This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft File: MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft (raw, json) Hash identifier: 1SKqBirPVScsPKy+Fn20sJisOx6XydZW2XCDe3e3els= Subject key identifier: 20:0D:85:59:EF:C9:FC:62:BA:FA:D7:41:BE:9D:82:AF:52:EB:CD:C1 Authority key identifier: 33:34:32:29:DE:25:1C:C8:82:5A:7C:44:C8:FE:93:E4:AC:DB:C1:15 Certificate issuer: /CN=33343229de251cc8825a7c44c8fe93e4acdbc115 Certificate serial: 019B12700FC58FBF012822290C613B7B0C0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzQyKd4lHMiCWnxEyP6T5KzbwRU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft Manifest number: 05 Signing time: Fri 12 Dec 2025 12:01:32 +0000 Manifest this update: Fri 12 Dec 2025 12:01:32 +0000 Manifest next update: Sat 13 Dec 2025 12:01:32 +0000 Files and hashes: 1: 531zAUPBYKumyQ0xpfkhVrEVZeg.roa (hash: zmS5aMegf4cAdrpghAhABvhGFxJN7kA/8Rf6S1OUbjM=) 2: MzQyKd4lHMiCWnxEyP6T5KzbwRU.crl (hash: JwAwys/TyZ3O5HfEsQ+rR4RZ8Dih12eXDmEqo4VO7Uo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft rsync://rpki.ripe.net/repository/DEFAULT/MzQyKd4lHMiCWnxEyP6T5KzbwRU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:70:0f:c5:8f:bf:01:28:22:29:0c:61:3b:7b:0c:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33343229de251cc8825a7c44c8fe93e4acdbc115 Validity Not Before: Dec 12 12:01:32 2025 GMT Not After : Dec 13 12:01:32 2025 GMT Subject: CN=200d8559efc9fc62bafad741be9d82af52ebcdc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c3:34:2c:5c:94:a2:cf:bc:b6:59:10:08:18: d3:81:3a:be:33:a7:95:1f:8e:b9:2b:1b:88:f9:1a: 46:dc:5b:75:41:f4:d5:79:21:ab:92:5d:76:8c:cd: 67:fe:66:04:13:37:bf:f4:85:f0:29:da:de:5e:46: c1:ec:e7:1d:50:59:54:ef:d4:f4:ba:1d:24:a8:74: 36:74:f5:55:fb:1f:c5:bd:e0:20:29:da:17:45:30: 71:d5:c7:2a:3b:d1:7e:39:6a:40:b9:5a:c4:9f:7f: 75:f3:b3:b3:1e:44:7c:f4:89:1d:2d:3b:1a:fa:0b: 69:18:a4:8c:b6:12:8c:c4:7f:17:b0:9c:f5:0e:a6: 48:7a:39:e5:22:fd:2a:05:af:e8:11:c7:c5:f4:d3: a3:63:30:bb:9f:e9:52:fb:15:b1:e9:f9:74:20:f2: 88:36:15:46:37:55:95:2a:a9:3b:cd:7f:cc:eb:91: 09:d5:80:32:5b:ee:ca:a5:8a:27:e4:6b:87:23:d2: 76:be:4f:02:76:e7:e9:12:bf:2d:9e:f6:c3:43:4f: 92:f1:8a:93:6a:be:10:a5:76:29:6a:e6:71:f8:19: e7:74:03:fd:db:88:43:80:89:a4:c0:90:07:eb:b3: fd:5f:97:92:1f:c0:0a:f6:3d:32:e7:95:52:7c:2b: 63:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0D:85:59:EF:C9:FC:62:BA:FA:D7:41:BE:9D:82:AF:52:EB:CD:C1 X509v3 Authority Key Identifier: keyid:33:34:32:29:DE:25:1C:C8:82:5A:7C:44:C8:FE:93:E4:AC:DB:C1:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzQyKd4lHMiCWnxEyP6T5KzbwRU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:c8:1d:06:c5:05:15:e9:62:52:55:a0:83:a6:d0:50:72:c3: 0c:22:a8:85:55:d6:a3:b1:de:85:1a:9d:05:f3:72:0b:ec:cf: 10:6d:33:df:2f:96:b0:54:2e:a5:b8:f7:4c:a2:4b:d7:8b:68: 1b:25:51:48:f4:6b:e2:a6:49:6d:02:81:9e:4d:8f:2b:38:64: 89:94:ee:85:bc:6d:45:60:49:94:1b:61:f6:4a:dc:e3:5f:cf: 66:9d:ba:1e:ab:83:96:69:7f:0e:87:a4:ac:06:27:f1:80:a7: 69:52:02:37:7d:2d:be:91:01:14:81:3d:cc:a7:b1:da:43:f2: 3a:bb:04:f7:f4:53:c1:f1:54:ab:5d:97:00:40:dd:e0:c9:29: f6:44:1d:10:63:10:70:06:bc:94:98:04:85:c4:b9:89:7f:74: 87:6d:d9:a1:67:b6:30:7e:c7:fd:6b:f5:9c:3e:46:ae:4a:c4: b7:4b:88:04:05:e4:8a:55:83:c4:41:5d:19:6d:8a:17:37:75: 11:22:40:ad:55:2b:dc:67:53:d2:df:cc:2b:c2:2c:7b:15:4a: ad:c8:76:b8:8b:43:77:4c:4c:3b:d5:80:0d:22:82:00:1e:51: ff:c8:17:03:5e:f0:1a:ac:81:ad:bb:32:e0:18:62:70:fa:37: e7:c5:97:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsScA/Fj78BKCIpDGE7ewwKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMzQzMjI5ZGUyNTFjYzg4MjVhN2M0NGM4ZmU5M2U0YWNk YmMxMTUwHhcNMjUxMjEyMTIwMTMyWhcNMjUxMjEzMTIwMTMyWjAzMTEwLwYDVQQD EygyMDBkODU1OWVmYzlmYzYyYmFmYWQ3NDFiZTlkODJhZjUyZWJjZGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMM0LFyUos+8tlkQCBjTgTq+M6eV H465KxuI+RpG3Ft1QfTVeSGrkl12jM1n/mYEEze/9IXwKdreXkbB7OcdUFlU79T0 uh0kqHQ2dPVV+x/FveAgKdoXRTBx1ccqO9F+OWpAuVrEn39187OzHkR89IkdLTsa +gtpGKSMthKMxH8XsJz1DqZIejnlIv0qBa/oEcfF9NOjYzC7n+lS+xWx6fl0IPKI NhVGN1WVKqk7zX/M65EJ1YAyW+7KpYon5GuHI9J2vk8CdufpEr8tnvbDQ0+S8YqT ar4QpXYpauZx+BnndAP924hDgImkwJAH67P9X5eSH8AK9j0y55VSfCtjhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCANhVnvyfxiuvrXQb6dgq9S683BMB8GA1UdIwQY MBaAFDM0MineJRzIglp8RMj+k+Ss28EVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXpReUtkNGxITWlDV254RXlQNlQ1S3pid1JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy83YTM3ZWEtMzBkOS00MjdiLWEzNmUt NjQ4MzJiMzkwNTdkLzEvTXpReUtkNGxITWlDV254RXlQNlQ1S3pid1JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy83YTM3ZWEtMzBkOS00MjdiLWEzNmUtNjQ4MzJiMzkwNTdk LzEvTXpReUtkNGxITWlDV254RXlQNlQ1S3pid1JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb8gdBsUF FeliUlWgg6bQUHLDDCKohVXWo7HehRqdBfNyC+zPEG0z3y+WsFQupbj3TKJL14to GyVRSPRr4qZJbQKBnk2PKzhkiZTuhbxtRWBJlBth9krc41/PZp26HquDlml/Doek rAYn8YCnaVICN30tvpEBFIE9zKex2kPyOrsE9/RTwfFUq12XAEDd4Mkp9kQdEGMQ cAa8lJgEhcS5iX90h23ZoWe2MH7H/Wv1nD5GrkrEt0uIBAXkilWDxEFdGW2KFzd1 ESJArVUr3GdT0t/MK8IsexVKrch2uItDd0xMO9WADSKCAB5R/8gXA17wGqyBrbsy 4BhicPo358WXgA== -----END CERTIFICATE-----Generated at Fri Dec 12 15:33:17 2025 by rpki-client