This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
File: mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft (raw, json)
Hash identifier: XDdyjRXd0X/TwgD87tsT5BT9T58F8L/VDTXSeAzPBXs=
Subject key identifier: 34:98:56:95:FC:AB:98:3F:13:25:28:3B:F9:89:B3:31:51:53:D3:F3
Authority key identifier: 99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C
Certificate issuer: /CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c
Certificate serial: 019B3DFEF4237B197BDFC32757D2869CA006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
Manifest number: 0758
Signing time: Sat 20 Dec 2025 23:01:17 +0000
Manifest this update: Sat 20 Dec 2025 23:01:17 +0000
Manifest next update: Sun 21 Dec 2025 23:01:17 +0000
Files and hashes: 1: KKAdJZwlPOuvUmhtsSSfP_XfQ9w.roa (hash: Fim6YZSnH30vV92L/gdG+AOAxW50mQ7FyxjlaSpVQfU=)
2: mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl (hash: izk6XxWfb7y9A0A2BrgEhX9VagTXxsDtulI4eibMqB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3d:fe:f4:23:7b:19:7b:df:c3:27:57:d2:86:9c:a0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ff97f515b083e30bc52d81e193d8c8bb7fdf8c
Validity
Not Before: Dec 20 23:01:17 2025 GMT
Not After : Dec 21 23:01:17 2025 GMT
Subject: CN=34985695fcab983f1325283bf989b3315153d3f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:88:e5:b2:da:06:6f:70:2c:ed:10:6c:7d:08:
0b:9a:fc:4f:25:7e:26:bf:24:f3:a8:f2:ad:aa:17:
c1:12:f5:98:77:e4:88:47:23:df:ea:49:8f:e7:af:
c8:d4:22:41:95:2e:53:57:3d:1f:4a:2a:11:aa:a5:
12:a3:ec:21:e3:40:b7:75:e1:d5:ca:8b:1d:af:f8:
3b:8e:65:22:1e:8f:98:3c:e0:58:66:f1:6c:90:1d:
fc:15:08:c5:42:7d:f2:b1:63:ad:5f:d5:ee:38:12:
41:84:28:76:1f:1e:50:1b:56:32:a2:43:14:0f:0f:
7e:c1:6f:82:06:51:3d:79:d2:51:e8:ed:f5:be:df:
7b:e3:3d:53:16:a8:56:e2:e9:ea:52:c3:cb:50:c2:
e9:64:81:87:c3:d0:dc:dc:31:ea:cf:c3:60:67:9f:
4d:3a:e8:b9:96:fc:79:1f:64:e6:42:75:0f:0c:53:
d2:b4:d4:38:5f:8e:b6:96:77:f5:b1:32:d1:c7:a6:
67:37:da:82:ec:9d:f7:cc:45:dc:72:00:02:a8:01:
ef:c4:11:aa:45:c8:5a:ec:b3:06:1b:cd:5e:77:dd:
79:e2:79:6a:89:40:fb:7a:3f:11:a1:7f:1b:d5:24:
90:e5:72:44:08:aa:34:52:b9:ce:d3:8f:cf:6e:f2:
b5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:98:56:95:FC:AB:98:3F:13:25:28:3B:F9:89:B3:31:51:53:D3:F3
X509v3 Authority Key Identifier:
keyid:99:FF:97:F5:15:B0:83:E3:0B:C5:2D:81:E1:93:D8:C8:BB:7F:DF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf-X9RWwg-MLxS2B4ZPYyLt_34w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/263044-c74f-4b67-b24b-e1352d5afa0a/1/mf-X9RWwg-MLxS2B4ZPYyLt_34w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8a:2c:93:f7:2b:13:8e:49:6b:e3:90:45:e9:1d:04:86:c5:
