This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft File: 9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft (raw, json) Hash identifier: IiiWHuDLDzlrxuAkIw7PPRV68dvaV++8+ZuOa6l7TtU= Subject key identifier: 20:7A:CA:11:07:48:A3:18:A5:EA:A1:E2:DF:59:52:DF:7B:6D:AF:D0 Authority key identifier: F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B Certificate issuer: /CN=f5cf73b3e45f772fae1b915690b317344c3f442b Certificate serial: 019B3B34FF50F088358B3E5E04D7160E5C52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft Manifest number: 0E1B Signing time: Sat 20 Dec 2025 10:01:27 +0000 Manifest this update: Sat 20 Dec 2025 10:01:27 +0000 Manifest next update: Sun 21 Dec 2025 10:01:27 +0000 Files and hashes: 1: 4yZTf3OsIRZIEjMrz8-5ILc2C74.roa (hash: aiMSxdzv4PUdTe93bKxnLhd2giNSW/3kAmdI3yacpFc=) 2: 9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl (hash: Xn/5RnVW7dNo7zz2ukFWeHJZuIcc9e/XbZbPZU9UsRs=) 3: X-vr6VJDYrS7V_AEQe-X1SxHPjI.roa (hash: kvS9vh6mgtsHB9vFeq8m3TzjFP++U05E594tUA8kMi8=) 4: mFCab-YMnaPwjq0SGjjSKVSwCvs.roa (hash: NwTUf2FCA+SWI7PlbFVRLa9grCf7O5GxOtog8KpH75E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:ff:50:f0:88:35:8b:3e:5e:04:d7:16:0e:5c:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5cf73b3e45f772fae1b915690b317344c3f442b Validity Not Before: Dec 20 10:01:27 2025 GMT Not After : Dec 21 10:01:27 2025 GMT Subject: CN=207aca110748a318a5eaa1e2df5952df7b6dafd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ac:db:6c:bc:f4:56:4e:db:36:2f:79:b0:bf: ee:6c:36:1a:09:bb:29:2f:37:08:4d:4a:8c:bf:f2: 24:74:1c:b8:97:4c:e7:9e:72:2f:b3:0d:35:8a:0c: ee:2d:76:96:17:5a:07:b1:f4:33:e6:6e:d2:67:91: a4:05:85:40:78:9a:da:e6:eb:9d:6d:ba:77:43:01: 8a:6a:0e:9b:ab:b8:dd:3e:44:7a:b2:20:16:b4:96: e2:19:c0:f7:47:55:dc:6e:86:69:15:21:21:67:3c: 5c:02:93:e7:1c:ee:de:1c:d0:2a:1b:5a:9d:7f:87: 00:bf:bd:a3:59:ab:c6:dd:de:a9:02:21:ff:51:90: 95:dd:48:e1:b6:0a:b4:dc:7d:89:f5:15:3d:23:38: c4:a6:24:b7:f2:58:6b:d5:4d:c0:96:58:73:27:c2: d3:4a:36:d5:35:4e:a2:5b:5d:5c:5e:73:3e:74:7a: 91:b0:bc:c9:60:4a:dd:cb:34:c2:cc:8d:42:a9:68: 31:d5:8e:b1:65:60:f7:70:23:55:11:a2:3d:c3:48: 2f:94:01:56:56:37:d4:b4:01:ca:79:25:df:2b:f5: 90:75:69:77:eb:f5:26:d3:bd:31:62:fa:91:5c:61: c1:8b:85:a5:3e:44:71:fb:a1:13:b5:77:52:77:74: 1a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7A:CA:11:07:48:A3:18:A5:EA:A1:E2:DF:59:52:DF:7B:6D:AF:D0 X509v3 Authority Key Identifier: