This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft File: MzOeZKWFFMmwkemy5o4pNx5D498.mft (raw, json) Hash identifier: aLhXl3L9xaA/TJoArr7ZmfM0C6Wus7GegBZ+khVMEAs= Subject key identifier: 95:B9:17:D4:AD:54:4A:DB:10:BE:4B:9C:F7:85:A0:B9:09:44:14:34 Authority key identifier: 33:33:9E:64:A5:85:14:C9:B0:91:E9:B2:E6:8E:29:37:1E:43:E3:DF Certificate issuer: /CN=33339e64a58514c9b091e9b2e68e29371e43e3df Certificate serial: 019B19BCD6B9A47CF93B8AD3121684A5825B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft Manifest number: 0BC0 Signing time: Sat 13 Dec 2025 22:02:44 +0000 Manifest this update: Sat 13 Dec 2025 22:02:44 +0000 Manifest next update: Sun 14 Dec 2025 22:02:44 +0000 Files and hashes: 1: 0SGERXpsIldifCTWUfwaAPLWZj8.roa (hash: Wl6639BT2YEzAcDZ1BBEKA7sfTmRzgLCKdjibP72VaE=) 2: MzOeZKWFFMmwkemy5o4pNx5D498.crl (hash: EjohRiuaKAA+AYb/Xkloh8dwbZvNl/wa9Kb1vJGd5gA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:d6:b9:a4:7c:f9:3b:8a:d3:12:16:84:a5:82:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33339e64a58514c9b091e9b2e68e29371e43e3df Validity Not Before: Dec 13 22:02:44 2025 GMT Not After : Dec 14 22:02:44 2025 GMT Subject: CN=95b917d4ad544adb10be4b9cf785a0b909441434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:28:2a:49:d3:ea:fa:51:f6:e8:0c:14:da:72: 2a:ac:6c:a7:f5:4a:6c:f6:e8:cc:d2:38:eb:20:5e: 45:12:8f:8e:38:4c:65:ba:84:ce:59:aa:1e:60:41: 4e:93:6d:1e:4a:8a:08:e0:f3:c2:71:f4:0c:f4:fe: eb:7d:1a:de:94:b5:d4:05:69:bb:ec:ce:f4:0d:24: 2c:3e:9d:06:28:00:fe:02:c4:30:20:86:a7:4e:46: 6c:c5:35:78:11:9b:28:ec:f1:24:04:d1:b0:e3:de: c3:ff:8d:ef:0b:90:dc:45:a2:82:5d:cd:ff:0e:89: 03:95:9d:53:f6:e9:19:75:4c:da:eb:de:ac:ef:ba: 97:15:bd:a7:25:4a:56:59:eb:f1:e9:50:aa:32:d2: 24:6d:2d:b9:7b:9a:af:88:d0:39:b4:74:54:97:24: 00:35:ee:23:f0:1f:ee:30:d2:d3:1d:b4:c3:7a:a9: f7:3b:b1:de:b1:9a:c8:12:ac:e4:64:01:7d:db:54: 4e:f5:62:f0:61:04:9d:f4:ce:f8:08:2c:bf:88:10: a3:f8:43:87:4e:fd:4c:d5:c7:72:54:4e:54:51:cd: bf:de:17:b1:93:0a:01:63:6f:8b:c0:21:10:31:f6: f5:db:30:cd:7e:bc:72:a4:b9:e1:bc:01:7a:f0:94: 68:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B9:17:D4:AD:54:4A:DB:10:BE:4B:9C:F7:85:A0:B9:09:44:14:34 X509v3 Authority Key Identifier: keyid:33:33:9E:64:A5:85:14:C9:B0:91:E9:B2:E6:8E:29:37:1E:43:E3:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzOeZKWFFMmwkemy5o4pNx5D498.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/cd504a-0189-4554-b501-639dc4d5f370/1/MzOeZKWFFMmwkemy5o4pNx5D498.