This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft File: mZP-d_Y77pCIj83hoSWt_mU12BY.mft (raw, json) Hash identifier: zIrndh0BQsb3KIRVbTOKXwWO88eIGgDlZ6Ua4j3tRIA= Subject key identifier: 5B:B4:05:A5:46:69:C8:65:3B:3B:5B:C8:82:58:FA:ED:87:2C:1C:E2 Authority key identifier: 99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16 Certificate issuer: /CN=9993fe77f63bee90888fcde1a125adfe6535d816 Certificate serial: 019B1201B3B4DDE4D4B4CCFA7EADEDF73CA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft Manifest number: 0395 Signing time: Fri 12 Dec 2025 10:00:59 +0000 Manifest this update: Fri 12 Dec 2025 10:00:59 +0000 Manifest next update: Sat 13 Dec 2025 10:00:59 +0000 Files and hashes: 1: 4EtVjJk4lsZOZCX63edsZ70D8bI.roa (hash: EUz3DyoqW1g2YIoKqC8Ka1J3A0ypQWGdk4dQmoae3Fs=) 2: mZP-d_Y77pCIj83hoSWt_mU12BY.crl (hash: XSYR+gBsQlDzpG2J4bxgaEQDBeAVZYHAo3+GQTXdsvI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:01:b3:b4:dd:e4:d4:b4:cc:fa:7e:ad:ed:f7:3c:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9993fe77f63bee90888fcde1a125adfe6535d816 Validity Not Before: Dec 12 10:00:59 2025 GMT Not After : Dec 13 10:00:59 2025 GMT Subject: CN=5bb405a54669c8653b3b5bc88258faed872c1ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1e:67:84:86:c3:fe:85:3b:7e:48:bf:b5:b6: fd:3b:88:8d:ee:7c:6f:24:af:d8:77:8a:06:46:8b: 91:92:f6:c9:ad:cd:57:87:a8:0e:08:73:28:db:f8: 01:12:ad:75:03:e6:fb:29:6c:87:ac:9d:91:13:fe: c9:62:7a:72:34:e0:12:52:10:2d:4d:74:f5:47:cf: 2b:19:04:cb:35:07:00:18:08:ab:8d:54:2e:31:89: 0b:c7:17:42:00:39:25:73:43:d7:e9:3d:8f:b4:b4: 7a:fe:70:b2:3b:b4:57:28:8c:0b:b0:39:d0:7f:f9: 0c:da:f7:d3:01:71:f8:8d:6a:ab:04:b2:52:60:a2: 7f:03:41:bd:7e:64:7c:7c:41:a9:71:2b:cc:4e:6f: c4:96:da:d2:b4:eb:2c:ba:9a:b0:0e:a1:a6:be:99: 57:8b:c1:4d:ef:54:d7:63:da:88:74:cb:cc:ad:43: 0b:4c:89:e2:62:de:d7:72:1b:3b:d6:fd:36:71:65: 04:6a:11:bf:2f:30:be:e4:b8:6c:ff:e0:89:4b:e6: 90:9e:f3:12:73:24:f2:bf:11:a4:d3:63:8e:35:29: 4b:57:d5:5a:d4:19:be:e1:5b:cd:cd:1b:49:88:0d: 5f:e7:f3:d4:c5:74:df:b1:de:10:7f:4a:e6:8a:06: 36:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B4:05:A5:46:69:C8:65:3B:3B:5B:C8:82:58:FA:ED:87:2C:1C:E2 X509v3 Authority Key Identifier: keyid:99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:01:80:fb:25:22:2c:9e:b3:cd:28:79:d2:95:5b:af:47:21: ec:7d:45:ee:a4:dc:8c:d3:df:db:06:4b:19:b1:bb:04:84:c8: a7:39:6d:2c:be:f1:16:ff:76:73:88:1c:b7:b1:8e:82:af:5c: fb:1c:54:ab:2b:43:05:03:e0:2c:57:4f:81:3f:cb:20:37:b3: a6:96:84:8f:df:03:4a:25:f8:f2:54:9d:ea:71:dd:e9:16:8b: 0c:d2:3c:0d:e1:66:3c:d9:cb:20:ab:e4:9c:0e:12:26:cd:77: 2b:f7:73:d1:96:2b:1d:e2:53:d6:00:de:eb:3f:ba:dd:1d:2d: 2b:da:50:76:a8:ce:2c:2f:3c:8c:db:28:f4:16:f2:1e:22:4a: 43:4d:ff:ba:69:b2:8c:14:91:9a:bb:ab:f3:f4:39:6b:e8:9b: be:d6:01:6b:cf:8e:32:03:fa:f8:5a:70:92:40:c4:a4:3b:22: ac:45:7e:aa:07:f2:24:6c:f5:0c:c8:55:78:74:45:b3:9a:42: d3:06:7a:21:82:6e:bb:50:bd:bb:e4:93:6c:0b:bf:16:80:c3: d9:73:aa:fe:2f:3e:24:4c:99:6e:84:5b:02:f7:5b:84:72:1b: 75:05:c2:6e:43:1c:e5:01:f1:f3:47:0a:92:a4:6c:d7:c1:a6: e1:2b:8a:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAbO03eTUtMz6fq3t9zykMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5OTNmZTc3ZjYzYmVlOTA4ODhmY2RlMWExMjVhZGZlNjUz NWQ4MTYwHhcNMjUxMjEyMTAwMDU5WhcNMjUxMjEzMTAwMDU5WjAzMTEwLwYDVQQD Eyg1YmI0MDVhNTQ2NjljODY1M2IzYjViYzg4MjU4ZmFlZDg3MmMxY2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxh5nhIbD/oU7fki/tbb9O4iN7nxv JK/Yd4oGRouRkvbJrc1Xh6gOCHMo2/gBEq11A+b7KWyHrJ2RE/7JYnpyNOASUhAt TXT1R88rGQTLNQcAGAirjVQuMYkLxxdCADklc0PX6T2PtLR6/nCyO7RXKIwLsDnQ f/kM2vfTAXH4jWqrBLJSYKJ/A0G9fmR8fEGpcSvMTm/EltrStOssupqwDqGmvplX i8FN71TXY9qIdMvMrUMLTIniYt7Xchs71v02cWUEahG/LzC+5Lhs/+CJS+aQnvMS cyTyvxGk02OONSlLV9Va1Bm+4VvNzRtJiA1f5/PUxXTfsd4Qf0rmigY2EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFu0BaVGachlOztbyIJY+u2HLBziMB8GA1UdIwQY MBaAFJmT/nf2O+6QiI/N4aElrf5lNdgWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVpQLWRfWTc3cENJajgzaG9TV3RfbVUxMkJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9mOWI2YWEtYTkxNy00OTZmLWEyNGYt NjY5NTllMWJiN2ZlLzEvbVpQLWRfWTc3cENJajgzaG9TV3RfbVUxMkJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9mOWI2YWEtYTkxNy00OTZmLWEyNGYtNjY5NTllMWJiN2Zl LzEvbVpQLWRfWTc3cENJajgzaG9TV3RfbVUxMkJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgGA+yUi LJ6zzSh50pVbr0ch7H1F7qTcjNPf2wZLGbG7BITIpzltLL7xFv92c4gct7GOgq9c +xxUqytDBQPgLFdPgT/LIDezppaEj98DSiX48lSd6nHd6RaLDNI8DeFmPNnLIKvk nA4SJs13K/dz0ZYrHeJT1gDe6z+63R0tK9pQdqjOLC88jNso9BbyHiJKQ03/ummy jBSRmrur8/Q5a+ibvtYBa8+OMgP6+FpwkkDEpDsirEV+qgfyJGz1DMhVeHRFs5pC 0wZ6IYJuu1C9u+STbAu/FoDD2XOq/i8+JEyZboRbAvdbhHIbdQXCbkMc5QHx80cK kqRs18Gm4SuKVQ== -----END CERTIFICATE-----Generated at Fri Dec 12 14:34:24 2025 by rpki-client