This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft File: mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft (raw, json) Hash identifier: L6zwPE54sFHC6jrb9F818djuz0qQe1GhDL/yVI7m61w= Subject key identifier: F2:9B:CC:5C:2F:E3:09:46:B4:AA:36:4C:1C:46:05:8F:84:47:92:29 Authority key identifier: 99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C Certificate issuer: /CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c Certificate serial: 019AF0BF8281BD137E54D9D030D2C136D60F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft Manifest number: 0730 Signing time: Fri 05 Dec 2025 23:01:13 +0000 Manifest this update: Fri 05 Dec 2025 23:01:13 +0000 Manifest next update: Sat 06 Dec 2025 23:01:13 +0000 Files and hashes: 1: KKAdJZwlPOuvUmhtsSSfP_XfQ9w.roa (hash: Fim6YZSnH30vV92L/gdG+AOAxW50mQ7FyxjlaSpVQfU=) 2: mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl (hash: OSg8MjHaTDDKSJ4Lq6aR0ghrG2dZAczW/TYbFxt/HlI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:82:81:bd:13:7e:54:d9:d0:30:d2:c1:36:d6:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c Validity Not Before: Dec 5 23:01:13 2025 GMT Not After : Dec 6 23:01:13 2025 GMT Subject: CN=f29bcc5c2fe30946b4aa364c1c46058f84479229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4f:ff:2c:a2:17:fc:14:57:e0:c8:22:76:8c: e2:89:3f:61:3f:4a:64:0c:f2:2b:1f:a8:73:68:38: 47:ad:cc:c0:76:0f:34:c4:1d:1e:e0:b7:1a:95:58: 90:a1:82:64:3f:f5:f7:5a:17:e0:bb:0a:57:c8:c5: f7:d0:1d:45:1d:af:30:35:c8:08:89:65:83:e1:49: 3f:c7:b4:ba:80:19:25:59:30:2f:49:31:a1:76:4c: 6e:dd:72:b6:fd:c2:f8:aa:21:fb:7b:72:c1:84:7b: 42:22:5e:2f:b7:8e:55:3c:1c:94:8f:9b:19:01:a3: 2b:19:56:01:a6:40:15:ef:5e:d0:8b:b0:6f:5c:50: f3:30:e2:4e:bc:86:c6:69:fd:44:59:27:a2:67:3b: 37:c8:b0:36:74:e8:e8:da:56:5e:9a:87:d1:87:ea: e6:b2:62:df:2b:29:87:c3:6b:25:a7:8a:7e:b6:c7: 7c:41:f7:34:9d:89:38:80:f6:fc:ff:a3:30:b1:36: 10:4e:02:f6:52:1a:dc:de:c1:a0:85:28:8b:ba:86: a2:54:09:ad:b5:60:d2:2f:6b:a6:4f:c2:37:68:3e: c4:1b:8f:69:c3:0b:dc:a7:4e:07:8d:1b:5d:3b:9f: 10:5d:c4:98:58:6d:1b:0f:bf:81:ea:59:d2:64:24: d0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9B:CC:5C:2F:E3:09:46:B4:AA:36:4C:1C:46:05:8F:84:47:92:29 X509v3 Authority Key Identifier: keyid:99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:9d:bc:da:0a:ba:00:89:5a:1d:1a:23:31:f9:cf:5f:78:62: a9:16:fa:eb:98:09:23:44:d7:19:b2:01:71:3b:7f:f4:dd:2f: 5e:4c:e3:a0:00:fd:80:35:00:8e:2f:92:5e:9a:a7:f0:ce:55: 82:2a:75:c2:b3:af:c2:74:5a:25:5e:92:9d:ec:44:ef:07:dd: 0a:4b:fd:0a:4b:52:07:56:5c:0e:ce:3b:cf:b5:a9:47:bc:2e: 79:a3:4a:74:c8:34:00:ab:6a:58:08:3a:04:32:d3:3a:af:14: 74:37:e1:c9:2b:35:5c:cd:eb:1c:e4:a4:19:30:ea:d9:19:71: 71:a2:6d:03:6e:af:0d:93:97:10:45:fb:f9:29:5f:38:2a:6f: 1b:2d:18:65:e6:b3:26:7c:9e:00:10:4e:00:54:79:42:aa:76: 52:c7:43:21:f0:c9:1c:e3:9e:87:17:14:55:48:ea:07:ce:54: b9:91:87:9c:ed:3b:49:57:40:90:77:d4:82:bd:fb:22:62:3e: a7:c0:65:b1:8c:93:21:44:e3:46:10:a1:d8:aa:33:10:89:4a: fe:d1:13:6a:9b:79:d9:a1:c6:f3:f6:e5:d7:c8:76:31:f4:db: a7:8e:5c:35:57:79:1e:6c:23:e7:78:6d:53:7c:61:8c:b7:93: 9f:61:ed:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv4KBvRN+VNnQMNLBNtYPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZmY5N2Y1MTViMDgzZTMwYmM1MmQ4MWUxOTNkOGM4YmI3 ZmRmOGMwHhcNMjUxMjA1MjMwMTEzWhcNMjUxMjA2MjMwMTEzWjAzMTEwLwYDVQQD EyhmMjliY2M1YzJmZTMwOTQ2YjRhYTM2NGMxYzQ2MDU4Zjg0NDc5MjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0//LKIX/BRX4MgidoziiT9hP0pk DPIrH6hzaDhHrczAdg80xB0e4LcalViQoYJkP/X3WhfguwpXyMX30B1FHa8wNcgI iWWD4Uk/x7S6gBklWTAvSTGhdkxu3XK2/cL4qiH7e3LBhHtCIl4vt45VPByUj5sZ AaMrGVYBpkAV717Qi7BvXFDzMOJOvIbGaf1EWSeiZzs3yLA2dOjo2lZemofRh+rm smLfKymHw2slp4p+tsd8Qfc0nYk4gPb8/6MwsTYQTgL2Uhrc3sGghSiLuoaiVAmt tWDSL2umT8I3aD7EG49pwwvcp04HjRtdO58QXcSYWG0bD7+B6lnSZCTQAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKbzFwv4wlGtKo2TBxGBY+ER5IpMB8GA1UdIwQY MBaAFJn/l/UVsIPjC8UtgeGT2Mi7f9+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWYtWDlSV3dnLU1MeFMyQjRaUFl5THRfMzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yNjMwNDQtYzc0Zi00YjY3LWIyNGIt ZTEzNTJkNWFmYTBhLzEvbWYtWDlSV3dnLU1MeFMyQjRaUFl5THRfMzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8yNjMwNDQtYzc0Zi00YjY3LWIyNGItZTEzNTJkNWFmYTBh LzEvbWYtWDlSV3dnLU1MeFMyQjRaUFl5THRfMzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIp282gq6 AIlaHRojMfnPX3hiqRb665gJI0TXGbIBcTt/9N0vXkzjoAD9gDUAji+SXpqn8M5V gip1wrOvwnRaJV6SnexE7wfdCkv9CktSB1ZcDs47z7WpR7wueaNKdMg0AKtqWAg6 BDLTOq8UdDfhySs1XM3rHOSkGTDq2RlxcaJtA26vDZOXEEX7+SlfOCpvGy0YZeaz JnyeABBOAFR5Qqp2UsdDIfDJHOOehxcUVUjqB85UuZGHnO07SVdAkHfUgr37ImI+ p8BlsYyTIUTjRhCh2KozEIlK/tETapt52aHG8/bl18h2MfTbp45cNVd5Hmwj53ht U3xhjLeTn2HtNg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:14 2025 by rpki-client