keyid:F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:7a:db:6c:0c:a6:f8:f8:88:6d:d1:ec:36:38:dc:45:45:ef: b6:bc:62:d9:ad:09:e2:c2:fe:9d:9b:c6:c1:ee:96:f9:1e:13: 3e:b4:50:c7:e1:5e:b2:c4:33:94:bb:4d:34:dc:f9:91:5b:ac: 4d:1d:31:b2:7c:47:c4:71:7c:a1:2c:82:1c:96:df:ac:32:51: a7:27:ef:ad:50:1e:54:c7:f5:57:b3:73:35:d8:a5:12:34:0b: c3:b9:c7:f5:cd:b0:84:91:df:42:f1:78:8e:e5:ba:eb:55:01: a7:c3:b2:22:0a:d4:b2:3e:0d:42:f2:a6:17:5e:a0:3d:cb:cd: 8c:3f:9b:9e:83:c9:2a:b1:f6:5b:65:da:fc:a7:02:a5:1e:c4: ea:9b:57:bc:e5:87:d2:f5:e6:10:9f:95:23:48:14:46:03:b5: f5:57:b7:3f:d1:22:84:d2:99:bb:40:6d:55:3a:2b:ba:27:5f: ea:ff:6f:ae:da:99:9a:8c:f5:01:12:b9:14:0d:02:1e:f2:fc: 0e:b2:43:a6:c1:c6:bb:fa:bc:39:e4:24:29:2c:a3:0c:f8:07: 95:f5:a2:45:95:04:57:14:f6:db:8f:f9:f7:f4:37:72:46:7d: 60:7a:44:c9:2d:bc:fa:10:13:36:6a:eb:2b:f3:a0:02:5e:07: 9c:fb:36:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NP9Q8Ig1iz5eBNcWDlxSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1Y2Y3M2IzZTQ1Zjc3MmZhZTFiOTE1NjkwYjMxNzM0NGMz ZjQ0MmIwHhcNMjUxMjIwMTAwMTI3WhcNMjUxMjIxMTAwMTI3WjAzMTEwLwYDVQQD EygyMDdhY2ExMTA3NDhhMzE4YTVlYWExZTJkZjU5NTJkZjdiNmRhZmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKzbbLz0Vk7bNi95sL/ubDYaCbsp LzcITUqMv/IkdBy4l0znnnIvsw01igzuLXaWF1oHsfQz5m7SZ5GkBYVAeJra5uud bbp3QwGKag6bq7jdPkR6siAWtJbiGcD3R1XcboZpFSEhZzxcApPnHO7eHNAqG1qd f4cAv72jWavG3d6pAiH/UZCV3Ujhtgq03H2J9RU9IzjEpiS38lhr1U3AllhzJ8LT SjbVNU6iW11cXnM+dHqRsLzJYErdyzTCzI1CqWgx1Y6xZWD3cCNVEaI9w0gvlAFW VjfUtAHKeSXfK/WQdWl36/Um070xYvqRXGHBi4WlPkRx+6ETtXdSd3QajwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCB6yhEHSKMYpeqh4t9ZUt97ba/QMB8GA1UdIwQY MBaAFPXPc7PkX3cvrhuRVpCzFzRMP0QrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWM5enMtUmZkeS11RzVGV2tMTVhORXdfUkNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zYmU4NjUtNWM3OS00N2MwLWFhNGQt MWM2NTRlMDJkNzVkLzEvOWM5enMtUmZkeS11RzVGV2tMTVhORXdfUkNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8zYmU4NjUtNWM3OS00N2MwLWFhNGQtMWM2NTRlMDJkNzVk LzEvOWM5enMtUmZkeS11RzVGV2tMTVhORXdfUkNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKHrbbAym +PiIbdHsNjjcRUXvtrxi2a0J4sL+nZvGwe6W+R4TPrRQx+FessQzlLtNNNz5kVus TR0xsnxHxHF8oSyCHJbfrDJRpyfvrVAeVMf1V7NzNdilEjQLw7nH9c2whJHfQvF4 juW661UBp8OyIgrUsj4NQvKmF16gPcvNjD+bnoPJKrH2W2Xa/KcCpR7E6ptXvOWH 0vXmEJ+VI0gURgO19Ve3P9EihNKZu0BtVToruidf6v9vrtqZmoz1ARK5FA0CHvL8 DrJDpsHGu/q8OeQkKSyjDPgHlfWiRZUEVxT224/59/Q3ckZ9YHpEyS28+hATNmrr K/OgAl4HnPs2WA== -----END CERTIFICATE-----Generated at Sat Dec 20 15:12:12 2025 by rpki-client