This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft File: mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft (raw, json) Hash identifier: MozEcLr+zTXT07ZnVwinRvVxsLgF+vSDDXNUAZhbtrY= Subject key identifier: C6:81:40:66:C0:86:11:D3:E7:CE:2A:BE:E9:16:3D:3A:F2:3D:60:D5 Authority key identifier: 99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C Certificate issuer: /CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c Certificate serial: 019B5AF68C9C2D39BFC1D4EAC8ACE217E13B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft Manifest number: 0767 Signing time: Fri 26 Dec 2025 14:01:05 +0000 Manifest this update: Fri 26 Dec 2025 14:01:05 +0000 Manifest next update: Sat 27 Dec 2025 14:01:05 +0000 Files and hashes: 1: KKAdJZwlPOuvUmhtsSSfP_XfQ9w.roa (hash: Fim6YZSnH30vV92L/gdG+AOAxW50mQ7FyxjlaSpVQfU=) 2: mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl (hash: pLDvuWr6bY/3UXqOpM7dV7QS5/qZ4ue7QftD7CkYLgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:8c:9c:2d:39:bf:c1:d4:ea:c8:ac:e2:17:e1:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c Validity Not Before: Dec 26 14:01:05 2025 GMT Not After : Dec 27 14:01:05 2025 GMT Subject: CN=c6814066c08611d3e7ce2abee9163d3af23d60d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fe:38:e8:ac:3e:1a:e1:ad:1e:2e:98:ee:12: c7:ec:78:d3:2f:6b:71:df:63:fd:e7:20:1a:98:68: 9a:03:94:e4:4c:64:4a:58:8f:c4:d1:d2:72:ad:58: 66:44:48:d9:e6:a4:88:0f:b0:ad:5e:73:5d:f2:ee: 15:b1:f5:a4:fc:46:80:f2:b1:19:38:5d:ff:47:cf: 3f:2a:f0:f1:d4:b9:54:1f:dd:74:b7:16:ef:6c:34: 46:76:c4:df:2d:80:e6:be:76:5c:9a:fe:6b:a4:a4: 26:96:e6:3c:d2:80:65:65:f1:c2:c0:33:c9:0a:b1: 12:e5:bb:da:e0:74:ff:d8:ec:0d:1b:3b:ae:da:7d: f7:b6:bd:a4:22:59:89:23:65:f7:6d:eb:13:16:4d: 0f:5a:fa:e9:5a:14:b8:67:3f:59:65:5d:b9:81:cc: 08:be:94:b4:13:1c:65:cc:61:d2:cb:79:79:6a:bd: d7:d5:5d:98:52:8a:c1:ad:ff:fb:a0:93:84:b2:2d: e5:a7:8e:59:59:b5:7e:51:7c:14:b5:fd:b6:62:39: 8f:6e:9c:b3:5a:ac:15:94:15:24:9c:23:93:00:0b: 72:08:1c:9c:35:bd:66:e7:a1:78:80:ae:73:da:43: a1:02:dc:03:f1:9e:49:73:f2:8c:38:79:a7:cc:a2: 9e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:81:40:66:C0:86:11:D3:E7:CE:2A:BE:E9:16:3D:3A:F2:3D:60:D5 X509v3 Authority Key Identifier: keyid:99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:96:36:74:cb:90:24:9f:c5:70:b7:e9:29:2f:4c:68:4e:d4: c9:c9:c2:ac:25:5f:14:fc:2b:89:b6:87:2a:49:89:b4:07:40: 