e3:1e:71:4f:66:65:fe:19:a6:c7:ab:21:ca:df:9e:59:3b:b0:
e5:5e:30:6e:a0:8e:06:61:c1:27:b2:53:86:70:ee:92:6e:33:
9a:94:fb:c0:22:cd:ec:ab:b3:1a:59:11:78:41:c1:70:d9:67:
08:a0:b7:dd:83:25:e7:56:71:e4:82:6e:db:5e:e8:f3:de:7a:
9c:4b:21:fc:42:55:1c:0b:bd:ca:88:4d:cb:ac:b9:12:01:9c:
dd:41:ed:19:a0:8e:7a:07:d1:e6:85:c8:3b:33:ca:9e:75:fd:
a8:48:fd:a3:5b:2d:b3:1f:04:62:25:02:60:0a:14:6f:2b:aa:
27:ad:04:c3:e9:db:81:0f:88:aa:c3:b2:cc:d7:2b:c0:ca:de:
1a:da:3d:7c:e5:f6:1f:1b:fa:e1:a9:d1:ba:b0:53:6d:f4:a2:
98:24:0f:07:e6:58:c1:34:af:09:7c:9a:b5:46:af:21:0e:42:
be:6d:60:9e:dd:ac:a4:7d:f2:56:2b:01:c2:88:02:83:29:62:
0b:ce:9e:02:34:be:04:b0:a6:ee:60:7f:ee:5c:20:32:a1:73:
c7:14:d6:36:5c:d4:c6:9a:9d:cb:a7:c6:76:c3:26:8a:cc:09:
77:57:81:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs9/vQjexl738MnV9KGnKAGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZmY5N2Y1MTViMDgzZTMwYmM1MmQ4MWUxOTNkOGM4YmI3
ZmRmOGMwHhcNMjUxMjIwMjMwMTE3WhcNMjUxMjIxMjMwMTE3WjAzMTEwLwYDVQQD
EygzNDk4NTY5NWZjYWI5ODNmMTMyNTI4M2JmOTg5YjMzMTUxNTNkM2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYjlstoGb3As7RBsfQgLmvxPJX4m
vyTzqPKtqhfBEvWYd+SIRyPf6kmP56/I1CJBlS5TVz0fSioRqqUSo+wh40C3deHV
yosdr/g7jmUiHo+YPOBYZvFskB38FQjFQn3ysWOtX9XuOBJBhCh2Hx5QG1YyokMU
Dw9+wW+CBlE9edJR6O31vt974z1TFqhW4unqUsPLUMLpZIGHw9Dc3DHqz8NgZ59N
Oui5lvx5H2TmQnUPDFPStNQ4X462lnf1sTLRx6ZnN9qC7J33zEXccgACqAHvxBGq
Rcha7LMGG81ed9154nlqiUD7ej8RoX8b1SSQ5XJECKo0UrnO04/PbvK13QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSYVpX8q5g/EyUoO/mJszFRU9PzMB8GA1UdIwQY
MBaAFJn/l/UVsIPjC8UtgeGT2Mi7f9+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWYtWDlSV3dnLU1MeFMyQjRaUFl5THRfMzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yNjMwNDQtYzc0Zi00YjY3LWIyNGIt
ZTEzNTJkNWFmYTBhLzEvbWYtWDlSV3dnLU1MeFMyQjRaUFl5THRfMzR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8yNjMwNDQtYzc0Zi00YjY3LWIyNGItZTEzNTJkNWFmYTBh
LzEvbWYtWDlSV3dnLU1MeFMyQjRaUFl5THRfMzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFIosk/cr
E45Ja+OQRekdBIbF4x5xT2Zl/hmmx6shyt+eWTuw5V4wbqCOBmHBJ7JThnDukm4z
mpT7wCLN7KuzGlkReEHBcNlnCKC33YMl51Zx5IJu217o8956nEsh/EJVHAu9yohN
y6y5EgGc3UHtGaCOegfR5oXIOzPKnnX9qEj9o1stsx8EYiUCYAoUbyuqJ60Ew+nb
gQ+IqsOyzNcrwMreGto9fOX2Hxv64anRurBTbfSimCQPB+ZYwTSvCXyatUavIQ5C
vm1gnt2spH3yVisBwogCgyliC86eAjS+BLCm7mB/7lwgMqFzxxTWNlzUxpqdy6fG
dsMmiswJd1eBXQ==
-----END CERTIFICATE-----
Generated at Sun Dec 21 03:51:47 2025 by rpki-client