This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft File: mzYg1nmOfrGGY5xFSKBpavbjBYk.mft (raw, json) Hash identifier: 6AZ973hThlnp8RUm8F8PwqD5IOxKf8CuIE5ovjCnBPk= Subject key identifier: 2E:7E:05:33:C3:92:45:76:68:15:09:40:5D:19:D6:BE:25:E5:07:C6 Authority key identifier: 9B:36:20:D6:79:8E:7E:B1:86:63:9C:45:48:A0:69:6A:F6:E3:05:89 Certificate issuer: /CN=9b3620d6798e7eb186639c4548a0696af6e30589 Certificate serial: 019AF08806E250C8F8D7F085305D81829446 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft Manifest number: 0706 Signing time: Fri 05 Dec 2025 22:00:37 +0000 Manifest this update: Fri 05 Dec 2025 22:00:37 +0000 Manifest next update: Sat 06 Dec 2025 22:00:37 +0000 Files and hashes: 1: Q41X_j-X6MEBsrlAhkOF1wVzhbk.roa (hash: YBskpCx6COz+43ChHeDsLz5PAi6tPK0b2nqeQTQNIwI=) 2: mzYg1nmOfrGGY5xFSKBpavbjBYk.crl (hash: fDyUA/cY2zPUkTcRCOxhdzUV3MU+oebXjJ3wv97QPNE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:06:e2:50:c8:f8:d7:f0:85:30:5d:81:82:94:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b3620d6798e7eb186639c4548a0696af6e30589 Validity Not Before: Dec 5 22:00:37 2025 GMT Not After : Dec 6 22:00:37 2025 GMT Subject: CN=2e7e0533c3924576681509405d19d6be25e507c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:52:45:46:2a:c0:1a:58:57:30:15:ad:d8:e6: 52:ff:7d:88:4e:2c:4a:e6:ef:1a:6a:eb:42:dc:8c: 0b:51:a9:25:60:d7:0f:e2:d2:fb:11:6d:98:b1:72: c4:51:73:19:01:b1:a3:8d:95:0f:4d:ac:bc:9b:4d: cf:5e:ad:66:35:de:c7:91:25:89:31:fe:66:7b:f9: 5b:a2:3b:e1:ac:ee:e4:43:93:7d:d4:f8:f7:1b:9e: 1e:5c:0c:6a:e4:ce:4d:1e:cd:6e:9b:11:a1:7b:0f: b4:87:e5:82:98:e3:ee:99:20:df:00:2e:99:b0:b1: 59:f0:6b:23:41:b9:52:54:33:9e:1e:dd:51:c8:0d: f2:cc:a2:13:b9:c3:d6:c8:d4:dd:64:60:44:c9:95: ea:e4:7a:bd:1b:8b:8c:ac:64:e3:e6:ef:c2:13:43: 35:82:ff:c8:01:95:7c:7d:90:ec:c7:af:85:9f:f3: d9:94:b6:a1:4a:0f:00:38:21:a6:9b:40:dc:19:45: 74:6f:26:a6:ff:c1:5a:17:72:91:5d:d8:51:2f:13: d6:38:f7:98:3c:fa:c5:c1:5b:d2:91:d5:76:c6:3f: 05:96:bc:3d:5c:9b:1b:f1:0a:c7:58:a9:de:d4:21: 3f:ce:1a:08:84:67:a6:2e:87:a0:fe:1a:bc:c9:da: 32:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:7E:05:33:C3:92:45:76:68:15:09:40:5D:19:D6:BE:25:E5:07:C6 X509v3 Authority Key Identifier: keyid:9B:36:20:D6:79:8E:7E:B1:86:63:9C:45:48:A0:69:6A:F6:E3:05:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:87:ce:1e:87:e9:3e:a4:d3:a8:f0:a4:48:f7:ac:17:ae:71: