This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft File: 9-VkfNC39yK-1FafN7i_j5JTjPU.mft (raw, json) Hash identifier: DU8MUFFNd1r6SsnSwN/sw87ecGYlROOv22C7nBRizYE= Subject key identifier: 22:8B:74:79:55:08:5E:D5:22:4F:76:EC:FA:68:62:69:B9:70:B7:FC Authority key identifier: F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5 Certificate issuer: /CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5 Certificate serial: 019B2FD4DC0B385FEF7D45444ADA01963AD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft Manifest number: 13A3 Signing time: Thu 18 Dec 2025 05:00:37 +0000 Manifest this update: Thu 18 Dec 2025 05:00:37 +0000 Manifest next update: Fri 19 Dec 2025 05:00:37 +0000 Files and hashes: 1: 9-VkfNC39yK-1FafN7i_j5JTjPU.crl (hash: 6x40flCVEcAiMinxrV0rZ4+i16w6Y5OP4NOBFAWkPh8=) 2: DBhdVQnWbQeKdQzgQiCpHErXzhE.roa (hash: ke+PE6qJEQ9z2GmlNhQtn8qkPU8ewvFXiEh0aYxuqOo=) 3: q1OrwBnOgNGg_tS0zZoAzPBHw1c.roa (hash: aaFqVy4+hGHKy39rpTWrEUIWgkLIuK6ZgSAREjkESF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d4:dc:0b:38:5f:ef:7d:45:44:4a:da:01:96:3a:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5 Validity Not Before: Dec 18 05:00:37 2025 GMT Not After : Dec 19 05:00:37 2025 GMT Subject: CN=228b747955085ed5224f76ecfa686269b970b7fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:56:ba:dc:80:46:df:f2:bf:7f:27:25:d4:35: 3d:65:cd:25:c0:f4:0f:d7:4e:c8:61:83:96:a9:5e: 1c:d0:f7:ee:11:64:1e:7c:ee:3f:2e:b7:f5:8a:1c: 83:ae:4d:f4:67:3c:a7:27:94:51:3f:6d:12:73:4c: 0f:d5:53:eb:55:d3:1f:8d:2c:c2:c7:44:ab:17:ef: dc:fb:7e:d0:c8:9d:32:f2:ae:d4:d1:a2:70:5d:7b: 8b:3f:05:e9:2e:d9:22:54:5b:bf:2a:8f:bc:32:e4: 61:94:36:e3:8f:03:5a:33:fa:f3:42:e0:3e:a5:76: ed:4c:27:cf:05:f2:32:b8:f9:6b:cd:af:33:c1:3b: d5:80:ff:e1:f6:51:78:63:4e:7b:da:22:d4:75:ef: 1f:a2:85:2a:dc:db:15:cf:be:24:eb:06:3a:13:32: 12:89:a5:ac:b5:0f:06:ba:f0:33:1f:38:4c:06:db: d5:49:a5:b8:2a:4c:f0:c0:cb:bf:55:d5:78:9a:9b: a8:a1:b6:5c:a8:18:4f:5a:e5:66:c4:0a:f0:6b:64: b3:f9:f2:c6:d4:ad:82:ca:40:26:9b:07:90:74:d6: 5c:90:a7:4d:d6:2e:6e:71:4a:59:11:63:20:6c:15: ea:9b:0a:04:70:53:cb:2b:95:23:5f:39:95:80:dd: fc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8B:74:79:55:08:5E:D5:22:4F:76:EC:FA:68:62:69:B9:70:B7:FC X509v3 Authority Key Identifier: keyid:F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e3:1e:ef:7f:a7:1a:86:8d:87:81:d9:e5:ab:e5:19:e4:81: 