This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/cc00eb-56f6-41a7-8305-c299965bbc42/1/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.mft File: MZUeNv_ZfB1zOpClr2-tqF_Sd4I.mft (raw, json) Hash identifier: QlUCswRAvYRW53R8qPj3D4+e/a2N5FM+Rgd+X2bOgRI= Subject key identifier: D5:53:25:95:DE:10:6E:4D:04:B3:8A:99:17:B7:65:10:8E:47:B3:C9 Authority key identifier: 31:95:1E:36:FF:D9:7C:1D:73:3A:90:A5:AF:6F:AD:A8:5F:D2:77:82 Certificate issuer: /CN=31951e36ffd97c1d733a90a5af6fada85fd27782 Certificate serial: 019AF0F5E616AD8463DCC19C51B6D22F826A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/cc00eb-56f6-41a7-8305-c299965bbc42/1/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.mft Manifest number: 5E Signing time: Sat 06 Dec 2025 00:00:38 +0000 Manifest this update: Sat 06 Dec 2025 00:00:38 +0000 Manifest next update: Sun 07 Dec 2025 00:00:38 +0000 Files and hashes: 1: MZUeNv_ZfB1zOpClr2-tqF_Sd4I.crl (hash: ttgChpmtynaoAKhQz76r8te/ERNofmFCwuAhA47uMjQ=) 2: TDVjYLyHzwQNTTzVC6g7tLdpTZo.roa (hash: op6/PInYnACJ7ya55ltpX72UWTOB+p1Ct4BWq04tsFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/cc00eb-56f6-41a7-8305-c299965bbc42/1/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/cc00eb-56f6-41a7-8305-c299965bbc42/1/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.mft rsync://rpki.ripe.net/repository/DEFAULT/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:e6:16:ad:84:63:dc:c1:9c:51:b6:d2:2f:82:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31951e36ffd97c1d733a90a5af6fada85fd27782 Validity Not Before: Dec 6 00:00:38 2025 GMT Not After : Dec 7 00:00:38 2025 GMT Subject: CN=d5532595de106e4d04b38a9917b765108e47b3c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c0:55:5b:05:4a:b4:0f:56:de:ac:58:db:32: a5:a0:5e:a4:fa:14:af:53:11:10:44:c0:32:b1:19: 9a:fd:3e:cc:27:ef:59:47:2d:0c:c8:61:37:13:91: 18:2f:e9:19:8c:28:79:1e:82:10:8c:80:84:6c:be: cf:bb:ad:5f:b1:07:f3:dd:a5:c8:67:a7:2a:af:e0: 14:81:3e:49:ba:af:66:19:9b:01:46:8e:cf:b0:29: 49:30:31:49:2d:62:da:a8:aa:a8:61:f2:31:d5:29: 00:63:09:f7:59:1d:5a:48:96:b4:bb:17:ef:c9:dc: e3:18:f3:94:0b:c9:9f:d0:56:db:da:4a:42:7a:0b: 8e:cd:1e:12:6d:d9:71:6d:a7:a3:fb:b0:e9:5f:76: 50:4e:97:0e:71:67:1e:87:fd:33:16:af:fc:b6:51: ad:e3:83:59:c8:d4:18:04:b3:bc:d7:67:f0:4f:5a: 7d:db:52:40:f4:74:fb:5d:63:e9:40:dc:54:1b:4d: eb:02:14:b5:3c:5d:8f:5d:a5:65:c0:12:a6:82:5a: 3c:fa:b2:34:66:af:97:a8:52:77:81:49:a5:9d:ea: 4a:eb:93:cd:22:41:09:08:94:7b:7d:71:2e:36:7c: 4a:94:0f:75:bd:01:d3:54:90:8b:7e:24:dc:e2:a2: 81:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:53:25:95:DE:10:6E:4D:04:B3:8A:99:17:B7:65:10:8E:47:B3:C9 X509v3 Authority Key Identifier: