This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft File: mZVu39RteCBhbFZwdNHEt1TxzAs.mft (raw, json) Hash identifier: j1v4+ZNobUWUN9VsmLI1/axG+907NPpLW4yuMeohU88= Subject key identifier: 93:94:73:8E:D5:E1:C5:0C:CD:8F:09:DA:7B:CB:17:E7:4F:2C:DE:32 Authority key identifier: 99:95:6E:DF:D4:6D:78:20:61:6C:56:70:74:D1:C4:B7:54:F1:CC:0B Certificate issuer: /CN=99956edfd46d7820616c567074d1c4b754f1cc0b Certificate serial: 019AF31CD2A1C156B2407C027B3B64B69E8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft Manifest number: 036B Signing time: Sat 06 Dec 2025 10:02:23 +0000 Manifest this update: Sat 06 Dec 2025 10:02:23 +0000 Manifest next update: Sun 07 Dec 2025 10:02:23 +0000 Files and hashes: 1: lOnxViznHLEoAyPam_W4fa_SC2w.roa (hash: 9BCM5+Jiz3egzCFeLDqHjHDQAVUeCPf+h8/byU9pFAw=) 2: mZVu39RteCBhbFZwdNHEt1TxzAs.crl (hash: q+NOp8XSKOZv4ZHmNFCmNRWffX2Qyi+IX9eCa3Hi4h8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:d2:a1:c1:56:b2:40:7c:02:7b:3b:64:b6:9e:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99956edfd46d7820616c567074d1c4b754f1cc0b Validity Not Before: Dec 6 10:02:23 2025 GMT Not After : Dec 7 10:02:23 2025 GMT Subject: CN=9394738ed5e1c50ccd8f09da7bcb17e74f2cde32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:19:58:ae:a8:c2:38:a0:84:b6:cb:c3:36:22: 00:96:04:f8:83:9c:f1:2e:ea:cf:76:e0:a4:6a:87: 5d:c5:99:ab:2c:73:a2:e5:9a:a7:1e:07:3a:2c:da: d6:4c:a4:e6:e2:50:fe:52:33:cf:d7:68:6d:df:b8: 13:5b:b2:4e:e1:a7:54:9a:43:ea:3d:13:b6:01:9e: 35:4d:58:19:ce:4b:e5:4f:a4:f2:26:59:6b:6e:15: c8:38:a2:88:23:dd:7e:60:ac:ce:80:09:c6:b8:f9: 3d:18:ab:9f:c7:eb:14:ca:d5:63:7d:76:d3:c3:9a: 61:ef:36:90:86:22:b3:7b:12:a8:2f:6c:3f:57:9f: 46:46:69:de:df:04:00:35:ab:df:c3:7f:28:3d:d8: 79:6a:33:34:41:43:c3:d9:f3:59:59:b2:84:a3:24: f6:bb:e7:fd:ef:01:70:38:f2:7a:e3:b7:ea:b3:40: a3:c3:a2:26:54:21:98:b8:d2:8b:7d:d3:84:5a:1d: 74:62:fe:0a:be:d4:e4:18:fa:6e:9c:5b:c8:a7:2a: b1:9c:60:c7:82:33:0a:0b:64:50:04:23:46:18:e7: 20:68:89:8c:ce:31:ca:bf:c2:58:37:40:b2:53:45: 5b:a8:4b:f4:2a:47:c6:d4:9c:00:26:10:ac:32:3d: e3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:94:73:8E:D5:E1:C5:0C:CD:8F:09:DA:7B:CB:17:E7:4F:2C:DE:32 X509v3 Authority Key Identifier: keyid:99:95:6E:DF:D4:6D:78:20:61:6C:56:70:74:D1:C4:B7:54:F1:CC:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZVu39RteCBhbFZwdNHEt1TxzAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/082ae3-361b-4fcf-9f3a-be5ed6761411/1/mZVu39RteCBhbFZwdNHEt1TxzAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e4:37:30:90:7e:3c:b3:2c:37:6c:a8:66:d9:f8:06:d5:dd: 