This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft File: v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft (raw, json) Hash identifier: thsrIh9DkvkmWEa4hywUZW+GvNtF32OAGOMUF1YZkWs= Subject key identifier: 7E:AC:D0:AF:2D:3C:43:0E:04:94:30:AD:AE:9F:36:48:E6:41:D3:A7 Authority key identifier: BF:D0:70:B0:C9:AD:D9:29:72:FE:FC:56:6C:11:2D:93:71:7C:4D:6C Certificate issuer: /CN=bfd070b0c9add92972fefc566c112d93717c4d6c Certificate serial: 019AF1D24837520A5C4C9B5F193D7C48795C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 04:01:21 +0000 Manifest this update: Sat 06 Dec 2025 04:01:21 +0000 Manifest next update: Sun 07 Dec 2025 04:01:21 +0000 Files and hashes: 1: fkFOu25-CLt_pqgxFyon0OGUb4o.roa (hash: sKSFZUpWtwcAyL2D36Fml5sLNaF1815anfn4zderbaw=) 2: v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl (hash: +ts0/LT3eTnFS8wvFeosWaIWdoJC1j7lbzcvh0UPpcQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:48:37:52:0a:5c:4c:9b:5f:19:3d:7c:48:79:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfd070b0c9add92972fefc566c112d93717c4d6c Validity Not Before: Dec 6 04:01:21 2025 GMT Not After : Dec 7 04:01:21 2025 GMT Subject: CN=7eacd0af2d3c430e049430adae9f3648e641d3a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c8:51:e7:b5:dc:01:6f:e4:ef:40:70:86:82: a3:e7:3a:7d:7b:bf:80:66:1a:05:cc:a3:ee:47:ef: 32:cb:5f:cd:51:d0:f6:0f:a4:f2:57:b1:29:37:5b: 14:47:5d:eb:33:9e:70:96:f1:3b:7d:00:83:ac:ee: 3a:65:08:3b:ff:6b:64:66:68:13:5a:3b:72:63:1a: 2f:76:3b:63:a4:ad:fb:9d:01:c5:32:e9:42:1f:98: eb:2d:99:8c:93:44:80:64:9b:dc:d9:26:a4:5e:f8: f3:36:b0:8c:3e:4d:93:31:dd:eb:b1:54:9f:47:a7: dd:e4:6b:5e:42:ba:65:59:23:5e:8c:b0:ad:02:2d: cc:1a:a8:e1:a2:63:57:b1:5d:15:06:e5:09:28:d8: 53:10:bb:36:f4:8a:d3:d2:54:f0:56:77:89:dd:2f: a0:84:41:45:be:a6:2b:a2:8c:32:d8:98:45:39:29: 4b:0f:dd:e2:12:53:e9:ec:9c:3b:0f:64:00:54:0e: 98:d3:a5:e0:60:a3:a1:74:f6:c4:99:38:75:15:39: 53:b1:6d:dc:4f:89:db:3b:12:46:8a:b3:7a:57:40: da:d9:54:44:31:0d:b2:ae:37:f0:f9:d9:a5:84:25: 05:be:76:6d:70:91:28:a3:03:99:90:00:b2:bc:6b: b1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:AC:D0:AF:2D:3C:43:0E:04:94:30:AD:AE:9F:36:48:E6:41:D3:A7 X509v3 Authority Key Identifier: keyid:BF:D0:70:B0:C9:AD:D9:29:72:FE:FC:56:6C:11:2D:93:71:7C:4D:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9BwsMmt2Sly_vxWbBEtk3F8TWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/195427-4425-4556-9ea6-53cca81e9224/1/v9BwsMmt2Sly_vxWbBEtk3F8TWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:1d:2d:42:0c:81:f6:0d:14:10:ec:3a:43:ac:34:97:84:33: