This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft File: mzk18I1_BlLdhWIgBXxGSu1SDhI.mft (raw, json) Hash identifier: zTqQCjT2PDj8aLC406OWi0iPuuTMEpuj9nBX9vvx+us= Subject key identifier: E8:2F:0D:00:17:71:A3:15:1A:93:19:E0:B2:76:7E:B2:44:F5:83:B2 Authority key identifier: 9B:39:35:F0:8D:7F:06:52:DD:85:62:20:05:7C:46:4A:ED:52:0E:12 Certificate issuer: /CN=9b3935f08d7f0652dd856220057c464aed520e12 Certificate serial: 019AF31D5FFB853100BE8B7E32980AA21772 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:02:59 +0000 Manifest this update: Sat 06 Dec 2025 10:02:59 +0000 Manifest next update: Sun 07 Dec 2025 10:02:59 +0000 Files and hashes: 1: mzk18I1_BlLdhWIgBXxGSu1SDhI.crl (hash: 9Axi+WDfLxJpBWY+6wvkvNTLcZfTkMmq5fmsOqmip1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.crl rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:5f:fb:85:31:00:be:8b:7e:32:98:0a:a2:17:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b3935f08d7f0652dd856220057c464aed520e12 Validity Not Before: Dec 6 10:02:59 2025 GMT Not After : Dec 7 10:02:59 2025 GMT Subject: CN=e82f0d001771a3151a9319e0b2767eb244f583b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:87:18:58:ce:41:fb:72:ed:64:00:e8:44:d9: f7:31:e2:42:72:64:40:83:e3:54:1d:f8:38:0b:4f: 52:ce:8f:0e:1f:ea:58:84:8d:9b:de:36:ab:a7:64: 98:2a:34:bd:1b:7f:13:95:a2:6c:6d:96:99:e9:c7: ad:c0:b0:31:a1:65:73:1d:78:23:8c:c0:31:c4:63: ee:9e:7c:44:2c:7e:a2:38:35:27:c3:6f:fe:e3:73: 0b:ed:4d:8b:c4:61:d2:4f:57:88:49:eb:01:b1:55: dd:c4:f0:db:1a:ba:15:5e:71:55:40:5d:15:da:81: 9f:bf:15:fc:2f:4a:ad:d8:da:e3:a5:a1:53:35:8b: ca:2f:59:4d:87:7f:c2:47:b1:c0:5c:ae:44:4b:b9: 8e:20:20:f8:eb:8c:e1:74:03:af:7c:97:ae:71:b0: b5:fe:2f:8d:e8:a5:9d:e8:6a:c4:b3:bc:d4:3c:99: d5:9f:00:20:32:ca:d6:d8:e3:1d:1d:c7:e3:08:ed: 3a:bb:a6:7f:52:f0:53:d8:a6:0c:f8:cc:8b:62:be: b3:71:fa:a9:83:a5:a3:e8:88:47:2a:42:be:47:bf: 07:f6:c9:52:70:2f:7c:b2:74:a7:bf:81:cd:60:0f: 6d:57:c8:53:8e:92:57:d1:74:53:f6:c6:93:b6:36: f1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2F:0D:00:17:71:A3:15:1A:93:19:E0:B2:76:7E:B2:44:F5:83:B2 X509v3 Authority Key Identifier: keyid:9B:39:35:F0:8D:7F:06:52:DD:85:62:20:05:7C:46:4A:ED:52:0E:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:80:f5:84:fd:b0:93:e3:5c:55:8f:7a:1e:e4:33:3c:02:63: de:87:d9:37:d1:d6:de:35:f7:5f:33:c0:fb:d0:eb:5a:aa:70: d2:67:c5:70:5c:cd:71:f4:a4:29:97:3c:a4:a8:4d:4e:f0:a8: c8:0a:2c:34:85:14:2c:3f:56:c3:c9:f7:62:1a:96:40:87:56: c5:7a:de:34:4a:45:da:9a:5b:6b:07:7d:1a:33:b7:3f:58:3a: ad:af:97:2e:81:83:e7:1f:19:3d:39:90:6b:4d:46:be:9e:72: 77:d1:86:04:82:d2:5c:90:17:29:50:d9:37:91:61:f4:bc:76: 81:8d:2e:19:81:cb:69:3c:1e:00:04:f2:ed:57:c2:8c:2a:ae: 7e:65:ab:43:93:51:f4:f8:31:09:a7:2f:6b:b7:b3:01:f3:51: f9:0b:ff:bc:42:cc:1e:3e:43:fb:10:0a:90:ab:90:86:b8:63: 98:a1:33:02:6c:51:fd:ae:fa:0b:c8:99:93:64:ee:3f:fe:99: 4a:10:d9:26:5e:75:7b:8a:65:d9:30:28:bb:89:89:11:60:da: 0a:89:ad:cb:55:bd:46:f5:95:dc:b8:ab:2f:14:83:7f:f0:50: ac:4a:80:06:19:72:05:a4:92:6f:83:a9:6f:be:6a:d6:c5:ac: a0:c4:6c:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHV/7hTEAvot+MpgKohdyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMzkzNWYwOGQ3ZjA2NTJkZDg1NjIyMDA1N2M0NjRhZWQ1 MjBlMTIwHhcNMjUxMjA2MTAwMjU5WhcNMjUxMjA3MTAwMjU5WjAzMTEwLwYDVQQD EyhlODJmMGQwMDE3NzFhMzE1MWE5MzE5ZTBiMjc2N2ViMjQ0ZjU4M2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4cYWM5B+3LtZADoRNn3MeJCcmRA g+NUHfg4C09Szo8OH+pYhI2b3jarp2SYKjS9G38TlaJsbZaZ6cetwLAxoWVzHXgj jMAxxGPunnxELH6iODUnw2/+43ML7U2LxGHST1eISesBsVXdxPDbGroVXnFVQF0V 2oGfvxX8L0qt2NrjpaFTNYvKL1lNh3/CR7HAXK5ES7mOICD464zhdAOvfJeucbC1 /i+N6KWd6GrEs7zUPJnVnwAgMsrW2OMdHcfjCO06u6Z/UvBT2KYM+MyLYr6zcfqp g6Wj6IhHKkK+R78H9slScC98snSnv4HNYA9tV8hTjpJX0XRT9saTtjbxnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgvDQAXcaMVGpMZ4LJ2frJE9YOyMB8GA1UdIwQY MBaAFJs5NfCNfwZS3YViIAV8RkrtUg4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXprMThJMV9CbExkaFdJZ0JYeEdTdTFTRGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8xYmEyNTItOTNjMS00MTU5LTk1YTct MGUwMTE3NjFiMWIxLzEvbXprMThJMV9CbExkaFdJZ0JYeEdTdTFTRGhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8xYmEyNTItOTNjMS00MTU5LTk1YTctMGUwMTE3NjFiMWIx LzEvbXprMThJMV9CbExkaFdJZ0JYeEdTdTFTRGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnID1hP2w k+NcVY96HuQzPAJj3ofZN9HW3jX3XzPA+9DrWqpw0mfFcFzNcfSkKZc8pKhNTvCo yAosNIUULD9Ww8n3YhqWQIdWxXreNEpF2ppbawd9GjO3P1g6ra+XLoGD5x8ZPTmQ a01Gvp5yd9GGBILSXJAXKVDZN5Fh9Lx2gY0uGYHLaTweAATy7VfCjCqufmWrQ5NR 9PgxCacva7ezAfNR+Qv/vELMHj5D+xAKkKuQhrhjmKEzAmxR/a76C8iZk2TuP/6Z ShDZJl51e4pl2TAou4mJEWDaComty1W9RvWV3LirLxSDf/BQrEqABhlyBaSSb4Op b75q1sWsoMRs/w== -----END CERTIFICATE-----Generated at Sat Dec 6 16:55:09 2025 by rpki-client