This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft File: mZ333A7VGPHsaZdM-YzsqtoahoA.mft (raw, json) Hash identifier: kNtVVQLdursJ/hk1wZpLAhQV8VXZcj3oUzkINtovvws= Subject key identifier: BF:3F:79:CF:BC:ED:61:1E:0B:72:B5:D2:F4:19:72:8A:71:83:9E:26 Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80 Certificate issuer: /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680 Certificate serial: 019B269B629C3B181152949EABF99FA5B7CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft Manifest number: 1790 Signing time: Tue 16 Dec 2025 10:01:15 +0000 Manifest this update: Tue 16 Dec 2025 10:01:15 +0000 Manifest next update: Wed 17 Dec 2025 10:01:15 +0000 Files and hashes: 1: VDSC__kYP5_4kXHu2u3139bBQnM.roa (hash: ZCOyTsAtgAk5HLmIWIyYiY4LjMxxRnLlXw4wf8pNdoU=) 2: mZ333A7VGPHsaZdM-YzsqtoahoA.crl (hash: HPea3YZTlmbYYtpL0rxXScv3hvxslq+c0H0c1WuSeB4=) 3: wo81X6dNJnxHwqDCPslyPelPnyk.roa (hash: LNeGgskvgHmXiZQlDf/OPt0CW7kE7h3hGkIagvdPCcA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:9b:62:9c:3b:18:11:52:94:9e:ab:f9:9f:a5:b7:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680 Validity Not Before: Dec 16 10:01:15 2025 GMT Not After : Dec 17 10:01:15 2025 GMT Subject: CN=bf3f79cfbced611e0b72b5d2f419728a71839e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b0:b9:74:9f:f0:0d:c3:e7:5c:20:76:99:e5: ba:ab:0d:73:8b:98:f9:5b:38:2c:97:e0:1b:33:e1: a0:d8:43:5a:c3:e0:9d:6e:4c:55:ca:59:84:a7:fa: 6b:b0:f1:f9:81:d4:ca:e2:da:ef:70:32:78:1e:77: 57:63:6b:44:0c:3a:f4:f1:12:4b:b3:41:9c:ed:ac: a7:59:21:7c:dc:03:17:3e:06:a9:08:a0:4d:65:a3: b8:e1:3d:82:84:3d:fa:e2:6f:b5:1a:f2:39:15:74: 88:72:ca:9b:0e:70:06:0e:69:62:ed:35:eb:f8:1a: 20:4d:fe:18:42:ae:02:df:7b:27:8e:bc:ad:58:95: 65:1f:ec:62:29:c6:33:17:ec:ed:5e:3c:f7:ff:0a: cc:01:4f:d7:ff:b9:8e:73:29:04:0b:9b:b1:17:f8: 73:f4:95:e8:49:b2:6e:d8:e5:8c:0d:1d:42:df:5a: 03:25:21:74:37:2d:98:9a:1d:e2:88:f8:e7:a6:9f: d0:f0:d1:a2:46:df:10:d1:df:4b:de:16:92:ce:c8: 58:5d:d0:1e:a0:23:1b:95:e1:da:43:11:40:5d:fa: b3:4a:ec:04:89:11:60:e2:eb:a3:e6:11:6e:6a:9c: a7:cd:2e:0e:e9:a8:36:f6:dd:75:09:0c:4c:68:2b: d7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:3F:79:CF:BC:ED:61:1E:0B:72:B5:D2:F4:19:72:8A:71:83:9E:26 X509v3 Authority Key Identifier: keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:79:a7:b5:a2:62:da:c9:6c:bf:96:5e:a8:20:6c:02:72:f7: f5:69:cb:da:15:d9:ef:c5:0e:af:60:d9:6d:91:fd:d5:da:a5: 47:27:06:2c:29:aa:29:ee:d6:c4:88:b6:1a:dd:c7:15:c1:a2: 44:ff:6e:96:d8:c7:87:7b:67:05:fd:a3:f1:d3:35:cd:d8:62: 69:f4:d3:43:c6:cc:6b:36:d7:87:a9:51:45:7d:79:b4:e7:b0: 51:50:d0:19:f5:21:bb:67:d4:cf:5d:6b:65:bd:3b:4b:04:c0: 3c:6c:ea:c3:c4:5c:df:bd:64:4e:30:40:89:97:db:ef:7a:b8: 8d:83:e3:fa:14:e0:ad:48:c7:2a:1f:41:6e:16:9c:87:db:86: b8:48:fb:6e:d6:5d:fd:c9:cf:66:6a:37:ab:58:e0:cf:64:fd: 76:b6:3b:be:8e:52:77:18:2a:90:47:0c:c7:0b:24:ce:82:6c: c2:9f:e4:5f:27:74:62:bb:45:62:e1:e2:dd:15:9f:8d:a4:7c: 68:a6:52:1f:a5:00:5b:34:c8:5a:e5:0b:9c:45:ed:5b:b0:35: 98:e8:10:d4:d2:f5:ee:00:f5:ec:17:4c:05:5f:9b:dd:49:fe: 17:ce:2d:47:77:03:2b:8c:b2:a4:72:75:fb:89:d2:24:fc:8f: 3b:5a:0a:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmm2KcOxgRUpSeq/mfpbfOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5OWRmN2RjMGVkNTE4ZjFlYzY5OTc0Y2Y5OGNlY2FhZGEx YTg2ODAwHhcNMjUxMjE2MTAwMTE1WhcNMjUxMjE3MTAwMTE1WjAzMTEwLwYDVQQD EyhiZjNmNzljZmJjZWQ2MTFlMGI3MmI1ZDJmNDE5NzI4YTcxODM5ZTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrC5dJ/wDcPnXCB2meW6qw1zi5j5 Wzgsl+AbM+Gg2ENaw+CdbkxVylmEp/prsPH5gdTK4trvcDJ4HndXY2tEDDr08RJL s0Gc7aynWSF83AMXPgapCKBNZaO44T2ChD364m+1GvI5FXSIcsqbDnAGDmli7TXr +BogTf4YQq4C33snjrytWJVlH+xiKcYzF+ztXjz3/wrMAU/X/7mOcykEC5uxF/hz 9JXoSbJu2OWMDR1C31oDJSF0Ny2Ymh3iiPjnpp/Q8NGiRt8Q0d9L3haSzshYXdAe oCMbleHaQxFAXfqzSuwEiRFg4uuj5hFuapynzS4O6ag29t11CQxMaCvXFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8/ec+87WEeC3K10vQZcopxg54mMB8GA1UdIwQY MBaAFJmd99wO1Rjx7GmXTPmM7KraGoaAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iYTg4ZjItMjE1Zi00Zjg5LWEzYWYt MTM4Yjc4N2RlM2UzLzEvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9iYTg4ZjItMjE1Zi00Zjg5LWEzYWYtMTM4Yjc4N2RlM2Uz LzEvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHmntaJi 2slsv5ZeqCBsAnL39WnL2hXZ78UOr2DZbZH91dqlRycGLCmqKe7WxIi2Gt3HFcGi RP9ultjHh3tnBf2j8dM1zdhiafTTQ8bMazbXh6lRRX15tOewUVDQGfUhu2fUz11r Zb07SwTAPGzqw8Rc371kTjBAiZfb73q4jYPj+hTgrUjHKh9Bbhach9uGuEj7btZd /cnPZmo3q1jgz2T9drY7vo5SdxgqkEcMxwskzoJswp/kXyd0YrtFYuHi3RWfjaR8 aKZSH6UAWzTIWuULnEXtW7A1mOgQ1NL17gD17BdMBV+b3Un+F84tR3cDK4yypHJ1 +4nSJPyPO1oKnQ== -----END CERTIFICATE-----Generated at Tue Dec 16 12:12:35 2025 by rpki-client