This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft File: mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft (raw, json) Hash identifier: RLaiUDz+2PV4BvmCHRbW1uU3wxg2IGDGKy7g1PQHBlo= Subject key identifier: FD:EB:86:C9:7D:5C:7A:0E:0B:5A:FF:BF:6B:A2:11:E0:F5:D2:38:49 Authority key identifier: 9A:6C:C5:4B:33:CF:1F:12:E5:40:6F:06:52:9C:54:DD:C6:EF:CF:BB Certificate issuer: /CN=9a6cc54b33cf1f12e5406f06529c54ddc6efcfbb Certificate serial: 019B59E3C98759EA0AC23555E17053A2984C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft Manifest number: 0BE4 Signing time: Fri 26 Dec 2025 09:00:58 +0000 Manifest this update: Fri 26 Dec 2025 09:00:58 +0000 Manifest next update: Sat 27 Dec 2025 09:00:58 +0000 Files and hashes: 1: mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl (hash: KrZBiVF/CVK3xowt8g1/yvGoGLEd+m1O4CeB9c59D5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 09:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:c9:87:59:ea:0a:c2:35:55:e1:70:53:a2:98:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a6cc54b33cf1f12e5406f06529c54ddc6efcfbb Validity Not Before: Dec 26 09:00:58 2025 GMT Not After : Dec 27 09:00:58 2025 GMT Subject: CN=fdeb86c97d5c7a0e0b5affbf6ba211e0f5d23849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:29:86:bd:8d:52:e4:3c:39:36:30:db:63:65: 4f:d4:d1:2e:e0:af:a6:89:92:ee:2b:66:b0:9c:91: 25:b2:31:b8:63:4b:5b:e9:33:f5:04:54:71:de:3d: 81:2c:05:81:82:3b:de:11:ef:00:c9:17:19:23:d4: 7b:57:29:59:01:a7:9b:c0:ac:89:55:ff:08:ef:92: bb:f7:e0:56:6f:d1:8a:b1:97:2f:3b:ed:a5:d2:56: b9:ff:b1:bf:6b:29:a9:da:76:14:98:6e:3a:16:ac: 02:d4:17:d9:23:d8:7d:07:50:9e:92:6d:44:e4:09: df:44:20:d7:2f:1e:99:e2:dd:f5:68:11:51:b2:eb: 58:16:0f:8e:d5:17:17:bf:ab:db:e6:35:ee:25:c4: e5:9b:78:3c:27:81:f1:52:fa:c5:74:e0:1d:22:47: 0c:be:1e:c3:0a:5c:f7:87:21:3a:40:1f:f5:86:d5: bc:8c:b9:cd:92:a8:bd:81:b6:f7:c1:f4:11:aa:88: e4:79:11:70:f0:b6:ba:79:8a:41:9f:5f:a8:88:e2: 3b:f9:05:68:95:c9:39:65:d0:3e:66:88:f6:d2:7f: 88:83:8c:a6:a8:eb:47:57:59:a6:94:af:34:1c:dd: e4:78:a2:0f:4f:92:be:14:db:e1:9c:c9:27:74:72: 49:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:EB:86:C9:7D:5C:7A:0E:0B:5A:FF:BF:6B:A2:11:E0:F5:D2:38:49 X509v3 Authority Key Identifier: keyid:9A:6C:C5:4B:33:CF:1F:12:E5:40:6F:06:52:9C:54:DD:C6:EF:CF:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzFSzPPHxLlQG8GUpxU3cbvz7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/712aff-bf6c-42be-8080-f7df62a68d92/1/mmzFSzPPHxLlQG8GUpxU3cbvz7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:c5:40:aa:6e:1c:4d:f4:5e:95:a5:5a:2d:be:c2:2d:5b:12: b3:e0:36:f5:74:35:44:5e:7d:ba:36:9d:ce:02:61:26:71:f6: 39:98:54:2a:f2:6b:9b:a3:9d:d0:c5:1d:f5:ec:bf:f1:64:df: a7:60:d8:46:27:a8:c9:c0:29:9a:94:36:37:3c:6c:4a:0a:69: 6a:ff:ee:da:47:7e:de:de:f1:c0:4a:57:f7:fa:7d:f7:18:99: 3a:b2:9c:2f:c5:2d:65:13:63:62:be:15:5a:9e:fe:36:2e:22: c0:9a:2b:ac:e2:e2:bd:00:43:19:d1:5b:d9:48:3a:dd:b1:24: 0e:9f:cc:84:fc:19:37:a7:00:65:e1:0a:54:f1:a4:bf:75:d1: 22:0c:a0:a5:57:2e:f4:30:f1:e8:51:50:53:50:1a:04:48:4a: 96:fc:ed:17:26:13:32:4d:d7:7c:30:4b:d3:0f:c1:de:fc:ae: 01:b5:4f:c5:5d:bd:8a:41:70:84:f3:4b:91:0d:89:16:db:cb: a2:e0:81:c3:d3:16:52:71:e9:71:a5:4a:20:57:62:f9:9b:e1: 80:31:2c:55:1f:f7:46:05:af:56:e2:55:f9:15:a2:aa:94:6f: 74:b4:89:25:d8:f7:c2:4a:ad:24:cc:4e:9b:19:1c:ab:3e:96: ac:9a:35:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ48mHWeoKwjVV4XBTophMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNmNjNTRiMzNjZjFmMTJlNTQwNmYwNjUyOWM1NGRkYzZl ZmNmYmIwHhcNMjUxMjI2MDkwMDU4WhcNMjUxMjI3MDkwMDU4WjAzMTEwLwYDVQQD EyhmZGViODZjOTdkNWM3YTBlMGI1YWZmYmY2YmEyMTFlMGY1ZDIzODQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApymGvY1S5Dw5NjDbY2VP1NEu4K+m iZLuK2awnJElsjG4Y0tb6TP1BFRx3j2BLAWBgjveEe8AyRcZI9R7VylZAaebwKyJ Vf8I75K79+BWb9GKsZcvO+2l0la5/7G/aymp2nYUmG46FqwC1BfZI9h9B1Cekm1E 5AnfRCDXLx6Z4t31aBFRsutYFg+O1RcXv6vb5jXuJcTlm3g8J4HxUvrFdOAdIkcM vh7DClz3hyE6QB/1htW8jLnNkqi9gbb3wfQRqojkeRFw8La6eYpBn1+oiOI7+QVo lck5ZdA+Zoj20n+Ig4ymqOtHV1mmlK80HN3keKIPT5K+FNvhnMkndHJJGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3rhsl9XHoOC1r/v2uiEeD10jhJMB8GA1UdIwQY MBaAFJpsxUszzx8S5UBvBlKcVN3G78+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW16RlN6UFBIeExsUUc4R1VweFUzY2J2ejdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy83MTJhZmYtYmY2Yy00MmJlLTgwODAt ZjdkZjYyYTY4ZDkyLzEvbW16RlN6UFBIeExsUUc4R1VweFUzY2J2ejdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy83MTJhZmYtYmY2Yy00MmJlLTgwODAtZjdkZjYyYTY4ZDky LzEvbW16RlN6UFBIeExsUUc4R1VweFUzY2J2ejdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZcVAqm4c TfRelaVaLb7CLVsSs+A29XQ1RF59ujadzgJhJnH2OZhUKvJrm6Od0MUd9ey/8WTf p2DYRieoycApmpQ2NzxsSgppav/u2kd+3t7xwEpX9/p99xiZOrKcL8UtZRNjYr4V Wp7+Ni4iwJorrOLivQBDGdFb2Ug63bEkDp/MhPwZN6cAZeEKVPGkv3XRIgygpVcu 9DDx6FFQU1AaBEhKlvztFyYTMk3XfDBL0w/B3vyuAbVPxV29ikFwhPNLkQ2JFtvL ouCBw9MWUnHpcaVKIFdi+ZvhgDEsVR/3RgWvVuJV+RWiqpRvdLSJJdj3wkqtJMxO mxkcqz6WrJo19g== -----END CERTIFICATE-----Generated at Fri Dec 26 17:43:38 2025 by rpki-client