This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft File: MzKH4jvuZ8pmL713n8vBguxVO-M.mft (raw, json) Hash identifier: i9KyRATxhrxqaVV+mLynX53cfd+klhgk675KX6aoaLc= Subject key identifier: B1:98:42:39:14:6E:A9:6F:15:A2:A5:69:1F:4F:C2:1C:B3:B9:2A:8E Authority key identifier: 33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3 Certificate issuer: /CN=333287e23bee67ca662fbd779fcbc182ec553be3 Certificate serial: 019AF31B3F73B1201C3764A2D24A5C314D89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft Manifest number: 0AC9 Signing time: Sat 06 Dec 2025 10:00:40 +0000 Manifest this update: Sat 06 Dec 2025 10:00:40 +0000 Manifest next update: Sun 07 Dec 2025 10:00:40 +0000 Files and hashes: 1: MzKH4jvuZ8pmL713n8vBguxVO-M.crl (hash: EjwSGUo1JndTsCunplmqQYRDnnj0g/9OCnvumaNrIF4=) 2: RkBZIzlBjrs-4Ibo1cTBR6jIxdU.roa (hash: KJC2gVCeRACWY4bdbIn5UPNWc5Jp6Tm0mfuhfmSROTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:3f:73:b1:20:1c:37:64:a2:d2:4a:5c:31:4d:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=333287e23bee67ca662fbd779fcbc182ec553be3 Validity Not Before: Dec 6 10:00:40 2025 GMT Not After : Dec 7 10:00:40 2025 GMT Subject: CN=b1984239146ea96f15a2a5691f4fc21cb3b92a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d6:a8:4a:ba:2b:26:19:2c:59:60:74:be:c5: 09:48:0e:58:0d:d9:2f:7c:54:fd:99:a4:9c:0c:50: 26:04:22:06:08:4c:4d:c3:fe:46:46:7d:73:05:18: 00:2a:c6:48:58:40:d4:cb:83:d0:51:d5:ad:34:58: cb:c3:c4:63:82:9c:e6:09:26:6b:4e:1f:62:8e:65: 35:cd:2e:23:bf:00:df:c5:85:7a:c8:e6:df:65:54: c9:96:e3:37:cf:89:c3:04:20:c6:42:77:14:23:90: 80:bb:a4:e4:88:70:93:0e:27:ee:bf:06:3c:43:50: 94:73:bb:7f:ef:8e:cf:da:be:99:71:39:da:e1:24: 82:fa:c7:72:d8:55:07:83:37:30:ea:db:c9:06:9e: a0:54:d3:f4:24:34:c6:4a:37:69:72:d0:64:df:ab: 8e:0a:d8:e0:c9:c4:98:81:fc:00:06:cd:1e:c2:d6: 19:21:cc:37:13:32:57:5f:fd:6d:39:c8:b2:0c:6a: 40:f9:37:5f:90:5f:50:4c:8e:2a:4f:de:c4:86:00: e3:f3:3b:b3:68:30:65:03:a3:c5:8d:b9:1a:8e:86: 16:86:a1:22:b8:18:a6:2a:2e:9a:e5:ae:30:48:26: 45:82:59:4e:38:d2:26:c5:c0:5f:40:f4:25:67:4b: e1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:98:42:39:14:6E:A9:6F:15:A2:A5:69:1F:4F:C2:1C:B3:B9:2A:8E X509v3 Authority Key Identifier: keyid:33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:72:d5:dc:e1:0f:ee:ec:e9:3d:b3:16:78:14:18:7c:74:b7: bd:3c:7a:9f:7f:71:21:e7:53:c7:8d:f8:ac:4e:72:3b:29:40: 