This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft File: MZ7ds2aRntdfRmDPsOC25fxAFhM.mft (raw, json) Hash identifier: aA+/H73Mkzi4YPbTKucVR+kzS9NUafGJwv9dAbh1wf8= Subject key identifier: 8F:C0:47:38:FC:5D:74:42:AE:FF:6A:B8:8C:31:25:0F:00:57:AD:98 Authority key identifier: 31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13 Certificate issuer: /CN=319eddb366919ed75f4660cfb0e0b6e5fc401613 Certificate serial: 019AF19ABCE8531193C88F7CEE7516D65252 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft Manifest number: 0E33 Signing time: Sat 06 Dec 2025 03:00:41 +0000 Manifest this update: Sat 06 Dec 2025 03:00:41 +0000 Manifest next update: Sun 07 Dec 2025 03:00:41 +0000 Files and hashes: 1: BYjgxdL3ddXOTmm0stHvKsFPd4k.roa (hash: 4MJkG6H0wdaazlb0EpHV2G+H4iKJ78151mJpo0/ddyA=) 2: MZ7ds2aRntdfRmDPsOC25fxAFhM.crl (hash: kQFo9NOHgmict5mtunoKkZMJM5jFB9pEhxuNPagCuh8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:bc:e8:53:11:93:c8:8f:7c:ee:75:16:d6:52:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=319eddb366919ed75f4660cfb0e0b6e5fc401613 Validity Not Before: Dec 6 03:00:41 2025 GMT Not After : Dec 7 03:00:41 2025 GMT Subject: CN=8fc04738fc5d7442aeff6ab88c31250f0057ad98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f4:11:90:49:c2:f7:64:76:f8:c3:9e:e5:09: ea:75:1c:b9:c8:c9:4f:c5:db:cb:0b:22:da:0a:03: d5:66:46:23:af:00:a0:0d:db:83:00:f4:7a:24:c3: f2:a3:b3:03:98:0e:1a:4c:54:b6:22:50:0b:8a:b1: 0d:bc:52:d4:25:e6:78:73:fb:87:69:72:1a:35:48: 20:fa:39:26:9f:d0:9f:34:67:47:c0:9a:0f:6c:bd: be:0e:c2:ed:47:36:5a:85:66:94:95:92:71:27:5b: 9f:62:de:c8:1f:b3:19:21:65:96:88:ea:85:bb:5f: 19:e2:6b:a4:46:99:1f:7e:c2:3d:db:ef:66:31:e1: 7f:ad:53:5f:42:06:47:32:dd:c3:74:38:41:83:84: b7:9d:cd:82:a3:07:d3:9a:b0:c5:52:2f:e3:d2:38: 91:8d:23:8d:d9:d4:36:2d:68:54:55:39:20:90:15: 78:87:d1:27:2d:09:a7:e0:39:60:9b:95:2c:c2:74: 6a:3f:fa:3a:cd:94:88:cb:c5:42:d2:c1:c7:5d:31: 35:44:bf:57:f4:20:34:aa:eb:0c:ee:15:ae:c6:30: d2:f3:50:ac:f7:2e:b5:42:d9:e5:a9:00:12:a6:76: 15:11:12:fa:76:75:53:b3:f8:52:9b:ee:11:f1:8d: 1e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C0:47:38:FC:5D:74:42:AE:FF:6A:B8:8C:31:25:0F:00:57:AD:98 X509v3 Authority Key Identifier: keyid:31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:55:24:1c:4e:c1:3f:12:0c:fc:d9:7e:ba:27:ab:cc:4a:d0: 1c:3a:01:3c:04:ec:b6:99:1b:24:a6:35:90:04:8c:2a:b8:ed: