This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft File: mZP-d_Y77pCIj83hoSWt_mU12BY.mft (raw, json) Hash identifier: Qa0rpHe8lPE8Hc+p5LOv7M777x6Cpj3FrP1X4gq3lWQ= Subject key identifier: D3:9E:FC:6A:60:BD:5D:34:44:E0:D4:D4:CD:DC:BF:77:8C:89:14:D1 Authority key identifier: 99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16 Certificate issuer: /CN=9993fe77f63bee90888fcde1a125adfe6535d816 Certificate serial: 019B2174D4DE030E5CA157CA5D8517253511 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft Manifest number: 039D Signing time: Mon 15 Dec 2025 10:01:03 +0000 Manifest this update: Mon 15 Dec 2025 10:01:03 +0000 Manifest next update: Tue 16 Dec 2025 10:01:03 +0000 Files and hashes: 1: 4EtVjJk4lsZOZCX63edsZ70D8bI.roa (hash: EUz3DyoqW1g2YIoKqC8Ka1J3A0ypQWGdk4dQmoae3Fs=) 2: mZP-d_Y77pCIj83hoSWt_mU12BY.crl (hash: iSNeMg+LMHCElflnuvVP7XTTIamV6r6xiBKyldXEAHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:74:d4:de:03:0e:5c:a1:57:ca:5d:85:17:25:35:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9993fe77f63bee90888fcde1a125adfe6535d816 Validity Not Before: Dec 15 10:01:03 2025 GMT Not After : Dec 16 10:01:03 2025 GMT Subject: CN=d39efc6a60bd5d3444e0d4d4cddcbf778c8914d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:91:0d:96:8a:00:e3:61:79:cc:2f:af:d6:b4: b6:50:82:52:ef:9f:6f:10:ba:05:cd:ea:51:b3:05: eb:d0:b7:96:c3:92:f7:0e:25:52:65:a7:f2:b9:c4: 15:31:09:9b:2d:95:7b:67:59:f5:2f:8d:31:29:9c: d8:88:ad:ad:6f:d5:a3:45:44:da:c6:41:13:a3:b4: 9e:e1:1b:8d:23:f6:90:f0:55:48:c1:6e:97:3d:30: 6c:8d:45:f6:f7:af:a7:ee:d8:99:cc:04:60:77:eb: d9:42:6e:75:89:72:9c:06:6d:63:b6:32:cb:5f:87: d7:ee:7e:b0:93:73:ac:67:69:18:ba:f7:e1:06:4e: a2:21:d4:1a:dc:72:10:09:ed:4f:a0:57:8f:80:b4: 50:89:01:99:df:68:5f:c5:fd:11:5f:cc:4b:83:9b: 15:b0:f4:02:a7:78:03:e9:67:97:d9:e6:4d:89:cf: 2c:8e:cd:10:39:23:4c:f1:f3:b7:43:84:b5:9b:7a: eb:4e:8e:39:41:80:ba:c6:4c:ed:9b:c1:24:b7:c9: d2:30:94:aa:4b:c2:b8:9f:11:90:06:54:37:34:49: 6e:4f:6a:d8:e8:b0:68:7f:7d:18:3b:a4:e2:76:b1: 30:f2:dd:a9:d5:a8:22:45:c4:c4:a0:93:65:42:ce: bd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:9E:FC:6A:60:BD:5D:34:44:E0:D4:D4:CD:DC:BF:77:8C:89:14:D1 X509v3 Authority Key Identifier: keyid:99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:9a:e6:f8:82:c6:e0:6f:f3:3c:bb:d9:03:17:20:75:5b:3d: 39:4d:f5:fa:ef:2a:e3:26:48:27:8b:05:27:cf:89:db:00:21: 