This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft File: Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft (raw, json) Hash identifier: b3V2OE1713PyDJUSJkZFmJJHaP+BoPBknwbMorTzoGg= Subject key identifier: 2E:9C:E8:55:43:F6:E9:98:C5:7A:4B:05:C4:21:FD:E2:52:35:CF:5C Authority key identifier: 31:FF:6A:22:93:7E:F1:64:0D:83:18:8D:FC:D7:AB:B3:0F:CC:72:1E Certificate issuer: /CN=31ff6a22937ef1640d83188dfcd7abb30fcc721e Certificate serial: 019B20CFCF6652F6BAF40BA9E5EC262BEE2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft Manifest number: 09F1 Signing time: Mon 15 Dec 2025 07:00:48 +0000 Manifest this update: Mon 15 Dec 2025 07:00:48 +0000 Manifest next update: Tue 16 Dec 2025 07:00:48 +0000 Files and hashes: 1: 5_iMF-a8NMa1YPR_P3PyRQQW0y4.roa (hash: WcT24IP06Ufo9Qw11IKoVe7vKY2EcXtQIG8CxBVwap8=) 2: Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl (hash: 55XqHSod/ycT4kTFbw+NqwyojYrKHNxQnl7NE6fm6zA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:cf:cf:66:52:f6:ba:f4:0b:a9:e5:ec:26:2b:ee:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31ff6a22937ef1640d83188dfcd7abb30fcc721e Validity Not Before: Dec 15 07:00:48 2025 GMT Not After : Dec 16 07:00:48 2025 GMT Subject: CN=2e9ce85543f6e998c57a4b05c421fde25235cf5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:61:87:b4:4d:43:5f:90:ff:08:d2:b6:3e:4c: d4:1a:15:80:e7:7f:5a:f2:3f:8c:3e:8d:66:2e:2a: c8:b8:03:18:07:bf:d6:36:45:e3:b4:b0:ef:5c:a7: aa:79:82:70:40:c9:5e:4f:b8:3b:5b:fb:45:92:67: ae:d9:f8:0e:1e:be:d8:b1:af:2a:fd:28:ab:0a:0c: 53:12:53:4c:1b:5c:db:fe:15:6f:1a:2c:4d:98:5c: 06:39:25:71:db:99:2b:eb:cd:31:1e:9b:d7:23:ee: b7:b6:a0:44:2e:4a:dd:20:e5:a8:58:ec:75:c7:2f: 93:ca:8f:71:ba:87:3f:cb:a6:95:92:2d:2f:64:2c: b5:f9:f8:14:b3:5e:ad:eb:28:eb:e2:80:40:4c:7f: b8:f0:18:38:83:09:ca:1b:a0:26:99:95:0d:6e:21: f2:58:f7:83:f8:52:32:c7:32:6a:7c:d1:81:ff:8b: 4e:3f:b3:80:96:8b:07:8d:42:aa:9a:10:31:08:3d: 4d:a0:99:44:47:50:60:46:62:32:af:fe:ba:21:b9: 10:a5:26:e9:bf:b1:1e:d1:4a:f1:3f:cd:15:d5:36: da:82:fd:e3:9e:8c:6f:0f:d1:5f:df:33:03:f9:4f: bc:36:51:64:0a:4e:42:77:2f:6f:65:9c:bd:d7:02: 93:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9C:E8:55:43:F6:E9:98:C5:7A:4B:05:C4:21:FD:E2:52:35:CF:5C X509v3 Authority Key Identifier: keyid:31:FF:6A:22:93:7E:F1:64:0D:83:18:8D:FC:D7:AB:B3:0F:CC:72:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mf9qIpN-8WQNgxiN_Nersw_Mch4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/33689f-8e48-4bf3-89f5-c76f7b6b0eb6/1/Mf9qIpN-8WQNgxiN_Nersw_Mch4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:56:e4:55:8f:fd:9d:24:59:14:46:e7:1c:03:fc:fa:a7:49: c5:68:f9:9a:4b:80:d2:44:be:d4:d5:95:95:d1:59:ce:5b:ec: 18:36:6d:1e:5b:4d:e9:a2:27:94:59:a6:fd:a7:7b:49:a0:87: 3e:15:45:b1:6e:5b:13:da:cd:16:53:26:d7:03:28:c0:4c:90: 4f:fd:e8:0b:94:f2:23:0e:fb:d4:5b:00:b6:88:ce:a1:fb:be: eb:83:3c:f7:8f:81:81:13:c4:08:e5:a1:a9:34:a8:c4:52:17: f9:38:7d:a1:ad:08:06:72:e3:7b:be:8d:31:79:d4:d3:a9:36: 25:40:5e:e9:ab:88:e6:88:89:7e:a8:60:5f:26:33:81:43:02: 40:11:54:b6:f4:f5:d0:07:a7:d5:fe:e6:c0:71:34:27:27:b4: 90:a1:43:7f:72:c4:68:0b:50:d7:6c:55:2d:e7:d4:01:48:93: 7b:69:0c:0a:1b:31:39:61:52:64:9a:70:53:20:b1:68:f6:4f: b5:b6:6d:d7:e7:cc:ff:6b:0d:04:68:26:5a:d1:5d:50:91:d6: 7e:9e:6f:31:07:73:c9:55:41:f7:ff:e8:c0:64:3e:b6:12:ad: 63:f6:5b:6a:3a:e9:77:02:0e:8e:60:74:a7:4b:16:aa:83:8c: a7:95:e8:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgz89mUva69Aup5ewmK+4qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZmY2YTIyOTM3ZWYxNjQwZDgzMTg4ZGZjZDdhYmIzMGZj YzcyMWUwHhcNMjUxMjE1MDcwMDQ4WhcNMjUxMjE2MDcwMDQ4WjAzMTEwLwYDVQQD EygyZTljZTg1NTQzZjZlOTk4YzU3YTRiMDVjNDIxZmRlMjUyMzVjZjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumGHtE1DX5D/CNK2PkzUGhWA539a 8j+MPo1mLirIuAMYB7/WNkXjtLDvXKeqeYJwQMleT7g7W/tFkmeu2fgOHr7Ysa8q /SirCgxTElNMG1zb/hVvGixNmFwGOSVx25kr680xHpvXI+63tqBELkrdIOWoWOx1 xy+Tyo9xuoc/y6aVki0vZCy1+fgUs16t6yjr4oBATH+48Bg4gwnKG6AmmZUNbiHy WPeD+FIyxzJqfNGB/4tOP7OAlosHjUKqmhAxCD1NoJlER1BgRmIyr/66IbkQpSbp v7Ee0UrxP80V1Tbagv3jnoxvD9Ff3zMD+U+8NlFkCk5Cdy9vZZy91wKT3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6c6FVD9umYxXpLBcQh/eJSNc9cMB8GA1UdIwQY MBaAFDH/aiKTfvFkDYMYjfzXq7MPzHIeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWY5cUlwTi04V1FOZ3hpTl9OZXJzd19NY2g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8zMzY4OWYtOGU0OC00YmYzLTg5ZjUt Yzc2ZjdiNmIwZWI2LzEvTWY5cUlwTi04V1FOZ3hpTl9OZXJzd19NY2g0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8zMzY4OWYtOGU0OC00YmYzLTg5ZjUtYzc2ZjdiNmIwZWI2 LzEvTWY5cUlwTi04V1FOZ3hpTl9OZXJzd19NY2g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsVbkVY/9 nSRZFEbnHAP8+qdJxWj5mkuA0kS+1NWVldFZzlvsGDZtHltN6aInlFmm/ad7SaCH PhVFsW5bE9rNFlMm1wMowEyQT/3oC5TyIw771FsAtojOofu+64M894+BgRPECOWh qTSoxFIX+Th9oa0IBnLje76NMXnU06k2JUBe6auI5oiJfqhgXyYzgUMCQBFUtvT1 0Aen1f7mwHE0Jye0kKFDf3LEaAtQ12xVLefUAUiTe2kMChsxOWFSZJpwUyCxaPZP tbZt1+fM/2sNBGgmWtFdUJHWfp5vMQdzyVVB9//owGQ+thKtY/ZbajrpdwIOjmB0 p0sWqoOMp5XoIw== -----END CERTIFICATE-----Generated at Mon Dec 15 13:20:27 2025 by rpki-client