This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft File: v9dqdFixnRZfMvDsM9cVaeX0_vk.mft (raw, json) Hash identifier: MUD6nFC4XVujdALRNfrTfHJMX5Iy7MtJd41NRuc5rQw= Subject key identifier: C1:CF:25:57:B5:ED:16:81:96:D6:29:48:38:EC:A5:D0:04:E6:01:65 Authority key identifier: BF:D7:6A:74:58:B1:9D:16:5F:32:F0:EC:33:D7:15:69:E5:F4:FE:F9 Certificate issuer: /CN=bfd76a7458b19d165f32f0ec33d71569e5f4fef9 Certificate serial: 019B386A2B28EA5DBB3EE7FAB3C54EE2334C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft Manifest number: 06EA Signing time: Fri 19 Dec 2025 21:00:40 +0000 Manifest this update: Fri 19 Dec 2025 21:00:40 +0000 Manifest next update: Sat 20 Dec 2025 21:00:40 +0000 Files and hashes: 1: ijhZTYk9DGModkCajt66p72oFJI.roa (hash: cJaDIFdktjTkViIcpy9eK9vMB54QBt7lF7b2FQyxIpA=) 2: v9dqdFixnRZfMvDsM9cVaeX0_vk.crl (hash: 5fMNICjnpuaOk7dP39RvDdKlBSuJEM/0UEra2BOo20c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 21:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:6a:2b:28:ea:5d:bb:3e:e7:fa:b3:c5:4e:e2:33:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfd76a7458b19d165f32f0ec33d71569e5f4fef9 Validity Not Before: Dec 19 21:00:40 2025 GMT Not After : Dec 20 21:00:40 2025 GMT Subject: CN=c1cf2557b5ed168196d6294838eca5d004e60165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e5:38:0c:b0:5e:5e:b4:24:c2:63:2e:36:e8: 7f:54:99:d2:e3:11:4c:1f:e5:7b:bc:4f:55:8e:c1: 11:0d:c8:a0:43:e4:54:b3:e9:8d:59:7b:91:7f:9f: c0:ce:7b:0a:36:ea:5d:f5:90:45:16:87:c2:96:60: 55:68:ce:69:df:27:fa:3b:ba:12:57:70:9b:0e:89: 9c:eb:bb:9a:c0:24:5d:01:20:32:ed:9a:8b:39:cc: 0a:d3:5c:de:32:7d:67:f3:c8:42:d5:6d:2c:dc:fa: a7:2f:87:05:65:33:c4:41:7a:d3:ce:3e:9f:c9:3b: 59:38:bf:70:e0:10:cc:44:25:47:bd:06:6c:af:23: 80:c1:63:f5:7e:77:c7:22:bf:19:87:29:c5:d8:e9: 55:2a:55:64:5d:96:1c:d5:58:da:93:d4:a4:7b:64: b3:6d:ae:0d:10:32:5a:9c:6b:02:38:3b:9e:60:44: 10:92:a8:fe:14:9d:d1:bf:2e:81:87:61:4f:94:36: 1c:4c:b7:26:43:99:f8:6e:fd:18:f0:eb:4e:73:0b: 47:ac:99:a3:57:d3:8e:20:27:69:86:35:a7:2b:0b: fe:9e:f0:9e:aa:bc:91:61:1f:b6:9d:a6:30:ac:bc: 8e:57:48:17:44:46:3d:27:d5:d0:a3:72:98:f3:3c: 1f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:CF:25:57:B5:ED:16:81:96:D6:29:48:38:EC:A5:D0:04:E6:01:65 X509v3 Authority Key Identifier: keyid:BF:D7:6A:74:58:B1:9D:16:5F:32:F0:EC:33:D7:15:69:E5:F4:FE:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:f9:a4:0d:f6:b0:26:48:f6:0a:6e:39:3d:a3:18:9e:15:aa: 