This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft File: v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft (raw, json) Hash identifier: lJFmxoADzndYWpGss4on00su1svmirnIt1o503sEuYE= Subject key identifier: 0A:A2:68:C5:18:E7:1F:BE:97:1A:6B:57:33:93:B8:3F:4B:AB:15:21 Authority key identifier: BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B Certificate issuer: /CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b Certificate serial: 019AF2768EF8C331A707A0176C038DBBA1BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft Manifest number: 1058 Signing time: Sat 06 Dec 2025 07:00:47 +0000 Manifest this update: Sat 06 Dec 2025 07:00:47 +0000 Manifest next update: Sun 07 Dec 2025 07:00:47 +0000 Files and hashes: 1: XFCoTFAZ3KfAR1P_1a3xaKLIipA.roa (hash: tHkTVZ0U3L5FGmSNyvjm8iSt+fIxv8Im36qIEB/UGXo=) 2: v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl (hash: +IcPKl47jNjFzS5e85nDnZSqrH/2T6n1RfebeW0Nl6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:8e:f8:c3:31:a7:07:a0:17:6c:03:8d:bb:a1:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfd7bbfcc2b8fab66a581b8227ca0ac817fa146b Validity Not Before: Dec 6 07:00:47 2025 GMT Not After : Dec 7 07:00:47 2025 GMT Subject: CN=0aa268c518e71fbe971a6b573393b83f4bab1521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c9:28:98:e9:23:fb:07:d2:d6:1a:e4:81:b2: 9b:d3:67:cb:a6:af:fb:72:3c:9b:7d:b3:a7:fc:22: 79:bf:48:ef:2b:44:46:ad:c9:6a:28:f5:5f:68:6d: 50:a3:e9:d4:c4:e5:bb:fb:d9:66:c5:e0:fb:4f:9a: 37:f4:4c:4f:dc:08:58:19:71:13:d0:c0:e2:c3:9a: ac:e7:c9:64:40:94:e1:67:f2:76:96:b9:a5:e4:6f: 82:99:87:68:b4:f7:9f:f3:56:64:a9:61:8a:fb:b7: bd:d0:df:dd:9d:eb:63:59:ee:b5:f5:25:9f:6c:48: 5b:72:1a:93:b6:df:9c:b3:bd:51:33:4d:0d:37:70: bb:9e:97:54:bf:30:4d:f2:3e:00:6f:ca:a5:65:01: 1d:1d:0a:37:22:c6:b7:b5:34:f0:61:0a:63:91:30: 1f:29:00:9e:84:1f:fe:96:e8:f1:2b:da:4b:28:d2: f1:43:2c:3d:07:7a:f8:27:8c:04:a8:f0:1d:3a:eb: dd:f4:f1:68:64:e8:af:91:e6:a8:aa:73:d2:bc:f0: 3b:18:48:6a:de:2d:00:b9:97:2a:42:f3:5c:3a:92: 0d:b7:c2:be:86:e8:6c:c5:8b:e0:bd:d6:9b:ea:45: a2:c2:77:ee:a6:10:0b:1b:e9:01:12:e5:ce:25:7e: 50:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A2:68:C5:18:E7:1F:BE:97:1A:6B:57:33:93:B8:3F:4B:AB:15:21 X509v3 Authority Key Identifier: keyid:BF:D7:BB:FC:C2:B8:FA:B6:6A:58:1B:82:27:CA:0A:C8:17:FA:14:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/82fb05-61e6-4335-b167-36aed87e3388/1/v9e7_MK4-rZqWBuCJ8oKyBf6FGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:05:2a:3d:7c:d0:da:6a:35:23:cb:58:e3:75:72:36:c9:3d: ab:a5:26:67:4d:e2:93:14:04:e8:fd:ac:a4:75:b6:67:29:fb: 19:2d:65:8f:38:44:0a:3c:e6:0a:ab:85:ed:7e:fd:5d:1d:98: 22:15:0c:bc:c2:a9:7a:a8:50:ef:23:3a:32:24:11:95:d8:35: e4:1c:36:57:aa:6e:96:b7:96:b9:3c:76:66:67:65:53:7b:89: a3:a2:ff:26:f8:46:8a:b7:c3:80:17:e1:2a:17:a5:36:d3:9b: 4c:d1:6c:04:37:75:12:3a:64:60:36:1c:e8:d2:31:fe:f5:13: 83:15:62:a8:99:58:4e:25:c1:c0:b6:fc:a2:d2:c5:6f:49:55: 57:96:05:5d:3e:8e:b9:81:14:da:c6:01:4e:74:bb:a9:5c:01: 68:28:a7:bb:0e:df:91:f2:3d:6f:40:4f:67:ba:91:c1:c6:e6: 65:0f:28:8e:23:37:60:ba:d1:1c:42:98:df:75:b9:5d:ab:7e: 6f:0c:ad:68:42:52:e8:b3:02:6a:ab:11:76:4e:85:1e:8a:45: 78:18:97:80:4d:e1:45:0e:fd:ae:a7:e0:10:51:9d:a2:69:71: 11:a1:18:aa:a6:6d:03:65:20:b7:de:26:95:b0:e1:da:da:30: 56:94:d0:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydo74wzGnB6AXbAONu6G9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZDdiYmZjYzJiOGZhYjY2YTU4MWI4MjI3Y2EwYWM4MTdm YTE0NmIwHhcNMjUxMjA2MDcwMDQ3WhcNMjUxMjA3MDcwMDQ3WjAzMTEwLwYDVQQD EygwYWEyNjhjNTE4ZTcxZmJlOTcxYTZiNTczMzkzYjgzZjRiYWIxNTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68komOkj+wfS1hrkgbKb02fLpq/7 cjybfbOn/CJ5v0jvK0RGrclqKPVfaG1Qo+nUxOW7+9lmxeD7T5o39ExP3AhYGXET 0MDiw5qs58lkQJThZ/J2lrml5G+CmYdotPef81ZkqWGK+7e90N/dnetjWe619SWf bEhbchqTtt+cs71RM00NN3C7npdUvzBN8j4Ab8qlZQEdHQo3Isa3tTTwYQpjkTAf KQCehB/+lujxK9pLKNLxQyw9B3r4J4wEqPAdOuvd9PFoZOivkeaoqnPSvPA7GEhq 3i0AuZcqQvNcOpINt8K+huhsxYvgvdab6kWiwnfuphALG+kBEuXOJX5QsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqiaMUY5x++lxprVzOTuD9LqxUhMB8GA1UdIwQY MBaAFL/Xu/zCuPq2algbgifKCsgX+hRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjllN19NSzQtclpxV0J1Q0o4b0t5QmY2RkdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS84MmZiMDUtNjFlNi00MzM1LWIxNjct MzZhZWQ4N2UzMzg4LzEvdjllN19NSzQtclpxV0J1Q0o4b0t5QmY2RkdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS84MmZiMDUtNjFlNi00MzM1LWIxNjctMzZhZWQ4N2UzMzg4 LzEvdjllN19NSzQtclpxV0J1Q0o4b0t5QmY2RkdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvQUqPXzQ 2mo1I8tY43VyNsk9q6UmZ03ikxQE6P2spHW2Zyn7GS1ljzhECjzmCquF7X79XR2Y IhUMvMKpeqhQ7yM6MiQRldg15Bw2V6pulreWuTx2ZmdlU3uJo6L/JvhGirfDgBfh KhelNtObTNFsBDd1EjpkYDYc6NIx/vUTgxViqJlYTiXBwLb8otLFb0lVV5YFXT6O uYEU2sYBTnS7qVwBaCinuw7fkfI9b0BPZ7qRwcbmZQ8ojiM3YLrRHEKY33W5Xat+ bwytaEJS6LMCaqsRdk6FHopFeBiXgE3hRQ79rqfgEFGdomlxEaEYqqZtA2Ugt94m lbDh2towVpTQpw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:57:40 2025 by rpki-client