This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft File: 9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft (raw, json) Hash identifier: eSKH4P/ktiIaOcaxzVxDDNfN/pv3C3lSAKp3jKGKxbQ= Subject key identifier: B0:A0:F4:81:E2:54:60:DC:F0:1C:39:AE:5E:D4:24:E6:4B:C3:79:6E Authority key identifier: F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B Certificate issuer: /CN=f5cf73b3e45f772fae1b915690b317344c3f442b Certificate serial: 019B48B96331A97E741AF8A9A527FA9EF5CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft Manifest number: 0E22 Signing time: Tue 23 Dec 2025 01:01:07 +0000 Manifest this update: Tue 23 Dec 2025 01:01:07 +0000 Manifest next update: Wed 24 Dec 2025 01:01:07 +0000 Files and hashes: 1: 4yZTf3OsIRZIEjMrz8-5ILc2C74.roa (hash: aiMSxdzv4PUdTe93bKxnLhd2giNSW/3kAmdI3yacpFc=) 2: 9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl (hash: QJXsyxOtCtf+OO+fSZl3Ag4EuD7zDA04GJ1D8Gsf7FE=) 3: X-vr6VJDYrS7V_AEQe-X1SxHPjI.roa (hash: kvS9vh6mgtsHB9vFeq8m3TzjFP++U05E594tUA8kMi8=) 4: mFCab-YMnaPwjq0SGjjSKVSwCvs.roa (hash: NwTUf2FCA+SWI7PlbFVRLa9grCf7O5GxOtog8KpH75E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 01:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:63:31:a9:7e:74:1a:f8:a9:a5:27:fa:9e:f5:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5cf73b3e45f772fae1b915690b317344c3f442b Validity Not Before: Dec 23 01:01:07 2025 GMT Not After : Dec 24 01:01:07 2025 GMT Subject: CN=b0a0f481e25460dcf01c39ae5ed424e64bc3796e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f0:10:97:6e:55:b9:14:7f:be:6d:df:5a:5f: 6e:1c:e0:68:b0:4c:00:66:f8:a0:3c:1b:21:c2:2f: 19:bd:66:60:93:4d:9a:5c:cd:3f:c6:15:09:30:af: b5:34:f6:22:e8:4c:2c:75:2f:86:d3:7b:ab:ea:38: 0f:f9:e9:3e:4c:8f:13:bc:48:42:d0:7f:fe:f9:58: 1a:1d:75:ed:61:7a:e3:fa:2b:3c:49:44:fd:a3:07: 89:20:97:d2:56:e6:7c:a3:de:ee:74:5c:01:6e:ed: cf:d7:cf:58:59:15:81:d7:97:1a:2d:5a:6f:32:a0: 2f:af:b1:2f:1d:4b:d1:47:76:75:ba:66:2a:05:03: 12:31:e7:4a:25:a9:2a:8c:52:e6:43:69:5c:72:95: 52:a0:3f:9e:a9:57:5b:bb:d1:fe:a2:a0:2d:60:af: f2:91:da:12:ca:13:19:a3:aa:48:53:81:13:f5:32: 33:2b:3f:a0:f6:a2:2d:c2:68:81:ef:2c:cc:ee:50: 73:5b:75:72:44:ed:da:e6:23:c1:f0:0e:c3:fe:4b: c4:08:d7:df:2f:2d:23:ea:53:5c:24:ed:31:7b:c8: 49:e9:d4:33:cf:4b:46:37:5d:74:94:a2:1e:56:51: c6:47:83:46:71:1c:e4:e6:b8:d5:98:ae:ec:8b:53: 26:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A0:F4:81:E2:54:60:DC:F0:1C:39:AE:5E:D4:24:E6:4B:C3:79:6E X509v3 Authority Key Identifier: keyid:F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:4a:3e:3e:43:74:98:d7:27:a1:0d:fe:64:02:88:55:69:0a: dc:f6:e8:f3:cf:b1:8c:af:83:d5:62:21:18:92:5f:05:17:ab: 71:8e:05:b9:14:ed:9c:e2:07:58:06:5a:be:7f:d6:81:c3:16: 5f:6d:bf:c4:2c:26:1f:71:6f:25:1c:0e:40:d0:e9:a0:74:9f: 36:2d:8f:8b:07:7a:9a:77:d8:0c:c8:07:52:41:bb:78:81:d2: 64:4a:ed:69:96:56:4e:43:fe:18:17:a6:8d:36:8e:2f:77:37: e5:90:74:44:1a:b9:72:15:59:44:02:e7:7a:bd:13:2e:99:6e: 5e:06:ec:4e:bc:43:af:79:b7:6c:56:40:88:51:9e:c6:95:89: 53:da:59:a9:d1:f0:f4:31:c0:a0:c0:81:dd:5b:17:6e:67:82: f6:92:c4:69:1e:76:ee:25:1f:56:88:3b:7a:53:12:32:e4:b1: 5b:17:0f:ba:f0:eb:ef:f9:95:0b:67:6c:9c:97:b0:60:53:03: 89:b5:45:33:9a:25:63:ed:76:3e:20:f5:a0:91:c3:72:90:8c: 75:14:64:a1:02:8f:ab:49:fe:95:c9:ab:d0:ac:d0:f7:2c:54: 40:9d:08:e8:ad:c5:57:5c:eb:58:d4:d9:a9:f0:5b:05:99:23: 4c:a9:46:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuWMxqX50GvippSf6nvXNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1Y2Y3M2IzZTQ1Zjc3MmZhZTFiOTE1NjkwYjMxNzM0NGMz ZjQ0MmIwHhcNMjUxMjIzMDEwMTA3WhcNMjUxMjI0MDEwMTA3WjAzMTEwLwYDVQQD EyhiMGEwZjQ4MWUyNTQ2MGRjZjAxYzM5YWU1ZWQ0MjRlNjRiYzM3OTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/AQl25VuRR/vm3fWl9uHOBosEwA ZvigPBshwi8ZvWZgk02aXM0/xhUJMK+1NPYi6EwsdS+G03ur6jgP+ek+TI8TvEhC 0H/++VgaHXXtYXrj+is8SUT9oweJIJfSVuZ8o97udFwBbu3P189YWRWB15caLVpv MqAvr7EvHUvRR3Z1umYqBQMSMedKJakqjFLmQ2lccpVSoD+eqVdbu9H+oqAtYK/y kdoSyhMZo6pIU4ET9TIzKz+g9qItwmiB7yzM7lBzW3VyRO3a5iPB8A7D/kvECNff Ly0j6lNcJO0xe8hJ6dQzz0tGN110lKIeVlHGR4NGcRzk5rjVmK7si1MmcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCg9IHiVGDc8Bw5rl7UJOZLw3luMB8GA1UdIwQY MBaAFPXPc7PkX3cvrhuRVpCzFzRMP0QrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWM5enMtUmZkeS11RzVGV2tMTVhORXdfUkNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zYmU4NjUtNWM3OS00N2MwLWFhNGQt MWM2NTRlMDJkNzVkLzEvOWM5enMtUmZkeS11RzVGV2tMTVhORXdfUkNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8zYmU4NjUtNWM3OS00N2MwLWFhNGQtMWM2NTRlMDJkNzVk LzEvOWM5enMtUmZkeS11RzVGV2tMTVhORXdfUkNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs0o+PkN0 mNcnoQ3+ZAKIVWkK3Pbo88+xjK+D1WIhGJJfBRercY4FuRTtnOIHWAZavn/WgcMW X22/xCwmH3FvJRwOQNDpoHSfNi2Piwd6mnfYDMgHUkG7eIHSZErtaZZWTkP+GBem jTaOL3c35ZB0RBq5chVZRALner0TLpluXgbsTrxDr3m3bFZAiFGexpWJU9pZqdHw 9DHAoMCB3VsXbmeC9pLEaR527iUfVog7elMSMuSxWxcPuvDr7/mVC2dsnJewYFMD ibVFM5olY+12PiD1oJHDcpCMdRRkoQKPq0n+lcmr0KzQ9yxUQJ0I6K3FV1zrWNTZ qfBbBZkjTKlGqA== -----END CERTIFICATE-----Generated at Tue Dec 23 10:51:19 2025 by rpki-client