This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft File: v9Cah3Q4F8VvgIgAeldG62n_LjA.mft (raw, json) Hash identifier: rV8jl3RuQoJZssRfTwJQ9xuluO1vznnMrXYsgWIeM7o= Subject key identifier: B9:11:39:3A:49:19:2C:95:31:BD:1D:77:7C:09:3D:E6:AA:7D:99:F9 Authority key identifier: BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30 Certificate issuer: /CN=bfd09a87743817c56f8088007a5746eb69ff2e30 Certificate serial: 019B48F003426A9A79ED64C676D29F22A45C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft Manifest number: 178D Signing time: Tue 23 Dec 2025 02:00:47 +0000 Manifest this update: Tue 23 Dec 2025 02:00:47 +0000 Manifest next update: Wed 24 Dec 2025 02:00:47 +0000 Files and hashes: 1: B_BBQaqQOZZdiFqzJdt68RGvVTU.roa (hash: p8nyxzChdTcqx5QWY5bjhUZqFlEO6HaoHatKb5Ff2uw=) 2: THgpYsuwtp7Ym3zY6av8RgfZzLY.roa (hash: uQpggmJggCBeqYH5pLAJ2yEpa7lh8jrstdPPyiUJ77Q=) 3: cQNCKEPPhAFzmHj-XbDsRfptwBU.roa (hash: ymcXQ0jfpJoz4wb2MWPQfmWBhQPG8KLXmWx/brPfkUI=) 4: nofXYpB0FisO0jICtG3Ef-GQMH0.roa (hash: 6sPkKup7pdVWKTBxrRqOcxcRj13RLFPr/8N1XCriJwg=) 5: v9Cah3Q4F8VvgIgAeldG62n_LjA.crl (hash: KmEVasYTxBIlI6T8a94qmRftfbR+8H5GXmk6evLBOOc=) 6: zoiZaQy1X6uA_fb18sRqVooSN48.roa (hash: +vAm2rSORgkYs00N65eNpRyENjf55QylaufRqfKzfJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 02:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:03:42:6a:9a:79:ed:64:c6:76:d2:9f:22:a4:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfd09a87743817c56f8088007a5746eb69ff2e30 Validity Not Before: Dec 23 02:00:47 2025 GMT Not After : Dec 24 02:00:47 2025 GMT Subject: CN=b911393a49192c9531bd1d777c093de6aa7d99f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:df:db:18:8f:f5:19:50:fc:5f:ff:6e:19:3e: ff:3e:fe:2e:24:f8:5e:eb:8b:10:95:c3:1b:bc:97: ff:30:9b:37:1b:09:2b:36:33:2a:97:72:e5:16:1a: df:8a:c0:64:c1:ae:d1:61:ef:1a:44:61:8a:66:7f: 65:0b:0e:c5:b3:66:90:96:63:f8:58:ed:75:5a:81: f1:57:e7:4c:9d:de:33:fc:16:49:e2:3e:ce:13:29: 31:f7:c0:7b:ba:93:ac:a4:ea:81:20:ef:b9:94:22: 9a:10:ff:9b:e1:db:3a:60:a0:31:a3:8c:4a:d2:b7: 46:20:d9:7e:d5:fd:85:fe:3c:89:25:f0:62:57:7b: 70:63:fc:4f:1f:df:d4:80:76:81:99:be:a6:5f:9c: 98:b3:e0:43:ec:14:cd:7b:b7:ab:82:8f:0b:f1:45: ec:e4:66:36:c0:87:60:97:08:ea:1d:49:82:fe:ad: 9e:0d:bb:dd:fe:43:4a:06:99:91:9d:03:f8:d9:3c: a1:e7:c2:c5:90:24:5a:db:85:3b:10:c9:b7:e0:45: ce:9d:1b:2b:d7:c3:88:b4:b7:46:a4:b8:ea:c4:c4: 6d:bb:fd:6a:fe:b4:61:2d:4f:9c:c5:9a:ef:eb:69: 85:42:fc:f3:dd:ad:fb:61:10:51:6f:62:8d:e9:c4: 6f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:11:39:3A:49:19:2C:95:31:BD:1D:77:7C:09:3D:E6:AA:7D:99:F9 