This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft File: mZK1NCb7YU2aWm2D9ABWamYMndI.mft (raw, json) Hash identifier: Dl4AdqYDQ2Ko2z5sw7cBYlwRg6UaS+SFhRXDJ2j9hP4= Subject key identifier: 70:50:1F:D5:8C:9C:38:93:6E:05:A5:26:1E:5F:DA:64:44:19:49:50 Authority key identifier: 99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2 Certificate issuer: /CN=9992b53426fb614d9a5a6d83f400566a660c9dd2 Certificate serial: 019B35D7630DB81CFDC2A24B990696003024 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft Manifest number: 1358 Signing time: Fri 19 Dec 2025 09:01:06 +0000 Manifest this update: Fri 19 Dec 2025 09:01:06 +0000 Manifest next update: Sat 20 Dec 2025 09:01:06 +0000 Files and hashes: 1: iG2Qj8n6fZw-GirtzGhiiR4VwRI.roa (hash: C/swOHl78EzDeIac5yTERHHT18YviZO0RyNpfkEvBQE=) 2: mZK1NCb7YU2aWm2D9ABWamYMndI.crl (hash: KK6BkcWmJwsGHhGL1BE4VzSxQBiiTyE3b1yjq2Mt6HU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 09:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:63:0d:b8:1c:fd:c2:a2:4b:99:06:96:00:30:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9992b53426fb614d9a5a6d83f400566a660c9dd2 Validity Not Before: Dec 19 09:01:06 2025 GMT Not After : Dec 20 09:01:06 2025 GMT Subject: CN=70501fd58c9c38936e05a5261e5fda6444194950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:38:5c:4f:a9:5a:19:ea:62:29:67:39:40:7d: 3f:7b:4c:40:39:a9:30:09:7a:27:80:cc:77:1a:5f: e5:00:8a:37:e0:c5:0b:ad:b5:b5:21:09:c2:f9:bb: 43:81:5f:e1:ad:2f:d9:2a:2d:8a:bd:9f:4e:e7:d0: 06:df:3e:b6:92:7d:71:cd:5c:dd:0d:24:cb:8a:3d: c6:b3:a9:b0:f1:bc:c4:cf:73:d6:e7:c0:fa:4a:5e: ab:1c:24:75:b4:cf:42:16:66:cd:48:3a:66:ab:b2: 14:13:6a:f3:96:5a:a9:db:85:37:a5:80:ac:43:1f: 98:f1:c3:ff:31:6f:fa:0c:a9:7d:33:80:a8:bf:52: 48:d8:f2:01:95:43:37:d5:2f:ef:3a:10:2d:89:0e: 56:e5:35:95:f7:bb:07:1c:fd:d9:33:42:54:a1:8d: 9b:2a:c4:14:71:36:01:56:74:0b:16:3b:c6:c1:b9: df:61:7d:bc:52:19:aa:c9:a7:2e:0f:2a:44:5d:54: da:c5:0f:e0:a6:3d:d2:74:c6:0e:52:eb:fd:a5:41: 10:f7:0a:f7:93:3c:da:a6:4d:f1:84:fa:af:05:2d: 8b:d9:42:50:c1:16:04:01:a5:61:71:7e:34:b9:9f: 2b:d9:96:d5:9c:8a:90:06:52:7c:1e:7c:be:91:5e: 2d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:50:1F:D5:8C:9C:38:93:6E:05:A5:26:1E:5F:DA:64:44:19:49:50 X509v3 Authority Key Identifier: keyid:99:92:B5:34:26:FB:61:4D:9A:5A:6D:83:F4:00:56:6A:66:0C:9D:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZK1NCb7YU2aWm2D9ABWamYMndI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/90172a-969b-46da-8088-791a62d2d8ab/1/mZK1NCb7YU2aWm2D9ABWamYMndI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:53:41:c3:ac:c9:a6:ba:a1:1c:b7:a5:06:d2:27:38:78:20: 