8f:f4:7c:21:f7:26:16:11:b3:48:c1:d9:70:69:6c:a3:35:c4: 0d:51:56:15:03:7d:67:47:89:cd:16:50:2d:bb:41:f0:ec:b5: 0d:40:96:8a:c0:17:11:eb:09:cd:29:ed:f3:d2:0c:9c:e7:ac: 8e:a5:41:da:0d:69:bb:8d:d5:b4:c4:b6:5d:d4:cc:ce:91:fc: 65:a9:1c:83:b6:d0:8b:dd:fb:e5:77:d9:e1:11:af:37:2c:5c: dd:50:54:43:7f:ca:2b:fa:e6:7b:81:f1:c8:a1:62:63:78:8b: 2b:b2:c5:46:ce:7e:46:d7:cd:62:ed:8f:cc:61:4c:c3:72:e1: 68:36:4c:b7:a7:3b:fa:39:04:33:94:e7:3e:da:05:35:f2:74: 7f:03:f4:9f:be:53:c4:9e:e7:58:81:83:3d:78:d8:3f:84:3d: 48:e5:3d:b7:e2:50:1f:c7:58:ee:cf:c7:b5:73:aa:d3:30:8c: 68:0e:41:7f:27:4c:b2:c2:10:2d:2f:21:98:dd:fa:9a:ed:b3: 76:a2:05:b8:a6:45:97:66:3c:c6:f4:ab:db:53:bf:6e:71:0a: 48:e2:3d:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdNTeAw5coVfKXYUXJTURMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5OTNmZTc3ZjYzYmVlOTA4ODhmY2RlMWExMjVhZGZlNjUz NWQ4MTYwHhcNMjUxMjE1MTAwMTAzWhcNMjUxMjE2MTAwMTAzWjAzMTEwLwYDVQQD EyhkMzllZmM2YTYwYmQ1ZDM0NDRlMGQ0ZDRjZGRjYmY3NzhjODkxNGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5ENlooA42F5zC+v1rS2UIJS759v ELoFzepRswXr0LeWw5L3DiVSZafyucQVMQmbLZV7Z1n1L40xKZzYiK2tb9WjRUTa xkETo7Se4RuNI/aQ8FVIwW6XPTBsjUX296+n7tiZzARgd+vZQm51iXKcBm1jtjLL X4fX7n6wk3OsZ2kYuvfhBk6iIdQa3HIQCe1PoFePgLRQiQGZ32hfxf0RX8xLg5sV sPQCp3gD6WeX2eZNic8sjs0QOSNM8fO3Q4S1m3rrTo45QYC6xkztm8Ekt8nSMJSq S8K4nxGQBlQ3NEluT2rY6LBof30YO6TidrEw8t2p1agiRcTEoJNlQs69ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNOe/GpgvV00RODU1M3cv3eMiRTRMB8GA1UdIwQY MBaAFJmT/nf2O+6QiI/N4aElrf5lNdgWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVpQLWRfWTc3cENJajgzaG9TV3RfbVUxMkJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9mOWI2YWEtYTkxNy00OTZmLWEyNGYt NjY5NTllMWJiN2ZlLzEvbVpQLWRfWTc3cENJajgzaG9TV3RfbVUxMkJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9mOWI2YWEtYTkxNy00OTZmLWEyNGYtNjY5NTllMWJiN2Zl LzEvbVpQLWRfWTc3cENJajgzaG9TV3RfbVUxMkJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbJrm+ILG 4G/zPLvZAxcgdVs9OU31+u8q4yZIJ4sFJ8+J2wAhj/R8IfcmFhGzSMHZcGlsozXE DVFWFQN9Z0eJzRZQLbtB8Oy1DUCWisAXEesJzSnt89IMnOesjqVB2g1pu43VtMS2 XdTMzpH8Zakcg7bQi9375XfZ4RGvNyxc3VBUQ3/KK/rme4HxyKFiY3iLK7LFRs5+ RtfNYu2PzGFMw3LhaDZMt6c7+jkEM5TnPtoFNfJ0fwP0n75TxJ7nWIGDPXjYP4Q9 SOU9t+JQH8dY7s/HtXOq0zCMaA5BfydMssIQLS8hmN36mu2zdqIFuKZFl2Y8xvSr 21O/bnEKSOI9IQ== -----END CERTIFICATE-----Generated at Mon Dec 15 15:33:47 2025 by rpki-client