Dec 20 23:00:34 2025 GMT Not After : Dec 21 23:00:34 2025 GMT Subject: CN=de126d8f47d1aab6d86896af50d87a7385f36acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:6e:91:56:39:5e:d2:44:1a:81:54:f4:cf:8a: 61:83:00:88:e5:32:b3:36:cf:13:21:b9:11:7d:e0: b5:fa:38:c5:b6:33:79:22:67:de:cd:63:61:77:1c: 88:53:0d:54:e2:51:95:23:24:2c:de:78:46:8e:5b: 2c:48:e7:a9:b2:e0:a5:1e:55:8c:1b:05:14:dc:a1: 6e:5a:70:15:aa:05:2a:e4:62:0e:64:fa:bf:7c:98: d5:ac:92:3d:eb:bc:9f:4c:83:15:e0:6f:6d:7d:1e: a2:6a:32:4d:48:0b:f8:fe:23:90:f6:da:80:b9:af: 0b:e5:fa:fc:14:45:9b:42:cb:4c:df:b8:19:14:ba: 09:44:01:86:7e:27:83:53:53:0b:ae:37:64:6c:7c: 6b:5f:57:39:1b:f6:1d:e0:47:df:90:d2:1a:15:69: 83:1a:52:ca:5c:16:59:3e:0d:0c:af:1f:ff:9f:cf: 8c:08:04:2d:ea:5a:00:e7:70:a9:d6:2c:70:44:b2: 4f:12:44:c9:e1:c3:99:b4:f6:04:47:e5:48:38:a1: 39:32:fb:1c:77:44:47:ca:56:cc:d8:9b:ea:a1:8a: 18:58:3b:d7:85:a1:05:8c:77:c6:07:52:9b:c2:05: c0:cb:10:f4:bf:33:c5:fd:d4:94:68:42:34:d4:4d: 81:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:12:6D:8F:47:D1:AA:B6:D8:68:96:AF:50:D8:7A:73:85:F3:6A:CC X509v3 Authority Key Identifier: keyid:F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:93:6e:58:41:21:c0:66:5c:64:6b:57:fd:e3:00:19:fe:4f: 3e:ae:ce:0c:33:1f:bf:ca:4f:f6:bc:07:eb:74:74:c3:c1:81: fd:7b:39:4d:8f:b6:13:bb:64:72:01:5e:7b:2a:41:a8:1d:1f: 26:d3:78:fd:01:f3:f4:81:79:8b:60:20:60:d2:b1:93:3c:c5: a4:f1:29:14:06:d9:07:fe:dc:e9:c2:f0:3a:42:52:1a:c5:02: 2a:02:77:b8:12:da:f9:4f:00:21:2b:7f:43:6b:f4:f4:f9:73: af:eb:f6:d9:14:78:37:c5:d6:0b:4e:bd:40:a2:5e:cc:c8:39: 2d:15:6e:af:a2:0f:39:10:77:8c:a5:17:25:e2:aa:8b:aa:9c: c7:40:fa:e1:20:b7:8d:ac:98:1a:00:80:00:c4:46:61:2b:49: 6a:69:e8:c8:74:38:de:71:84:76:a5:3b:b1:65:f1:34:34:7b: eb:b6:a2:e9:d2:0d:1a:14:82:80:9e:f3:22:60:a0:c1:46:6a: d6:89:db:e7:fe:b6:e3:b0:da:03:d4:4d:6f:64:1e:49:07:ce: 68:93:4d:1c:41:8c:3a:00:b9:3a:e5:39:3f:fb:20:14:fc:8e: 14:3f:90:da:e0:69:a9:13:90:c7:b3:e4:de:23:5a:de:5d:22: 10:38:c5:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/k7mjmJoY8/aDj5lSvW4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NTdjMDIwY2RjMjJiNjhkYTI2YTQ2OWY2ZmZhNmI0NDgz NzBkMWQwHhcNMjUxMjIwMjMwMDM0WhcNMjUxMjIxMjMwMDM0WjAzMTEwLwYDVQQD EyhkZTEyNmQ4ZjQ3ZDFhYWI2ZDg2ODk2YWY1MGQ4N2E3Mzg1ZjM2YWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7W6RVjle0kQagVT0z4phgwCI5TKz Ns8TIbkRfeC1+jjFtjN5ImfezWNhdxyIUw1U4lGVIyQs3nhGjlssSOepsuClHlWM GwUU3KFuWnAVqgUq5GIOZPq/fJjVrJI967yfTIMV4G9tfR6iajJNSAv4/iOQ9tqA ua8L5fr8FEWbQstM37gZFLoJRAGGfieDU1MLrjdkbHxrX1c5G/Yd4EffkNIaFWmD GlLKXBZZPg0Mrx//n8+MCAQt6loA53Cp1ixwRLJPEkTJ4cOZtPYER+VIOKE5Mvsc d0RHylbM2JvqoYoYWDvXhaEFjHfGB1KbwgXAyxD0vzPF/dSUaEI01E2BPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4SbY9H0aq22GiWr1DYenOF82rMMB8GA1UdIwQY MBaAFPRXwCDNwito2iakafb/prRINw0dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUZmQUlNM0NLMmphSnFScDl2LW10RWczRFIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lMGNiMDYtZGVjYS00OTVkLWFjYzAt N2JhZmQ0M2U3ODYyLzEvOUZmQUlNM0NLMmphSnFScDl2LW10RWczRFIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lMGNiMDYtZGVjYS00OTVkLWFjYzAtN2JhZmQ0M2U3ODYy LzEvOUZmQUlNM0NLMmphSnFScDl2LW10RWczRFIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZNuWEEh wGZcZGtX/eMAGf5PPq7ODDMfv8pP9rwH63R0w8GB/Xs5TY+2E7tkcgFeeypBqB0f JtN4/QHz9IF5i2AgYNKxkzzFpPEpFAbZB/7c6cLwOkJSGsUCKgJ3uBLa+U8AISt/ Q2v09Plzr+v22RR4N8XWC069QKJezMg5LRVur6IPORB3jKUXJeKqi6qcx0D64SC3 jayYGgCAAMRGYStJamnoyHQ43nGEdqU7sWXxNDR767ai6dINGhSCgJ7zImCgwUZq 1onb5/6247DaA9RNb2QeSQfOaJNNHEGMOgC5OuU5P/sgFPyOFD+Q2uBpqROQx7Pk 3iNa3l0iEDjFYQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:03:06 2025 by rpki-client