96:b0:dc:43:1f:d2:ef:1c:69:8b:8e:16:3e:87:48:66:fa:2b: 3d:8b:1a:2c:25:65:08:be:7b:0e:2d:2c:68:5a:e2:aa:77:c3: 55:ff:7f:87:b7:47:1e:93:f6:be:b6:3c:30:79:9d:c8:63:93: fc:45:c5:fb:48:46:98:92:ff:97:a6:c2:2b:1d:1b:f4:1a:ae: 24:cf:cd:cb:cf:f5:9d:20:a0:33:b3:b1:67:b9:4d:41:09:f3: 96:9c:62:75:a1:a6:22:88:d3:17:9d:88:42:0b:13:7d:dd:86: 39:7f:0b:42:bb:9d:ec:ba:77:d4:29:de:f1:f4:0c:4a:56:60: 4e:94:b7:b9:78:e5:ca:0e:c8:4f:6a:4c:97:77:fc:0f:68:27: 11:af:c9:73:af:c1:71:24:b2:0a:92:e7:c5:bb:55:30:5c:89: b8:fe:27:4e:51:50:4d:2f:be:2f:4b:47:f7:19:3c:bb:68:13: 84:8e:38:80:fb:e4:40:e7:a7:87:1a:56:dc:d4:ed:10:6b:dc: ce:89:3e:2b:a7:91:5e:fa:75:89:10:4c:70:92:0c:90:07:e7: b8:ff:7b:b7:88:24:4f:7b:d5:eb:a7:7e:28:5f:7b:49:56:21: 6d:1f:a0:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs112MNuBz9wqJLmQaWADAkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5OTJiNTM0MjZmYjYxNGQ5YTVhNmQ4M2Y0MDA1NjZhNjYw YzlkZDIwHhcNMjUxMjE5MDkwMTA2WhcNMjUxMjIwMDkwMTA2WjAzMTEwLwYDVQQD Eyg3MDUwMWZkNThjOWMzODkzNmUwNWE1MjYxZTVmZGE2NDQ0MTk0OTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqThcT6laGepiKWc5QH0/e0xAOakw CXongMx3Gl/lAIo34MULrbW1IQnC+btDgV/hrS/ZKi2KvZ9O59AG3z62kn1xzVzd DSTLij3Gs6mw8bzEz3PW58D6Sl6rHCR1tM9CFmbNSDpmq7IUE2rzllqp24U3pYCs Qx+Y8cP/MW/6DKl9M4Cov1JI2PIBlUM31S/vOhAtiQ5W5TWV97sHHP3ZM0JUoY2b KsQUcTYBVnQLFjvGwbnfYX28UhmqyacuDypEXVTaxQ/gpj3SdMYOUuv9pUEQ9wr3 kzzapk3xhPqvBS2L2UJQwRYEAaVhcX40uZ8r2ZbVnIqQBlJ8Hny+kV4tzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBQH9WMnDiTbgWlJh5f2mREGUlQMB8GA1UdIwQY MBaAFJmStTQm+2FNmlptg/QAVmpmDJ3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVpLMU5DYjdZVTJhV20yRDlBQldhbVlNbmRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC85MDE3MmEtOTY5Yi00NmRhLTgwODgt NzkxYTYyZDJkOGFiLzEvbVpLMU5DYjdZVTJhV20yRDlBQldhbVlNbmRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC85MDE3MmEtOTY5Yi00NmRhLTgwODgtNzkxYTYyZDJkOGFi LzEvbVpLMU5DYjdZVTJhV20yRDlBQldhbVlNbmRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVNBw6zJ prqhHLelBtInOHgglrDcQx/S7xxpi44WPodIZvorPYsaLCVlCL57Di0saFriqnfD Vf9/h7dHHpP2vrY8MHmdyGOT/EXF+0hGmJL/l6bCKx0b9BquJM/Ny8/1nSCgM7Ox Z7lNQQnzlpxidaGmIojTF52IQgsTfd2GOX8LQrud7Lp31Cne8fQMSlZgTpS3uXjl yg7IT2pMl3f8D2gnEa/Jc6/BcSSyCpLnxbtVMFyJuP4nTlFQTS++L0tH9xk8u2gT hI44gPvkQOenhxpW3NTtEGvczok+K6eRXvp1iRBMcJIMkAfnuP97t4gkT3vV66d+ KF97SVYhbR+gvA== -----END CERTIFICATE-----Generated at Fri Dec 19 18:50:37 2025 by rpki-client