This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft File: mzYg1nmOfrGGY5xFSKBpavbjBYk.mft (raw, json) Hash identifier: 188KVVQELvVJqvAwEbs7RQ1DrtgWWfxsxF0qqIFW5mw= Subject key identifier: 69:B6:3D:E3:44:C6:72:C8:51:21:DC:3E:CA:7C:82:5A:09:36:89:DE Authority key identifier: 9B:36:20:D6:79:8E:7E:B1:86:63:9C:45:48:A0:69:6A:F6:E3:05:89 Certificate issuer: /CN=9b3620d6798e7eb186639c4548a0696af6e30589 Certificate serial: 019B39EADF4250234ADC62EDF89DBBA793BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft Manifest number: 072C Signing time: Sat 20 Dec 2025 04:00:52 +0000 Manifest this update: Sat 20 Dec 2025 04:00:52 +0000 Manifest next update: Sun 21 Dec 2025 04:00:52 +0000 Files and hashes: 1: Q41X_j-X6MEBsrlAhkOF1wVzhbk.roa (hash: YBskpCx6COz+43ChHeDsLz5PAi6tPK0b2nqeQTQNIwI=) 2: mzYg1nmOfrGGY5xFSKBpavbjBYk.crl (hash: EWh3cr//h9/nHOUsf324M71MGtGlpx7eJmWgcuY7K20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:df:42:50:23:4a:dc:62:ed:f8:9d:bb:a7:93:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b3620d6798e7eb186639c4548a0696af6e30589 Validity Not Before: Dec 20 04:00:52 2025 GMT Not After : Dec 21 04:00:52 2025 GMT Subject: CN=69b63de344c672c85121dc3eca7c825a093689de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:cb:25:8d:77:1c:36:32:12:28:69:27:66:8a: f7:c5:96:be:15:d9:5a:ef:78:15:49:af:fe:96:60: d3:53:8c:db:6e:0e:e9:af:4a:25:a4:8a:a4:d1:68: 04:37:30:3c:13:fa:42:5b:0f:1b:f2:ce:78:64:5b: 01:14:0f:bf:b9:92:d4:fc:da:fb:f4:84:61:2f:6d: a5:27:95:a7:e9:a5:95:f6:30:e8:86:e4:03:70:a1: be:1f:86:bc:ba:3d:a2:ae:ba:a0:d1:5d:e7:77:fa: 46:e6:f4:d4:3b:28:7c:3d:4a:bc:ac:c1:77:06:4c: 3e:44:c5:67:98:69:2a:8e:b9:24:1e:e5:9a:e8:66: 14:86:bc:af:f5:09:fe:80:ec:59:b4:d2:8e:3b:1e: 9c:2c:af:48:2b:2f:59:68:2b:43:3a:eb:09:be:ab: 43:ab:eb:07:30:d6:c3:63:4c:29:e7:ce:2b:4a:f1: 0b:0c:d3:27:4a:6d:12:1c:98:48:ec:86:63:63:73: e8:86:1a:93:69:0a:f9:6a:57:36:62:98:8d:1e:5a: 3c:8f:3a:da:42:53:ae:30:ed:f8:b0:cd:8e:e7:74: 37:5d:42:87:9e:d4:ea:30:26:e1:7b:84:e5:c4:69: c1:14:6c:3d:6c:ee:28:fe:de:b1:dd:c5:ef:25:80: 75:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B6:3D:E3:44:C6:72:C8:51:21:DC:3E:CA:7C:82:5A:09:36:89:DE X509v3 Authority Key Identifier: keyid:9B:36:20:D6:79:8E:7E:B1:86:63:9C:45:48:A0:69:6A:F6:E3:05:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:2b:8c:84:48:b4:99:d6:6f:d5:e6:c4:25:1f:18:58:88:38: ec:87:6f:67:81:76:8a:70:cf:1a:be:30:d1:c6:e4:57:91:18: be:8e:e2:7e:af:fe:5e:0a:44:2d:6b:92:8a:66:ff:be:d4:50: b1:e5:6d:77:a9:47:42:45:83:08:1e:a1:ce:72:82:3a:85:ca: c7:ca:07:7c:d8:ec:c6:7a:8a:49:4b:f0:79:51:83:1c:4e:33: cf:54:9f:55:d1:3c:f3:fd:ff:dc:83:5a:d0:75:52:6c:d7:b4: fa:57:27:b3:42:73:49:5f:2b:f7:78:25:6b:b6:ee:16:d2:9a: 1d:eb:00:d5:93:e4:b7:59:db:d5:b9:4a:64:b8:14:93:83:06: 77:6e:4e:b2:da:49:f6:a8:f0:7e:74:42:89:39:ac:77:26:63: 68:bb:c5:de:9b:56:58:d5:fb:e5:ed:fc:cb:f2:b6:4e:c8:1a: 7a:52:76:8b:d6:9a:87:a9:fa:7b:d2:71:f0:19:04:07:31:f8: 99:30:8d:f7:25:1b:bd:e7:75:56:48:be:97:56:a3:14:10:19: b3:06:c9:8f:f2:66:96:fb:01:40:d1:48:10:0c:e1:3e:ce:c0: be:bf:6b:57:7b:b5:7e:68:c1:76:ac:89:77:1e:ba:0a:ba:c9: f7:84:bc:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56t9CUCNK3GLt+J27p5O/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMzYyMGQ2Nzk4ZTdlYjE4NjYzOWM0NTQ4YTA2OTZhZjZl MzA1ODkwHhcNMjUxMjIwMDQwMDUyWhcNMjUxMjIxMDQwMDUyWjAzMTEwLwYDVQQD Eyg2OWI2M2RlMzQ0YzY3MmM4NTEyMWRjM2VjYTdjODI1YTA5MzY4OWRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcsljXccNjISKGknZor3xZa+Fdla 73gVSa/+lmDTU4zbbg7pr0olpIqk0WgENzA8E/pCWw8b8s54ZFsBFA+/uZLU/Nr7 9IRhL22lJ5Wn6aWV9jDohuQDcKG+H4a8uj2irrqg0V3nd/pG5vTUOyh8PUq8rMF3 Bkw+RMVnmGkqjrkkHuWa6GYUhryv9Qn+gOxZtNKOOx6cLK9IKy9ZaCtDOusJvqtD q+sHMNbDY0wp584rSvELDNMnSm0SHJhI7IZjY3PohhqTaQr5alc2YpiNHlo8jzra QlOuMO34sM2O53Q3XUKHntTqMCbhe4TlxGnBFGw9bO4o/t6x3cXvJYB1vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGm2PeNExnLIUSHcPsp8gloJNoneMB8GA1UdIwQY MBaAFJs2INZ5jn6xhmOcRUigaWr24wWJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXpZZzFubU9mckdHWTV4RlNLQnBhdmJqQllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82YjYwNGItNGVlZC00MzkzLThlOGMt Y2JhMDYzMWYyOTNmLzEvbXpZZzFubU9mckdHWTV4RlNLQnBhdmJqQllrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS82YjYwNGItNGVlZC00MzkzLThlOGMtY2JhMDYzMWYyOTNm LzEvbXpZZzFubU9mckdHWTV4RlNLQnBhdmJqQllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoSuMhEi0 mdZv1ebEJR8YWIg47IdvZ4F2inDPGr4w0cbkV5EYvo7ifq/+XgpELWuSimb/vtRQ seVtd6lHQkWDCB6hznKCOoXKx8oHfNjsxnqKSUvweVGDHE4zz1SfVdE88/3/3INa 0HVSbNe0+lcns0JzSV8r93gla7buFtKaHesA1ZPkt1nb1blKZLgUk4MGd25OstpJ 9qjwfnRCiTmsdyZjaLvF3ptWWNX75e38y/K2TsgaelJ2i9aah6n6e9Jx8BkEBzH4 mTCN9yUbved1Vki+l1ajFBAZswbJj/JmlvsBQNFIEAzhPs7Avr9rV3u1fmjBdqyJ dx66CrrJ94S8Gw== -----END CERTIFICATE-----Generated at Sat Dec 20 05:30:58 2025 by rpki-client