54:39:37:3a:21:4e:ca:cc:b1:1a:5d:8f:9b:f8:9a:64:72:9f: 7f:6b:73:df:c7:5c:39:56:ae:b0:15:f0:f9:f1:13:21:17:66: 0c:f8:9b:4b:fa:18:24:96:6f:1a:bf:10:98:23:87:69:9c:27: 45:56:d3:7a:0c:b8:1e:7f:21:19:c5:33:37:77:ad:e9:60:ef: 23:a2:86:b6:34:c7:41:fd:2f:24:b6:69:f0:51:22:bd:f2:f4: 1e:62:e9:0f:f6:76:54:4b:e5:d7:25:b5:44:f8:ff:c2:cc:c3: 33:ab:a7:46:4d:51:e1:c3:7f:c2:8b:b5:86:33:ec:c2:50:13: f9:16:1c:25:06:1d:3d:63:2d:73:4b:14:e6:8a:51:d7:2a:46: bc:75:b2:a2:24:d7:9b:66:c4:bb:69:57:80:a9:99:47:e9:3f: 0f:8b:5c:8c:5e:63:d1:d1:9a:0c:3f:9c:a1:01:fb:cd:ee:03: 7a:73:2f:7c:31:1c:4b:4b:ec:09:64:11:32:85:50:2d:d3:59: 33:a0:cc:ba:77:68:70:1c:79:61:e7:6f:33:1e:41:06:e2:00: d5:dd:42:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9oycLTm/wdTqyKziF+E7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZmY5N2Y1MTViMDgzZTMwYmM1MmQ4MWUxOTNkOGM4YmI3 ZmRmOGMwHhcNMjUxMjI2MTQwMTA1WhcNMjUxMjI3MTQwMTA1WjAzMTEwLwYDVQQD EyhjNjgxNDA2NmMwODYxMWQzZTdjZTJhYmVlOTE2M2QzYWYyM2Q2MGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/446Kw+GuGtHi6Y7hLH7HjTL2tx 32P95yAamGiaA5TkTGRKWI/E0dJyrVhmREjZ5qSID7CtXnNd8u4VsfWk/EaA8rEZ OF3/R88/KvDx1LlUH910txbvbDRGdsTfLYDmvnZcmv5rpKQmluY80oBlZfHCwDPJ CrES5bva4HT/2OwNGzuu2n33tr2kIlmJI2X3besTFk0PWvrpWhS4Zz9ZZV25gcwI vpS0ExxlzGHSy3l5ar3X1V2YUorBrf/7oJOEsi3lp45ZWbV+UXwUtf22YjmPbpyz WqwVlBUknCOTAAtyCBycNb1m56F4gK5z2kOhAtwD8Z5Jc/KMOHmnzKKe7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaBQGbAhhHT584qvukWPTryPWDVMB8GA1UdIwQY MBaAFJn/l/UVsIPjC8UtgeGT2Mi7f9+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWYtWDlSV3dnLU1MeFMyQjRaUFl5THRfMzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yNjMwNDQtYzc0Zi00YjY3LWIyNGIt ZTEzNTJkNWFmYTBhLzEvbWYtWDlSV3dnLU1MeFMyQjRaUFl5THRfMzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8yNjMwNDQtYzc0Zi00YjY3LWIyNGItZTEzNTJkNWFmYTBh LzEvbWYtWDlSV3dnLU1MeFMyQjRaUFl5THRfMzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjJY2dMuQ JJ/FcLfpKS9MaE7UycnCrCVfFPwribaHKkmJtAdAVDk3OiFOysyxGl2Pm/iaZHKf f2tz38dcOVausBXw+fETIRdmDPibS/oYJJZvGr8QmCOHaZwnRVbTegy4Hn8hGcUz N3et6WDvI6KGtjTHQf0vJLZp8FEivfL0HmLpD/Z2VEvl1yW1RPj/wszDM6unRk1R 4cN/wou1hjPswlAT+RYcJQYdPWMtc0sU5opR1ypGvHWyoiTXm2bEu2lXgKmZR+k/ D4tcjF5j0dGaDD+coQH7ze4DenMvfDEcS0vsCWQRMoVQLdNZM6DMundocBx5Yedv Mx5BBuIA1d1CUQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:27 2025 by rpki-client