This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft File: mRLZRawqSfO02iIhwnuCmq_MsvI.mft (raw, json) Hash identifier: Ic5H+b5YutCP1xp7OAMce8vF6S/AkR268eWv40Enq88= Subject key identifier: DD:5B:A6:F0:D6:E2:A6:DA:71:A6:34:FD:7B:1F:43:5B:30:8E:22:21 Authority key identifier: 99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2 Certificate issuer: /CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2 Certificate serial: 019B0E25A11C0D293F20836846D10E3EC232 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft Manifest number: 158C Signing time: Thu 11 Dec 2025 16:01:45 +0000 Manifest this update: Thu 11 Dec 2025 16:01:45 +0000 Manifest next update: Fri 12 Dec 2025 16:01:45 +0000 Files and hashes: 1: G3bPtDx0TvVdf4ayVJDtbWUroio.roa (hash: 0QDqlFsV7bJD4enXREu7nHOgEbbLdZBSnVYjPXImw60=) 2: mRLZRawqSfO02iIhwnuCmq_MsvI.crl (hash: Ob4K4F8VJ9BAIBtkAZFXzRVBcnWx2f6ONYAZ48x7H7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:a1:1c:0d:29:3f:20:83:68:46:d1:0e:3e:c2:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2 Validity Not Before: Dec 11 16:01:45 2025 GMT Not After : Dec 12 16:01:45 2025 GMT Subject: CN=dd5ba6f0d6e2a6da71a634fd7b1f435b308e2221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9f:35:ea:b7:f9:87:71:b4:bf:66:08:f2:b8: 05:c2:15:d2:9e:7d:40:79:fe:7f:59:2c:5a:a9:59: 9f:be:2a:85:93:4e:8a:c9:e1:05:79:d2:de:ff:31: df:a6:d2:f6:0b:49:aa:38:86:a7:bb:04:53:26:99: 4e:d3:ed:6d:5b:83:59:11:00:37:c1:26:04:70:15: 0a:41:7b:b4:26:2e:eb:08:22:55:08:d9:30:6b:7f: c3:14:d8:a1:9e:ee:e0:11:dd:c2:a0:86:83:72:b7: 65:24:80:97:f6:82:3c:a3:56:46:2c:0f:c1:73:37: ec:e3:4b:3e:18:09:f6:c8:80:1e:70:cd:05:3a:a2: 4d:69:7a:08:26:e3:b8:a1:d0:53:16:56:0b:15:ea: b0:a0:e8:48:97:41:bb:22:d6:94:d4:75:07:9f:d4: ad:fe:ed:9e:14:c4:37:5c:16:4c:93:2c:cf:74:8b: a9:75:4f:57:e3:e9:12:d3:dd:24:8e:eb:4b:96:0a: 63:d6:c6:8f:f3:f3:b5:f2:c2:d5:a6:fd:d9:bd:63: 90:a6:33:f2:b7:e5:dd:b9:d2:6f:d3:61:6b:4f:62: 70:7f:5f:9b:10:ea:44:c4:05:91:8c:fc:59:f4:49: ba:15:55:dd:00:0c:21:40:50:a7:fc:f0:b1:cb:8d: b8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5B:A6:F0:D6:E2:A6:DA:71:A6:34:FD:7B:1F:43:5B:30:8E:22:21 X509v3 Authority Key Identifier: keyid:99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:bc:56:e4:82:56:30:26:42:4c:d7:a9:37:db:ac:71:26:4a: 45:d0:68:67:19:5e:e1:ea:bf:72:a9:f7:b0:40:5e:f2:d7:b5: c7:ee:b2:4b:66:88:c0:e9:98:ae:e4:b6:e8:85:bb:65:57:a9: 94:9e:cb:7a:2a:4b:54:cb:3b:6c:86:97:77:96:19:45:89:8d: c1:aa:bb:5a:83:ba:15:d0:9f:27:25:d8:9c:56:93:b6:a6:6d: 99:9f:7e:cd:1e:0d:5f:37:90:75:28:4f:ea:7c:70:0d:5c:f8: 67:fe:77:84:5d:a2:bc:cf:6d:12:00:9d:ea:ff:7d:ba:fd:17: 09:67:f0:f8:44:e8:3f:2a:f3:e6:f6:97:1f:a1:85:a0:af:35: 13:c7:ff:46:e2:99:22:69:f4:69:04:39:4b:df:8e:3c:01:e5: 29:f9:c3:3a:6e:fc:55:0e:22:d6:d0:9e:66:f1:27:44:52:62: 77:54:4b:ca:f7:72:73:3a:ca:50:f0:aa:a8:cc:5f:df:e4:e2: a4:91:37:88:f9:d0:26:54:18:c3:e0:6f:0f:06:9b:2d:27:2e: a7:3e:45:72:a6:c8:0d:5b:03:49:ea:f0:99:af:23:6c:20:b9: 89:cf:25:6a:d8:b9:67:11:95:4c:1a:a2:4a:bf:a0:8d:20:f0: d1:cf:e8:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJaEcDSk/IINoRtEOPsIyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MTJkOTQ1YWMyYTQ5ZjNiNGRhMjIyMWMyN2I4MjlhYWZj Y2IyZjIwHhcNMjUxMjExMTYwMTQ1WhcNMjUxMjEyMTYwMTQ1WjAzMTEwLwYDVQQD EyhkZDViYTZmMGQ2ZTJhNmRhNzFhNjM0ZmQ3YjFmNDM1YjMwOGUyMjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ816rf5h3G0v2YI8rgFwhXSnn1A ef5/WSxaqVmfviqFk06KyeEFedLe/zHfptL2C0mqOIanuwRTJplO0+1tW4NZEQA3 wSYEcBUKQXu0Ji7rCCJVCNkwa3/DFNihnu7gEd3CoIaDcrdlJICX9oI8o1ZGLA/B czfs40s+GAn2yIAecM0FOqJNaXoIJuO4odBTFlYLFeqwoOhIl0G7ItaU1HUHn9St /u2eFMQ3XBZMkyzPdIupdU9X4+kS090kjutLlgpj1saP8/O18sLVpv3ZvWOQpjPy t+XdudJv02FrT2Jwf1+bEOpExAWRjPxZ9Em6FVXdAAwhQFCn/PCxy4248QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1bpvDW4qbacaY0/XsfQ1swjiIhMB8GA1UdIwQY MBaAFJkS2UWsKknztNoiIcJ7gpqvzLLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVJMWlJhd3FTZk8wMmlJaHdudUNtcV9Nc3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83OWFiNzYtOWJmOS00N2NkLWI1NDQt NWVlMDlmZWFkNTYxLzEvbVJMWlJhd3FTZk8wMmlJaHdudUNtcV9Nc3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83OWFiNzYtOWJmOS00N2NkLWI1NDQtNWVlMDlmZWFkNTYx LzEvbVJMWlJhd3FTZk8wMmlJaHdudUNtcV9Nc3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLxW5IJW MCZCTNepN9uscSZKRdBoZxle4eq/cqn3sEBe8te1x+6yS2aIwOmYruS26IW7ZVep lJ7LeipLVMs7bIaXd5YZRYmNwaq7WoO6FdCfJyXYnFaTtqZtmZ9+zR4NXzeQdShP 6nxwDVz4Z/53hF2ivM9tEgCd6v99uv0XCWfw+EToPyrz5vaXH6GFoK81E8f/RuKZ Imn0aQQ5S9+OPAHlKfnDOm78VQ4i1tCeZvEnRFJid1RLyvdyczrKUPCqqMxf3+Ti pJE3iPnQJlQYw+BvDwabLScupz5FcqbIDVsDSerwma8jbCC5ic8lati5ZxGVTBqi Sr+gjSDw0c/obQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:10:49 2025 by rpki-client