This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft File: Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft (raw, json) Hash identifier: RZqtwvG6syThhH80u10Uq1Eqa9ZQkEUJbVnB0puAaj4= Subject key identifier: 08:F5:0B:50:A3:EE:68:22:A0:49:C7:53:02:64:B2:5C:E9:CF:55:65 Authority key identifier: 31:FF:6A:22:93:7E:F1:64:0D:83:18:8D:FC:D7:AB:B3:0F:CC:72:1E Certificate issuer: /CN=31ff6a22937ef1640d83188dfcd7abb30fcc721e Certificate serial: 019AF4657BC819ED3E90663DA5EAD9B6D98E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft Manifest number: 09DA Signing time: Sat 06 Dec 2025 16:01:22 +0000 Manifest this update: Sat 06 Dec 2025 16:01:22 +0000 Manifest next update: Sun 07 Dec 2025 16:01:22 +0000 Files and hashes: 1: 5_iMF-a8NMa1YPR_P3PyRQQW0y4.roa (hash: WcT24IP06Ufo9Qw11IKoVe7vKY2EcXtQIG8CxBVwap8=) 2: Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl (hash: VMZ4/wrG2KmrVenfXs5pDTgkMnRa/1pfvNbJBesZpjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:7b:c8:19:ed:3e:90:66:3d:a5:ea:d9:b6:d9:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31ff6a22937ef1640d83188dfcd7abb30fcc721e Validity Not Before: Dec 6 16:01:22 2025 GMT Not After : Dec 7 16:01:22 2025 GMT Subject: CN=08f50b50a3ee6822a049c7530264b25ce9cf5565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:85:ae:a8:fd:09:bb:ce:b9:86:d4:82:aa:c2: 4d:68:ec:a6:d6:a1:d5:c8:77:2a:13:9e:d1:35:87: 09:a1:9b:f0:af:89:e3:7b:f2:e6:36:99:1c:8f:dc: 63:58:1b:05:30:fa:7f:46:b5:9d:23:72:93:cc:1e: 8d:ea:5a:a4:86:44:1a:30:db:94:51:13:8f:2b:c8: cf:4b:97:1f:4f:74:1d:d9:3d:ea:26:72:b6:42:31: 0f:04:5a:21:ad:70:45:eb:98:70:f0:95:e5:8b:c3: 44:ce:f2:23:fb:23:10:00:23:16:44:a7:5f:a0:cb: 29:f3:20:cd:39:d0:56:51:bd:41:aa:61:e4:47:7c: 5e:ea:0e:30:ad:e9:5c:69:b5:eb:20:af:b6:40:a5: 02:72:fd:ba:22:38:81:07:a3:03:6a:5c:84:3c:a3: e8:ed:6d:37:8f:91:dc:fe:6d:88:03:94:ce:dd:94: bd:cd:d8:f4:59:fe:1d:40:bb:b6:6a:12:53:5f:78: e7:84:c4:32:68:83:6f:8c:eb:9c:5b:46:7b:61:36: eb:60:0b:cd:44:60:13:df:4b:21:8f:df:c8:9c:a1: fb:ee:f4:a1:c2:5d:b9:f3:8c:a0:d5:3a:16:26:3a: f5:7c:95:37:d6:6b:6a:c9:9b:e7:94:ae:bc:06:f3: 34:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F5:0B:50:A3:EE:68:22:A0:49:C7:53:02:64:B2:5C:E9:CF:55:65 X509v3 Authority Key Identifier: keyid:31:FF:6A:22:93:7E:F1:64:0D:83:18:8D:FC:D7:AB:B3:0F:CC:72:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:d5:2d:e8:cb:13:86:fb:bf:11:af:bf:fe:d9:cb:49:a0:a0: