This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft File: mzYg1nmOfrGGY5xFSKBpavbjBYk.mft (raw, json) Hash identifier: klCFy3EyUeCu2oNdK7BgP91EB6vUFvcigxbIGjATl8A= Subject key identifier: F6:C1:1F:81:45:F1:6A:23:6B:AD:90:C6:DD:1A:A7:29:52:17:94:23 Authority key identifier: 9B:36:20:D6:79:8E:7E:B1:86:63:9C:45:48:A0:69:6A:F6:E3:05:89 Certificate issuer: /CN=9b3620d6798e7eb186639c4548a0696af6e30589 Certificate serial: 019B341FC684C1202DD2662CBC687F5C6499 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft Manifest number: 0729 Signing time: Fri 19 Dec 2025 01:00:56 +0000 Manifest this update: Fri 19 Dec 2025 01:00:56 +0000 Manifest next update: Sat 20 Dec 2025 01:00:56 +0000 Files and hashes: 1: Q41X_j-X6MEBsrlAhkOF1wVzhbk.roa (hash: YBskpCx6COz+43ChHeDsLz5PAi6tPK0b2nqeQTQNIwI=) 2: mzYg1nmOfrGGY5xFSKBpavbjBYk.crl (hash: Vigyt+LUqRkXachzh4lSWUw5Rb2VioETr5i43y6+8lk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:c6:84:c1:20:2d:d2:66:2c:bc:68:7f:5c:64:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b3620d6798e7eb186639c4548a0696af6e30589 Validity Not Before: Dec 19 01:00:56 2025 GMT Not After : Dec 20 01:00:56 2025 GMT Subject: CN=f6c11f8145f16a236bad90c6dd1aa72952179423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7c:69:07:c5:f9:4b:89:46:df:07:f9:52:36: 8e:f8:a2:9c:56:d9:41:a5:65:a4:d7:47:73:a3:cf: 33:cc:61:6e:5c:31:fa:d0:75:2d:d4:4d:5a:68:8a: 1c:6b:c4:4a:b7:3f:67:7d:cb:2f:cd:db:a4:af:a8: 5a:8e:4e:f8:8d:98:9e:1f:e0:21:a9:6e:dc:b3:52: 74:50:cc:3c:0c:88:9d:6c:31:c8:79:fe:63:39:c7: d5:2f:30:08:fc:b1:11:91:4f:54:03:87:95:8e:e0: 2a:1e:f0:45:28:33:a4:f0:0d:dc:c7:2b:45:5a:8c: c9:cb:e0:2d:43:2d:89:b2:49:d5:ad:6a:91:6d:c3: 30:3f:fd:f6:46:28:08:ec:de:f0:35:38:42:28:65: 0c:e6:ef:b1:01:bc:9c:1e:44:9b:39:5b:7e:d3:9f: 83:57:17:52:fc:ce:a5:af:8e:3d:0f:28:c0:23:e7: b0:bc:aa:f7:8a:7a:bc:75:7b:8d:22:46:0a:94:b6: 4a:a9:82:af:b5:65:c6:f0:df:9d:73:a2:ca:64:ec: 6e:68:6b:5b:6b:bb:7c:fe:bb:e7:e7:13:4e:93:3c: 05:f0:4e:07:bd:57:0a:51:08:40:65:06:86:e0:30: 05:5c:5e:4a:79:17:01:71:7d:34:2e:5c:eb:1f:8a: 63:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C1:1F:81:45:F1:6A:23:6B:AD:90:C6:DD:1A:A7:29:52:17:94:23 X509v3 Authority Key Identifier: keyid:9B:36:20:D6:79:8E:7E:B1:86:63:9C:45:48:A0:69:6A:F6:E3:05:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:b4:79:e0:f3:69:98:53:b5:61:e5:e9:2f:20:9f:d6:19:ef: 