f4:bb:d2:b2:eb:5e:69:e6:c5:f8:23:1b:97:78:31:3f:bf:e2: b2:df:ec:8a:3b:b5:9b:d1:6a:1e:4f:bc:71:93:c9:c5:4e:e4: 01:de:17:e4:aa:46:bd:63:3d:14:24:11:37:b4:a8:99:0a:4b: fc:82:16:02:99:b4:53:40:92:4d:09:2c:e3:8a:5f:47:e5:0a: 99:9c:66:22:1c:3f:d8:6e:fe:10:cc:21:e6:17:74:ba:10:4f: 2e:c2:35:03:7c:a4:ad:55:c3:ce:68:1d:45:1a:a2:78:f5:88: f3:96:83:30:cf:1f:dc:14:16:7a:fe:04:62:36:be:fa:86:f0: cd:7b:4c:9b:58:59:cf:c6:33:5e:3a:c7:a3:67:ad:58:5f:94: dc:60:5f:c9:63:14:0d:d9:8e:e9:06:27:d9:07:85:ea:a9:72: f0:03:a8:31:44:7e:d7:4b:ca:11:12:9f:20:e9:77:ad:8e:bc: a5:df:aa:8a:7f:a8:60:bd:7f:a0:23:ec:45:e8:c0:a3:b1:ca: c9:f3:a6:b2:7f:c6:2b:5e:eb:52:a5:aa:6d:26:9b:f7:36:27: 89:2d:b6:a8:8c:69:dc:5f:7e:f6:92:9c:33:eb:1d:61:e4:bb: 68:92:af:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kg3UgpcTJtfGT18SHlcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZDA3MGIwYzlhZGQ5Mjk3MmZlZmM1NjZjMTEyZDkzNzE3 YzRkNmMwHhcNMjUxMjA2MDQwMTIxWhcNMjUxMjA3MDQwMTIxWjAzMTEwLwYDVQQD Eyg3ZWFjZDBhZjJkM2M0MzBlMDQ5NDMwYWRhZTlmMzY0OGU2NDFkM2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MhR57XcAW/k70BwhoKj5zp9e7+A ZhoFzKPuR+8yy1/NUdD2D6TyV7EpN1sUR13rM55wlvE7fQCDrO46ZQg7/2tkZmgT WjtyYxovdjtjpK37nQHFMulCH5jrLZmMk0SAZJvc2SakXvjzNrCMPk2TMd3rsVSf R6fd5GteQrplWSNejLCtAi3MGqjhomNXsV0VBuUJKNhTELs29IrT0lTwVneJ3S+g hEFFvqYroowy2JhFOSlLD93iElPp7Jw7D2QAVA6Y06XgYKOhdPbEmTh1FTlTsW3c T4nbOxJGirN6V0Da2VREMQ2yrjfw+dmlhCUFvnZtcJEoowOZkACyvGux/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6s0K8tPEMOBJQwra6fNkjmQdOnMB8GA1UdIwQY MBaAFL/QcLDJrdkpcv78VmwRLZNxfE1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjlCd3NNbXQyU2x5X3Z4V2JCRXRrM0Y4VFd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xOTU0MjctNDQyNS00NTU2LTllYTYt NTNjY2E4MWU5MjI0LzEvdjlCd3NNbXQyU2x5X3Z4V2JCRXRrM0Y4VFd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xOTU0MjctNDQyNS00NTU2LTllYTYtNTNjY2E4MWU5MjI0 LzEvdjlCd3NNbXQyU2x5X3Z4V2JCRXRrM0Y4VFd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWB0tQgyB 9g0UEOw6Q6w0l4Qz9LvSsuteaebF+CMbl3gxP7/ist/siju1m9FqHk+8cZPJxU7k Ad4X5KpGvWM9FCQRN7SomQpL/IIWApm0U0CSTQks44pfR+UKmZxmIhw/2G7+EMwh 5hd0uhBPLsI1A3ykrVXDzmgdRRqiePWI85aDMM8f3BQWev4EYja++obwzXtMm1hZ z8YzXjrHo2etWF+U3GBfyWMUDdmO6QYn2QeF6qly8AOoMUR+10vKERKfIOl3rY68 pd+qin+oYL1/oCPsRejAo7HKyfOmsn/GK17rUqWqbSab9zYniS22qIxp3F9+9pKc M+sdYeS7aJKviA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:29:43 2025 by rpki-client