46:c3:57:83:7a:83:0b:bf:02:f6:f5:e1:af:eb:44:1a:c8:2c: f0:e1:03:3e:b3:a0:00:de:d0:33:c6:16:c7:6c:9d:fb:72:52: 19:86:67:c0:10:10:91:a6:ca:d8:dc:3e:fd:f7:41:4a:25:59: 61:5f:d3:84:f4:c8:32:2f:72:6a:d4:4b:67:70:72:f9:e5:7e: 68:f4:42:ae:90:8f:68:43:4d:d4:d8:ae:a9:1c:b9:97:01:32: c2:4e:c5:1f:ae:72:37:95:44:54:ca:ad:fd:b2:b4:f9:af:5f: 87:39:c3:f6:10:a7:11:96:9e:04:46:2e:a4:31:fd:80:58:1c: 14:5c:02:f1:d8:39:41:57:a4:38:15:79:71:fc:70:71:dc:10: 84:b8:e6:d0:91:65:44:28:8f:44:48:8e:3a:98:b5:88:2d:10: 42:06:29:1a:2d:35:9f:fb:cb:93:ef:0a:55:e7:ca:1d:4f:82: 93:1f:76:2d:a3:d2:00:46:b3:4c:83:ec:4d:77:a5:9c:d0:4e: 39:c9:60:b4:50:d4:1e:a4:a3:0e:02:7d:0c:2f:6a:f3:a2:99: 87:31:a5:35:98:6c:eb:fe:db:db:d1:31:51:ee:ac:3b:db:f0: 65:6b:3d:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHNKhwVayQHwCeztktp6KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5OTU2ZWRmZDQ2ZDc4MjA2MTZjNTY3MDc0ZDFjNGI3NTRm MWNjMGIwHhcNMjUxMjA2MTAwMjIzWhcNMjUxMjA3MTAwMjIzWjAzMTEwLwYDVQQD Eyg5Mzk0NzM4ZWQ1ZTFjNTBjY2Q4ZjA5ZGE3YmNiMTdlNzRmMmNkZTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxlYrqjCOKCEtsvDNiIAlgT4g5zx LurPduCkaoddxZmrLHOi5ZqnHgc6LNrWTKTm4lD+UjPP12ht37gTW7JO4adUmkPq PRO2AZ41TVgZzkvlT6TyJllrbhXIOKKII91+YKzOgAnGuPk9GKufx+sUytVjfXbT w5ph7zaQhiKzexKoL2w/V59GRmne3wQANavfw38oPdh5ajM0QUPD2fNZWbKEoyT2 u+f97wFwOPJ647fqs0Cjw6ImVCGYuNKLfdOEWh10Yv4KvtTkGPpunFvIpyqxnGDH gjMKC2RQBCNGGOcgaImMzjHKv8JYN0CyU0VbqEv0KkfG1JwAJhCsMj3jGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOUc47V4cUMzY8J2nvLF+dPLN4yMB8GA1UdIwQY MBaAFJmVbt/UbXggYWxWcHTRxLdU8cwLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVpWdTM5UnRlQ0JoYkZad2ROSEV0MVR4ekFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wODJhZTMtMzYxYi00ZmNmLTlmM2Et YmU1ZWQ2NzYxNDExLzEvbVpWdTM5UnRlQ0JoYkZad2ROSEV0MVR4ekFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8wODJhZTMtMzYxYi00ZmNmLTlmM2EtYmU1ZWQ2NzYxNDEx LzEvbVpWdTM5UnRlQ0JoYkZad2ROSEV0MVR4ekFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOQ3MJB+ PLMsN2yoZtn4BtXdRsNXg3qDC78C9vXhr+tEGsgs8OEDPrOgAN7QM8YWx2yd+3JS GYZnwBAQkabK2Nw+/fdBSiVZYV/ThPTIMi9yatRLZ3By+eV+aPRCrpCPaENN1Niu qRy5lwEywk7FH65yN5VEVMqt/bK0+a9fhznD9hCnEZaeBEYupDH9gFgcFFwC8dg5 QVekOBV5cfxwcdwQhLjm0JFlRCiPREiOOpi1iC0QQgYpGi01n/vLk+8KVefKHU+C kx92LaPSAEazTIPsTXelnNBOOclgtFDUHqSjDgJ9DC9q86KZhzGlNZhs6/7b29Ex Ue6sO9vwZWs9Kw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:27:53 2025 by rpki-client