This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft File: MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft (raw, json) Hash identifier: L5NIpdzph/36qhILuDgfzineQV/lMGH/wdgj1+3t0Vc= Subject key identifier: 47:AE:5C:0E:EE:30:5D:17:50:5D:07:98:12:F0:D8:24:6C:A6:A2:D3 Authority key identifier: 31:94:4D:F0:A3:8F:3F:51:49:3F:F2:BA:86:CF:D8:3C:29:BF:82:39 Certificate issuer: /CN=31944df0a38f3f51493ff2ba86cfd83c29bf8239 Certificate serial: 019AF276FCE58F232A447095D9D9C40633CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZRN8KOPP1FJP_K6hs_YPCm_gjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft Manifest number: 0217 Signing time: Sat 06 Dec 2025 07:01:15 +0000 Manifest this update: Sat 06 Dec 2025 07:01:15 +0000 Manifest next update: Sun 07 Dec 2025 07:01:15 +0000 Files and hashes: 1: K8eRRFGuJTx3MN_LWZchaRuBzsw.roa (hash: QTD6eqtDhf0badQKR2sMfNEILHkXgR8wOD2RlKJMd60=) 2: MZRN8KOPP1FJP_K6hs_YPCm_gjk.crl (hash: czle3gZvvK3gW1sCGpxQ1D6D+qmhk45kahu8TLJc2Po=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft rsync://rpki.ripe.net/repository/DEFAULT/MZRN8KOPP1FJP_K6hs_YPCm_gjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:fc:e5:8f:23:2a:44:70:95:d9:d9:c4:06:33:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31944df0a38f3f51493ff2ba86cfd83c29bf8239 Validity Not Before: Dec 6 07:01:15 2025 GMT Not After : Dec 7 07:01:15 2025 GMT Subject: CN=47ae5c0eee305d17505d079812f0d8246ca6a2d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fb:e1:82:01:4a:7a:31:6f:20:be:59:56:0d: 98:40:6f:a7:88:e4:c0:25:f8:f9:4c:64:da:82:f0: 64:e8:31:a9:1f:9a:ab:6d:51:dd:ea:d1:69:63:37: 7a:8a:43:be:83:d9:6b:65:02:2b:f1:f0:99:47:f4: c1:a0:07:8d:c4:51:ff:d4:bb:ab:2e:90:46:b4:db: fb:c2:ef:3e:af:55:51:63:d6:1c:f4:3e:c3:a9:5f: fd:37:34:67:76:0d:0a:00:5d:59:b5:82:38:ca:1a: b0:5f:50:40:d5:fd:4c:ff:d8:cd:01:3c:bd:c4:6c: dd:fa:c7:4c:bd:7a:0a:41:2c:c4:08:20:73:6a:82: 72:3d:40:3c:28:a1:23:c5:16:20:48:7a:bc:e3:2e: 0e:d3:3b:aa:b1:1b:1d:e5:0e:36:a3:cf:2c:0b:e8: 86:6f:47:2e:1e:65:fa:eb:a6:13:eb:02:3b:1a:57: 0c:d1:00:b7:b6:d6:a9:44:50:55:5f:51:9c:7b:26: 48:e8:3d:52:5e:f7:04:5d:08:16:9b:44:99:1a:d3: c6:b4:01:61:e5:1b:12:a9:50:13:bf:04:27:06:43: b6:48:a7:90:f3:d2:53:da:fd:fa:f5:d9:45:0a:10: 9a:bb:27:82:e5:fc:99:6f:f9:0b:0e:6d:1b:db:a4: 25:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:AE:5C:0E:EE:30:5D:17:50:5D:07:98:12:F0:D8:24:6C:A6:A2:D3 X509v3 Authority Key Identifier: keyid:31:94:4D:F0:A3:8F:3F:51:49:3F:F2:BA:86:CF:D8:3C:29:BF:82:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZRN8KOPP1FJP_K6hs_YPCm_gjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:e9:50:b2:d8:39:33:a8:77:75:85:c3:6a:24:3c:bc:76:45: f1:7f:c1:89:45:e8:02:89:74:6d:03:cb:18:e2:c7:c5:f8:04: 6c:0d:e9:06:cf:17:67:e0:6b:1c:53:52:33:7c:6e:b1:99:c1: d5:d7:e7:f9:03:97:eb:42:83:6d:2b:c9:c3:e6:cb:6b:86:42: 8a:c1:12:66:b8:3f:ef:95:4c:87:6d:16:00:da:21:32:29:e3: 19:6c:e9:bc:0e:f9:e2:97:f8:08:cb:00:a8:7b:3e:1d:b7:a3: 7c:ad:87:c1:89:4c:e1:f1:25:d7:c6:4b:0a:ae:6b:52:4f:59: 0a:b5:98:69:28:ee:a1:1c:b8:19:6c:1a:98:89:66:dd:f1:e8: 8a:6c:b4:d2:9a:47:0b:8e:b9:9a:2e:a9:d7:5b:99:0a:f3:2e: 99:66:c6:b9:be:9a:ba:de:54:cd:45:f3:aa:4e:86:96:f2:7b: 2b:f7:8d:c3:86:28:09:39:3b:68:2a:17:7a:3d:a5:33:cc:40: 25:55:26:13:9f:0d:52:2d:a7:47:25:ee:8d:30:f6:f3:e7:2b: fd:8f:19:d3:58:d8:4b:3c:c2:5e:67:a2:04:8e:fd:0d:3d:b9: 8b:95:8e:bc:45:94:a8:72:cc:35:2e:24:4d:4a:b1:e9:6d:3b: 22:2d:55:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydvzljyMqRHCV2dnEBjPNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxOTQ0ZGYwYTM4ZjNmNTE0OTNmZjJiYTg2Y2ZkODNjMjli ZjgyMzkwHhcNMjUxMjA2MDcwMTE1WhcNMjUxMjA3MDcwMTE1WjAzMTEwLwYDVQQD Eyg0N2FlNWMwZWVlMzA1ZDE3NTA1ZDA3OTgxMmYwZDgyNDZjYTZhMmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/vhggFKejFvIL5ZVg2YQG+niOTA Jfj5TGTagvBk6DGpH5qrbVHd6tFpYzd6ikO+g9lrZQIr8fCZR/TBoAeNxFH/1Lur LpBGtNv7wu8+r1VRY9Yc9D7DqV/9NzRndg0KAF1ZtYI4yhqwX1BA1f1M/9jNATy9 xGzd+sdMvXoKQSzECCBzaoJyPUA8KKEjxRYgSHq84y4O0zuqsRsd5Q42o88sC+iG b0cuHmX666YT6wI7GlcM0QC3ttapRFBVX1GceyZI6D1SXvcEXQgWm0SZGtPGtAFh 5RsSqVATvwQnBkO2SKeQ89JT2v369dlFChCauyeC5fyZb/kLDm0b26Ql4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEeuXA7uMF0XUF0HmBLw2CRspqLTMB8GA1UdIwQY MBaAFDGUTfCjjz9RST/yuobP2Dwpv4I5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVpSTjhLT1BQMUZKUF9LNmhzX1lQQ21fZ2prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9jNGRlMDktNGZlZC00OTViLThhNzIt YjNhZTA1ZTc3NjA4LzEvTVpSTjhLT1BQMUZKUF9LNmhzX1lQQ21fZ2prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9jNGRlMDktNGZlZC00OTViLThhNzItYjNhZTA1ZTc3NjA4 LzEvTVpSTjhLT1BQMUZKUF9LNmhzX1lQQ21fZ2prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp+lQstg5 M6h3dYXDaiQ8vHZF8X/BiUXoAol0bQPLGOLHxfgEbA3pBs8XZ+BrHFNSM3xusZnB 1dfn+QOX60KDbSvJw+bLa4ZCisESZrg/75VMh20WANohMinjGWzpvA754pf4CMsA qHs+HbejfK2HwYlM4fEl18ZLCq5rUk9ZCrWYaSjuoRy4GWwamIlm3fHoimy00ppH C465mi6p11uZCvMumWbGub6aut5UzUXzqk6GlvJ7K/eNw4YoCTk7aCoXej2lM8xA JVUmE58NUi2nRyXujTD28+cr/Y8Z01jYSzzCXmeiBI79DT25i5WOvEWUqHLMNS4k TUqx6W07Ii1V7w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:45:08 2025 by rpki-client