75:3f:99:52:70:88:ce:81:a7:e5:8d:e2:e8:0b:59:36:d6:8d: 71:80:87:a3:c8:db:48:9e:11:14:cd:b8:01:a6:1c:4e:42:a3: 81:76:bf:e3:96:cc:0b:68:74:28:45:c2:87:94:2a:82:7e:cc: a4:8f:7c:6d:1a:86:54:67:31:91:13:e4:ed:dd:36:80:ed:0a: 74:5c:b7:8f:b6:64:1d:13:9b:7e:b5:b4:e4:9b:7a:41:92:06: 74:c3:04:8e:7d:50:57:bc:eb:55:ad:63:b0:79:9f:b4:2c:d9: 1d:47:52:98:c0:e6:c7:82:25:a7:0f:b0:55:8e:de:af:4d:91: c3:1a:f0:4a:38:61:d6:67:99:ea:ee:37:56:21:9b:b4:70:d2: 51:b3:f1:28:bf:72:f0:17:bb:48:36:b8:bc:5f:d0:32:b5:4c: 65:5c:b9:2c:22:ad:e7:c1:ac:18:7e:6c:37:eb:14:6f:ad:9e: a8:00:68:fc:89:c8:c7:fd:6b:83:ba:68:fe:3e:b3:92:60:c8: 86:97:a3:69:74:4a:5a:a3:53:41:2a:30:7d:a9:07:d5:61:62: 10:54:ec:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGz9zsSAcN2Si0kpcMU2JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMzI4N2UyM2JlZTY3Y2E2NjJmYmQ3NzlmY2JjMTgyZWM1 NTNiZTMwHhcNMjUxMjA2MTAwMDQwWhcNMjUxMjA3MTAwMDQwWjAzMTEwLwYDVQQD EyhiMTk4NDIzOTE0NmVhOTZmMTVhMmE1NjkxZjRmYzIxY2IzYjkyYThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9aoSrorJhksWWB0vsUJSA5YDdkv fFT9maScDFAmBCIGCExNw/5GRn1zBRgAKsZIWEDUy4PQUdWtNFjLw8RjgpzmCSZr Th9ijmU1zS4jvwDfxYV6yObfZVTJluM3z4nDBCDGQncUI5CAu6TkiHCTDifuvwY8 Q1CUc7t/747P2r6ZcTna4SSC+sdy2FUHgzcw6tvJBp6gVNP0JDTGSjdpctBk36uO CtjgycSYgfwABs0ewtYZIcw3EzJXX/1tOciyDGpA+TdfkF9QTI4qT97EhgDj8zuz aDBlA6PFjbkajoYWhqEiuBimKi6a5a4wSCZFgllOONImxcBfQPQlZ0vhnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGYQjkUbqlvFaKlaR9PwhyzuSqOMB8GA1UdIwQY MBaAFDMyh+I77mfKZi+9d5/LwYLsVTvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXpLSDRqdnVaOHBtTDcxM244dkJndXhWTy1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82Y2IxMmMtNjkzZC00MmMxLThhYWUt NDljMDcyYTgyNTk1LzEvTXpLSDRqdnVaOHBtTDcxM244dkJndXhWTy1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny82Y2IxMmMtNjkzZC00MmMxLThhYWUtNDljMDcyYTgyNTk1 LzEvTXpLSDRqdnVaOHBtTDcxM244dkJndXhWTy1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu3LV3OEP 7uzpPbMWeBQYfHS3vTx6n39xIedTx434rE5yOylAdT+ZUnCIzoGn5Y3i6AtZNtaN cYCHo8jbSJ4RFM24AaYcTkKjgXa/45bMC2h0KEXCh5Qqgn7MpI98bRqGVGcxkRPk 7d02gO0KdFy3j7ZkHRObfrW05Jt6QZIGdMMEjn1QV7zrVa1jsHmftCzZHUdSmMDm x4Ilpw+wVY7er02RwxrwSjhh1meZ6u43ViGbtHDSUbPxKL9y8Be7SDa4vF/QMrVM ZVy5LCKt58GsGH5sN+sUb62eqABo/InIx/1rg7po/j6zkmDIhpejaXRKWqNTQSow fakH1WFiEFTsVg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:28:40 2025 by rpki-client