This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft File: mZ333A7VGPHsaZdM-YzsqtoahoA.mft (raw, json) Hash identifier: +ZujQ6T9GXOSj7/J0jQUlhBgLAYGZm8SZNLknJBVNYA= Subject key identifier: 99:35:5A:33:E4:C9:C5:15:01:8B:58:94:94:73:F2:83:D9:BD:81:63 Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80 Certificate issuer: /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680 Certificate serial: 019AF4655D0A08CFDAD5700D14CB18CD222F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft Manifest number: 1776 Signing time: Sat 06 Dec 2025 16:01:14 +0000 Manifest this update: Sat 06 Dec 2025 16:01:14 +0000 Manifest next update: Sun 07 Dec 2025 16:01:14 +0000 Files and hashes: 1: VDSC__kYP5_4kXHu2u3139bBQnM.roa (hash: ZCOyTsAtgAk5HLmIWIyYiY4LjMxxRnLlXw4wf8pNdoU=) 2: mZ333A7VGPHsaZdM-YzsqtoahoA.crl (hash: vQU6n0We28fVpy4EqZkDeqvyic56uQi+uF6IgEL9xNk=) 3: wo81X6dNJnxHwqDCPslyPelPnyk.roa (hash: LNeGgskvgHmXiZQlDf/OPt0CW7kE7h3hGkIagvdPCcA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:5d:0a:08:cf:da:d5:70:0d:14:cb:18:cd:22:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680 Validity Not Before: Dec 6 16:01:14 2025 GMT Not After : Dec 7 16:01:14 2025 GMT Subject: CN=99355a33e4c9c515018b58949473f283d9bd8163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:fe:60:72:60:e2:99:b6:a1:0b:46:44:1b:d0: 4f:e2:89:cf:46:1c:61:76:b8:ee:a8:6b:1f:22:aa: 68:68:c4:c8:1e:94:73:bf:e6:45:29:d3:00:01:7f: 7a:b4:48:df:6a:56:7a:dc:e7:39:75:b0:91:21:cd: 86:24:1d:3b:f2:45:b2:8e:1d:35:17:8f:a6:7c:3c: b1:4e:ca:00:86:b6:5f:91:5f:0d:c7:f1:59:bd:69: 4c:71:48:1b:40:5a:37:b5:ff:1b:cc:d4:27:a2:d3: a9:d7:f3:4a:bd:a0:b3:64:c8:4a:9f:4a:ae:83:73: 69:7c:36:35:6e:98:e2:63:81:e2:80:a3:c7:3c:03: 71:e6:08:a4:c1:3f:d1:2f:a9:07:4e:08:56:f5:55: 65:07:55:9d:51:31:6b:5a:cd:27:3d:cc:fa:72:47: ec:86:73:b9:7d:01:78:69:ec:02:6f:1f:0c:9c:20: df:d7:32:86:c4:5c:c4:45:fd:a0:dd:b5:49:a2:12: 44:36:ad:6e:b9:5a:19:df:5d:30:15:06:f2:91:dc: 5d:00:af:71:21:66:9b:d8:19:66:8b:bc:e5:61:48: cc:78:e4:1c:ba:ed:83:f3:7e:05:50:05:7f:1e:9e: 27:5e:27:6b:cc:a0:8b:e5:fb:64:cb:13:f8:cc:d4: 7d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:35:5A:33:E4:C9:C5:15:01:8B:58:94:94:73:F2:83:D9:BD:81:63 X509v3 Authority Key Identifier: keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:d5:25:8f:04:d4:1a:1a:41:78:cd:0a:0f:e7:eb:ae:76:bf: e0:45:73:ba:ba:95:65:cc:de:5e:be:36:17:82:1d:ec:36:63: da:a1:50:97:da:8f:f5:30:56:cd:99:a2:fc:eb:44:b3:f8:df: b7:9f:44:69:ff:51:ef:35:a9:28:dd:aa:47:c4:e4:8c:38:df: b9:d7:bc:e7:22:b6:b2:af:e4:9f:aa:bb:75:b1:c7:1a:9c:36: bd:af:b5:55:12:91:92:70:08:0d:2e:35:73:b6:dc:6a:3d:b7: e1:ae:28:1c:ab:96:21:4c:75:7a:08:dd:3c:cb:dd:74:f6:99: c5:e3:58:04:fb:44:fb:b6:5e:96:6b:0a:0c:23:0a:63:e2:64: 36:78:fb:97:b6:fc:20:14:20:75:a1:bc:26:98:cf:c1:99:ed: 76:56:bc:ce:fc:c2:d2:47:b6:be:bd:bc:51:99:42:1b:88:c6: 9a:cd:54:35:4e:e4:e9:24:7a:9e:f0:12:61:e3:ab:8f:d0:50: cd:52:5c:8a:c0:f7:4f:77:43:5c:f0:00:b3:06:3a:28:6f:0e: 38:b8:66:04:4a:0f:91:98:85:74:a2:af:af:b1:f9:fb:61:c2: 4c:37:12:37:52:d2:0f:20:d0:a0:b3:64:c6:94:26:db:22:cc: 62:2f:a8:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZV0KCM/a1XANFMsYzSIvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5OWRmN2RjMGVkNTE4ZjFlYzY5OTc0Y2Y5OGNlY2FhZGEx YTg2ODAwHhcNMjUxMjA2MTYwMTE0WhcNMjUxMjA3MTYwMTE0WjAzMTEwLwYDVQQD Eyg5OTM1NWEzM2U0YzljNTE1MDE4YjU4OTQ5NDczZjI4M2Q5YmQ4MTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP5gcmDimbahC0ZEG9BP4onPRhxh drjuqGsfIqpoaMTIHpRzv+ZFKdMAAX96tEjfalZ63Oc5dbCRIc2GJB078kWyjh01 F4+mfDyxTsoAhrZfkV8Nx/FZvWlMcUgbQFo3tf8bzNQnotOp1/NKvaCzZMhKn0qu g3NpfDY1bpjiY4HigKPHPANx5gikwT/RL6kHTghW9VVlB1WdUTFrWs0nPcz6ckfs hnO5fQF4aewCbx8MnCDf1zKGxFzERf2g3bVJohJENq1uuVoZ310wFQbykdxdAK9x IWab2Blmi7zlYUjMeOQcuu2D834FUAV/Hp4nXidrzKCL5ftkyxP4zNR9wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJk1WjPkycUVAYtYlJRz8oPZvYFjMB8GA1UdIwQY MBaAFJmd99wO1Rjx7GmXTPmM7KraGoaAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iYTg4ZjItMjE1Zi00Zjg5LWEzYWYt MTM4Yjc4N2RlM2UzLzEvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9iYTg4ZjItMjE1Zi00Zjg5LWEzYWYtMTM4Yjc4N2RlM2Uz LzEvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARdUljwTU GhpBeM0KD+frrna/4EVzurqVZczeXr42F4Id7DZj2qFQl9qP9TBWzZmi/OtEs/jf t59Eaf9R7zWpKN2qR8TkjDjfude85yK2sq/kn6q7dbHHGpw2va+1VRKRknAIDS41 c7bcaj234a4oHKuWIUx1egjdPMvddPaZxeNYBPtE+7ZelmsKDCMKY+JkNnj7l7b8 IBQgdaG8JpjPwZntdla8zvzC0ke2vr28UZlCG4jGms1UNU7k6SR6nvASYeOrj9BQ zVJcisD3T3dDXPAAswY6KG8OOLhmBEoPkZiFdKKvr7H5+2HCTDcSN1LSDyDQoLNk xpQm2yLMYi+o7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 22:24:21 2025 by rpki-client