This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft File: v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft (raw, json) Hash identifier: 5/L59uHLHMzL9M2UpcHWfWUojYTdRRWhwece92Mocr8= Subject key identifier: 3B:2D:C3:EB:81:29:89:C3:8B:35:9E:4E:EC:12:0C:27:E8:96:53:89 Authority key identifier: BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B Certificate issuer: /CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b Certificate serial: 019B56E2D673FD042E2FD5C99F1409968010 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft Manifest number: 108C Signing time: Thu 25 Dec 2025 19:01:05 +0000 Manifest this update: Thu 25 Dec 2025 19:01:05 +0000 Manifest next update: Fri 26 Dec 2025 19:01:05 +0000 Files and hashes: 1: XFCoTFAZ3KfAR1P_1a3xaKLIipA.roa (hash: tHkTVZ0U3L5FGmSNyvjm8iSt+fIxv8Im36qIEB/UGXo=) 2: v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl (hash: pHKCJpNxb7eQlRicAPpAQdbR+CLad6W00mIkd9B1YDY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:e2:d6:73:fd:04:2e:2f:d5:c9:9f:14:09:96:80:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b Validity Not Before: Dec 25 19:01:05 2025 GMT Not After : Dec 26 19:01:05 2025 GMT Subject: CN=3b2dc3eb812989c38b359e4eec120c27e8965389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f9:41:a9:cd:e7:f5:2b:ce:0a:24:71:7c:50: 33:c8:79:f9:a9:cf:54:02:3b:84:58:c7:ec:f1:32: ac:99:3a:17:d9:4b:5f:1e:a3:0a:58:f9:cd:a7:29: 4b:63:6c:6d:3b:ed:d0:d5:83:c7:bd:59:31:76:4a: 58:cb:38:4d:f7:7f:67:72:b3:df:ac:c9:d1:70:d7: 95:00:a8:c3:12:72:83:71:b6:36:aa:d1:83:95:a0: c0:47:13:2e:01:ec:e9:a0:f8:cc:60:c0:8e:00:ac: 7f:45:b0:f1:f8:a9:1f:77:94:80:99:03:44:7b:b2: aa:51:9e:5b:2d:8b:ec:5f:06:ff:b5:55:4e:4b:5b: 0b:dd:c3:73:e2:b3:51:a9:bb:57:ec:af:33:9f:ce: 0f:29:70:2a:9a:46:82:62:0e:7f:b7:1a:b6:5c:b0: ab:47:f8:a7:49:83:47:3a:07:79:7b:f5:e7:c3:bb: 67:96:0b:e6:50:40:88:f1:af:b8:23:3d:ac:8f:15: 64:0c:20:b0:eb:34:7a:0d:2f:a0:8e:50:7f:e2:22: 02:6d:57:03:4e:c8:41:7c:a9:08:19:48:b9:65:e6: 60:65:78:d4:11:c7:e3:9d:d3:08:0b:3b:4e:da:90: fe:aa:ce:52:c9:27:1d:a9:26:c5:45:d9:2b:ce:56: 17:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2D:C3:EB:81:29:89:C3:8B:35:9E:4E:EC:12:0C:27:E8:96:53:89 X509v3 Authority Key Identifier: keyid:BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:0b:72:8c:0e:3f:6e:88:67:ad:89:fa:e6:6c:25:df:be:56: c3:4a:9b:d3:60:fe:07:ba:53:a7:73:97:50:ba:a8:6b:2b:b8: d5:0b:ab:dd:fb:3a:d8:39:dd:f0:c0:62:1b:c0:2a:b3:c4:69: 4a:93:ba:e4:58:d0:50:0b:38:88:98:ff:e3:84:4c:f0:63:27: bc:82:5d:54:67:a8:e0:34:9f:3a:d9:2c:5e:51:92:00:ea:a0: e9:0d:8f:aa:fb:ab:3c:33:67:8b:af:f1:e7:34:d0:ef:37:fc: 53:89:14:63:dd:af:26:a1:af:97:a7:37:b6:41:4e:bd:a7:22: 83:5d:f2:bd:42:f1:6d:1a:a2:de:1a:06:48:5f:4d:0a:6f:f3: c3:cc:bd:fb:51:66:8e:c8:10:46:75:62:1d:42:7b:1d:d2:22: 67:07:30:90:0c:13:1b:58:42:48:da:4b:da:c4:f4:6d:4f:51: 8d:be:f0:51:e9:5c:6d:c2:b5:31:a9:76:e5:3a:89:3d:9c:18: 12:bf:c9:87:e6:24:92:2a:60:98:e2:96:d9:77:51:00:1a:dd: d0:e2:90:42:0e:06:b2:55:2b:ff:dd:8d:80:82:03:57:51:aa: cf:25:c6:42:a1:b0:82:66:1b:68:25:7e:3b:4b:f6:a7:77:fe: 45:e3:74:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtW4tZz/QQuL9XJnxQJloAQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZDdiYmZjYzJiOGZhYjY2YTU4MWI4MjI3Y2EwYWM4MTdm YTE0NmIwHhcNMjUxMjI1MTkwMTA1WhcNMjUxMjI2MTkwMTA1WjAzMTEwLwYDVQQD EygzYjJkYzNlYjgxMjk4OWMzOGIzNTllNGVlYzEyMGMyN2U4OTY1Mzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPlBqc3n9SvOCiRxfFAzyHn5qc9U AjuEWMfs8TKsmToX2UtfHqMKWPnNpylLY2xtO+3Q1YPHvVkxdkpYyzhN939ncrPf rMnRcNeVAKjDEnKDcbY2qtGDlaDARxMuAezpoPjMYMCOAKx/RbDx+Kkfd5SAmQNE e7KqUZ5bLYvsXwb/tVVOS1sL3cNz4rNRqbtX7K8zn84PKXAqmkaCYg5/txq2XLCr R/inSYNHOgd5e/Xnw7tnlgvmUECI8a+4Iz2sjxVkDCCw6zR6DS+gjlB/4iICbVcD TshBfKkIGUi5ZeZgZXjUEcfjndMICztO2pD+qs5SyScdqSbFRdkrzlYXUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDstw+uBKYnDizWeTuwSDCfollOJMB8GA1UdIwQY MBaAFL/Xu/zCuPq2algbgifKCsgX+hRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjllN19NSzQtclpxV0J1Q0o4b0t5QmY2RkdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS84MmZiMDUtNjFlNi00MzM1LWIxNjct MzZhZWQ4N2UzMzg4LzEvdjllN19NSzQtclpxV0J1Q0o4b0t5QmY2RkdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS84MmZiMDUtNjFlNi00MzM1LWIxNjctMzZhZWQ4N2UzMzg4 LzEvdjllN19NSzQtclpxV0J1Q0o4b0t5QmY2RkdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvwtyjA4/ bohnrYn65mwl375Ww0qb02D+B7pTp3OXULqoayu41Qur3fs62Dnd8MBiG8Aqs8Rp SpO65FjQUAs4iJj/44RM8GMnvIJdVGeo4DSfOtksXlGSAOqg6Q2PqvurPDNni6/x 5zTQ7zf8U4kUY92vJqGvl6c3tkFOvacig13yvULxbRqi3hoGSF9NCm/zw8y9+1Fm jsgQRnViHUJ7HdIiZwcwkAwTG1hCSNpL2sT0bU9Rjb7wUelcbcK1Mal25TqJPZwY Er/Jh+YkkipgmOKW2XdRABrd0OKQQg4GslUr/92NgIIDV1GqzyXGQqGwgmYbaCV+ O0v2p3f+ReN0PQ== -----END CERTIFICATE-----Generated at Fri Dec 26 00:48:40 2025 by rpki-client