This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft File: MzBvg92caNG7WukbUMJukpyB0v0.mft (raw, json) Hash identifier: tA9LCoTSkjMT9QZR7Nf4wtI2x3TKVr7zMw6aYJWur6E= Subject key identifier: 93:25:71:6C:01:99:8C:AE:7A:7E:67:D2:51:34:F4:01:59:EE:1F:B4 Authority key identifier: 33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD Certificate issuer: /CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd Certificate serial: 019AF23F938C8BF67E2B12192A285596D473 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft Manifest number: 02B6 Signing time: Sat 06 Dec 2025 06:00:43 +0000 Manifest this update: Sat 06 Dec 2025 06:00:43 +0000 Manifest next update: Sun 07 Dec 2025 06:00:43 +0000 Files and hashes: 1: 0-WwVD2zFPGNgQhhntKyco3wY3I.roa (hash: bPryhs2CIXqAzaBTX4TIyszyma7cGcWiYG+PS79estE=) 2: MzBvg92caNG7WukbUMJukpyB0v0.crl (hash: bLYDwd1HLXD3miUmF0EG67G3fDUvJrHfoMz3eNMkHsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:93:8c:8b:f6:7e:2b:12:19:2a:28:55:96:d4:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33306f83dd9c68d1bb5ae91b50c26e929c81d2fd Validity Not Before: Dec 6 06:00:43 2025 GMT Not After : Dec 7 06:00:43 2025 GMT Subject: CN=9325716c01998cae7a7e67d25134f40159ee1fb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2d:08:3e:c8:b9:e6:e1:92:90:58:65:3f:1d: c1:5c:e0:d2:22:e7:2b:5a:7e:62:78:d7:8a:11:cb: fa:90:c3:d7:90:fa:a9:fe:7b:d1:75:bf:c2:a3:36: de:30:d0:98:83:c1:1d:bf:3e:32:92:49:93:d5:64: d5:a7:72:31:69:58:3a:60:10:da:6c:94:3c:4c:be: 6c:f3:c7:11:c7:c4:e5:7b:d6:9b:b7:4b:68:5c:2f: 7b:dc:b8:08:48:32:d3:5c:bd:ca:bd:4f:02:08:62: 28:37:53:03:c0:9d:41:eb:bf:a0:31:d7:1e:aa:4a: 14:05:27:5f:84:fd:e5:d4:6e:bc:ad:bf:1e:14:23: 05:d1:f2:9e:b6:1e:a8:62:4f:59:2d:18:9c:19:56: 91:0f:b1:2a:4b:38:d7:58:b3:77:50:38:48:d5:cc: d4:64:75:d2:5f:b4:06:d2:0c:86:6b:ed:b0:ff:a5: fd:64:50:82:37:f8:27:6e:ed:1b:b3:c0:9b:e1:84: b7:3a:2c:95:0b:5d:c3:60:ac:cb:32:2d:5e:86:17: 9b:d6:c3:b2:8f:56:41:39:c6:f4:39:aa:4e:4a:06: 79:49:68:6e:a5:86:b0:f1:ad:c2:0d:2b:3a:0b:59: 12:bd:6b:9a:89:10:17:7d:2d:6a:56:8c:74:ce:9e: aa:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:25:71:6C:01:99:8C:AE:7A:7E:67:D2:51:34:F4:01:59:EE:1F:B4 X509v3 Authority Key Identifier: keyid:33:30:6F:83:DD:9C:68:D1:BB:5A:E9:1B:50:C2:6E:92:9C:81:D2:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzBvg92caNG7WukbUMJukpyB0v0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/408e37-fae2-48b5-bd15-73d94cb54526/1/MzBvg92caNG7WukbUMJukpyB0v0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:99:a6:b8:93:83:04:bf:48:25:49:dc:9a:0c:b3:ba:1f:36: fb:7a:2c:cf:07:57:0c:65:b7:92:1a:c4:c0:c0:fa:f7:64:f5: 6c:6c:7f:a6:49:eb:8d:a6:ab:70:77:42:7c:cb:75:0b:06:a2: eb:c9:22:7d:b9:c2:cd:fe:bd:62:27:b4:dc:b8:8b:3d:5f:2a: b0:55:b0:f9:6b:ff:cd:56:f4:b9:06:ba:79:66:a1:76:8a:93: 4f:fa:95:2a:12:b3:56:e1:58:4f:14:7c:97:60:db:88:f1:6b: 0d:4f:cd:1b:00:c2:9e:8f:26:c5:53:c4:77:88:78:4b:b5:db: 12:98:50:57:f1:e9:92:ba:a1:a5:77:d5:88:42:b0:55:06:05: f5:ff:f2:25:77:eb:b9:06:c5:6d:89:6d:31:c6:ce:5c:5f:96: 71:ae:5c:0b:ca:70:a7:34:fb:00:12:97:5b:aa:aa:43:33:92: 1b:f0:ac:e3:51:77:b8:84:13:8a:fb:9e:d8:c5:ae:8b:c6:31: 0e:b7:49:86:e6:8a:33:63:12:7d:30:56:b4:74:7c:52:ce:ef: 52:ee:8e:c9:0a:4d:7d:0f:6a:ac:cd:bd:27:73:37:54:47:e3: c7:15:b9:a6:cf:20:a3:c4:7a:cf:59:d6:bc:e9:f2:f5:85:4e: 84:ea:6a:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5OMi/Z+KxIZKihVltRzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMzA2ZjgzZGQ5YzY4ZDFiYjVhZTkxYjUwYzI2ZTkyOWM4 MWQyZmQwHhcNMjUxMjA2MDYwMDQzWhcNMjUxMjA3MDYwMDQzWjAzMTEwLwYDVQQD Eyg5MzI1NzE2YzAxOTk4Y2FlN2E3ZTY3ZDI1MTM0ZjQwMTU5ZWUxZmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC0IPsi55uGSkFhlPx3BXODSIucr Wn5ieNeKEcv6kMPXkPqp/nvRdb/CozbeMNCYg8Edvz4ykkmT1WTVp3IxaVg6YBDa bJQ8TL5s88cRx8Tle9abt0toXC973LgISDLTXL3KvU8CCGIoN1MDwJ1B67+gMdce qkoUBSdfhP3l1G68rb8eFCMF0fKeth6oYk9ZLRicGVaRD7EqSzjXWLN3UDhI1czU ZHXSX7QG0gyGa+2w/6X9ZFCCN/gnbu0bs8Cb4YS3OiyVC13DYKzLMi1ehheb1sOy j1ZBOcb0OapOSgZ5SWhupYaw8a3CDSs6C1kSvWuaiRAXfS1qVox0zp6qgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMlcWwBmYyuen5n0lE09AFZ7h+0MB8GA1UdIwQY MBaAFDMwb4PdnGjRu1rpG1DCbpKcgdL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXpCdmc5MmNhTkc3V3VrYlVNSnVrcHlCMHYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80MDhlMzctZmFlMi00OGI1LWJkMTUt NzNkOTRjYjU0NTI2LzEvTXpCdmc5MmNhTkc3V3VrYlVNSnVrcHlCMHYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80MDhlMzctZmFlMi00OGI1LWJkMTUtNzNkOTRjYjU0NTI2 LzEvTXpCdmc5MmNhTkc3V3VrYlVNSnVrcHlCMHYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGpmmuJOD BL9IJUncmgyzuh82+3oszwdXDGW3khrEwMD692T1bGx/pknrjaarcHdCfMt1Cwai 68kifbnCzf69Yie03LiLPV8qsFWw+Wv/zVb0uQa6eWahdoqTT/qVKhKzVuFYTxR8 l2DbiPFrDU/NGwDCno8mxVPEd4h4S7XbEphQV/HpkrqhpXfViEKwVQYF9f/yJXfr uQbFbYltMcbOXF+Wca5cC8pwpzT7ABKXW6qqQzOSG/Cs41F3uIQTivue2MWui8Yx DrdJhuaKM2MSfTBWtHR8Us7vUu6OyQpNfQ9qrM29J3M3VEfjxxW5ps8go8R6z1nW vOny9YVOhOpqoA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:22:10 2025 by rpki-client