This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft File: 9-VkfNC39yK-1FafN7i_j5JTjPU.mft (raw, json) Hash identifier: hUz97gEhd7pIYQd0FL8iuQ7W892yNHVy26qaRYWAjSo= Subject key identifier: E5:48:D9:D5:6D:A9:E7:DC:89:0C:19:30:1B:3D:E3:B3:0B:C6:23:A5 Authority key identifier: F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5 Certificate issuer: /CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5 Certificate serial: 019B378E5F3BF4C8DADE6CEC195702BFA136 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft Manifest number: 13A7 Signing time: Fri 19 Dec 2025 17:00:35 +0000 Manifest this update: Fri 19 Dec 2025 17:00:35 +0000 Manifest next update: Sat 20 Dec 2025 17:00:35 +0000 Files and hashes: 1: 9-VkfNC39yK-1FafN7i_j5JTjPU.crl (hash: JRoWll+JN61Y0fjoxyI8WEFMLgu+xX2ZpGNIu8UydhM=) 2: DBhdVQnWbQeKdQzgQiCpHErXzhE.roa (hash: ke+PE6qJEQ9z2GmlNhQtn8qkPU8ewvFXiEh0aYxuqOo=) 3: q1OrwBnOgNGg_tS0zZoAzPBHw1c.roa (hash: aaFqVy4+hGHKy39rpTWrEUIWgkLIuK6ZgSAREjkESF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:5f:3b:f4:c8:da:de:6c:ec:19:57:02:bf:a1:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5 Validity Not Before: Dec 19 17:00:35 2025 GMT Not After : Dec 20 17:00:35 2025 GMT Subject: CN=e548d9d56da9e7dc890c19301b3de3b30bc623a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cd:91:3a:89:e1:ea:9b:9c:a1:72:e0:03:e2: d8:cd:8b:eb:c3:4d:1e:3d:2c:fc:82:82:ac:b7:c5: 4c:ca:0b:22:8d:39:cd:a8:47:65:bc:c0:3e:cd:54: 26:39:ef:e7:ff:40:4b:29:7e:71:5a:5f:ef:16:c0: 41:c2:3e:8e:fd:3e:0c:96:8e:38:2f:17:aa:ea:cc: 30:22:18:8b:4c:1c:fc:56:48:5b:c4:42:78:d6:6c: 43:ed:17:f3:2c:5f:67:72:68:06:1c:95:a6:31:1a: b1:56:00:31:70:90:88:4f:92:0c:54:ba:bb:99:fc: 26:b3:4c:a3:56:6c:7f:b2:bf:9e:c3:2a:98:f8:fc: 2b:d7:1b:c0:9b:f5:fe:b0:bd:f3:cd:bd:9d:25:0d: d5:f7:36:48:27:b9:0b:ca:ce:4e:c1:46:d3:d2:ef: 98:8c:17:88:6b:05:a1:4f:c3:09:d7:c3:59:15:98: 87:c2:c8:fd:40:ae:c6:23:76:3b:b0:06:8c:7c:60: 56:7f:0b:0b:0f:74:eb:07:46:78:5c:f0:a4:dc:0e: 9e:49:ce:0a:55:26:e7:a7:96:a6:5e:d3:09:24:b2: 0a:94:6c:fe:26:3f:f4:e2:2d:f3:03:ec:9e:eb:4a: 63:81:db:3b:86:40:81:b7:3d:92:3f:37:d7:c0:47: 92:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:48:D9:D5:6D:A9:E7:DC:89:0C:19:30:1B:3D:E3:B3:0B:C6:23:A5 X509v3 Authority Key Identifier: keyid:F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:0c:92:7c:a9:84:c6:fb:cb:0e:c8:af:53:d0:00:9f:b8:c9: 