This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft File: mmzb9HURP5bKeKB6-9RFjIiIB3E.mft (raw, json) Hash identifier: 4CJWvrOPVaRAgRl+13iwf56dQV5WB2ym/jzZ04Ls7q0= Subject key identifier: 2C:2A:EC:08:03:D0:CA:A0:D5:4F:DC:1E:D9:B6:B9:4C:65:7A:96:26 Authority key identifier: 9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71 Certificate issuer: /CN=9a6cdbf475113f96ca78a07afbd4458c88880771 Certificate serial: 019AF3C0599C9C98F5090BDD5E411EBD59BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft Manifest number: 0629 Signing time: Sat 06 Dec 2025 13:01:00 +0000 Manifest this update: Sat 06 Dec 2025 13:01:00 +0000 Manifest next update: Sun 07 Dec 2025 13:01:00 +0000 Files and hashes: 1: j_X8tJ2h9OHGJHosgdoOoXcoQic.roa (hash: +g3waCGUvWC6G9wCV2Zz7i7n4x4ui8ded+3mDQgQ1Kc=) 2: mmzb9HURP5bKeKB6-9RFjIiIB3E.crl (hash: WrxeuRCdp7HnkORCOYYsA8T1emjIc2NSEm6QeLXiy8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:59:9c:9c:98:f5:09:0b:dd:5e:41:1e:bd:59:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a6cdbf475113f96ca78a07afbd4458c88880771 Validity Not Before: Dec 6 13:01:00 2025 GMT Not After : Dec 7 13:01:00 2025 GMT Subject: CN=2c2aec0803d0caa0d54fdc1ed9b6b94c657a9626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f5:69:35:94:93:7c:bc:76:95:af:ad:52:c6: 24:da:06:2e:85:77:d1:32:56:45:ba:61:59:b7:97: 85:ca:63:d5:92:3f:17:24:ff:51:9c:fb:6b:4a:d9: 2d:69:72:35:d2:52:a4:af:ec:9b:25:4a:c6:23:80: 67:6c:bb:15:53:4a:6d:e3:85:36:b1:60:b8:bf:f5: 38:ea:75:7e:b8:70:fc:a2:b6:0a:88:a7:27:aa:5a: 33:9a:ad:c9:3b:c4:96:5a:c6:26:5e:86:c0:89:80: 4e:e6:51:24:21:db:1b:90:ff:3d:e0:c7:30:4c:9a: 42:59:22:7e:03:40:3d:e4:57:ce:63:3b:b1:9c:d6: 2e:ec:12:19:9f:34:a7:63:b6:c3:c4:f7:06:f3:bd: b3:48:4f:27:c0:fa:d8:bd:e4:70:10:e0:96:4b:3c: 49:87:da:e6:9b:6e:e1:4a:6f:59:20:62:8a:76:25: 93:1a:14:47:a2:eb:f4:65:41:20:59:d1:14:08:e6: 99:48:28:99:4a:db:6c:2e:45:74:6a:94:da:50:5c: 54:1f:82:37:f4:9f:ee:77:28:dd:93:ab:60:d5:03: b4:67:cc:15:cd:14:b1:f7:48:86:f6:f2:52:ad:dd: 6f:45:5f:6e:14:a8:3c:2d:79:1b:37:90:07:72:f3: 12:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2A:EC:08:03:D0:CA:A0:D5:4F:DC:1E:D9:B6:B9:4C:65:7A:96:26 X509v3 Authority Key Identifier: keyid:9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c6:ca:cc:62:5b:1f:1d:0f:60:01:3c:94:6c:53:40:9d:5a: 39:aa:1a:1a:c2:c2:da:65:b8:03:dd:f8:5b:c9:33:c4:bd:3f: f3:58:b3:07:ae:03:ee:53:81:cc:63:4f:52:b8:cf:ae:77:ba: 76:25:4a:f4:b9:d0:11:32:14:ef:10:a1:7e:23:de:59:fb:3a: 9f:f9:9f:6f:c4:9a:5a:d1:a3:07:4a:fb:06:d7:95:0d:cb:ef: 21:0c:5d:8d:bf:97:2b:dc:08:2a:e5:0d:1d:8f:1b:f8:6d:83: 9c:d6:00:8e:9e:c7:37:ee:52:d4:c2:cc:07:83:60:5e:18:6a: 3b:32:73:0b:0d:c8:84:45:05:f5:3f:65:90:17:a5:fa:a5:46: f1:03:36:c9:76:59:a5:db:d5:32:ef:fe:3a:30:a0:c4:7d:b3: ac:29:f4:12:6b:d3:79:44:85:62:af:c3:08:37:73:a5:85:af: 0e:50:59:c0:b6:7a:fd:9c:12:e7:55:42:9d:e5:2b:d6:eb:1c: c5:4e:33:01:cd:85:f9:6f:cb:e4:2c:77:66:94:a7:7f:1a:42: d0:41:f9:bd:18:a9:b3:7c:56:c7:9e:d0:c3:24:b6:b0:9d:70: f7:ff:86:8a:b4:7d:08:0d:4e:d9:91:da:57:59:ef:92:43:c9: 71:dd:d2:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwFmcnJj1CQvdXkEevVm/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNmNkYmY0NzUxMTNmOTZjYTc4YTA3YWZiZDQ0NThjODg4 ODA3NzEwHhcNMjUxMjA2MTMwMTAwWhcNMjUxMjA3MTMwMTAwWjAzMTEwLwYDVQQD EygyYzJhZWMwODAzZDBjYWEwZDU0ZmRjMWVkOWI2Yjk0YzY1N2E5NjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/VpNZSTfLx2la+tUsYk2gYuhXfR MlZFumFZt5eFymPVkj8XJP9RnPtrStktaXI10lKkr+ybJUrGI4BnbLsVU0pt44U2 sWC4v/U46nV+uHD8orYKiKcnqlozmq3JO8SWWsYmXobAiYBO5lEkIdsbkP894Mcw TJpCWSJ+A0A95FfOYzuxnNYu7BIZnzSnY7bDxPcG872zSE8nwPrYveRwEOCWSzxJ h9rmm27hSm9ZIGKKdiWTGhRHouv0ZUEgWdEUCOaZSCiZSttsLkV0apTaUFxUH4I3 9J/udyjdk6tg1QO0Z8wVzRSx90iG9vJSrd1vRV9uFKg8LXkbN5AHcvMS9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwq7AgD0Mqg1U/cHtm2uUxlepYmMB8GA1UdIwQY MBaAFJps2/R1ET+WynigevvURYyIiAdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW16YjlIVVJQNWJLZUtCNi05UkZqSWlJQjNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80NzM1NzctNGMzMS00Mjk1LWFiZGUt ZGMyZmVhYzM3ODI5LzEvbW16YjlIVVJQNWJLZUtCNi05UkZqSWlJQjNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi80NzM1NzctNGMzMS00Mjk1LWFiZGUtZGMyZmVhYzM3ODI5 LzEvbW16YjlIVVJQNWJLZUtCNi05UkZqSWlJQjNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa8bKzGJb Hx0PYAE8lGxTQJ1aOaoaGsLC2mW4A934W8kzxL0/81izB64D7lOBzGNPUrjPrne6 diVK9LnQETIU7xChfiPeWfs6n/mfb8SaWtGjB0r7BteVDcvvIQxdjb+XK9wIKuUN HY8b+G2DnNYAjp7HN+5S1MLMB4NgXhhqOzJzCw3IhEUF9T9lkBel+qVG8QM2yXZZ pdvVMu/+OjCgxH2zrCn0EmvTeUSFYq/DCDdzpYWvDlBZwLZ6/ZwS51VCneUr1usc xU4zAc2F+W/L5Cx3ZpSnfxpC0EH5vRips3xWx57QwyS2sJ1w9/+GirR9CA1O2ZHa V1nvkkPJcd3SHw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:12:10 2025 by rpki-client