This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft File: MzIOLzxa2t8VOgdYvGALbqFPTu0.mft (raw, json) Hash identifier: 2yRSaLeTCqnHS6oIJ71fGCJzMhm2++SK3moq3dZoQQc= Subject key identifier: 53:41:F9:D7:D5:1A:62:93:AF:D6:0C:31:B8:FF:C6:46:D9:8D:41:72 Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED Certificate issuer: /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed Certificate serial: 019AF49BA914A77C2242F0EBFD9A7EE6C983 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 17:00:33 +0000 Manifest this update: Sat 06 Dec 2025 17:00:33 +0000 Manifest next update: Sun 07 Dec 2025 17:00:33 +0000 Files and hashes: 1: AvN828iiRV3-eQ2nvQTTlCpY0ts.roa (hash: AwFnD9flCXRJg5DrdW5vdLxIK1uSbmEP3XgEVnfdU14=) 2: FQUs67egorGqDEk7kbjYvrfoO_s.roa (hash: JDbs+c69xkht9mxZidbikteQkaoI44/OAWxvpFrO2Bk=) 3: MzIOLzxa2t8VOgdYvGALbqFPTu0.crl (hash: OBHD+Gftl/wdhfbH/pNFig25PWAzN9RTlE47P2nGcyI=) 4: i7kir30T-x2Qz6fkdJRMDQPIadY.roa (hash: YG8gHBLUzQIrRJ7lENe/ITyj1BXcOdJeuTbpC4dPomc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:a9:14:a7:7c:22:42:f0:eb:fd:9a:7e:e6:c9:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed Validity Not Before: Dec 6 17:00:33 2025 GMT Not After : Dec 7 17:00:33 2025 GMT Subject: CN=5341f9d7d51a6293afd60c31b8ffc646d98d4172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6b:3f:f4:db:ec:28:39:ac:a2:47:44:d0:91: 24:c9:15:3b:40:76:d2:f3:36:cf:6a:57:e8:6f:f1: c7:2b:a5:6a:7f:6e:c7:c1:3d:36:ad:00:63:17:44: cb:56:fb:46:58:ae:ce:58:04:6c:4b:4c:0a:33:b7: de:ca:cb:7c:89:83:d7:11:8f:28:9d:7c:3b:ad:04: 1b:1d:bf:e8:b9:02:a8:f9:85:a2:8d:4f:58:8f:60: 1f:2d:2c:95:7b:2f:c1:88:d2:89:b4:1a:3b:ae:37: 22:73:c2:39:b8:fd:85:73:25:25:06:f9:0a:8b:54: a6:52:44:ee:53:1b:eb:83:a9:da:dd:c0:be:d9:f6: f7:14:ec:3a:7d:eb:e8:fb:7c:a9:de:83:17:14:7e: 61:76:35:62:89:3a:c0:23:92:6d:9c:cc:16:2e:47: 47:14:5e:1a:15:57:16:33:2f:78:d3:12:62:84:a4: ef:88:0d:b0:c7:48:b5:b7:09:b6:d5:b1:c3:72:52: 2b:82:de:e1:3b:3d:a4:6c:70:b3:17:f5:67:1b:c0: f0:48:b2:49:da:3a:20:9a:cf:5b:31:75:5d:77:fb: 55:f1:5d:8c:b4:c4:03:c4:34:9c:80:d5:9a:8b:7b: cc:99:6b:3a:5e:e3:d2:a9:21:43:4b:8c:ff:29:23: 1c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:41:F9:D7:D5:1A:62:93:AF:D6:0C:31:B8:FF:C6:46:D9:8D:41:72 X509v3 Authority Key Identifier: keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:60:00:12:67:b7:7f:5b:f2:fa:9a:4b:74:4d:d9:58:e1:cd: 