This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft File: mZP-d_Y77pCIj83hoSWt_mU12BY.mft (raw, json) Hash identifier: UeVBC/v2kk2ZVZYwyWlMVKsDnVNFNmLoSsKE3w8711Y= Subject key identifier: B4:34:98:D8:06:C9:A2:C6:B3:75:EF:9E:D8:E7:0B:B0:A8:A5:C2:75 Authority key identifier: 99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16 Certificate issuer: /CN=9993fe77f63bee90888fcde1a125adfe6535d816 Certificate serial: 019AF12CFF9783D071EB8AD67C030B6BD48D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft Manifest number: 0384 Signing time: Sat 06 Dec 2025 01:00:49 +0000 Manifest this update: Sat 06 Dec 2025 01:00:49 +0000 Manifest next update: Sun 07 Dec 2025 01:00:49 +0000 Files and hashes: 1: 4EtVjJk4lsZOZCX63edsZ70D8bI.roa (hash: EUz3DyoqW1g2YIoKqC8Ka1J3A0ypQWGdk4dQmoae3Fs=) 2: mZP-d_Y77pCIj83hoSWt_mU12BY.crl (hash: /36Uw9Igx8kJjngb3WhC7qCqPrsfYTC6ye+RUz7Q81Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:ff:97:83:d0:71:eb:8a:d6:7c:03:0b:6b:d4:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9993fe77f63bee90888fcde1a125adfe6535d816 Validity Not Before: Dec 6 01:00:49 2025 GMT Not After : Dec 7 01:00:49 2025 GMT Subject: CN=b43498d806c9a2c6b375ef9ed8e70bb0a8a5c275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:95:e9:b6:f0:bc:45:93:f1:c9:fb:55:dc:d2: 4e:e3:12:85:72:42:4f:d0:34:a5:c5:b6:c5:1b:f6: 75:b7:2b:12:42:66:8e:23:ee:94:a0:36:4d:19:57: f2:11:0e:97:1d:77:f0:cf:db:40:37:47:0e:4d:f4: a5:70:3b:61:98:c5:41:f9:01:c4:2a:2f:ac:ec:be: b7:dc:2a:d3:de:5c:44:45:3d:4b:9c:cb:59:3a:fd: c7:1d:83:cf:78:84:11:9a:46:be:6f:c9:8c:b5:29: a0:d4:44:48:06:83:6c:0f:66:0d:dc:a6:38:33:fd: 0b:74:77:83:5e:17:9d:8c:e0:f7:8b:82:7c:1a:f1: ab:bc:34:5f:a0:e1:b1:61:76:50:db:2d:a5:f3:1c: d6:85:77:5b:3d:80:52:a9:29:1d:78:af:cd:3d:67: 66:75:f0:d5:97:86:04:78:35:83:e4:74:75:c3:b0: db:1c:df:8f:45:b3:f7:51:0d:ea:37:dd:b0:d6:c7: 1b:01:9a:35:7d:fb:01:70:0e:56:6a:06:fb:4c:27: c2:97:e7:51:13:5b:ee:5f:97:98:c5:89:f9:fb:d3: 1f:cb:c7:14:c2:8b:15:79:c3:28:00:e1:06:06:56: d1:be:b1:d2:c4:a5:cb:50:48:6b:89:b7:55:5a:83: a9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:34:98:D8:06:C9:A2:C6:B3:75:EF:9E:D8:E7:0B:B0:A8:A5:C2:75 X509v3 Authority Key Identifier: keyid:99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:49:5a:03:91:53:87:21:21:c2:b8:4b:35:38:63:4c:26:00: 52:7d:ff:1f:de:55:b5:0b:dd:10:13:6d:bc:4f:cf:4b:e3:21: f9:e2:c3:94:8d:46:9c:80:10:d1:74:7d:d9:18:fd:4a:5d:da: 03:b3:2e:3a:5b:89:bb:b0:dc:03:e6:8e:c5:d0:38:4b:9b:74: c0:ab:4e:d2:4e:10:88:b9:3a:8b:64:0d:fb:80:dd:9e:48:8c: 4b:fe:7e:c7:17:30:8f:25:7b:3c:e9:c6:94:d6:7f:3e:25:75: b3:b7:31:f6:7f:8d:9f:0c:04:0e:7a:04:fd:a8:43:30:24:ac: dc:c5:8f:01:e4:76:53:18:80:58:84:cb:64:69:8e:c8:f7:38: 2c:52:e9:70:e5:f0:33:94:94:43:5e:b5:8a:ce:41:7d:2d:21: d4:d7:e9:76:87:4d:1a:7e:51:01:14:77:09:4a:eb:67:07:2c: 37:5d:d1:4a:64:06:28:b6:64:86:b3:71:ca:e0:e6:fc:59:17: de:ec:b5:48:29:1c:36:8a:f4:71:4e:48:2b:53:c3:c7:ca:b6: 4c:19:84:15:c0:dd:2a:2c:00:6c:03:d6:81:7d:0b:fe:2e:22: be:55:b7:f8:92:16:03:f8:b9:74:8a:43:ab:5c:a4:da:31:40: cb:a3:0d:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLP+Xg9Bx64rWfAMLa9SNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5OTNmZTc3ZjYzYmVlOTA4ODhmY2RlMWExMjVhZGZlNjUz NWQ4MTYwHhcNMjUxMjA2MDEwMDQ5WhcNMjUxMjA3MDEwMDQ5WjAzMTEwLwYDVQQD EyhiNDM0OThkODA2YzlhMmM2YjM3NWVmOWVkOGU3MGJiMGE4YTVjMjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5XptvC8RZPxyftV3NJO4xKFckJP 0DSlxbbFG/Z1tysSQmaOI+6UoDZNGVfyEQ6XHXfwz9tAN0cOTfSlcDthmMVB+QHE Ki+s7L633CrT3lxERT1LnMtZOv3HHYPPeIQRmka+b8mMtSmg1ERIBoNsD2YN3KY4 M/0LdHeDXhedjOD3i4J8GvGrvDRfoOGxYXZQ2y2l8xzWhXdbPYBSqSkdeK/NPWdm dfDVl4YEeDWD5HR1w7DbHN+PRbP3UQ3qN92w1scbAZo1ffsBcA5Wagb7TCfCl+dR E1vuX5eYxYn5+9Mfy8cUwosVecMoAOEGBlbRvrHSxKXLUEhribdVWoOp7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQ0mNgGyaLGs3XvntjnC7CopcJ1MB8GA1UdIwQY MBaAFJmT/nf2O+6QiI/N4aElrf5lNdgWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVpQLWRfWTc3cENJajgzaG9TV3RfbVUxMkJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9mOWI2YWEtYTkxNy00OTZmLWEyNGYt NjY5NTllMWJiN2ZlLzEvbVpQLWRfWTc3cENJajgzaG9TV3RfbVUxMkJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9mOWI2YWEtYTkxNy00OTZmLWEyNGYtNjY5NTllMWJiN2Zl LzEvbVpQLWRfWTc3cENJajgzaG9TV3RfbVUxMkJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGklaA5FT hyEhwrhLNThjTCYAUn3/H95VtQvdEBNtvE/PS+Mh+eLDlI1GnIAQ0XR92Rj9Sl3a A7MuOluJu7DcA+aOxdA4S5t0wKtO0k4QiLk6i2QN+4DdnkiMS/5+xxcwjyV7POnG lNZ/PiV1s7cx9n+NnwwEDnoE/ahDMCSs3MWPAeR2UxiAWITLZGmOyPc4LFLpcOXw M5SUQ161is5BfS0h1NfpdodNGn5RARR3CUrrZwcsN13RSmQGKLZkhrNxyuDm/FkX 3uy1SCkcNor0cU5IK1PDx8q2TBmEFcDdKiwAbAPWgX0L/i4ivlW3+JIWA/i5dIpD q1yk2jFAy6MNug== -----END CERTIFICATE-----Generated at Sat Dec 6 08:59:07 2025 by rpki-client