This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft File: v9Cah3Q4F8VvgIgAeldG62n_LjA.mft (raw, json) Hash identifier: wyjBkdlR3kpZNJpP0hVxW1eHZsFwVLdS6fkus+JPsoY= Subject key identifier: 72:62:DE:3D:FA:92:7A:0E:DB:A7:B0:3A:57:4C:96:6F:2B:2D:31:66 Authority key identifier: BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30 Certificate issuer: /CN=bfd09a87743817c56f8088007a5746eb69ff2e30 Certificate serial: 019B0F00A935A22A9BCFF12065563A2B4D91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft Manifest number: 176F Signing time: Thu 11 Dec 2025 20:01:00 +0000 Manifest this update: Thu 11 Dec 2025 20:01:00 +0000 Manifest next update: Fri 12 Dec 2025 20:01:00 +0000 Files and hashes: 1: B_BBQaqQOZZdiFqzJdt68RGvVTU.roa (hash: p8nyxzChdTcqx5QWY5bjhUZqFlEO6HaoHatKb5Ff2uw=) 2: THgpYsuwtp7Ym3zY6av8RgfZzLY.roa (hash: uQpggmJggCBeqYH5pLAJ2yEpa7lh8jrstdPPyiUJ77Q=) 3: cQNCKEPPhAFzmHj-XbDsRfptwBU.roa (hash: ymcXQ0jfpJoz4wb2MWPQfmWBhQPG8KLXmWx/brPfkUI=) 4: nofXYpB0FisO0jICtG3Ef-GQMH0.roa (hash: 6sPkKup7pdVWKTBxrRqOcxcRj13RLFPr/8N1XCriJwg=) 5: v9Cah3Q4F8VvgIgAeldG62n_LjA.crl (hash: T2J7DyMnt5HYRUv4KxECI9pzO7KIfeKAchCHrrPziyE=) 6: zoiZaQy1X6uA_fb18sRqVooSN48.roa (hash: +vAm2rSORgkYs00N65eNpRyENjf55QylaufRqfKzfJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:a9:35:a2:2a:9b:cf:f1:20:65:56:3a:2b:4d:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfd09a87743817c56f8088007a5746eb69ff2e30 Validity Not Before: Dec 11 20:01:00 2025 GMT Not After : Dec 12 20:01:00 2025 GMT Subject: CN=7262de3dfa927a0edba7b03a574c966f2b2d3166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7a:22:f1:80:3a:f0:d0:ad:91:89:7f:f5:f5: 5a:26:d9:be:88:49:7a:8f:7f:28:47:88:5a:f1:31: 87:f7:b5:de:06:36:c5:a4:39:f8:09:88:33:c1:ae: 27:99:b2:5d:6b:98:40:22:7a:e9:27:ab:7e:02:44: 35:b4:dc:3b:82:75:d2:43:49:bd:d2:f8:5e:1c:9e: 24:01:e9:cb:a6:ab:a0:23:87:a3:17:e1:0d:b1:14: f4:ca:08:8f:86:5c:e5:91:c4:a7:06:84:78:43:d4: 67:d6:83:ad:47:eb:9d:6c:ea:95:5f:48:b9:ac:94: 82:fe:f2:a7:77:82:d9:6b:45:e9:7c:b6:81:33:b9: 78:0c:d2:ad:66:e7:70:d1:12:77:67:d4:81:c3:96: b0:3e:29:53:cb:eb:3a:00:aa:b9:80:d9:31:30:7f: 73:78:03:1a:84:16:9b:6f:2d:a1:c4:4a:b8:9c:e7: ee:ad:26:7a:fd:1f:a3:0a:e1:64:eb:6e:f6:fd:65: 12:fe:3c:23:43:1b:8a:0f:e8:3e:61:69:c3:7d:24: bf:82:05:76:cd:31:d8:62:5c:c0:b7:f6:f1:eb:ac: 04:6d:6b:86:bf:7c:b5:18:44:7f:9d:b9:87:ca:22: af:29:98:f7:8d:a2:cb:d0:9e:16:f8:83:7e:be:ba: 28:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:62:DE:3D:FA:92:7A:0E:DB:A7:B0:3A:57:4C:96:6F:2B:2D:31:66 X509v3 Authority