X509v3 Authority Key Identifier: keyid:BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:23:a5:ee:7d:af:88:8c:a2:c6:d5:53:48:4e:26:1d:e1:00: da:46:c6:f1:65:f4:3e:09:d6:7d:c9:66:f3:83:c2:1b:8b:5c: 8b:1c:c0:54:31:8b:1c:2f:49:aa:3b:56:9c:df:0e:7b:d3:cb: b1:e0:d1:8c:14:70:a9:fe:f7:bc:2a:77:07:f4:64:25:69:c5: e7:f6:c4:27:da:b5:b6:1a:9f:ba:ee:4c:9e:a3:30:9d:c7:8a: b8:0f:c8:91:23:7d:95:f6:63:1b:92:85:b3:7c:ad:64:3b:d1: 69:0e:ef:3a:3d:bd:ed:da:e5:5c:3f:f8:0d:f6:70:1f:ba:cb: 0c:e7:42:ec:ce:ae:e6:a1:1c:c0:61:06:9e:6f:62:f2:0f:77: 4a:d1:19:48:c9:33:d1:f2:48:e6:c1:c0:aa:f2:9a:d7:5b:5a: d2:8f:da:94:39:12:14:a7:47:59:4e:f6:81:6e:3d:a2:e1:e2: 31:a3:5f:ac:bd:19:5b:52:c3:be:9a:fb:3f:bc:8e:7a:9d:07: c0:28:dd:ab:92:38:ba:59:8c:45:50:32:04:e6:a1:1b:52:1d: a1:ce:29:d9:60:03:38:c5:22:09:b2:ed:fc:8d:74:38:50:7e: c5:77:7d:4a:d2:87:76:3d:c3:2e:35:82:16:99:37:75:9f:47: 52:94:20:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8ANCapp57WTGdtKfIqRcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZDA5YTg3NzQzODE3YzU2ZjgwODgwMDdhNTc0NmViNjlm ZjJlMzAwHhcNMjUxMjIzMDIwMDQ3WhcNMjUxMjI0MDIwMDQ3WjAzMTEwLwYDVQQD EyhiOTExMzkzYTQ5MTkyYzk1MzFiZDFkNzc3YzA5M2RlNmFhN2Q5OWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlt/bGI/1GVD8X/9uGT7/Pv4uJPhe 64sQlcMbvJf/MJs3GwkrNjMql3LlFhrfisBkwa7RYe8aRGGKZn9lCw7Fs2aQlmP4 WO11WoHxV+dMnd4z/BZJ4j7OEykx98B7upOspOqBIO+5lCKaEP+b4ds6YKAxo4xK 0rdGINl+1f2F/jyJJfBiV3twY/xPH9/UgHaBmb6mX5yYs+BD7BTNe7ergo8L8UXs 5GY2wIdglwjqHUmC/q2eDbvd/kNKBpmRnQP42Tyh58LFkCRa24U7EMm34EXOnRsr 18OItLdGpLjqxMRtu/1q/rRhLU+cxZrv62mFQvzz3a37YRBRb2KN6cRvMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkROTpJGSyVMb0dd3wJPeaqfZn5MB8GA1UdIwQY MBaAFL/Qmod0OBfFb4CIAHpXRutp/y4wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjlDYWgzUTRGOFZ2Z0lnQWVsZEc2Mm5fTGpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wOTI1NzAtNTEyYS00NGZhLWE0ZmUt ZGJjYThjMzFlYmM4LzEvdjlDYWgzUTRGOFZ2Z0lnQWVsZEc2Mm5fTGpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8wOTI1NzAtNTEyYS00NGZhLWE0ZmUtZGJjYThjMzFlYmM4 LzEvdjlDYWgzUTRGOFZ2Z0lnQWVsZEc2Mm5fTGpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqCOl7n2v iIyixtVTSE4mHeEA2kbG8WX0PgnWfclm84PCG4tcixzAVDGLHC9JqjtWnN8Oe9PL seDRjBRwqf73vCp3B/RkJWnF5/bEJ9q1thqfuu5MnqMwnceKuA/IkSN9lfZjG5KF s3ytZDvRaQ7vOj297drlXD/4DfZwH7rLDOdC7M6u5qEcwGEGnm9i8g93StEZSMkz 0fJI5sHAqvKa11ta0o/alDkSFKdHWU72gW49ouHiMaNfrL0ZW1LDvpr7P7yOep0H wCjdq5I4ulmMRVAyBOahG1Idoc4p2WADOMUiCbLt/I10OFB+xXd9StKHdj3DLjWC Fpk3dZ9HUpQgrg== -----END CERTIFICATE-----Generated at Tue Dec 23 10:46:55 2025 by rpki-client