This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft File: mZYvXuAnimDLvNQWkZH3FIEhatQ.mft (raw, json) Hash identifier: L0Vskv233iu9BeXI1935tsPsnkQC5wa77qKVnRksuVg= Subject key identifier: A5:09:CA:F3:76:2A:72:36:87:D7:85:AB:EC:60:7C:87:94:EF:46:14 Authority key identifier: 99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4 Certificate issuer: /CN=99962f5ee0278a60cbbcd4169191f71481216ad4 Certificate serial: 019AF465A20BBC7D72007BB9D590D2EDB86E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft Manifest number: 149A Signing time: Sat 06 Dec 2025 16:01:32 +0000 Manifest this update: Sat 06 Dec 2025 16:01:32 +0000 Manifest next update: Sun 07 Dec 2025 16:01:32 +0000 Files and hashes: 1: PcKfcpxjxCfbogVi4GU3TNWXfWo.roa (hash: FyEhv9qszU5/I+NRa1KRYr4i13WZJNlUiL5+rA2wd9M=) 2: dKjh9OyM_cot3UzX7jW4QBDob5U.roa (hash: HTTUqeSNDV7AnFAFILfDkkX8OZRGZuFCWYdTMt5tQp0=) 3: mZYvXuAnimDLvNQWkZH3FIEhatQ.crl (hash: PQ9zqYuA8Q+fnhzzcGSV9/AG4ijTiJLag9OYuAOZFGE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:a2:0b:bc:7d:72:00:7b:b9:d5:90:d2:ed:b8:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99962f5ee0278a60cbbcd4169191f71481216ad4 Validity Not Before: Dec 6 16:01:32 2025 GMT Not After : Dec 7 16:01:32 2025 GMT Subject: CN=a509caf3762a723687d785abec607c8794ef4614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:97:92:af:4c:55:92:b6:a4:25:08:53:84:6b: ef:5b:ba:10:fc:ae:ca:57:3d:5a:be:fb:b9:78:0b: df:53:17:0c:6f:c2:d2:46:68:fa:97:b9:00:b6:a6: 17:4b:83:72:5d:2d:78:a1:0d:89:69:b3:f5:c5:9a: 99:17:46:d3:79:59:06:bc:f4:84:d5:e0:64:a6:63: 5a:06:46:f3:90:d8:8d:d6:e9:a7:4a:a8:69:5f:58: 80:a7:a5:cd:5f:f3:a6:55:85:0d:b3:3a:42:f2:e9: 1f:b5:73:b1:6d:08:36:62:b7:63:64:4d:78:52:78: 35:fc:10:22:22:57:4d:3b:94:75:a0:e1:3b:79:1d: 64:68:65:8d:7f:b7:10:c3:bc:a8:1b:10:1f:51:8a: 44:37:df:67:f3:85:71:f9:d5:94:89:d0:e2:32:27: 51:58:fe:36:34:fb:7a:b9:e8:41:8b:b5:33:05:15: ae:a2:20:0a:16:96:32:6c:93:2f:e6:c5:d3:03:f9: ef:8c:db:4d:5e:18:45:93:3b:e2:da:e9:b9:84:b4: ff:41:a0:9d:53:12:e7:16:6c:5d:c9:ed:27:41:5c: 11:50:bc:c5:fb:e8:04:f1:08:f6:25:18:48:19:83: 06:2b:7d:a3:1b:6e:2f:33:76:1f:45:90:be:c9:a8: dc:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:09:CA:F3:76:2A:72:36:87:D7:85:AB:EC:60:7C:87:94:EF:46:14 X509v3 Authority Key Identifier: keyid:99:96:2F:5E:E0:27:8A:60:CB:BC:D4:16:91:91:F7:14:81:21:6A:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZYvXuAnimDLvNQWkZH3FIEhatQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1edd25-ff90-40ae-8a20-f76b8353ad68/1/mZYvXuAnimDLvNQWkZH3FIEhatQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f1:43:a9:13:5f:e7:ab:f9:8d:44:2c:bb:01:6f:83:5f:2d: 