This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft File: mZK1NCb7YU2aWm2D9ABWamYMndI.mft (raw, json) Hash identifier: w7ECSf6vppbB3SPrHFccBmnOoqkEmsmTRF6dGXxvagw= Subject key identifier: 4C:8C:72:A8:31:A5:9D:B1:79:D6:01:EB:37:05:52:41:85:B8:C5:9B Authority key identifier: 99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2 Certificate issuer: /CN=9992b53426fb614d9a5a6d83f400566a660c9dd2 Certificate serial: 019AF23FA7E7C4294529BC2A6EA768200CD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft Manifest number: 1335 Signing time: Sat 06 Dec 2025 06:00:48 +0000 Manifest this update: Sat 06 Dec 2025 06:00:48 +0000 Manifest next update: Sun 07 Dec 2025 06:00:48 +0000 Files and hashes: 1: iG2Qj8n6fZw-GirtzGhiiR4VwRI.roa (hash: C/swOHl78EzDeIac5yTERHHT18YviZO0RyNpfkEvBQE=) 2: mZK1NCb7YU2aWm2D9ABWamYMndI.crl (hash: WI0so+xC6WWndMpX18J8KkSyQWNwlAzNeLhzrIKxWTI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a7:e7:c4:29:45:29:bc:2a:6e:a7:68:20:0c:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9992b53426fb614d9a5a6d83f400566a660c9dd2 Validity Not Before: Dec 6 06:00:48 2025 GMT Not After : Dec 7 06:00:48 2025 GMT Subject: CN=4c8c72a831a59db179d601eb3705524185b8c59b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c7:89:fe:92:1d:5a:b5:42:2d:64:2b:5c:ac: b6:2c:5b:7d:a0:16:39:c7:b7:89:94:1a:d1:ce:a4: aa:b7:72:45:07:02:d1:c8:7e:bb:a4:7d:62:70:8b: d1:8a:19:a7:76:ad:9a:1e:66:80:27:ba:5f:8c:e2: 64:e1:d6:86:2e:7a:54:68:86:16:de:01:1e:b8:fc: 07:b9:62:d6:7d:87:80:43:b2:ee:d4:d1:82:49:9c: 23:e0:66:e0:31:1e:43:13:ae:ee:63:04:95:99:e1: 38:93:4a:95:0b:d5:2c:68:38:88:a2:f9:c7:c1:44: 0b:9c:7b:b7:1d:d5:fd:7c:b5:6c:36:dd:93:32:5a: f8:22:6a:ad:43:43:6b:78:69:79:6a:77:a8:7f:7f: 05:2e:1f:5d:0a:3e:73:b7:22:ee:3a:59:25:f5:15: ed:51:be:80:cc:1a:59:31:b0:33:17:e6:c6:99:c6: a0:bd:b7:54:0d:1e:84:f4:aa:66:20:a0:5f:95:8a: 25:7a:92:0c:4f:9f:70:f3:fe:5f:d3:68:49:b6:01: 30:04:33:b5:dc:85:9f:8e:74:d4:b1:b3:7c:8d:4d: 57:8b:3e:ee:33:1f:bb:62:f1:17:2c:fb:81:18:81: 53:ca:6c:a9:a5:37:9d:1c:3a:db:ea:bd:00:1a:d7: 9f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8C:72:A8:31:A5:9D:B1:79:D6:01:EB:37:05:52:41:85:B8:C5:9B X509v3 Authority Key Identifier: keyid:99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:07:57:f1:21:93:f2:c4:0b:a2:a4:b2:d3:06:50:f1:7d:ab: f9:62:eb:57:ec:93:d8:6a:1d:10:49:03:ea:77:7c:a6:5e:56: 