7c:eb:4e:0c:ac:42:21:47:5c:c2:b2:25:df:15:47:dc:cc:5d: ca:8f:3e:da:90:7f:b4:97:1d:ed:cb:a5:67:f9:18:76:b2:13: 2e:ab:6b:f3:ca:30:d6:26:70:96:d7:b0:9c:56:2d:fd:04:f8: ed:42:ac:e8:cf:46:bb:22:10:84:e6:88:a6:a7:83:08:2f:85: 98:48:aa:59:89:e6:7f:2a:8d:c7:96:dd:c4:67:f5:69:d9:96: 4e:c4:5f:3a:76:44:3d:70:71:6f:34:1f:20:8f:49:87:da:88: d2:11:fd:f4:fe:11:81:a8:67:4f:11:b9:c9:1f:dd:e6:d4:0e: 38:6a:0f:39:4c:cf:4f:04:7b:8a:c7:97:73:2c:2a:1c:4b:12: 43:3a:ee:44:27:12:63:81:9d:47:4f:c2:b0:42:ce:e5:93:69: ab:ee:a6:59:0f:07:89:16:1e:4f:20:80:67:e4:42:1a:4e:6a: 59:94:23:b9:f0:51:9f:1c:2b:0f:66:1d:2f:8a:63:98:10:ae: 97:60:c0:cb:08:12:a2:d5:2a:b7:93:a3:7f:c0:10:d8:27:d5: c9:fc:4a:d5:ac:3d:36:d9:25:c7:dd:2f:7a:e3:a9:56:f4:6b: 53:d9:24:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H8aEwSAt0mYsvGh/XGSZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMzYyMGQ2Nzk4ZTdlYjE4NjYzOWM0NTQ4YTA2OTZhZjZl MzA1ODkwHhcNMjUxMjE5MDEwMDU2WhcNMjUxMjIwMDEwMDU2WjAzMTEwLwYDVQQD EyhmNmMxMWY4MTQ1ZjE2YTIzNmJhZDkwYzZkZDFhYTcyOTUyMTc5NDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nxpB8X5S4lG3wf5UjaO+KKcVtlB pWWk10dzo88zzGFuXDH60HUt1E1aaIoca8RKtz9nfcsvzdukr6hajk74jZieH+Ah qW7cs1J0UMw8DIidbDHIef5jOcfVLzAI/LERkU9UA4eVjuAqHvBFKDOk8A3cxytF WozJy+AtQy2JsknVrWqRbcMwP/32RigI7N7wNThCKGUM5u+xAbycHkSbOVt+05+D VxdS/M6lr449DyjAI+ewvKr3inq8dXuNIkYKlLZKqYKvtWXG8N+dc6LKZOxuaGtb a7t8/rvn5xNOkzwF8E4HvVcKUQhAZQaG4DAFXF5KeRcBcX00LlzrH4pj4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbBH4FF8Woja62Qxt0apylSF5QjMB8GA1UdIwQY MBaAFJs2INZ5jn6xhmOcRUigaWr24wWJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXpZZzFubU9mckdHWTV4RlNLQnBhdmJqQllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82YjYwNGItNGVlZC00MzkzLThlOGMt Y2JhMDYzMWYyOTNmLzEvbXpZZzFubU9mckdHWTV4RlNLQnBhdmJqQllrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS82YjYwNGItNGVlZC00MzkzLThlOGMtY2JhMDYzMWYyOTNm LzEvbXpZZzFubU9mckdHWTV4RlNLQnBhdmJqQllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7R54PNp mFO1YeXpLyCf1hnvfOtODKxCIUdcwrIl3xVH3Mxdyo8+2pB/tJcd7culZ/kYdrIT Lqtr88ow1iZwltewnFYt/QT47UKs6M9GuyIQhOaIpqeDCC+FmEiqWYnmfyqNx5bd xGf1admWTsRfOnZEPXBxbzQfII9Jh9qI0hH99P4RgahnTxG5yR/d5tQOOGoPOUzP TwR7iseXcywqHEsSQzruRCcSY4GdR0/CsELO5ZNpq+6mWQ8HiRYeTyCAZ+RCGk5q WZQjufBRnxwrD2YdL4pjmBCul2DAywgSotUqt5Ojf8AQ2CfVyfxK1aw9Ntklx90v euOpVvRrU9kk3w== -----END CERTIFICATE-----Generated at Fri Dec 19 09:31:47 2025 by rpki-client