32:4a:f3:42:78:88:9b:4d:7d:68:53:54:b3:0c:f2:a9:24:ac: 7e:e1:a7:cd:00:90:aa:d9:92:0a:27:c9:f1:45:b2:c0:f7:16: eb:6a:50:f9:f1:b4:ff:83:3c:29:14:b5:29:23:86:5f:79:92: bd:33:79:79:5a:bd:97:23:6c:0d:52:74:ab:6d:2d:8d:2a:28: 77:b1:ef:ce:1f:19:07:9e:d2:6e:29:f2:77:c4:27:ae:34:0a: 22:fc:9a:96:9e:83:c0:93:a2:7e:68:4b:ef:a2:7c:2e:7e:ed: 05:c5:75:7c:b2:ad:52:09:10:34:86:a2:4a:64:bf:da:87:76: 4d:e3:0a:7f:65:5c:e7:aa:61:7f:92:37:97:2f:03:49:73:62: 50:59:b0:91:2e:11:b2:01:dc:1e:a8:9e:48:df:c1:dc:25:29: 73:a3:ff:ff:ab:e8:f9:a9:37:f6:a9:ff:ef:25:91:ce:c7:74: 4e:c5:cf:d7:b1:af:4c:0f:ae:65:15:0d:3d:22:c0:f6:f7:91: 20:63:19:c5:a1:c3:54:e6:7b:ec:79:9d:ec:3e:85:cc:e2:3a: 83:40:58:04:76:bb:14:be:9f:82:84:1f:fc:1f:f7:15:97:1c: 0a:ae:fe:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1NwLOF/vfUVEStoBljrXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZTU2NDdjZDBiN2Y3MjJiZWQ0NTY5ZjM3YjhiZjhmOTI1 MzhjZjUwHhcNMjUxMjE4MDUwMDM3WhcNMjUxMjE5MDUwMDM3WjAzMTEwLwYDVQQD EygyMjhiNzQ3OTU1MDg1ZWQ1MjI0Zjc2ZWNmYTY4NjI2OWI5NzBiN2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFa63IBG3/K/fycl1DU9Zc0lwPQP 107IYYOWqV4c0PfuEWQefO4/Lrf1ihyDrk30ZzynJ5RRP20Sc0wP1VPrVdMfjSzC x0SrF+/c+37QyJ0y8q7U0aJwXXuLPwXpLtkiVFu/Ko+8MuRhlDbjjwNaM/rzQuA+ pXbtTCfPBfIyuPlrza8zwTvVgP/h9lF4Y0572iLUde8fooUq3NsVz74k6wY6EzIS iaWstQ8GuvAzHzhMBtvVSaW4KkzwwMu/VdV4mpuoobZcqBhPWuVmxArwa2Sz+fLG 1K2CykAmmweQdNZckKdN1i5ucUpZEWMgbBXqmwoEcFPLK5UjXzmVgN38MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKLdHlVCF7VIk927PpoYmm5cLf8MB8GA1UdIwQY MBaAFPflZHzQt/civtRWnze4v4+SU4z1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOS1Wa2ZOQzM5eUstMUZhZk43aV9qNUpUalBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9mOTA4MmItY2JhMy00ZmJjLWFkYTIt ZGYwNjM3NjdjM2Y2LzEvOS1Wa2ZOQzM5eUstMUZhZk43aV9qNUpUalBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9mOTA4MmItY2JhMy00ZmJjLWFkYTItZGYwNjM3NjdjM2Y2 LzEvOS1Wa2ZOQzM5eUstMUZhZk43aV9qNUpUalBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfuMe73+n GoaNh4HZ5avlGeSBMkrzQniIm019aFNUswzyqSSsfuGnzQCQqtmSCifJ8UWywPcW 62pQ+fG0/4M8KRS1KSOGX3mSvTN5eVq9lyNsDVJ0q20tjSood7Hvzh8ZB57Sbiny d8QnrjQKIvyalp6DwJOifmhL76J8Ln7tBcV1fLKtUgkQNIaiSmS/2od2TeMKf2Vc 56phf5I3ly8DSXNiUFmwkS4RsgHcHqieSN/B3CUpc6P//6vo+ak39qn/7yWRzsd0 TsXP17GvTA+uZRUNPSLA9veRIGMZxaHDVOZ77Hmd7D6FzOI6g0BYBHa7FL6fgoQf /B/3FZccCq7+HA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:57:49 2025 by rpki-client