keyid:31:95:1E:36:FF:D9:7C:1D:73:3A:90:A5:AF:6F:AD:A8:5F:D2:77:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cc00eb-56f6-41a7-8305-c299965bbc42/1/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/cc00eb-56f6-41a7-8305-c299965bbc42/1/MZUeNv_ZfB1zOpClr2-tqF_Sd4I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ad:d4:54:a3:33:7f:e7:3f:2e:4d:65:c9:fb:a1:27:3f:eb: b7:5f:11:be:b0:d4:92:c1:2b:36:88:01:19:6d:1a:03:41:dd: db:ca:c0:d6:01:4b:ce:13:d9:55:ac:8c:09:d2:71:b0:12:fb: 15:36:b2:1e:1b:4d:e3:1c:53:a8:71:d3:da:24:6f:de:ff:dd: b2:fe:86:a5:46:13:59:84:ab:a7:9c:6c:52:11:b9:6b:59:ff: 6c:0b:2f:72:ad:07:b8:76:34:0d:21:17:de:a3:33:c0:55:fb: d6:13:82:9f:36:f4:08:a5:c2:24:69:90:dd:02:bc:48:b2:9d: 3a:23:7c:20:15:4f:7a:90:be:68:09:53:b1:b1:7c:43:d6:6c: 3f:5e:da:95:d9:e3:0d:33:7e:be:f1:c8:48:0a:9f:c7:92:65: a6:be:81:dd:59:23:4d:97:f5:33:1e:fd:28:1b:00:ed:f0:4a: 56:86:1d:52:10:21:d8:af:dc:b8:c2:fb:51:06:c7:58:5e:b3: 55:26:e7:e7:c3:ec:8f:20:07:49:af:03:59:a0:0d:49:f9:1e: 87:ac:b6:ef:14:22:da:81:0e:fd:aa:f9:31:4e:8d:b6:7e:da: ae:a7:6c:ca:2a:cd:e4:76:3c:8e:f7:ec:24:3a:aa:44:5d:a7: e3:c6:f3:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9eYWrYRj3MGcUbbSL4JqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxOTUxZTM2ZmZkOTdjMWQ3MzNhOTBhNWFmNmZhZGE4NWZk Mjc3ODIwHhcNMjUxMjA2MDAwMDM4WhcNMjUxMjA3MDAwMDM4WjAzMTEwLwYDVQQD EyhkNTUzMjU5NWRlMTA2ZTRkMDRiMzhhOTkxN2I3NjUxMDhlNDdiM2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcBVWwVKtA9W3qxY2zKloF6k+hSv UxEQRMAysRma/T7MJ+9ZRy0MyGE3E5EYL+kZjCh5HoIQjICEbL7Pu61fsQfz3aXI Z6cqr+AUgT5Juq9mGZsBRo7PsClJMDFJLWLaqKqoYfIx1SkAYwn3WR1aSJa0uxfv ydzjGPOUC8mf0Fbb2kpCeguOzR4Sbdlxbaej+7DpX3ZQTpcOcWceh/0zFq/8tlGt 44NZyNQYBLO812fwT1p921JA9HT7XWPpQNxUG03rAhS1PF2PXaVlwBKmglo8+rI0 Zq+XqFJ3gUmlnepK65PNIkEJCJR7fXEuNnxKlA91vQHTVJCLfiTc4qKB6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVTJZXeEG5NBLOKmRe3ZRCOR7PJMB8GA1UdIwQY MBaAFDGVHjb/2XwdczqQpa9vrahf0neCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVpVZU52X1pmQjF6T3BDbHIyLXRxRl9TZDRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9jYzAwZWItNTZmNi00MWE3LTgzMDUt YzI5OTk2NWJiYzQyLzEvTVpVZU52X1pmQjF6T3BDbHIyLXRxRl9TZDRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9jYzAwZWItNTZmNi00MWE3LTgzMDUtYzI5OTk2NWJiYzQy LzEvTVpVZU52X1pmQjF6T3BDbHIyLXRxRl9TZDRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGq3UVKMz f+c/Lk1lyfuhJz/rt18RvrDUksErNogBGW0aA0Hd28rA1gFLzhPZVayMCdJxsBL7 FTayHhtN4xxTqHHT2iRv3v/dsv6GpUYTWYSrp5xsUhG5a1n/bAsvcq0HuHY0DSEX 3qMzwFX71hOCnzb0CKXCJGmQ3QK8SLKdOiN8IBVPepC+aAlTsbF8Q9ZsP17aldnj DTN+vvHISAqfx5Jlpr6B3VkjTZf1Mx79KBsA7fBKVoYdUhAh2K/cuML7UQbHWF6z VSbn58PsjyAHSa8DWaANSfkeh6y27xQi2oEO/ar5MU6Ntn7arqdsyirN5HY8jvfs JDqqRF2n48bzBA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:47 2025 by rpki-client