This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft File: mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft (raw, json) Hash identifier: CGPQH4GZGeMyaqybifuwUFrlBc+Z21JvBUVfclq5fIg= Subject key identifier: 0A:A9:C1:10:06:0A:81:47:C2:95:D7:9A:A7:2C:04:CD:D4:F1:AE:C3 Authority key identifier: 9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91 Certificate issuer: /CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991 Certificate serial: 019B32D6841ED1F6EB1D4F43C5A7108A68E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 19:01:17 +0000 Manifest this update: Thu 18 Dec 2025 19:01:17 +0000 Manifest next update: Fri 19 Dec 2025 19:01:17 +0000 Files and hashes: 1: 7TyGUQq5_upn7OI_8rMQkinORFg.roa (hash: KGYsAjI6sTjQq+H3tQWHe4y4uTdeAqiVMRj2OW3ueCg=) 2: QF7mDdkQZAR8P9EKqBVgpI8Nnc4.roa (hash: 6EIF8gdiFiVoDV+fXsyr7pASiWNgwImN+SYlSYA+adg=) 3: U6Qxy1oNmDM-lMlcIuV-tkZ5i3M.roa (hash: HGuuwSy4hXJni083ZaeJiwdIjM8A91FA5TQ0qlaoCh4=) 4: mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl (hash: jYGkkIsn4CiTbbhoQZilou6VAJURFsfsuCOv6lTQaE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:84:1e:d1:f6:eb:1d:4f:43:c5:a7:10:8a:68:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991 Validity Not Before: Dec 18 19:01:17 2025 GMT Not After : Dec 19 19:01:17 2025 GMT Subject: CN=0aa9c110060a8147c295d79aa72c04cdd4f1aec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f4:0c:03:8c:d6:b5:69:d3:62:37:a3:e1:60: fe:88:a5:d6:88:f9:77:f7:5b:00:9f:f2:84:5d:f4: ca:4c:10:6e:2b:b3:d9:b7:8b:df:b0:2f:0b:40:81: 45:d0:6e:11:9a:78:5b:b8:f7:38:b5:dd:d1:24:2e: 8a:12:a1:9f:a9:d7:d7:d0:34:cd:16:e8:eb:f2:d9: 4e:ac:d9:24:60:b5:8e:e2:ab:f5:c4:0f:02:b4:bc: 77:3b:ef:e5:65:58:ec:dc:aa:3c:47:09:a5:3e:b8: 65:33:be:e1:96:e9:b6:3e:0f:91:29:25:c2:0a:99: 66:6d:64:79:59:9d:d2:8d:8a:c8:5d:a7:06:49:7f: 12:04:a0:9c:03:e8:ed:56:89:49:58:88:b7:7c:2a: 5c:98:c7:08:33:cc:f7:57:f2:fd:35:3b:29:da:67: b6:4d:ec:a9:6a:1c:06:bc:2f:14:b7:3d:92:d2:5f: 20:0e:16:85:59:02:ff:93:c5:c9:e8:6e:ec:d9:21: 37:c7:fa:a5:67:50:38:3e:02:11:39:45:4b:51:bd: e3:c4:27:5d:39:0f:cf:5b:dd:88:b7:be:df:a7:a3: c3:b4:57:6f:e9:be:47:9c:c9:4e:3e:55:97:f5:52: 7e:3d:f3:e6:cc:8b:c0:ef:28:66:6f:f9:5a:49:7a: 3d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A9:C1:10:06:0A:81:47:C2:95:D7:9A:A7:2C:04:CD:D4:F1:AE:C3 X509v3 Authority Key Identifier: keyid:9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:09:0c:70:e6:c0:1d:8d:ff:a8:50:05:da:8c:fc:a4:db:94: fd:e9:9a:13:55:e4:a2:f8:97:c1:b7:76:e7:ce:89:a5:72:6c: 72:d2:dd:29:77:8e:91:c0:bb:4f:bf:19:34:74:14:5e:39:eb: 40:b5:b4:55:75:b4:32:c1:b8:cb:c8:d5:93:5a:a7:c9:05:61: 0c:28:21:7d:fb:6b:c5:31:4e:1a:84:5e:79:0c:d4:fa:16:1d: 64:d9:16:a6:47:55:13:56:0e:bc:1e:d4:e8:55:b0:36:58:0d: 23:b7:13:d6:ec:01:6e:71:47:b1:0a:0a:c4:91:20:e3:42:f0: 28:32:db:d0:a5:b6:a2:ea:78:92:32:b4:fa:f0:ea:74:d8:fe: fd:ab:c3:80:9a:53:72:5e:70:71:d9:f2:7e:9f:61:62:b7:08: b5:b5:58:3a:a5:15:64:8c:20:f7:0e:22:d4:0f:a7:04:9c:d8: 1a:df:38:83:e1:78:6f:5e:cc:a5:0f:aa:c4:b5:97:3f:fa:ac: 3b:d8:61:85:f5:8a:9f:a1:53:68:75:74:37:4f:da:d9:dd:1e: e5:4b:12:c2:df:2a:fa:62:10:dd:20:43:1e:8e:3f:21:d6:13: f6:2f:23:b2:27:0f:ad:e0:ec:4a:f5:b4:09:29:74:1b:7c:ad: 3b:94:e9:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1oQe0fbrHU9DxacQimjiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMzJhMmU4ZmNiZWVlNjMwMjBiYTkzZGFhYjkwNzZjMzdi Yzk5OTEwHhcNMjUxMjE4MTkwMTE3WhcNMjUxMjE5MTkwMTE3WjAzMTEwLwYDVQQD EygwYWE5YzExMDA2MGE4MTQ3YzI5NWQ3OWFhNzJjMDRjZGQ0ZjFhZWMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvQMA4zWtWnTYjej4WD+iKXWiPl3 91sAn/KEXfTKTBBuK7PZt4vfsC8LQIFF0G4RmnhbuPc4td3RJC6KEqGfqdfX0DTN Fujr8tlOrNkkYLWO4qv1xA8CtLx3O+/lZVjs3Ko8RwmlPrhlM77hlum2Pg+RKSXC CplmbWR5WZ3SjYrIXacGSX8SBKCcA+jtVolJWIi3fCpcmMcIM8z3V/L9NTsp2me2 TeypahwGvC8Utz2S0l8gDhaFWQL/k8XJ6G7s2SE3x/qlZ1A4PgIROUVLUb3jxCdd OQ/PW92It77fp6PDtFdv6b5HnMlOPlWX9VJ+PfPmzIvA7yhmb/laSXo9NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqpwRAGCoFHwpXXmqcsBM3U8a7DMB8GA1UdIwQY MBaAFJsyouj8vu5jAgupPaq5B2w3vJmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXpLaTZQeS03bU1DQzZrOXFya0hiRGU4bVpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9kZjIxY2ItMDhhYy00ZTVjLWI4NTQt ZTNhYjkwODdkNDAzLzEvbXpLaTZQeS03bU1DQzZrOXFya0hiRGU4bVpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9kZjIxY2ItMDhhYy00ZTVjLWI4NTQtZTNhYjkwODdkNDAz LzEvbXpLaTZQeS03bU1DQzZrOXFya0hiRGU4bVpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUwkMcObA HY3/qFAF2oz8pNuU/emaE1XkoviXwbd2586JpXJsctLdKXeOkcC7T78ZNHQUXjnr QLW0VXW0MsG4y8jVk1qnyQVhDCghfftrxTFOGoReeQzU+hYdZNkWpkdVE1YOvB7U 6FWwNlgNI7cT1uwBbnFHsQoKxJEg40LwKDLb0KW2oup4kjK0+vDqdNj+/avDgJpT cl5wcdnyfp9hYrcItbVYOqUVZIwg9w4i1A+nBJzYGt84g+F4b17MpQ+qxLWXP/qs O9hhhfWKn6FTaHV0N0/a2d0e5UsSwt8q+mIQ3SBDHo4/IdYT9i8jsicPreDsSvW0 CSl0G3ytO5TpcA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:35:31 2025 by rpki-client