This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft File: MZtnnBRoEIny0HeG3wT3eddBwRo.mft (raw, json) Hash identifier: RG3us6P34f2NzPRRp6KV9WrWjnQ3R3W9cx9CJeYubDs= Subject key identifier: F1:FF:2C:91:46:91:B3:DA:5D:DE:D9:23:6E:31:8E:A5:C5:E1:DD:9F Authority key identifier: 31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A Certificate issuer: /CN=319b679c14681089f2d07786df04f779d741c11a Certificate serial: 019AF0880C26E3C46DFDF79D736E292E2E3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft Manifest number: 115B Signing time: Fri 05 Dec 2025 22:00:38 +0000 Manifest this update: Fri 05 Dec 2025 22:00:38 +0000 Manifest next update: Sat 06 Dec 2025 22:00:38 +0000 Files and hashes: 1: MZtnnBRoEIny0HeG3wT3eddBwRo.crl (hash: d6gVmeBi0vnSgzuZGOrgobaiL1ihKi41njyKmAk2dag=) 2: ieLSuIB6mXBKJCQeWp_N4zpRwwc.roa (hash: nbmCndcHBfvvgTeoIuhU4ac4+KNWQuh73nRAwrBR57A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:0c:26:e3:c4:6d:fd:f7:9d:73:6e:29:2e:2e:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=319b679c14681089f2d07786df04f779d741c11a Validity Not Before: Dec 5 22:00:38 2025 GMT Not After : Dec 6 22:00:38 2025 GMT Subject: CN=f1ff2c914691b3da5dded9236e318ea5c5e1dd9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8d:d8:d9:f0:c1:6d:9a:3c:9d:74:fa:95:5b: 5d:0a:f9:ed:ac:87:4c:54:10:f2:e1:e8:65:4c:77: 95:08:5a:51:e4:29:dc:4b:3c:61:04:68:03:4c:bf: 90:92:54:dc:13:cd:af:39:c3:28:67:6d:cf:37:7c: d7:74:66:a7:77:05:0f:02:d8:9f:e3:5e:f4:7a:a3: a6:ef:90:ee:b7:91:12:2a:95:cc:57:bd:2e:d3:aa: b9:0a:f9:02:11:db:2e:2b:1a:d9:f3:a2:f5:28:56: c1:c9:22:83:70:95:12:d6:af:11:51:d2:f4:41:78: 3f:1b:e7:ce:db:54:bb:a2:cc:58:10:e9:1b:14:bc: f9:83:e6:0d:62:80:88:70:fe:74:3c:0b:d2:00:b4: cb:4c:e5:60:53:75:15:65:8f:e9:90:7f:a9:64:1d: 4a:66:22:df:38:e4:67:14:0a:0d:97:32:fb:b9:10: 1b:4f:66:24:9e:20:e4:c0:0a:34:58:38:d2:a8:04: 92:ec:fb:df:f4:4e:18:f3:5a:95:af:4d:64:98:e9: 3d:93:0c:28:9e:02:08:d4:ea:30:36:26:3e:74:fc: 49:87:7e:2d:36:d6:7d:56:6c:86:26:19:6b:79:29: e2:49:8f:25:03:9a:60:5d:f5:f1:9b:ea:74:38:fc: 9f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:FF:2C:91:46:91:B3:DA:5D:DE:D9:23:6E:31:8E:A5:C5:E1:DD:9F X509v3 Authority Key Identifier: keyid:31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:d8:35:d3:08:86:18:a7:7a:2b:a7:59:4f:13:14:51:7b:db: 0f:65:06:82:8f:36:1c:cb:10:2d:14:e1:fe:66:63:b8:93:a5: be:66:17:0b:c8:78:51:c6:31:d7:73:32:88:ca:83:be:2b:62: 41:24:ce:33:7f:eb:60:45:d7:59:b7:da:6e:93:ac:cd:75:7e: 76:60:15:6a:4f:78:0c:99:1e:f8:9c:36:0b:e6:88:6c:0a:64: 38:53:f0:02:cf:52:cf:4f:04:96:67:37:49:4b:0a:70:1a:4f: 24:63:70:d2:ea:b6:23:1c:46:ec:17:73:39:17:ab:6c:c1:02: 15:ff:2e:5b:e0:4e:64:fb:8a:bf:75:bb:ff:e8:32:75:70:41: 2c:dd:a7:b5:1c:e6:95:51:94:17:48:57:ec:64:17:78:b0:87: 56:c1:3c:cd:4a:54:9c:19:ed:34:9f:c7:d6:5f:9f:97:c3:24: 7d:98:0c:c4:84:c5:c2:fe:e8:69:e1:f8:c2:9e:33:ca:2a:d5: 79:4b:1e:af:ed:e0:a8:a4:f0:ea:80:21:f9:5e:7a:c8:17:2f: f5:58:54:7a:14:11:5a:5c:28:14:c9:b9:fa:08:60:81:5a:88: 1b:62:d0:d2:c2:03:47:50:a0:e5:0d:1d:c8:bf:d6:ab:70:c4: 70:d3:6f:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiAwm48Rt/fedc24pLi4/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxOWI2NzljMTQ2ODEwODlmMmQwNzc4NmRmMDRmNzc5ZDc0 MWMxMWEwHhcNMjUxMjA1MjIwMDM4WhcNMjUxMjA2MjIwMDM4WjAzMTEwLwYDVQQD EyhmMWZmMmM5MTQ2OTFiM2RhNWRkZWQ5MjM2ZTMxOGVhNWM1ZTFkZDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI3Y2fDBbZo8nXT6lVtdCvntrIdM VBDy4ehlTHeVCFpR5CncSzxhBGgDTL+QklTcE82vOcMoZ23PN3zXdGandwUPAtif 4170eqOm75Dut5ESKpXMV70u06q5CvkCEdsuKxrZ86L1KFbBySKDcJUS1q8RUdL0 QXg/G+fO21S7osxYEOkbFLz5g+YNYoCIcP50PAvSALTLTOVgU3UVZY/pkH+pZB1K ZiLfOORnFAoNlzL7uRAbT2YkniDkwAo0WDjSqASS7Pvf9E4Y81qVr01kmOk9kwwo ngII1OowNiY+dPxJh34tNtZ9VmyGJhlreSniSY8lA5pgXfXxm+p0OPyfsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPH/LJFGkbPaXd7ZI24xjqXF4d2fMB8GA1UdIwQY MBaAFDGbZ5wUaBCJ8tB3ht8E93nXQcEaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVp0bm5CUm9FSW55MEhlRzN3VDNlZGRCd1JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xMzlmZjItZjVkMC00OWJlLTkxMGIt YjVjOTQ1YTBjYTE2LzEvTVp0bm5CUm9FSW55MEhlRzN3VDNlZGRCd1JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8xMzlmZjItZjVkMC00OWJlLTkxMGItYjVjOTQ1YTBjYTE2 LzEvTVp0bm5CUm9FSW55MEhlRzN3VDNlZGRCd1JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9g10wiG GKd6K6dZTxMUUXvbD2UGgo82HMsQLRTh/mZjuJOlvmYXC8h4UcYx13MyiMqDviti QSTOM3/rYEXXWbfabpOszXV+dmAVak94DJke+Jw2C+aIbApkOFPwAs9Sz08Elmc3 SUsKcBpPJGNw0uq2IxxG7BdzORerbMECFf8uW+BOZPuKv3W7/+gydXBBLN2ntRzm lVGUF0hX7GQXeLCHVsE8zUpUnBntNJ/H1l+fl8MkfZgMxITFwv7oaeH4wp4zyirV eUser+3gqKTw6oAh+V56yBcv9VhUehQRWlwoFMm5+ghggVqIG2LQ0sIDR1Cg5Q0d yL/Wq3DEcNNvxA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:18 2025 by rpki-client