This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft File: mZVu39RteCBhbFZwdNHEt1TxzAs.mft (raw, json) Hash identifier: h3aBO24HnS++47GAYxmWD3MktWjjrhsrJ0zLMA0wSVE= Subject key identifier: F8:8E:30:80:06:42:EC:55:D2:83:F1:CE:D0:94:1C:A8:05:A3:DF:74 Authority key identifier: 99:95:6E:DF:D4:6D:78:20:61:6C:56:70:74:D1:C4:B7:54:F1:CC:0B Certificate issuer: /CN=99956edfd46d7820616c567074d1c4b754f1cc0b Certificate serial: 019B5B657E63616697B6D123AE5A740FC443 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft Manifest number: 03A1 Signing time: Fri 26 Dec 2025 16:02:16 +0000 Manifest this update: Fri 26 Dec 2025 16:02:16 +0000 Manifest next update: Sat 27 Dec 2025 16:02:16 +0000 Files and hashes: 1: lOnxViznHLEoAyPam_W4fa_SC2w.roa (hash: 9BCM5+Jiz3egzCFeLDqHjHDQAVUeCPf+h8/byU9pFAw=) 2: mZVu39RteCBhbFZwdNHEt1TxzAs.crl (hash: wDnyeM4KxlcAe/D5nYzGPJTFBzUopcd8+tWIZnTXFKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:65:7e:63:61:66:97:b6:d1:23:ae:5a:74:0f:c4:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99956edfd46d7820616c567074d1c4b754f1cc0b Validity Not Before: Dec 26 16:02:16 2025 GMT Not After : Dec 27 16:02:16 2025 GMT Subject: CN=f88e30800642ec55d283f1ced0941ca805a3df74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:43:67:a7:0f:0f:72:8d:62:35:38:9d:86:4c: 33:0a:db:2f:67:73:89:6a:dc:e4:b1:f5:b6:22:a9: 61:55:ac:0e:3f:16:75:03:34:52:76:7f:cf:a0:80: 11:72:35:13:9e:f8:ae:db:dd:b7:c9:59:4a:02:ee: 02:3e:fb:69:5e:03:65:5b:3b:d8:3a:80:f4:66:e1: 50:97:d1:b5:9a:e9:c8:8d:ef:3d:cb:27:b9:2b:a2: 8a:48:c9:db:e3:2d:d5:53:ce:41:2a:b6:3c:84:d4: 4b:35:d5:e9:96:a0:10:83:40:dd:91:62:a9:9b:82: 39:ba:bc:a2:7b:a1:9c:8e:e8:11:0d:e2:bc:8c:6f: bc:e3:48:04:74:c7:c5:da:66:c4:71:b6:38:46:26: 47:8e:68:dd:ac:c3:be:f1:3d:99:4d:3b:8a:70:f5: c9:fd:4a:2e:92:50:a6:9b:d7:5d:12:81:88:64:04: 93:5a:d8:fb:75:3c:e1:09:27:01:b8:3c:c9:87:ae: 39:99:af:de:59:c6:8e:29:b0:af:a6:de:f1:9f:36: e1:a6:96:73:59:93:1d:3c:a3:98:a6:28:0e:25:81: 84:35:2f:a8:18:f2:c9:ee:7f:94:8e:c1:86:fa:7a: c5:dc:10:bb:22:a3:48:95:d5:cb:62:57:09:51:c3: 08:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8E:30:80:06:42:EC:55:D2:83:F1:CE:D0:94:1C:A8:05:A3:DF:74 X509v3 Authority Key Identifier: keyid:99:95:6E:DF:D4:6D:78:20:61:6C:56:70:74:D1:C4:B7:54:F1:CC:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:62:ee:a7:46:59:cf:0b:bc:17:10:b0:54:07:cf:3b:55:06: 