0a:71:5e:6c:f9:86:d3:c8:31:45:a8:74:fa:21:6e:83:41:94: ec:d5:95:a8:7e:94:63:0c:8c:0b:3e:c4:96:2f:5a:92:4b:a9: 21:cb:f9:25:53:b3:00:38:e4:46:a3:ec:db:bf:58:cf:16:11: a0:da:92:e1:79:e6:65:d6:ca:48:86:b2:f6:b6:4b:70:0e:b3: bb:44:22:48:c8:10:ae:29:08:86:b2:40:6b:3d:f4:a1:63:82: b9:b2:51:0b:85:a2:03:cf:7b:25:c0:fa:7f:99:65:4b:e0:82: e8:b3:1e:e4:a1:a8:d3:3b:94:5c:28:5c:40:23:f4:09:88:73: 82:b9:39:d2:5e:f2:4c:00:c8:de:38:ef:7a:28:a7:0a:3b:8a: 1f:82:a4:4c:6e:3a:50:32:ae:0e:62:50:5a:6c:f9:6f:c6:b8: c3:07:27:97:d0:53:62:c3:cd:73:15:62:29:e0:f3:79:c8:df: cc:53:50:05:9f:18:0a:ff:d0:09:55:c9:dd:de:ac:b6:f3:73: b1:88:c0:7c:66:f4:cd:20:03:5e:9b:05:9b:f5:4a:06:c1:4d: 4d:f3:5e:da:c7:d4:12:c6:f4:a0:47:22:a9:e7:18:10:bb:a5: a9:47:2f:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m6kUp3wiQvDr/Zp+5smDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMzIwZTJmM2M1YWRhZGYxNTNhMDc1OGJjNjAwYjZlYTE0 ZjRlZWQwHhcNMjUxMjA2MTcwMDMzWhcNMjUxMjA3MTcwMDMzWjAzMTEwLwYDVQQD Eyg1MzQxZjlkN2Q1MWE2MjkzYWZkNjBjMzFiOGZmYzY0NmQ5OGQ0MTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwms/9NvsKDmsokdE0JEkyRU7QHbS 8zbPalfob/HHK6Vqf27HwT02rQBjF0TLVvtGWK7OWARsS0wKM7feyst8iYPXEY8o nXw7rQQbHb/ouQKo+YWijU9Yj2AfLSyVey/BiNKJtBo7rjcic8I5uP2FcyUlBvkK i1SmUkTuUxvrg6na3cC+2fb3FOw6fevo+3yp3oMXFH5hdjViiTrAI5JtnMwWLkdH FF4aFVcWMy940xJihKTviA2wx0i1twm21bHDclIrgt7hOz2kbHCzF/VnG8DwSLJJ 2jogms9bMXVdd/tV8V2MtMQDxDScgNWai3vMmWs6XuPSqSFDS4z/KSMcoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNB+dfVGmKTr9YMMbj/xkbZjUFyMB8GA1UdIwQY MBaAFDMyDi88WtrfFToHWLxgC26hT07tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXpJT0x6eGEydDhWT2dkWXZHQUxicUZQVHUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yNDQ5MDEtYWUyZC00NDE4LTlkOTMt ZTE1NDRjNTdlMzhiLzEvTXpJT0x6eGEydDhWT2dkWXZHQUxicUZQVHUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8yNDQ5MDEtYWUyZC00NDE4LTlkOTMtZTE1NDRjNTdlMzhi LzEvTXpJT0x6eGEydDhWT2dkWXZHQUxicUZQVHUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD2AAEme3 f1vy+ppLdE3ZWOHNCnFebPmG08gxRah0+iFug0GU7NWVqH6UYwyMCz7Eli9akkup Icv5JVOzADjkRqPs279YzxYRoNqS4XnmZdbKSIay9rZLcA6zu0QiSMgQrikIhrJA az30oWOCubJRC4WiA897JcD6f5llS+CC6LMe5KGo0zuUXChcQCP0CYhzgrk50l7y TADI3jjveiinCjuKH4KkTG46UDKuDmJQWmz5b8a4wwcnl9BTYsPNcxViKeDzecjf zFNQBZ8YCv/QCVXJ3d6stvNzsYjAfGb0zSADXpsFm/VKBsFNTfNe2sfUEsb0oEci qecYELulqUcvFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:55:34 2025 by rpki-client