This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft File: MZIbb_GsRJuj5_iSzwgy0c631GQ.mft (raw, json) Hash identifier: zaIrTaYJPhTh9XCaQQmzTC9qAUZ2kc/K/oJqGcC7XF0= Subject key identifier: 56:56:C3:7D:AF:DD:BB:7B:09:65:3F:4D:4C:97:AD:9B:AA:7F:7A:94 Authority key identifier: 31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64 Certificate issuer: /CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464 Certificate serial: 019B31FAC6BA5A5D161F056CD9B9AA367DD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 15:01:17 +0000 Manifest this update: Thu 18 Dec 2025 15:01:17 +0000 Manifest next update: Fri 19 Dec 2025 15:01:17 +0000 Files and hashes: 1: MZIbb_GsRJuj5_iSzwgy0c631GQ.crl (hash: 4S/gQGuZplIFUYSoXzMevK9wASKAlVBqS883p5ymqpE=) 2: XByggxBGqV43CvyUdzIIt6a45i0.roa (hash: +ahxNaqpYRIqcavaBqUNzPyEswHxojATT5doqQzic0g=) 3: jq2ROJQEklFg1qQcuXVZSg9rwTs.roa (hash: Kgf0TYs59UZnAuan2m+ClrKpKvyb0NT02OMtNpm3Mcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 15:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:c6:ba:5a:5d:16:1f:05:6c:d9:b9:aa:36:7d:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31921b6ff1ac449ba3e7f892cf0832d1ceb7d464 Validity Not Before: Dec 18 15:01:17 2025 GMT Not After : Dec 19 15:01:17 2025 GMT Subject: CN=5656c37dafddbb7b09653f4d4c97ad9baa7f7a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c5:e8:98:ef:2d:e8:df:30:8c:05:db:75:6f: 24:30:e7:5f:c9:23:f7:f7:36:cf:db:a0:d2:29:66: 41:0f:ac:da:db:0e:06:47:8c:33:20:3f:aa:3a:c5: e6:1e:10:5f:8c:f9:41:93:30:31:be:dd:9d:af:39: ee:00:38:71:a4:11:4d:f3:e9:b8:d4:a4:7e:1a:82: 49:e4:f4:ef:0c:dc:0e:7e:a8:0a:78:56:62:81:9b: be:d4:02:db:14:77:d1:43:4a:b3:5a:e4:c8:ac:a5: 79:09:19:65:d9:a6:28:39:08:9e:a8:f6:e2:3d:15: 03:01:2a:ce:47:82:ed:86:10:3c:d1:2e:25:fc:03: c4:df:61:a2:50:a4:44:00:7d:58:bc:3c:3b:83:a2: b9:62:5a:e3:00:64:20:83:23:dc:d6:cc:8c:f4:c5: a4:42:c3:d2:e8:40:d3:ff:c5:c2:6a:04:8d:f8:d7: d7:c9:dd:58:ba:45:7f:27:f7:f0:36:ae:fa:a4:da: 02:ec:3d:51:dc:fa:cc:d6:ae:8f:45:d7:e2:ab:dd: c7:4a:2f:d2:5b:10:8c:20:0e:8f:99:17:dc:4d:6f: 97:46:4d:b5:2a:ee:1e:45:56:a2:2c:fd:3b:ce:24: 9b:91:f7:b5:34:a1:d2:1f:68:20:a4:56:14:02:7a: d7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:56:C3:7D:AF:DD:BB:7B:09:65:3F:4D:4C:97:AD:9B:AA:7F:7A:94 X509v3 Authority Key Identifier: keyid:31:92:1B:6F:F1:AC:44:9B:A3:E7:F8:92:CF:08:32:D1:CE:B7:D4:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZIbb_GsRJuj5_iSzwgy0c631GQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce043e-2ddb-48a7-8983-9d7a8872b454/1/MZIbb_GsRJuj5_iSzwgy0c631GQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:8c:da:a7:29:38:af:e3:6f:2b:f8:cc:96:f6:b6:85:a2:61: f4:43:34:6e:dc:52:98:c9:34:e5:a6:73:f1:eb:2b:46:d4:c4: 62:db:9c:2a:23:46:dc:6d:89:50:a0:4b:6d:95:48:b1:40:8e: 5c:fd:67:c4:f0:00:91:81:d5:d3:7e:08:ec:a7:ba:1d:fb:14: fd:d9:6c:1f:1f:a7:07:f2:a4:17:08:e8:07:a4:87:ec:c1:75: 46:08:07:19:a9:ed:8e:65:d8:d5:c5:b3:d1:a8:b1:fb:7f:17: 02:6c:81:fa:ff:86:b2:5b:94:ee:3a:a0:2a:aa:df:a0:e8:10: 97:49:13:d6:c3:e5:25:ec:35:e0:31:d4:47:7e:d3:d2:00:f0: 33:36:00:13:29:1e:07:fe:09:32:36:03:72:a6:f9:83:e2:8f: 97:3e:0e:e2:87:c3:4a:26:86:62:36:f1:65:91:ac:af:ba:29: ba:a5:c4:8f:ee:9a:ea:a1:39:f5:79:6a:9a:a6:14:da:17:c8: 35:22:f4:20:ba:4a:90:9f:19:e0:2d:23:ab:d7:27:f0:95:81: f6:c6:59:75:1b:6c:4e:bf:c5:bd:20:f2:42:3b:27:09:de:98: b4:dc:06:23:43:af:2c:8a:ef:90:16:e3:0c:92:da:ec:54:1e: fc:49:7e:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+sa6Wl0WHwVs2bmqNn3WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxOTIxYjZmZjFhYzQ0OWJhM2U3Zjg5MmNmMDgzMmQxY2Vi N2Q0NjQwHhcNMjUxMjE4MTUwMTE3WhcNMjUxMjE5MTUwMTE3WjAzMTEwLwYDVQQD Eyg1NjU2YzM3ZGFmZGRiYjdiMDk2NTNmNGQ0Yzk3YWQ5YmFhN2Y3YTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8XomO8t6N8wjAXbdW8kMOdfySP3 9zbP26DSKWZBD6za2w4GR4wzID+qOsXmHhBfjPlBkzAxvt2drznuADhxpBFN8+m4 1KR+GoJJ5PTvDNwOfqgKeFZigZu+1ALbFHfRQ0qzWuTIrKV5CRll2aYoOQieqPbi PRUDASrOR4LthhA80S4l/APE32GiUKREAH1YvDw7g6K5YlrjAGQggyPc1syM9MWk QsPS6EDT/8XCagSN+NfXyd1YukV/J/fwNq76pNoC7D1R3PrM1q6PRdfiq93HSi/S WxCMIA6PmRfcTW+XRk21Ku4eRVaiLP07ziSbkfe1NKHSH2ggpFYUAnrXAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZWw32v3bt7CWU/TUyXrZuqf3qUMB8GA1UdIwQY MBaAFDGSG2/xrESbo+f4ks8IMtHOt9RkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVpJYmJfR3NSSnVqNV9pU3p3Z3kwYzYzMUdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jZTA0M2UtMmRkYi00OGE3LTg5ODMt OWQ3YTg4NzJiNDU0LzEvTVpJYmJfR3NSSnVqNV9pU3p3Z3kwYzYzMUdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9jZTA0M2UtMmRkYi00OGE3LTg5ODMtOWQ3YTg4NzJiNDU0 LzEvTVpJYmJfR3NSSnVqNV9pU3p3Z3kwYzYzMUdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHYzapyk4 r+NvK/jMlva2haJh9EM0btxSmMk05aZz8esrRtTEYtucKiNG3G2JUKBLbZVIsUCO XP1nxPAAkYHV034I7Ke6HfsU/dlsHx+nB/KkFwjoB6SH7MF1RggHGantjmXY1cWz 0aix+38XAmyB+v+GsluU7jqgKqrfoOgQl0kT1sPlJew14DHUR37T0gDwMzYAEyke B/4JMjYDcqb5g+KPlz4O4ofDSiaGYjbxZZGsr7opuqXEj+6a6qE59XlqmqYU2hfI NSL0ILpKkJ8Z4C0jq9cn8JWB9sZZdRtsTr/FvSDyQjsnCd6YtNwGI0OvLIrvkBbj DJLa7FQe/El+zQ== -----END CERTIFICATE-----Generated at Thu Dec 18 23:28:06 2025 by rpki-client