Key Identifier: keyid:BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:b1:ae:e2:30:00:0c:26:6d:56:fd:e9:69:f2:ca:2d:29:b0: a9:b3:69:bb:d4:1e:17:6a:8e:34:85:ab:79:83:84:42:56:30: 91:cb:7d:53:ee:e8:6c:fa:94:be:0a:1c:e9:35:ff:4a:7a:5f: 97:53:b2:38:37:98:92:1a:d0:3d:d2:94:9d:eb:35:77:72:75: 29:66:3a:15:02:67:48:a5:26:3a:ee:f8:59:00:94:53:21:a5: 51:87:af:90:7c:19:e4:bb:ef:2a:f7:82:0c:51:60:f3:af:55: 2b:23:2c:5f:b9:40:95:c7:85:1f:17:0b:53:c9:3d:19:15:42: 77:4e:94:27:42:35:51:e7:bf:d0:03:4e:73:57:80:24:c1:54: e1:fe:c3:9a:45:52:45:75:6d:59:94:22:18:be:36:75:f4:f8: e0:d1:be:68:74:1d:39:6f:ea:e6:cb:fb:3a:90:b8:88:88:cb: be:24:83:ec:53:5b:0d:66:ce:a3:23:46:7d:9d:8f:a6:34:73: 34:91:0b:9a:95:a5:a6:78:c1:3d:48:75:f0:eb:e2:5b:52:de: 2f:49:11:13:40:07:dd:14:59:d1:47:9e:33:b4:bd:17:50:4d: 51:19:77:78:c8:80:d2:16:83:3c:6a:3e:d9:69:6b:e0:8a:38: 50:76:5d:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAKk1oiqbz/EgZVY6K02RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZDA5YTg3NzQzODE3YzU2ZjgwODgwMDdhNTc0NmViNjlm ZjJlMzAwHhcNMjUxMjExMjAwMTAwWhcNMjUxMjEyMjAwMTAwWjAzMTEwLwYDVQQD Eyg3MjYyZGUzZGZhOTI3YTBlZGJhN2IwM2E1NzRjOTY2ZjJiMmQzMTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnoi8YA68NCtkYl/9fVaJtm+iEl6 j38oR4ha8TGH97XeBjbFpDn4CYgzwa4nmbJda5hAInrpJ6t+AkQ1tNw7gnXSQ0m9 0vheHJ4kAenLpqugI4ejF+ENsRT0ygiPhlzlkcSnBoR4Q9Rn1oOtR+udbOqVX0i5 rJSC/vKnd4LZa0XpfLaBM7l4DNKtZudw0RJ3Z9SBw5awPilTy+s6AKq5gNkxMH9z eAMahBabby2hxEq4nOfurSZ6/R+jCuFk6272/WUS/jwjQxuKD+g+YWnDfSS/ggV2 zTHYYlzAt/bx66wEbWuGv3y1GER/nbmHyiKvKZj3jaLL0J4W+IN+vrooRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJi3j36knoO26ewOldMlm8rLTFmMB8GA1UdIwQY MBaAFL/Qmod0OBfFb4CIAHpXRutp/y4wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjlDYWgzUTRGOFZ2Z0lnQWVsZEc2Mm5fTGpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wOTI1NzAtNTEyYS00NGZhLWE0ZmUt ZGJjYThjMzFlYmM4LzEvdjlDYWgzUTRGOFZ2Z0lnQWVsZEc2Mm5fTGpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8wOTI1NzAtNTEyYS00NGZhLWE0ZmUtZGJjYThjMzFlYmM4 LzEvdjlDYWgzUTRGOFZ2Z0lnQWVsZEc2Mm5fTGpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHrGu4jAA DCZtVv3pafLKLSmwqbNpu9QeF2qONIWreYOEQlYwkct9U+7obPqUvgoc6TX/Snpf l1OyODeYkhrQPdKUnes1d3J1KWY6FQJnSKUmOu74WQCUUyGlUYevkHwZ5LvvKveC DFFg869VKyMsX7lAlceFHxcLU8k9GRVCd06UJ0I1Uee/0ANOc1eAJMFU4f7DmkVS RXVtWZQiGL42dfT44NG+aHQdOW/q5sv7OpC4iIjLviSD7FNbDWbOoyNGfZ2PpjRz NJELmpWlpnjBPUh18OviW1LeL0kRE0AH3RRZ0UeeM7S9F1BNURl3eMiA0haDPGo+ 2Wlr4Io4UHZdMg== -----END CERTIFICATE-----Generated at Fri Dec 12 01:30:14 2025 by rpki-client