This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft File: VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft (raw, json) Hash identifier: FjfJ2Ozv0Q6dvf8ls/aYI3ZkV744jaBltqzbDyOMSbY= Subject key identifier: 9D:FB:F5:AC:C9:B8:11:4A:C3:95:82:FF:26:26:E2:68:AE:24:89:77 Authority key identifier: 54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28 Certificate issuer: /CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928 Certificate serial: 019B507303F042DADE5F4FDF3931C43B78DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 13:01:13 +0000 Manifest this update: Wed 24 Dec 2025 13:01:13 +0000 Manifest next update: Thu 25 Dec 2025 13:01:13 +0000 Files and hashes: 1: VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl (hash: pw+S7b2TXNf19PXh21cOsIAQ4cRNkHbkMGmAzwsJSTI=) 2: aWGxAsqgYjjK0Ar3qgVNzPKw3zE.roa (hash: C8bnjj1ZSm0KY896M7YNbmPkIyPwlV7i43xeXVYRQA0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:73:03:f0:42:da:de:5f:4f:df:39:31:c4:3b:78:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928 Validity Not Before: Dec 24 13:01:13 2025 GMT Not After : Dec 25 13:01:13 2025 GMT Subject: CN=9dfbf5acc9b8114ac39582ff2626e268ae248977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b4:8e:a8:8f:0f:9a:20:8f:27:f7:38:c3:9d: 25:82:e7:8e:38:0b:6d:2f:d1:4c:44:22:e3:79:63: 0d:97:54:1a:8b:ec:35:3a:26:79:45:2f:c7:2c:70: 7e:3c:af:6b:11:c1:72:61:99:b3:a2:78:66:c4:9e: 7d:57:2f:6a:96:3d:59:fe:e4:a9:6b:71:27:17:6e: 21:4d:8d:56:3d:f0:09:fe:75:2f:52:e0:61:92:9a: aa:fe:33:5a:f6:45:8b:29:4f:8b:c8:9b:76:52:b0: 10:85:13:4e:d7:32:53:4e:06:ad:ac:b5:49:8a:ca: 72:8f:9c:9c:0b:cd:29:da:37:db:c8:f4:63:9a:55: 79:b7:54:11:6c:d1:7f:61:b3:e7:ca:7b:86:7f:a1: 9a:b4:89:78:f0:41:b1:9a:f3:11:e8:b1:57:24:a0: 37:51:20:2d:6b:26:d5:69:88:0a:36:1a:04:fa:c8: 96:a2:55:ca:58:a1:fd:4d:ca:41:3d:57:4c:c1:0a: 8f:85:54:c9:07:d4:b7:61:c3:47:d5:f1:c9:d0:9d: c4:75:d9:1c:5d:43:ce:89:d8:b8:b9:75:80:7c:6c: 12:fd:97:f3:8a:eb:a3:35:d2:f6:77:c7:71:4a:3a: 5b:3f:59:e8:b4:84:70:8b:67:98:26:cb:e5:eb:b9: 63:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FB:F5:AC:C9:B8:11:4A:C3:95:82:FF:26:26:E2:68:AE:24:89:77 X509v3 Authority Key Identifier: keyid:54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:c3:98:4a:53:35:07:1f:d7:5e:e2:14:f7:db:16:57:01:53: 96:ca:47:90:ee:97:43:47:57:3b:2c:08:f9:55:4a:f2:1a:77: 9a:51:12:a2:7a:f5:ac:de:cd:9e:20:b7:65:d5:e6:7f:08:9f: d0:90:62:a4:fe:50:9e:1b:03:07:c1:19:da:11:85:7d:2b:01: f0:4b:1e:10:3d:7a:63:be:32:2b:95:16:62:49:7a:aa:32:f2: 47:20:97:e8:71:40:33:dc:c6:9a:be:34:91:e8:7c:83:98:a4: 77:a4:ad:79:60:d0:8f:47:f9:28:46:97:30:e1:9c:1d:86:b6: 4a:bc:42:6b:ba:bf:ea:60:ec:c2:bd:06:b2:f0:61:22:0c:23: 15:3c:f4:04:f9:6a:f9:b0:e2:4a:80:e9:b5:93:84:bd:67:00: 04:81:f9:79:85:6a:16:6d:77:20:7e:72:8a:6d:90:6a:82:df: a7:c1:33:4d:11:bc:6f:4c:4b:ea:5d:f7:3b:68:00:c2:b6:c6: ff:4f:a6:78:5e:04:27:2c:fb:95:81:21:20:f9:5e:aa:80:7b: 36:e5:d8:17:54:f2:39:d0:b4:19:5f:6b:28:d8:2e:9b:b5:2d: 2e:0f:e2:82:20:f6:36:d2:05:d9:ed:19:c0:d9:84:34:99:3d: b4:a7:25:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQcwPwQtreX0/fOTHEO3jfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MmY3ZWE5MGQyYTJiNDIwMmU1NzhiMjViYTEzOWIzYzhl NjI5MjgwHhcNMjUxMjI0MTMwMTEzWhcNMjUxMjI1MTMwMTEzWjAzMTEwLwYDVQQD Eyg5ZGZiZjVhY2M5YjgxMTRhYzM5NTgyZmYyNjI2ZTI2OGFlMjQ4OTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LSOqI8PmiCPJ/c4w50lgueOOAtt L9FMRCLjeWMNl1Qai+w1OiZ5RS/HLHB+PK9rEcFyYZmzonhmxJ59Vy9qlj1Z/uSp a3EnF24hTY1WPfAJ/nUvUuBhkpqq/jNa9kWLKU+LyJt2UrAQhRNO1zJTTgatrLVJ ispyj5ycC80p2jfbyPRjmlV5t1QRbNF/YbPnynuGf6GatIl48EGxmvMR6LFXJKA3 USAtaybVaYgKNhoE+siWolXKWKH9TcpBPVdMwQqPhVTJB9S3YcNH1fHJ0J3Eddkc XUPOidi4uXWAfGwS/ZfziuujNdL2d8dxSjpbP1notIRwi2eYJsvl67ljxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ379azJuBFKw5WC/yYm4miuJIl3MB8GA1UdIwQY MBaAFFQvfqkNKitCAuV4sluhObPI5ikoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkM5LXFRMHFLMElDNVhpeVc2RTVzOGptS1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jNWU1MWUtZmI0MS00MmUzLWJlNjkt ZWUxZTFkZWQyZjlmLzEvVkM5LXFRMHFLMElDNVhpeVc2RTVzOGptS1NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9jNWU1MWUtZmI0MS00MmUzLWJlNjktZWUxZTFkZWQyZjlm LzEvVkM5LXFRMHFLMElDNVhpeVc2RTVzOGptS1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvsOYSlM1 Bx/XXuIU99sWVwFTlspHkO6XQ0dXOywI+VVK8hp3mlESonr1rN7NniC3ZdXmfwif 0JBipP5QnhsDB8EZ2hGFfSsB8EseED16Y74yK5UWYkl6qjLyRyCX6HFAM9zGmr40 keh8g5ikd6SteWDQj0f5KEaXMOGcHYa2SrxCa7q/6mDswr0GsvBhIgwjFTz0BPlq +bDiSoDptZOEvWcABIH5eYVqFm13IH5yim2QaoLfp8EzTRG8b0xL6l33O2gAwrbG /0+meF4EJyz7lYEhIPleqoB7NuXYF1TyOdC0GV9rKNgum7UtLg/igiD2NtIF2e0Z wNmENJk9tKclTg== -----END CERTIFICATE-----Generated at Wed Dec 24 14:55:41 2025 by rpki-client