This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft File: 9-VkfNC39yK-1FafN7i_j5JTjPU.mft (raw, json) Hash identifier: MC2aTDlXz+mU9b7qaRPTqlqht5qrwMc4JH1qj7bwIno= Subject key identifier: 66:9F:D9:BB:93:5A:08:D7:1B:40:AA:18:47:8C:E2:48:4A:1D:7E:2F Authority key identifier: F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5 Certificate issuer: /CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5 Certificate serial: 019AF3F7605A83CE8F4D827B5C13407D25EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft Manifest number: 1384 Signing time: Sat 06 Dec 2025 14:01:06 +0000 Manifest this update: Sat 06 Dec 2025 14:01:06 +0000 Manifest next update: Sun 07 Dec 2025 14:01:06 +0000 Files and hashes: 1: 9-VkfNC39yK-1FafN7i_j5JTjPU.crl (hash: /MSoFwpvYiijndzoezIB3r8Zr1JpKArX+9JC555r738=) 2: DBhdVQnWbQeKdQzgQiCpHErXzhE.roa (hash: ke+PE6qJEQ9z2GmlNhQtn8qkPU8ewvFXiEh0aYxuqOo=) 3: q1OrwBnOgNGg_tS0zZoAzPBHw1c.roa (hash: aaFqVy4+hGHKy39rpTWrEUIWgkLIuK6ZgSAREjkESF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:60:5a:83:ce:8f:4d:82:7b:5c:13:40:7d:25:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7e5647cd0b7f722bed4569f37b8bf8f92538cf5 Validity Not Before: Dec 6 14:01:06 2025 GMT Not After : Dec 7 14:01:06 2025 GMT Subject: CN=669fd9bb935a08d71b40aa18478ce2484a1d7e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:35:8e:0b:dc:76:a2:0c:70:1c:eb:e4:0a:2a: 08:14:ae:e3:84:bb:da:dc:25:49:f6:b6:5f:70:ea: 5f:11:51:fc:0d:da:b3:5f:82:47:72:74:1a:16:1d: 14:2f:3a:bb:9a:f9:ac:7d:ec:86:8d:26:02:f3:fc: c6:2d:fc:c2:fc:51:f7:f9:9c:ed:a8:99:79:23:87: 70:27:b9:51:37:a0:87:f9:bc:0f:ba:28:ee:7c:11: e7:a2:2f:d7:d4:58:2e:6b:f1:89:4c:45:0c:58:c3: 73:b0:7c:5e:06:4a:5f:e7:7a:82:b0:64:61:df:ab: 4d:4b:d0:e1:d6:38:47:10:16:e8:d7:33:db:b0:be: 51:df:24:3c:a1:f4:d1:54:9f:c7:a4:3d:d1:45:50: 32:af:80:c7:55:8e:0b:5b:2e:22:bf:15:d5:12:c4: 3e:7c:74:47:3e:02:ea:76:31:07:f3:6c:5f:b8:30: a4:e7:34:d3:d6:e8:c9:bc:32:26:94:d5:15:c7:5d: 11:21:ff:27:86:1b:37:c0:6a:98:db:ea:30:b9:92: ea:99:27:c9:d1:22:f6:29:5b:d0:df:c5:5b:69:93: c1:60:71:79:6e:77:61:c3:a0:ba:7b:b4:8d:0c:db: 1f:8a:18:33:f5:4e:45:e4:7c:52:d1:bb:12:be:ed: 44:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9F:D9:BB:93:5A:08:D7:1B:40:AA:18:47:8C:E2:48:4A:1D:7E:2F X509v3 Authority Key Identifier: keyid:F7:E5:64:7C:D0:B7:F7:22:BE:D4:56:9F:37:B8:BF:8F:92:53:8C:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9-VkfNC39yK-1FafN7i_j5JTjPU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f9082b-cba3-4fbc-ada2-df063767c3f6/1/9-VkfNC39yK-1FafN7i_j5JTjPU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:21:5a:f4:87:19:5d:64:9a:11:04:cc:79:1f:4b:6a:ee:d0: 