38:95:bc:e2:b3:32:d2:8e:8d:18:8a:de:e2:19:a7:cc:c7:45: d8:4a:bf:ee:f2:48:3e:b2:19:3d:61:33:20:72:0b:13:29:e1: 03:37:ad:ce:65:8d:e9:88:cb:5a:a3:57:e8:68:f4:ec:c7:bb: f7:79:37:c5:bf:2a:88:18:d0:e0:1a:f5:fc:51:8f:d7:8e:b3: 55:1f:75:17:1e:3e:b3:90:3b:e4:c3:7c:f5:01:a0:fe:bd:5f: 62:c5:c3:3c:63:2f:26:ca:45:80:7c:cb:11:5a:50:94:be:5a: 13:38:9c:3a:8c:36:10:02:73:cf:c9:a2:a3:d2:a5:db:0e:77: e2:46:53:d7:b6:c0:75:30:00:15:8f:43:c8:4a:58:85:a0:d3: 6b:77:9b:21:f9:dc:81:cc:18:74:d5:18:a4:f4:bc:75:2d:5d: 1a:82:2d:67:d7:0a:16:5c:e8:9a:d5:f3:2f:1e:18:6a:fe:e4: 7e:9e:6c:e4:af:89:c4:db:c0:33:56:26:4d:35:a6:4b:45:83: 34:2a:5b:eb:25:53:a1:43:fd:41:a5:5c:e9:ef:77:c9:a0:7d: d5:22:bf:a1:f0:65:0e:9e:58:1c:e6:da:64:74:43:12:9e:00: ba:1f:73:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZaILvH1yAHu51ZDS7bhuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5OTYyZjVlZTAyNzhhNjBjYmJjZDQxNjkxOTFmNzE0ODEy MTZhZDQwHhcNMjUxMjA2MTYwMTMyWhcNMjUxMjA3MTYwMTMyWjAzMTEwLwYDVQQD EyhhNTA5Y2FmMzc2MmE3MjM2ODdkNzg1YWJlYzYwN2M4Nzk0ZWY0NjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJeSr0xVkrakJQhThGvvW7oQ/K7K Vz1avvu5eAvfUxcMb8LSRmj6l7kAtqYXS4NyXS14oQ2JabP1xZqZF0bTeVkGvPSE 1eBkpmNaBkbzkNiN1umnSqhpX1iAp6XNX/OmVYUNszpC8ukftXOxbQg2YrdjZE14 Ung1/BAiIldNO5R1oOE7eR1kaGWNf7cQw7yoGxAfUYpEN99n84Vx+dWUidDiMidR WP42NPt6uehBi7UzBRWuoiAKFpYybJMv5sXTA/nvjNtNXhhFkzvi2um5hLT/QaCd UxLnFmxdye0nQVwRULzF++gE8Qj2JRhIGYMGK32jG24vM3YfRZC+yajc3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUJyvN2KnI2h9eFq+xgfIeU70YUMB8GA1UdIwQY MBaAFJmWL17gJ4pgy7zUFpGR9xSBIWrUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVpZdlh1QW5pbURMdk5RV2taSDNGSUVoYXRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xZWRkMjUtZmY5MC00MGFlLThhMjAt Zjc2YjgzNTNhZDY4LzEvbVpZdlh1QW5pbURMdk5RV2taSDNGSUVoYXRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8xZWRkMjUtZmY5MC00MGFlLThhMjAtZjc2YjgzNTNhZDY4 LzEvbVpZdlh1QW5pbURMdk5RV2taSDNGSUVoYXRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/FDqRNf 56v5jUQsuwFvg18tOJW84rMy0o6NGIre4hmnzMdF2Eq/7vJIPrIZPWEzIHILEynh AzetzmWN6YjLWqNX6Gj07Me793k3xb8qiBjQ4Br1/FGP146zVR91Fx4+s5A75MN8 9QGg/r1fYsXDPGMvJspFgHzLEVpQlL5aEzicOow2EAJzz8mio9Kl2w534kZT17bA dTAAFY9DyEpYhaDTa3ebIfncgcwYdNUYpPS8dS1dGoItZ9cKFlzomtXzLx4Yav7k fp5s5K+JxNvAM1YmTTWmS0WDNCpb6yVToUP9QaVc6e93yaB91SK/ofBlDp5YHOba ZHRDEp4Auh9zcw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:53:14 2025 by rpki-client