85:c0:50:7c:d0:d7:c6:bf:e2:64:28:61:a0:16:9c:23:05:e0: 53:6d:7b:43:b4:a7:fe:3d:f9:89:91:cb:66:c3:64:10:d2:87: 54:e1:3a:fc:0f:3e:b8:47:aa:c2:38:ac:b3:5f:ff:3b:13:f4: b4:83:46:e8:7a:15:0e:c2:e6:4d:2e:30:b6:eb:9c:c3:cd:69: 09:eb:30:2b:ec:1e:9c:98:86:e8:92:2a:f7:5e:e9:58:d0:29: af:3a:39:54:4a:ef:1c:11:12:d0:b3:e6:09:f3:06:1f:28:08: 17:49:99:7f:55:c6:e7:95:5c:b3:6f:b9:80:7b:8b:c0:5d:8f: 15:79:60:7a:bc:98:70:50:e3:d3:82:61:ea:04:95:19:8d:39: f5:28:99:84:17:99:89:39:ac:aa:16:a9:0d:c3:e0:5f:4c:69: 51:8d:6c:4b:36:b3:81:a8:6b:f0:16:f5:9e:43:a3:13:6e:64: ac:ad:0b:ee:b9:46:40:3f:73:9a:4c:a8:8d:28:ed:9f:f8:fb: c1:f1:b9:fc:15:9d:74:cc:8b:34:76:c3:9a:1d:5c:62:3b:03: d5:84:18:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6fnxClFKbwqbqdoIAzQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5OTJiNTM0MjZmYjYxNGQ5YTVhNmQ4M2Y0MDA1NjZhNjYw YzlkZDIwHhcNMjUxMjA2MDYwMDQ4WhcNMjUxMjA3MDYwMDQ4WjAzMTEwLwYDVQQD Eyg0YzhjNzJhODMxYTU5ZGIxNzlkNjAxZWIzNzA1NTI0MTg1YjhjNTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3seJ/pIdWrVCLWQrXKy2LFt9oBY5 x7eJlBrRzqSqt3JFBwLRyH67pH1icIvRihmndq2aHmaAJ7pfjOJk4daGLnpUaIYW 3gEeuPwHuWLWfYeAQ7Lu1NGCSZwj4GbgMR5DE67uYwSVmeE4k0qVC9UsaDiIovnH wUQLnHu3HdX9fLVsNt2TMlr4ImqtQ0NreGl5aneof38FLh9dCj5ztyLuOlkl9RXt Ub6AzBpZMbAzF+bGmcagvbdUDR6E9KpmIKBflYolepIMT59w8/5f02hJtgEwBDO1 3IWfjnTUsbN8jU1Xiz7uMx+7YvEXLPuBGIFTymyppTedHDrb6r0AGtefXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyMcqgxpZ2xedYB6zcFUkGFuMWbMB8GA1UdIwQY MBaAFJmStTQm+2FNmlptg/QAVmpmDJ3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVpLMU5DYjdZVTJhV20yRDlBQldhbVlNbmRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC85MDE3MmEtOTY5Yi00NmRhLTgwODgt NzkxYTYyZDJkOGFiLzEvbVpLMU5DYjdZVTJhV20yRDlBQldhbVlNbmRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC85MDE3MmEtOTY5Yi00NmRhLTgwODgtNzkxYTYyZDJkOGFi LzEvbVpLMU5DYjdZVTJhV20yRDlBQldhbVlNbmRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaAdX8SGT 8sQLoqSy0wZQ8X2r+WLrV+yT2GodEEkD6nd8pl5WhcBQfNDXxr/iZChhoBacIwXg U217Q7Sn/j35iZHLZsNkENKHVOE6/A8+uEeqwjiss1//OxP0tING6HoVDsLmTS4w tuucw81pCeswK+wenJiG6JIq917pWNAprzo5VErvHBES0LPmCfMGHygIF0mZf1XG 55Vcs2+5gHuLwF2PFXlgeryYcFDj04Jh6gSVGY059SiZhBeZiTmsqhapDcPgX0xp UY1sSzazgahr8Bb1nkOjE25krK0L7rlGQD9zmkyojSjtn/j7wfG5/BWddMyLNHbD mh1cYjsD1YQYCQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:34 2025 by rpki-client