This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft File: VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft (raw, json) Hash identifier: rUgH6xMiik9MYD2Gvl+q+iuaXkKU/VNT1eWXhSs/xkg= Subject key identifier: BF:DA:AD:00:03:21:F1:C1:9E:D7:24:51:0E:AB:A4:5E:B4:29:22:FD Authority key identifier: 54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28 Certificate issuer: /CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928 Certificate serial: 019B1A600EB42D95BEA9FEF3F6C852B1ED2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft Manifest number: 1778 Signing time: Sun 14 Dec 2025 01:01:01 +0000 Manifest this update: Sun 14 Dec 2025 01:01:01 +0000 Manifest next update: Mon 15 Dec 2025 01:01:01 +0000 Files and hashes: 1: VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl (hash: 0KukITUvaf8u7Y4MJd74DbhL0SglGDGVy/OTD+2IC9g=) 2: aWGxAsqgYjjK0Ar3qgVNzPKw3zE.roa (hash: C8bnjj1ZSm0KY896M7YNbmPkIyPwlV7i43xeXVYRQA0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 01:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:60:0e:b4:2d:95:be:a9:fe:f3:f6:c8:52:b1:ed:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928 Validity Not Before: Dec 14 01:01:01 2025 GMT Not After : Dec 15 01:01:01 2025 GMT Subject: CN=bfdaad000321f1c19ed724510eaba45eb42922fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e6:35:92:37:d7:d4:af:9f:ab:8d:ad:81:8d: 95:4f:c8:47:e5:38:45:59:2e:9c:e0:c6:f8:3e:73: 82:21:48:dc:57:a5:cc:b1:5f:b7:d6:19:ca:0e:54: 33:1f:e9:1a:f0:ce:7a:18:22:4c:7d:e8:42:a1:2b: 23:35:ec:ed:a2:5b:2c:2e:18:5a:5f:c6:a6:8a:3f: a4:53:6c:14:1a:ba:3a:b4:34:6f:b1:a6:3b:de:be: 49:8c:39:74:74:dc:09:d8:e7:20:9d:a9:80:3a:05: af:dd:55:10:1a:1e:fa:7b:c9:2a:3b:be:aa:48:ee: ed:57:75:a2:d1:a1:11:0b:8d:83:be:a2:f4:16:4f: d7:08:3d:b5:a1:73:e6:f6:02:1b:43:0b:7f:36:32: ba:62:4e:a4:65:f7:f4:22:e8:d5:c0:a6:a3:5d:81: 04:d8:56:57:86:62:f4:5d:a9:0b:fa:17:ff:f4:3b: 0d:82:7c:a2:76:a8:53:6a:3c:21:f2:78:69:be:30: f7:04:23:c4:7e:66:50:a8:66:8d:8f:ea:49:f1:e6: 20:36:6d:07:4a:9c:96:c4:1a:85:25:b5:a5:c9:ef: 14:55:4c:3d:53:1d:c2:08:65:fb:d8:ce:a7:45:9c: a0:1a:04:c8:94:52:96:62:73:b4:ea:97:ba:62:93: 99:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:DA:AD:00:03:21:F1:C1:9E:D7:24:51:0E:AB:A4:5E:B4:29:22:FD X509v3 Authority Key Identifier: keyid:54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:bb:ad:7b:20:a6:d6:ba:8e:df:f4:19:05:b5:d8:01:44:60: 