This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
File: v9gcqQzFIkWGr-urHHixeQJo1cE.mft (raw, json)
Hash identifier: Jrom+GJMrUeUGcqdt1IlOPlaCchqXey0Zju2TmZKj34=
Subject key identifier: A6:F7:72:CB:A1:21:88:CD:7D:C3:1D:58:6A:D4:09:0A:F9:01:D9:69
Authority key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
Certificate issuer: /CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Certificate serial: 019B37FCB795CBE9EC25EE2FFF836354D4F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
Manifest number: 1786
Signing time: Fri 19 Dec 2025 19:01:07 +0000
Manifest this update: Fri 19 Dec 2025 19:01:07 +0000
Manifest next update: Sat 20 Dec 2025 19:01:07 +0000
Files and hashes: 1: 9UunLY0e7RvMMeMDRjD3u7_pf2Y.roa (hash: 7lRPIrPRKCCE3BPTd9dDNpxXDgXsPWg+ml+ju6JbueA=)
2: ncR4oR_y2D6exGXXU4466Dj_Hq0.roa (hash: QHWP1FBTjP+R0Pof3RRPjusJf04L/sCOEBJrDKRdhZ4=)
3: rOoYFHKRe7ghGBjkeruHV6kIlyA.roa (hash: elXY8PrAbFgsd98hRj7mkOX8iG0smL3sFgAD/6xBNtE=)
4: v9gcqQzFIkWGr-urHHixeQJo1cE.crl (hash: 9AkihvGGZhVS2EBAIUm9IHIR65MuUBJaRggzszlHKs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:37:fc:b7:95:cb:e9:ec:25:ee:2f:ff:83:63:54:d4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Validity
Not Before: Dec 19 19:01:07 2025 GMT
Not After : Dec 20 19:01:07 2025 GMT
Subject: CN=a6f772cba12188cd7dc31d586ad4090af901d969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c0:06:3c:f0:26:ce:6c:fd:c9:c6:88:b5:11:
53:4e:b6:d0:a5:e1:66:9b:01:64:31:85:52:06:4f:
6c:37:3e:29:5e:c6:c5:6e:b9:27:cc:c3:a2:4d:35:
4e:74:ac:87:17:81:74:f0:8a:c2:b3:e0:e7:fa:e9:
36:31:78:d5:f5:ea:ba:4b:6e:a0:29:c7:4a:60:68:
58:f0:15:00:d7:03:f3:34:d2:9f:45:1b:05:29:88:
15:8a:50:d3:12:1c:39:a5:98:53:87:f6:f3:8c:71:
80:22:e3:66:d5:2d:db:e4:e0:f6:de:c2:4b:3e:3f:
38:bb:28:92:4d:19:80:c8:ea:58:c6:19:b6:cc:6a:
4c:1c:d1:3b:08:8a:79:7f:cd:15:a2:99:7a:b6:5c:
be:41:7a:ab:75:d6:a8:91:eb:38:9e:5a:14:0d:21:
f0:95:6a:f0:d3:e1:4b:94:56:62:56:6e:bf:59:21:
8a:1a:4b:2f:35:de:df:d6:3e:26:de:d7:cb:64:ae:
32:8c:a1:ce:ed:a4:34:3b:7d:ff:11:f9:12:8e:b1:
bd:fc:58:56:1d:54:5e:49:f7:97:e2:ab:69:ea:4d:
e1:7a:50:e0:38:c7:24:04:19:a7:67:58:56:4d:f2:
ef:5e:49:78:f0:5b:d0:8f:6b:34:b3:97:b6:5e:89:
c8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F7:72:CB:A1:21:88:CD:7D:C3:1D:58:6A:D4:09:0A:F9:01:D9:69
X509v3 Authority Key Identifier:
keyid:BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:80:10:5e:f4:ee:e4:30:42:04:c8:16:bf:4e:a6:c9:bc:71:
14:81:6d:6e:ae:c8:f5:30:d9:e1:6c:59:df:ab:38:e2:67:2f:
55:a7:35:fc:58:11:7d:72:15:cb:93:af:ca:0e:32:09:18:b2:
cc:a8:ab:98:d0:21:e6:c5:b7:f8:af:f0:d4:15:a2:1c:2b:13:
bf:a5:e3:fa:e6:76:fe:f5:ab:51:71:e4:a6:ec:4c:1e:1a:30:
76:62:be:f4:47:4a:3c:48:42:d2:26:14:ba:5b:74:11:1a:17:
e6:66:27:96:30:ed:30:47:0d:fc:83:66:fc:37:94:ea:83:11:
b8:3e:bb:21:24:47:74:ee:dc:6a:69:8d:06:36:53:05:4e:16:
c7:c5:b8:cd:df:70:93:70:d1:da:d2:a8:bc:59:ec:b7:4d:68:
54:67:55:fb:98:98:31:ba:e0:95:10:9c:62:ca:ac:c7:90:3a:
35:7c:5a:05:38:a5:aa:0d:fa:d5:31:c9:83:45:f7:01:f6:4a:
2e:46:8b:ae:d5:b6:14:81:30:73:fb:7f:7f:b6:7e:00:23:ea:
91:81:a1:ea:ff:a6:f8:c1:2a:5e:6c:5d:eb:9a:92:13:6b:50:
2d:04:78:b6:f9:ff:44:85:98:43:c0:ac:bc:01:a1:d9:ea:4b:
8e:eb:76:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs3/LeVy+nsJe4v/4NjVNT1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZDgxY2E5MGNjNTIyNDU4NmFmZWJhYjFjNzhiMTc5MDI2
OGQ1YzEwHhcNMjUxMjE5MTkwMTA3WhcNMjUxMjIwMTkwMTA3WjAzMTEwLwYDVQQD
EyhhNmY3NzJjYmExMjE4OGNkN2RjMzFkNTg2YWQ0MDkwYWY5MDFkOTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMAGPPAmzmz9ycaItRFTTrbQpeFm
mwFkMYVSBk9sNz4pXsbFbrknzMOiTTVOdKyHF4F08IrCs+Dn+uk2MXjV9eq6S26g
KcdKYGhY8BUA1wPzNNKfRRsFKYgVilDTEhw5pZhTh/bzjHGAIuNm1S3b5OD23sJL
Pj84uyiSTRmAyOpYxhm2zGpMHNE7CIp5f80Vopl6tly+QXqrddaokes4nloUDSHw
lWrw0+FLlFZiVm6/WSGKGksvNd7f1j4m3tfLZK4yjKHO7aQ0O33/EfkSjrG9/FhW
HVReSfeX4qtp6k3helDgOMckBBmnZ1hWTfLvXkl48FvQj2s0s5e2XonIHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKb3csuhIYjNfcMdWGrUCQr5AdlpMB8GA1UdIwQY
MBaAFL/YHKkMxSJFhq/rqxx4sXkCaNXBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjlnY3FRekZJa1dHci11ckhIaXhlUUpvMWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8yNWE1OWMtYzJmYy00ZmQ0LTk2Zjct
ODRhZGNiZjVhYzU1LzEvdjlnY3FRekZJa1dHci11ckhIaXhlUUpvMWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8yNWE1OWMtYzJmYy00ZmQ0LTk2ZjctODRhZGNiZjVhYzU1
LzEvdjlnY3FRekZJa1dHci11ckhIaXhlUUpvMWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIAQXvTu
5DBCBMgWv06mybxxFIFtbq7I9TDZ4WxZ36s44mcvVac1/FgRfXIVy5Ovyg4yCRiy
zKirmNAh5sW3+K/w1BWiHCsTv6Xj+uZ2/vWrUXHkpuxMHhowdmK+9EdKPEhC0iYU
ult0ERoX5mYnljDtMEcN/INm/DeU6oMRuD67ISRHdO7cammNBjZTBU4Wx8W4zd9w
k3DR2tKovFnst01oVGdV+5iYMbrglRCcYsqsx5A6NXxaBTilqg361THJg0X3AfZK
LkaLrtW2FIEwc/t/f7Z+ACPqkYGh6v+m+MEqXmxd65qSE2tQLQR4tvn/RIWYQ8Cs
vAGh2epLjut2pA==
-----END CERTIFICATE-----
Generated at Sat Dec 20 05:02:09 2025 by rpki-client