45:76:89:0e:dc:34:ca:6b:53:25:e1:78:8a:01:5e:80:c5:8f: f0:7b:e5:ca:04:9a:dd:00:c3:3f:9c:28:88:5c:e7:3d:79:62: 01:be:41:cd:64:70:fd:c6:4a:14:eb:90:90:a7:ab:95:1d:ed: 21:1f:c7:2b:e7:15:37:87:a2:05:07:c9:96:2a:87:b3:ec:45: 78:d2:99:d1:52:a4:bd:16:b7:76:90:dd:be:ec:4d:ed:5a:f8: bb:a6:9e:c1:0e:22:47:70:c9:83:80:cc:63:12:45:43:5a:e3: 3a:b0:9b:5c:34:17:3f:c3:90:bf:f6:24:8c:f2:bc:0f:fe:13: 12:a5:74:f9:44:7f:ff:23:f5:7b:e4:99:5d:81:a4:c2:c3:ab: fe:c2:4a:05:7e:cd:b1:ff:76:9e:bd:bb:a3:5c:c1:16:4e:66: 68:30:90:39:25:d7:59:26:06:f3:8f:72:ae:26:44:b7:2e:41: e9:f7:5a:36:c6:87:4a:67:6a:06:33:52:4f:58:55:d1:79:74: ff:ef:89:68:b6:9e:b3:28:94:52:e3:a9:66:51:e8:b3:39:e3: 91:02:7b:c2:96:78:a9:bc:cc:b1:b8:ef:c0:ea:09:ed:97:1f: f2:19:77:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz92Bag86PTYJ7XBNAfSXqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZTU2NDdjZDBiN2Y3MjJiZWQ0NTY5ZjM3YjhiZjhmOTI1 MzhjZjUwHhcNMjUxMjA2MTQwMTA2WhcNMjUxMjA3MTQwMTA2WjAzMTEwLwYDVQQD Eyg2NjlmZDliYjkzNWEwOGQ3MWI0MGFhMTg0NzhjZTI0ODRhMWQ3ZTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTWOC9x2ogxwHOvkCioIFK7jhLva 3CVJ9rZfcOpfEVH8DdqzX4JHcnQaFh0ULzq7mvmsfeyGjSYC8/zGLfzC/FH3+Zzt qJl5I4dwJ7lRN6CH+bwPuijufBHnoi/X1Fgua/GJTEUMWMNzsHxeBkpf53qCsGRh 36tNS9Dh1jhHEBbo1zPbsL5R3yQ8ofTRVJ/HpD3RRVAyr4DHVY4LWy4ivxXVEsQ+ fHRHPgLqdjEH82xfuDCk5zTT1ujJvDImlNUVx10RIf8nhhs3wGqY2+owuZLqmSfJ 0SL2KVvQ38VbaZPBYHF5bndhw6C6e7SNDNsfihgz9U5F5HxS0bsSvu1EvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGaf2buTWgjXG0CqGEeM4khKHX4vMB8GA1UdIwQY MBaAFPflZHzQt/civtRWnze4v4+SU4z1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOS1Wa2ZOQzM5eUstMUZhZk43aV9qNUpUalBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9mOTA4MmItY2JhMy00ZmJjLWFkYTIt ZGYwNjM3NjdjM2Y2LzEvOS1Wa2ZOQzM5eUstMUZhZk43aV9qNUpUalBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9mOTA4MmItY2JhMy00ZmJjLWFkYTItZGYwNjM3NjdjM2Y2 LzEvOS1Wa2ZOQzM5eUstMUZhZk43aV9qNUpUalBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCFa9IcZ XWSaEQTMeR9Lau7QRXaJDtw0ymtTJeF4igFegMWP8HvlygSa3QDDP5woiFznPXli Ab5BzWRw/cZKFOuQkKerlR3tIR/HK+cVN4eiBQfJliqHs+xFeNKZ0VKkvRa3dpDd vuxN7Vr4u6aewQ4iR3DJg4DMYxJFQ1rjOrCbXDQXP8OQv/YkjPK8D/4TEqV0+UR/ /yP1e+SZXYGkwsOr/sJKBX7Nsf92nr27o1zBFk5maDCQOSXXWSYG849yriZEty5B 6fdaNsaHSmdqBjNST1hV0Xl0/++JaLaesyiUUuOpZlHosznjkQJ7wpZ4qbzMsbjv wOoJ7Zcf8hl3rQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:36:30 2025 by rpki-client