0e:28:97:72:e6:20:3f:29:60:3d:86:b0:b6:9b:0f:1f:00:09: 4f:50:06:71:13:3a:4e:af:aa:4d:10:c4:c4:fe:d5:0e:4c:62: fb:45:86:03:08:13:37:17:85:fa:3d:85:01:f7:02:97:73:d7: 98:3b:fb:db:ac:58:9d:8f:43:f7:a0:71:cd:9b:e8:d8:ae:82: 7a:f3:a4:d9:01:04:53:e5:19:22:43:18:ed:46:ac:60:c4:7c: d3:1c:2e:8f:45:23:31:3f:e4:92:8e:3c:9b:83:7e:e5:2a:af: ba:41:b6:2f:e2:44:7c:e2:d4:cd:b2:9f:85:14:96:28:32:ce: 82:e1:bb:a1:07:3b:21:9d:5a:7f:f0:2b:8f:f2:74:5c:ee:3f: 72:ca:2c:28:87:46:a0:81:e0:91:21:32:21:51:d3:ed:a6:14: c4:e0:91:a3:75:6f:fd:d3:43:18:3e:81:90:18:6d:fa:88:7a: 12:03:0e:29:94:3b:bf:68:74:ce:de:87:b2:9a:1a:38:93:ea: 10:c4:d1:91:f9:f7:a4:06:89:d1:f9:4b:22:88:bc:d3:8b:2b: 0d:be:bb:6c:73:66:62:69:0d:e8:95:a7:df:bd:29:71:9a:ad: e1:42:48:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaYA60LZW+qf7z9shSse0sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MmY3ZWE5MGQyYTJiNDIwMmU1NzhiMjViYTEzOWIzYzhl NjI5MjgwHhcNMjUxMjE0MDEwMTAxWhcNMjUxMjE1MDEwMTAxWjAzMTEwLwYDVQQD EyhiZmRhYWQwMDAzMjFmMWMxOWVkNzI0NTEwZWFiYTQ1ZWI0MjkyMmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuY1kjfX1K+fq42tgY2VT8hH5ThF WS6c4Mb4PnOCIUjcV6XMsV+31hnKDlQzH+ka8M56GCJMfehCoSsjNeztolssLhha X8amij+kU2wUGro6tDRvsaY73r5JjDl0dNwJ2OcgnamAOgWv3VUQGh76e8kqO76q SO7tV3Wi0aERC42DvqL0Fk/XCD21oXPm9gIbQwt/NjK6Yk6kZff0IujVwKajXYEE 2FZXhmL0XakL+hf/9DsNgnyidqhTajwh8nhpvjD3BCPEfmZQqGaNj+pJ8eYgNm0H SpyWxBqFJbWlye8UVUw9Ux3CCGX72M6nRZygGgTIlFKWYnO06pe6YpOZSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/arQADIfHBntckUQ6rpF60KSL9MB8GA1UdIwQY MBaAFFQvfqkNKitCAuV4sluhObPI5ikoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkM5LXFRMHFLMElDNVhpeVc2RTVzOGptS1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jNWU1MWUtZmI0MS00MmUzLWJlNjkt ZWUxZTFkZWQyZjlmLzEvVkM5LXFRMHFLMElDNVhpeVc2RTVzOGptS1NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9jNWU1MWUtZmI0MS00MmUzLWJlNjktZWUxZTFkZWQyZjlm LzEvVkM5LXFRMHFLMElDNVhpeVc2RTVzOGptS1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu7uteyCm 1rqO3/QZBbXYAURgDiiXcuYgPylgPYawtpsPHwAJT1AGcRM6Tq+qTRDExP7VDkxi +0WGAwgTNxeF+j2FAfcCl3PXmDv726xYnY9D96BxzZvo2K6CevOk2QEEU+UZIkMY 7UasYMR80xwuj0UjMT/kko48m4N+5SqvukG2L+JEfOLUzbKfhRSWKDLOguG7oQc7 IZ1af/Arj/J0XO4/csosKIdGoIHgkSEyIVHT7aYUxOCRo3Vv/dNDGD6BkBht+oh6 EgMOKZQ7v2h0zt6HspoaOJPqEMTRkfn3pAaJ0flLIoi804srDb67bHNmYmkN6JWn 370pcZqt4UJI/w== -----END CERTIFICATE-----Generated at Sun Dec 14 08:37:16 2025 by rpki-client