This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft File: 9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft (raw, json) Hash identifier: 2QjFbbs0Yk1gHAMkBRjLvX56/P5F/edx6lNtq3bhghA= Subject key identifier: 1E:9D:BA:78:58:72:11:0E:BB:78:60:DB:74:A4:17:AF:F9:30:CC:E4 Authority key identifier: F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B Certificate issuer: /CN=f5cf73b3e45f772fae1b915690b317344c3f442b Certificate serial: 019AF3C07AF127B5B7566BB162DCCEB6AA16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft Manifest number: 0DF6 Signing time: Sat 06 Dec 2025 13:01:09 +0000 Manifest this update: Sat 06 Dec 2025 13:01:09 +0000 Manifest next update: Sun 07 Dec 2025 13:01:09 +0000 Files and hashes: 1: 4yZTf3OsIRZIEjMrz8-5ILc2C74.roa (hash: aiMSxdzv4PUdTe93bKxnLhd2giNSW/3kAmdI3yacpFc=) 2: 9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl (hash: wDvf3hVFkY071kO1PP6ZSa8JKAnd1u6cOXzAqrqb0LY=) 3: X-vr6VJDYrS7V_AEQe-X1SxHPjI.roa (hash: kvS9vh6mgtsHB9vFeq8m3TzjFP++U05E594tUA8kMi8=) 4: mFCab-YMnaPwjq0SGjjSKVSwCvs.roa (hash: NwTUf2FCA+SWI7PlbFVRLa9grCf7O5GxOtog8KpH75E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:7a:f1:27:b5:b7:56:6b:b1:62:dc:ce:b6:aa:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5cf73b3e45f772fae1b915690b317344c3f442b Validity Not Before: Dec 6 13:01:09 2025 GMT Not After : Dec 7 13:01:09 2025 GMT Subject: CN=1e9dba785872110ebb7860db74a417aff930cce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d3:f2:3e:07:43:81:70:80:38:e5:82:b3:a6: b5:43:db:06:f2:2c:9f:85:34:2e:20:63:84:61:23: a7:da:3e:40:8a:23:9f:fe:70:9b:67:33:8d:64:a0: f9:18:6b:93:86:55:2c:9a:ca:18:6f:12:c8:f2:54: a0:c3:a8:2d:f6:61:98:22:f8:9e:c6:03:cb:08:22: 39:4d:bb:05:3d:0f:45:57:a9:31:c1:86:37:2f:b3: 88:c2:58:71:40:e9:46:65:6b:5d:b7:a6:6a:3c:93: 29:5a:46:52:99:c2:49:a4:00:1a:ab:07:02:39:40: 1f:b7:bc:1f:1d:b7:2d:db:ca:cf:a5:11:0e:07:1a: 10:1f:cc:39:d3:29:05:39:3f:0b:28:62:a1:38:e0: bf:d1:db:de:e2:7a:68:f3:b1:a3:a6:54:73:c8:cc: 93:07:8f:ff:5a:d4:e0:cf:8b:a9:2e:1e:7a:ff:c5: 8d:15:be:43:92:b7:9f:c4:97:6e:a4:37:e3:64:30: 5c:66:0d:cd:66:c6:ab:0c:ef:04:67:d7:86:19:ec: 67:ef:17:e2:bc:2a:83:85:c2:1e:0a:36:11:1a:44: b5:fc:f1:2c:69:a5:cc:33:24:76:7e:9e:39:8d:27: 34:2b:bc:f9:43:d4:63:2e:a4:ce:e5:76:03:b1:27: 58:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9D:BA:78:58:72:11:0E:BB:78:60:DB:74:A4:17:AF:F9:30:CC:E4 X509v3 Authority Key Identifier: keyid:F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:48:f5:a7:73:d3:c2:fb:c2:4b:ce:ad:42:ff:ef:19:41:ac: 60:8c:b4:ca:31:84:11:ea:12:96:b2:8d:0f:f9:e4:33:b4:83: 7d:24:c8:d0:52:cc:1d:97:63:78:b1:77:82:a7:aa:37:c7:2e: da:97:78:40:73:bb:a8:a2:b4:7c:b5:bb:db:e3:bc:ec:c4:d1: 0e:90:26:34:8a:0d:b9:96:54:88:9d:bc:52:0d:ff:e6:f3:11: 0c:47:b5:54:02:4e:92:6c:e0:4a:81:1b:39:67:6d:ad:f5:3f: 16:aa:0e:78:bb:7d:1a:82:68:a4:8d:9a:f0:3a:e1:5b:a3:e5: 19:42:91:9b:a7:52:9d:0b:4f:30:47:ca:33:73:97:aa:d2:5d: 14:17:b7:43:7d:9e:c2:13:3e:f4:88:64:cd:8b:87:2b:a2:a6: d5:58:07:eb:35:7e:05:cc:b8:22:43:1b:33:70:09:7e:33:9d: 6b:74:53:9b:4e:23:f1:76:9c:87:02:51:66:9f:25:a6:da:b1: 2e:c0:32:93:43:f2:ea:f0:b1:5a:e3:98:61:41:19:3b:20:b6: 3d:51:aa:eb:72:24:4f:87:d3:95:3b:d4:23:bd:fe:1a:99:bf: 8b:12:94:4c:cd:d4:99:61:17:07:7d:9c:f1:fc:a6:39:87:2c: 9f:e8:3c:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwHrxJ7W3VmuxYtzOtqoWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1Y2Y3M2IzZTQ1Zjc3MmZhZTFiOTE1NjkwYjMxNzM0NGMz ZjQ0MmIwHhcNMjUxMjA2MTMwMTA5WhcNMjUxMjA3MTMwMTA5WjAzMTEwLwYDVQQD EygxZTlkYmE3ODU4NzIxMTBlYmI3ODYwZGI3NGE0MTdhZmY5MzBjY2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09PyPgdDgXCAOOWCs6a1Q9sG8iyf hTQuIGOEYSOn2j5AiiOf/nCbZzONZKD5GGuThlUsmsoYbxLI8lSgw6gt9mGYIvie xgPLCCI5TbsFPQ9FV6kxwYY3L7OIwlhxQOlGZWtdt6ZqPJMpWkZSmcJJpAAaqwcC OUAft7wfHbct28rPpREOBxoQH8w50ykFOT8LKGKhOOC/0dve4npo87GjplRzyMyT B4//WtTgz4upLh56/8WNFb5DkrefxJdupDfjZDBcZg3NZsarDO8EZ9eGGexn7xfi vCqDhcIeCjYRGkS1/PEsaaXMMyR2fp45jSc0K7z5Q9RjLqTO5XYDsSdYqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6dunhYchEOu3hg23SkF6/5MMzkMB8GA1UdIwQY MBaAFPXPc7PkX3cvrhuRVpCzFzRMP0QrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWM5enMtUmZkeS11RzVGV2tMTVhORXdfUkNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zYmU4NjUtNWM3OS00N2MwLWFhNGQt MWM2NTRlMDJkNzVkLzEvOWM5enMtUmZkeS11RzVGV2tMTVhORXdfUkNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8zYmU4NjUtNWM3OS00N2MwLWFhNGQtMWM2NTRlMDJkNzVk LzEvOWM5enMtUmZkeS11RzVGV2tMTVhORXdfUkNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuUj1p3PT wvvCS86tQv/vGUGsYIy0yjGEEeoSlrKND/nkM7SDfSTI0FLMHZdjeLF3gqeqN8cu 2pd4QHO7qKK0fLW72+O87MTRDpAmNIoNuZZUiJ28Ug3/5vMRDEe1VAJOkmzgSoEb OWdtrfU/FqoOeLt9GoJopI2a8DrhW6PlGUKRm6dSnQtPMEfKM3OXqtJdFBe3Q32e whM+9IhkzYuHK6Km1VgH6zV+Bcy4IkMbM3AJfjOda3RTm04j8XachwJRZp8lptqx LsAyk0Py6vCxWuOYYUEZOyC2PVGq63IkT4fTlTvUI73+Gpm/ixKUTM3UmWEXB32c 8fymOYcsn+g8Dw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:03:18 2025 by rpki-client