6a:b5:22:19:fe:fb:07:97:c2:e4:a4:d3:51:05:47:63:1c:a3: 52:e5:28:d7:ae:55:14:f1:e8:af:f6:1f:a0:c3:22:ae:b0:bb: bb:4c:47:24:4a:d7:2c:24:b8:07:b4:67:b2:9d:96:e3:3e:1a: 23:49:30:f2:be:7c:30:46:29:c2:64:44:32:72:99:40:52:d6: da:e7:48:72:a1:ff:7f:18:b1:c2:a5:76:ef:dd:2d:24:a7:90: 74:5f:05:b8:7d:e6:3d:31:78:d0:e6:30:0d:5c:8b:72:e9:1f: 01:41:b7:67:f5:a7:9d:24:f1:04:9d:93:e0:77:d9:b4:1c:d2: d0:80:21:e6:b9:75:ff:10:a1:42:99:27:b6:14:ec:b5:e7:12: b3:db:0e:b1:a3:44:30:c6:1f:ef:12:24:de:bc:8e:fc:aa:a8: b9:cd:a1:b9:90:36:0f:b7:71:3b:66:69:02:f2:45:81:64:bf: 41:9b:5e:5f:9b:68:dc:d9:94:2d:85:25:5c:65:a9:bd:5c:44: 09:9b:c9:66:d5:df:61:9b:9e:0b:ca:c8:db:3c:ff:3b:8e:c0: 1a:7f:85:ba:a8:6b:8f:98:fd:82:e3:70:1a:de:b4:19:34:ce: a8:86:fa:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jl879Mja3mzsGVcCv6E2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZTU2NDdjZDBiN2Y3MjJiZWQ0NTY5ZjM3YjhiZjhmOTI1 MzhjZjUwHhcNMjUxMjE5MTcwMDM1WhcNMjUxMjIwMTcwMDM1WjAzMTEwLwYDVQQD EyhlNTQ4ZDlkNTZkYTllN2RjODkwYzE5MzAxYjNkZTNiMzBiYzYyM2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu82ROonh6pucoXLgA+LYzYvrw00e PSz8goKst8VMygsijTnNqEdlvMA+zVQmOe/n/0BLKX5xWl/vFsBBwj6O/T4Mlo44 Lxeq6swwIhiLTBz8VkhbxEJ41mxD7RfzLF9ncmgGHJWmMRqxVgAxcJCIT5IMVLq7 mfwms0yjVmx/sr+ewyqY+Pwr1xvAm/X+sL3zzb2dJQ3V9zZIJ7kLys5OwUbT0u+Y jBeIawWhT8MJ18NZFZiHwsj9QK7GI3Y7sAaMfGBWfwsLD3TrB0Z4XPCk3A6eSc4K VSbnp5amXtMJJLIKlGz+Jj/04i3zA+ye60pjgds7hkCBtz2SPzfXwEeSAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVI2dVtqefciQwZMBs947MLxiOlMB8GA1UdIwQY MBaAFPflZHzQt/civtRWnze4v4+SU4z1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOS1Wa2ZOQzM5eUstMUZhZk43aV9qNUpUalBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9mOTA4MmItY2JhMy00ZmJjLWFkYTIt ZGYwNjM3NjdjM2Y2LzEvOS1Wa2ZOQzM5eUstMUZhZk43aV9qNUpUalBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9mOTA4MmItY2JhMy00ZmJjLWFkYTItZGYwNjM3NjdjM2Y2 LzEvOS1Wa2ZOQzM5eUstMUZhZk43aV9qNUpUalBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiAySfKmE xvvLDsivU9AAn7jJarUiGf77B5fC5KTTUQVHYxyjUuUo165VFPHor/YfoMMirrC7 u0xHJErXLCS4B7Rnsp2W4z4aI0kw8r58MEYpwmREMnKZQFLW2udIcqH/fxixwqV2 790tJKeQdF8FuH3mPTF40OYwDVyLcukfAUG3Z/WnnSTxBJ2T4HfZtBzS0IAh5rl1 /xChQpknthTstecSs9sOsaNEMMYf7xIk3ryO/Kqouc2huZA2D7dxO2ZpAvJFgWS/ QZteX5to3NmULYUlXGWpvVxECZvJZtXfYZueC8rI2zz/O47AGn+Fuqhrj5j9guNw Gt60GTTOqIb6kg== -----END CERTIFICATE-----Generated at Fri Dec 19 20:11:48 2025 by rpki-client