d0:dc:7c:3f:21:be:d7:71:1d:70:ff:5d:d3:e2:56:a2:0f:97: 35:d0:da:45:ac:69:3e:10:23:25:e9:2f:c8:83:16:8b:ca:e9: b9:aa:26:53:19:0e:f8:24:b4:7a:aa:7d:16:88:ab:bc:e5:cf: 38:3f:ee:64:bb:21:bc:91:7f:7a:cb:bb:21:58:8c:2a:f4:34: 55:c7:57:05:fc:11:97:63:3b:0b:5c:92:fd:30:d1:72:94:e1: 63:89:d7:97:03:79:1a:2b:12:1e:1e:1e:e4:d4:77:5e:33:e0: 5f:d2:30:80:46:d9:05:a0:cc:e8:e9:f5:4d:c5:9e:55:cb:ac: 2a:83:c4:b5:d3:53:e5:10:8c:4c:26:9e:2d:6b:41:ea:e8:9c: 7f:ed:f9:35:4b:f1:8c:7d:5f:01:00:77:e0:15:3c:4a:64:65: e6:a4:32:ae:a2:e2:43:67:f8:e1:64:ef:55:45:37:14:6d:ee: f6:14:be:4d:d2:67:ca:67:36:f4:90:c4:72:a9:53:48:bc:97: 4e:d0:39:98:a5:79:ec:60:a8:da:6f:1d:e6:de:b2:3b:15:ed: 5c:75:25:3e:ca:0a:62:10:14:64:c1:4a:a7:29:4b:79:f9:4f: e8:78:33:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZXvIGe0+kGY9perZttmOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZmY2YTIyOTM3ZWYxNjQwZDgzMTg4ZGZjZDdhYmIzMGZj YzcyMWUwHhcNMjUxMjA2MTYwMTIyWhcNMjUxMjA3MTYwMTIyWjAzMTEwLwYDVQQD EygwOGY1MGI1MGEzZWU2ODIyYTA0OWM3NTMwMjY0YjI1Y2U5Y2Y1NTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4WuqP0Ju865htSCqsJNaOym1qHV yHcqE57RNYcJoZvwr4nje/LmNpkcj9xjWBsFMPp/RrWdI3KTzB6N6lqkhkQaMNuU UROPK8jPS5cfT3Qd2T3qJnK2QjEPBFohrXBF65hw8JXli8NEzvIj+yMQACMWRKdf oMsp8yDNOdBWUb1BqmHkR3xe6g4wrelcabXrIK+2QKUCcv26IjiBB6MDalyEPKPo 7W03j5Hc/m2IA5TO3ZS9zdj0Wf4dQLu2ahJTX3jnhMQyaINvjOucW0Z7YTbrYAvN RGAT30shj9/InKH77vShwl2584yg1ToWJjr1fJU31mtqyZvnlK68BvM0hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAj1C1Cj7mgioEnHUwJkslzpz1VlMB8GA1UdIwQY MBaAFDH/aiKTfvFkDYMYjfzXq7MPzHIeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWY5cUlwTi04V1FOZ3hpTl9OZXJzd19NY2g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8zMzY4OWYtOGU0OC00YmYzLTg5ZjUt Yzc2ZjdiNmIwZWI2LzEvTWY5cUlwTi04V1FOZ3hpTl9OZXJzd19NY2g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8zMzY4OWYtOGU0OC00YmYzLTg5ZjUtYzc2ZjdiNmIwZWI2 LzEvTWY5cUlwTi04V1FOZ3hpTl9OZXJzd19NY2g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9Ut6MsT hvu/Ea+//tnLSaCg0Nx8PyG+13EdcP9d0+JWog+XNdDaRaxpPhAjJekvyIMWi8rp uaomUxkO+CS0eqp9FoirvOXPOD/uZLshvJF/esu7IViMKvQ0VcdXBfwRl2M7C1yS /TDRcpThY4nXlwN5GisSHh4e5NR3XjPgX9IwgEbZBaDM6On1TcWeVcusKoPEtdNT 5RCMTCaeLWtB6uicf+35NUvxjH1fAQB34BU8SmRl5qQyrqLiQ2f44WTvVUU3FG3u 9hS+TdJnymc29JDEcqlTSLyXTtA5mKV57GCo2m8d5t6yOxXtXHUlPsoKYhAUZMFK pylLeflP6Hgzgg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:54:43 2025 by rpki-client