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:e1:08:7d:5c:fa:38:55:f6:c9:bf:85:df:65:05:df:8a:fe: 8c:5d:79:2c:a3:52:06:a0:1c:f6:ca:7f:8d:75:28:6f:a2:84: 7f:49:b9:39:99:20:0e:10:db:54:53:f5:6e:18:33:f7:d8:8f: 79:aa:71:05:dc:d8:b1:ee:16:6f:1e:15:d6:f9:42:c1:20:2b: 99:e2:b1:ba:85:70:0a:b6:75:c5:ce:fa:94:1e:62:6b:0c:9b: 72:0a:0c:dc:65:56:dd:b8:74:ae:0c:d7:e0:06:56:09:3b:d4: db:5a:17:b2:34:f7:66:40:bb:83:ea:dc:0f:c3:2e:07:44:ed: 38:9f:53:4a:74:64:74:74:4d:cb:8b:92:d7:4e:ca:50:e4:60: a6:f1:05:13:37:6b:f3:eb:f3:a5:ec:52:be:44:29:cc:0f:34: 68:39:98:8d:cc:08:1b:c8:c1:2d:36:c6:0f:d9:01:49:80:7c: 1b:0b:80:d8:12:6c:11:20:1e:fa:af:34:62:a3:8c:e3:88:96: 8b:0b:8d:72:0e:68:e6:5a:d9:6f:e1:6b:ec:94:aa:ed:cc:4b: 3e:f7:4b:cc:c8:c3:40:8b:22:db:37:8d:ad:58:4f:d3:d4:e5: 4a:e8:0e:e6:f2:ce:01:ce:c3:d8:a9:47:bf:13:f9:98:ea:84: fc:df:b1:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvNa5pHz5O4rTEhaEpYJbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMzM5ZTY0YTU4NTE0YzliMDkxZTliMmU2OGUyOTM3MWU0 M2UzZGYwHhcNMjUxMjEzMjIwMjQ0WhcNMjUxMjE0MjIwMjQ0WjAzMTEwLwYDVQQD Eyg5NWI5MTdkNGFkNTQ0YWRiMTBiZTRiOWNmNzg1YTBiOTA5NDQxNDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArigqSdPq+lH26AwU2nIqrGyn9Ups 9ujM0jjrIF5FEo+OOExluoTOWaoeYEFOk20eSooI4PPCcfQM9P7rfRrelLXUBWm7 7M70DSQsPp0GKAD+AsQwIIanTkZsxTV4EZso7PEkBNGw497D/43vC5DcRaKCXc3/ DokDlZ1T9ukZdUza696s77qXFb2nJUpWWevx6VCqMtIkbS25e5qviNA5tHRUlyQA Ne4j8B/uMNLTHbTDeqn3O7HesZrIEqzkZAF921RO9WLwYQSd9M74CCy/iBCj+EOH Tv1M1cdyVE5UUc2/3hexkwoBY2+LwCEQMfb12zDNfrxypLnhvAF68JRoTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJW5F9StVErbEL5LnPeFoLkJRBQ0MB8GA1UdIwQY MBaAFDMznmSlhRTJsJHpsuaOKTceQ+PfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXpPZVpLV0ZGTW13a2VteTVvNHBOeDVENDk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jZDUwNGEtMDE4OS00NTU0LWI1MDEt NjM5ZGM0ZDVmMzcwLzEvTXpPZVpLV0ZGTW13a2VteTVvNHBOeDVENDk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9jZDUwNGEtMDE4OS00NTU0LWI1MDEtNjM5ZGM0ZDVmMzcw LzEvTXpPZVpLV0ZGTW13a2VteTVvNHBOeDVENDk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFuEIfVz6 OFX2yb+F32UF34r+jF15LKNSBqAc9sp/jXUob6KEf0m5OZkgDhDbVFP1bhgz99iP eapxBdzYse4Wbx4V1vlCwSArmeKxuoVwCrZ1xc76lB5iawybcgoM3GVW3bh0rgzX 4AZWCTvU21oXsjT3ZkC7g+rcD8MuB0TtOJ9TSnRkdHRNy4uS107KUORgpvEFEzdr 8+vzpexSvkQpzA80aDmYjcwIG8jBLTbGD9kBSYB8GwuA2BJsESAe+q80YqOM44iW iwuNcg5o5lrZb+Fr7JSq7cxLPvdLzMjDQIsi2zeNrVhP09TlSugO5vLOAc7D2KlH vxP5mOqE/N+xPA== -----END CERTIFICATE-----Generated at Sun Dec 14 04:59:07 2025 by rpki-client