7b:44:e9:e0:7e:e2:b7:da:bb:99:f4:78:d4:dd:51:85:36:33: 23:83:db:dc:6d:e3:2d:b0:f3:bb:ba:b4:2a:a4:1d:5f:0a:d1: 33:12:55:f4:63:fa:ae:9a:80:d2:41:5a:c5:d7:78:fd:fb:c4: 52:ea:a2:f3:45:77:1b:ed:f9:3d:a7:62:fc:2f:1e:b0:2a:ee: b7:95:03:ea:ab:77:91:c3:76:2d:a6:99:db:f9:ba:2d:42:b3: af:82:f5:5c:c2:cb:63:09:f6:c3:80:d0:06:4b:95:a2:ac:fb: a2:11:53:b9:4c:d6:41:40:bd:dc:54:bf:b7:07:49:75:d3:5b: 7c:56:05:f9:91:0f:97:c7:f6:d2:7d:e0:46:dc:8a:13:43:5b: 3c:dd:86:01:3e:36:78:3b:72:c5:25:d4:d6:1a:92:ef:f9:2f: d7:26:4a:0b:30:f3:ac:7d:ef:ad:a7:ef:66:24:39:f6:91:87: 21:23:12:48:a7:82:5a:c6:04:e9:83:9e:f0:09:91:33:bf:22: 7f:07:19:8c:46:f3:01:e2:5c:c4:de:ff:bc:ae:8b:01:28:b6: 03:08:e2:a7:19:b2:d4:ec:9b:c4:fe:8f:9e:ac:70:49:e7:b6: 26:e3:a4:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4aiso6l27Puf6s8VO4jNMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZDc2YTc0NThiMTlkMTY1ZjMyZjBlYzMzZDcxNTY5ZTVm NGZlZjkwHhcNMjUxMjE5MjEwMDQwWhcNMjUxMjIwMjEwMDQwWjAzMTEwLwYDVQQD EyhjMWNmMjU1N2I1ZWQxNjgxOTZkNjI5NDgzOGVjYTVkMDA0ZTYwMTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+U4DLBeXrQkwmMuNuh/VJnS4xFM H+V7vE9VjsERDcigQ+RUs+mNWXuRf5/AznsKNupd9ZBFFofClmBVaM5p3yf6O7oS V3CbDomc67uawCRdASAy7ZqLOcwK01zeMn1n88hC1W0s3PqnL4cFZTPEQXrTzj6f yTtZOL9w4BDMRCVHvQZsryOAwWP1fnfHIr8ZhynF2OlVKlVkXZYc1Vjak9Ske2Sz ba4NEDJanGsCODueYEQQkqj+FJ3Rvy6Bh2FPlDYcTLcmQ5n4bv0Y8OtOcwtHrJmj V9OOICdphjWnKwv+nvCeqryRYR+2naYwrLyOV0gXREY9J9XQo3KY8zwftwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHPJVe17RaBltYpSDjspdAE5gFlMB8GA1UdIwQY MBaAFL/XanRYsZ0WXzLw7DPXFWnl9P75MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjlkcWRGaXhuUlpmTXZEc005Y1ZhZVgwX3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iNWM4MTAtOTEwOS00NzI5LWI0MWQt YjQ5MWY1YjM5ZWYyLzEvdjlkcWRGaXhuUlpmTXZEc005Y1ZhZVgwX3ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9iNWM4MTAtOTEwOS00NzI5LWI0MWQtYjQ5MWY1YjM5ZWYy LzEvdjlkcWRGaXhuUlpmTXZEc005Y1ZhZVgwX3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPmkDfaw Jkj2Cm45PaMYnhWqe0Tp4H7it9q7mfR41N1RhTYzI4Pb3G3jLbDzu7q0KqQdXwrR MxJV9GP6rpqA0kFaxdd4/fvEUuqi80V3G+35Padi/C8esCrut5UD6qt3kcN2LaaZ 2/m6LUKzr4L1XMLLYwn2w4DQBkuVoqz7ohFTuUzWQUC93FS/twdJddNbfFYF+ZEP l8f20n3gRtyKE0NbPN2GAT42eDtyxSXU1hqS7/kv1yZKCzDzrH3vrafvZiQ59pGH ISMSSKeCWsYE6YOe8AmRM78ifwcZjEbzAeJcxN7/vK6LASi2Awjipxmy1OybxP6P nqxwSee2JuOk6Q== -----END CERTIFICATE-----Generated at Sat Dec 20 06:30:13 2025 by rpki-client