dc:4d:ee:90:1c:12:f5:73:66:04:24:bb:0b:a2:25:a9:cd:ae: 6c:24:56:56:1f:54:b8:ea:65:99:8a:ac:48:37:4e:eb:ea:ae: cf:da:b8:f4:93:34:29:95:b2:53:4d:a7:eb:6c:54:b4:a4:3e: e8:49:00:74:a9:26:83:c4:fe:ee:a6:11:a6:2d:3c:d7:3a:aa: e8:01:21:c1:7d:37:76:bb:da:04:9f:59:19:15:7f:a2:8a:eb: 74:e7:2e:a5:2a:a9:a6:a5:93:4e:4c:e7:0c:8c:e2:f1:dd:39: f6:fa:5d:84:d7:08:64:26:5e:61:ee:1b:66:5c:30:ce:87:bb: 78:7f:96:2f:a8:74:0e:f3:c7:64:ee:cb:3c:30:bd:b7:6d:92: 4a:7b:27:44:4c:79:e3:c3:35:7d:c2:d8:48:44:6b:14:ee:d7: 11:65:e8:4e:78:c1:32:5d:b2:30:b9:5a:9e:34:88:39:bc:0a: 6f:2d:c1:dd:a4:a9:d5:2f:a8:e9:41:47:51:ba:f1:8e:d5:04: 17:d6:3d:86:f3:73:9e:e1:5a:a7:6c:48:07:52:3a:e9:43:45: 7f:7a:39:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrzoUxGTyI987nUW1lJSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxOWVkZGIzNjY5MTllZDc1ZjQ2NjBjZmIwZTBiNmU1ZmM0 MDE2MTMwHhcNMjUxMjA2MDMwMDQxWhcNMjUxMjA3MDMwMDQxWjAzMTEwLwYDVQQD Eyg4ZmMwNDczOGZjNWQ3NDQyYWVmZjZhYjg4YzMxMjUwZjAwNTdhZDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifQRkEnC92R2+MOe5QnqdRy5yMlP xdvLCyLaCgPVZkYjrwCgDduDAPR6JMPyo7MDmA4aTFS2IlALirENvFLUJeZ4c/uH aXIaNUgg+jkmn9CfNGdHwJoPbL2+DsLtRzZahWaUlZJxJ1ufYt7IH7MZIWWWiOqF u18Z4mukRpkffsI92+9mMeF/rVNfQgZHMt3DdDhBg4S3nc2CowfTmrDFUi/j0jiR jSON2dQ2LWhUVTkgkBV4h9EnLQmn4Dlgm5UswnRqP/o6zZSIy8VC0sHHXTE1RL9X 9CA0qusM7hWuxjDS81Cs9y61QtnlqQASpnYVERL6dnVTs/hSm+4R8Y0ebQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/ARzj8XXRCrv9quIwxJQ8AV62YMB8GA1UdIwQY MBaAFDGe3bNmkZ7XX0Zgz7DgtuX8QBYTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVo3ZHMyYVJudGRmUm1EUHNPQzI1ZnhBRmhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS85YTM2Y2MtNmRjYS00YTJhLWJmNmYt ZDQ3YmQ3ZDAxOTJmLzEvTVo3ZHMyYVJudGRmUm1EUHNPQzI1ZnhBRmhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS85YTM2Y2MtNmRjYS00YTJhLWJmNmYtZDQ3YmQ3ZDAxOTJm LzEvTVo3ZHMyYVJudGRmUm1EUHNPQzI1ZnhBRmhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFUkHE7B PxIM/Nl+uierzErQHDoBPATstpkbJKY1kASMKrjt3E3ukBwS9XNmBCS7C6Ilqc2u bCRWVh9UuOplmYqsSDdO6+quz9q49JM0KZWyU02n62xUtKQ+6EkAdKkmg8T+7qYR pi081zqq6AEhwX03drvaBJ9ZGRV/oorrdOcupSqppqWTTkznDIzi8d059vpdhNcI ZCZeYe4bZlwwzoe7eH+WL6h0DvPHZO7LPDC9t22SSnsnREx548M1fcLYSERrFO7X EWXoTnjBMl2yMLlanjSIObwKby3B3aSp1S+o6UFHUbrxjtUEF9Y9hvNznuFap2xI B1I66UNFf3o5DQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:53 2025 by rpki-client