92:8a:fd:01:d6:b5:f0:65:52:8d:5f:75:70:64:f0:ac:38:ab: fe:a7:5b:2d:dc:f3:b0:56:6f:ea:f6:d2:16:52:e4:d2:7e:34: 0a:d4:75:6a:6c:74:e7:be:dd:a3:b6:17:a3:43:54:0f:42:f3: 23:46:9d:76:1a:15:5d:33:96:97:1f:f9:6a:ed:ac:c3:39:71: 9d:99:5f:40:72:13:bd:64:6a:28:ab:ba:f5:68:7c:b2:06:30: 76:5b:48:42:bd:40:2f:13:a7:a5:dd:eb:7f:4f:b9:fb:86:25: 42:36:af:2d:38:43:76:21:a9:c8:67:32:14:db:2e:0d:26:85: f4:b8:86:c5:47:a8:5a:42:b2:f5:e9:54:5b:b4:27:49:d2:77: f9:fc:6d:64:39:83:2b:81:38:8b:e4:0d:5a:19:ea:c6:3f:9c: 79:82:76:60:3a:41:55:cd:60:f3:c6:f4:14:28:3c:32:17:d5: c0:33:34:f5:91:e6:59:06:c1:66:fb:6a:f8:e6:ac:85:1f:fd: e2:5e:b4:8c:6f:fe:59:29:69:3d:4f:1e:d5:47:9e:a3:8d:e4: a3:0c:76:d4:2d:7c:99:8e:01:7f:af:7c:6e:5b:ab:dd:4d:98: c7:de:69:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZX5jYWaXttEjrlp0D8RDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5OTU2ZWRmZDQ2ZDc4MjA2MTZjNTY3MDc0ZDFjNGI3NTRm MWNjMGIwHhcNMjUxMjI2MTYwMjE2WhcNMjUxMjI3MTYwMjE2WjAzMTEwLwYDVQQD EyhmODhlMzA4MDA2NDJlYzU1ZDI4M2YxY2VkMDk0MWNhODA1YTNkZjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUNnpw8Pco1iNTidhkwzCtsvZ3OJ atzksfW2IqlhVawOPxZ1AzRSdn/PoIARcjUTnviu2923yVlKAu4CPvtpXgNlWzvY OoD0ZuFQl9G1munIje89yye5K6KKSMnb4y3VU85BKrY8hNRLNdXplqAQg0DdkWKp m4I5uryie6GcjugRDeK8jG+840gEdMfF2mbEcbY4RiZHjmjdrMO+8T2ZTTuKcPXJ /UouklCmm9ddEoGIZASTWtj7dTzhCScBuDzJh645ma/eWcaOKbCvpt7xnzbhppZz WZMdPKOYpigOJYGENS+oGPLJ7n+UjsGG+nrF3BC7IqNIldXLYlcJUcMIMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPiOMIAGQuxV0oPxztCUHKgFo990MB8GA1UdIwQY MBaAFJmVbt/UbXggYWxWcHTRxLdU8cwLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVpWdTM5UnRlQ0JoYkZad2ROSEV0MVR4ekFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wODJhZTMtMzYxYi00ZmNmLTlmM2Et YmU1ZWQ2NzYxNDExLzEvbVpWdTM5UnRlQ0JoYkZad2ROSEV0MVR4ekFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8wODJhZTMtMzYxYi00ZmNmLTlmM2EtYmU1ZWQ2NzYxNDEx LzEvbVpWdTM5UnRlQ0JoYkZad2ROSEV0MVR4ekFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALWLup0ZZ zwu8FxCwVAfPO1UGkor9Ada18GVSjV91cGTwrDir/qdbLdzzsFZv6vbSFlLk0n40 CtR1amx0577do7YXo0NUD0LzI0addhoVXTOWlx/5au2swzlxnZlfQHITvWRqKKu6 9Wh8sgYwdltIQr1ALxOnpd3rf0+5+4YlQjavLThDdiGpyGcyFNsuDSaF9LiGxUeo WkKy9elUW7QnSdJ3+fxtZDmDK4E4i+QNWhnqxj+ceYJ2YDpBVc1g88b0FCg8MhfV wDM09ZHmWQbBZvtq+OashR/94l60jG/+WSlpPU8e1Ueeo43kowx21C18mY4Bf698 blur3U2Yx95pKw== -----END CERTIFICATE-----Generated at Fri Dec 26 17:42:46 2025 by rpki-client