c2:a5:23:fc:9a:43:eb:f6:f1:d4:55:dc:54:04:23:78:4c:46: 68:12:40:ab:e8:25:f1:43:cd:1a:54:9a:3b:98:7a:b4:a8:0a: d2:45:91:d7:38:24:f0:b0:a2:8e:4d:df:97:8c:eb:8a:7c:4f: 14:da:a9:50:21:63:b0:5f:a1:ae:84:18:be:da:35:dc:fb:e4: c3:cf:40:5c:c4:ad:25:2a:d3:05:3e:76:cf:b6:d8:03:51:26: 21:29:54:2a:e8:b4:e3:60:c1:df:c0:8b:df:a4:80:1c:e6:8d: 38:38:d2:dd:21:e1:f3:5b:cf:30:b2:4e:de:28:f6:65:26:41: fc:cc:33:c3:0c:38:1d:9a:b9:5e:3f:5e:e9:09:50:d5:02:c2: 24:94:1a:e8:40:88:53:23:49:aa:d2:2b:f9:87:0f:ef:e5:dd: 53:5f:c8:fa:38:c3:f9:a3:4f:f0:e7:c6:2f:e4:d2:29:d3:b5: 99:b5:a6:90:d8:3f:b3:9e:05:1a:21:31:b6:2d:3e:ba:b3:7e: 76:d8:48:2e:2f:f7:64:7a:c2:59:39:b7:87:88:db:00:ad:fe: 4f:fa:40:b0:fa:f9:0b:ac:e8:57:93:e8:92:78:2e:1d:48:ad: 56:21:47:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiAbiUMj41/CFMF2BgpRGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMzYyMGQ2Nzk4ZTdlYjE4NjYzOWM0NTQ4YTA2OTZhZjZl MzA1ODkwHhcNMjUxMjA1MjIwMDM3WhcNMjUxMjA2MjIwMDM3WjAzMTEwLwYDVQQD EygyZTdlMDUzM2MzOTI0NTc2NjgxNTA5NDA1ZDE5ZDZiZTI1ZTUwN2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lJFRirAGlhXMBWt2OZS/32ITixK 5u8aautC3IwLUaklYNcP4tL7EW2YsXLEUXMZAbGjjZUPTay8m03PXq1mNd7HkSWJ Mf5me/lbojvhrO7kQ5N91Pj3G54eXAxq5M5NHs1umxGhew+0h+WCmOPumSDfAC6Z sLFZ8GsjQblSVDOeHt1RyA3yzKITucPWyNTdZGBEyZXq5Hq9G4uMrGTj5u/CE0M1 gv/IAZV8fZDsx6+Fn/PZlLahSg8AOCGmm0DcGUV0byam/8FaF3KRXdhRLxPWOPeY PPrFwVvSkdV2xj8Flrw9XJsb8QrHWKne1CE/zhoIhGemLoeg/hq8ydoyzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5+BTPDkkV2aBUJQF0Z1r4l5QfGMB8GA1UdIwQY MBaAFJs2INZ5jn6xhmOcRUigaWr24wWJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXpZZzFubU9mckdHWTV4RlNLQnBhdmJqQllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82YjYwNGItNGVlZC00MzkzLThlOGMt Y2JhMDYzMWYyOTNmLzEvbXpZZzFubU9mckdHWTV4RlNLQnBhdmJqQllrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS82YjYwNGItNGVlZC00MzkzLThlOGMtY2JhMDYzMWYyOTNm LzEvbXpZZzFubU9mckdHWTV4RlNLQnBhdmJqQllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4fOHofp PqTTqPCkSPesF65xwqUj/JpD6/bx1FXcVAQjeExGaBJAq+gl8UPNGlSaO5h6tKgK 0kWR1zgk8LCijk3fl4zrinxPFNqpUCFjsF+hroQYvto13Pvkw89AXMStJSrTBT52 z7bYA1EmISlUKui042DB38CL36SAHOaNODjS3SHh81vPMLJO3ij2ZSZB/Mwzwww4 HZq5Xj9e6QlQ1QLCJJQa6ECIUyNJqtIr+YcP7+XdU1/I+jjD+aNP8OfGL+TSKdO1 mbWmkNg/s54FGiExti0+urN+dthILi/3ZHrCWTm3h4jbAK3+T/pAsPr5C6zoV5Po knguHUitViFHRg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:33 2025 by rpki-client