This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft File: MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft (raw, json) Hash identifier: siabZpQ4M/66O01xekX9IryHTM+1miUr/sndzRR15ME= Subject key identifier: C0:42:AA:AF:E4:C0:93:62:50:C8:C7:42:87:4F:A3:80:B1:0B:15:AA Authority key identifier: 31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91 Certificate issuer: /CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91 Certificate serial: 019B3FED331EE6765327EDA7E205C3853719 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft Manifest number: 16DF Signing time: Sun 21 Dec 2025 08:01:08 +0000 Manifest this update: Sun 21 Dec 2025 08:01:08 +0000 Manifest next update: Mon 22 Dec 2025 08:01:08 +0000 Files and hashes: 1: LgelsY-16hZE8VmZ4UWScnrAkQA.roa (hash: 5MPF2K6ZagDsXMwY0mVJRSAJCcCewM4ZcbU+TqCGJzs=) 2: MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl (hash: O/+vlEeo3UX6VW7TAhhZrP3oevu1o4kk+TqDza43Jro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:33:1e:e6:76:53:27:ed:a7:e2:05:c3:85:37:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3192c52f360a3a72fe22441ac3fc7e0e5225ee91 Validity Not Before: Dec 21 08:01:08 2025 GMT Not After : Dec 22 08:01:08 2025 GMT Subject: CN=c042aaafe4c0936250c8c742874fa380b10b15aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2f:ab:72:32:35:ec:fd:1c:e4:2e:21:55:a6: 5e:20:09:a9:27:b8:40:41:34:e5:20:1d:5d:9a:01: ae:f5:03:c0:08:b7:c7:91:42:d0:27:c8:22:4a:1c: a8:c9:16:01:aa:d7:c4:5d:fc:17:90:e8:40:f7:2a: 11:8b:e3:e3:0e:48:84:9f:07:cf:69:ea:16:1a:66: 6a:ba:f5:03:19:ac:bf:45:c5:20:4d:64:92:c3:96: 6d:a9:c3:00:1a:f6:7f:fa:e6:26:25:8e:d7:d2:75: 18:b1:5a:d1:ac:97:db:2f:a0:5e:24:6c:5e:a9:d0: 9e:cf:ff:1e:8a:23:bc:fd:e4:ac:72:b2:9b:a4:cc: 52:1d:37:bc:13:0b:eb:24:f9:e9:2c:7c:3c:4e:2f: b9:c9:27:d3:9a:f8:8e:21:60:18:66:36:ea:ac:7f: 6c:82:9b:64:af:a5:63:ba:9e:5b:e3:3a:4e:58:04: 5c:b7:f5:01:28:63:cb:b8:ef:6f:be:91:80:1c:bf: fc:49:b9:50:9b:0a:65:a8:bd:f7:34:7e:fe:34:69: 22:f3:d3:98:7d:99:14:d5:bf:fa:19:1f:4b:16:6c: 76:58:4e:ca:d4:c8:95:5c:01:47:86:bb:e5:70:fa: f8:54:9d:09:11:02:64:77:90:a4:af:56:2a:13:30: 24:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:42:AA:AF:E4:C0:93:62:50:C8:C7:42:87:4F:A3:80:B1:0B:15:AA X509v3 Authority Key Identifier: keyid:31:92:C5:2F:36:0A:3A:72:FE:22:44:1A:C3:FC:7E:0E:52:25:EE:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZLFLzYKOnL-IkQaw_x-DlIl7pE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/524bfe-c5ae-4f67-8413-2748c4002c2e/1/MZLFLzYKOnL-IkQaw_x-DlIl7pE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:a2:ed:db:77:d5:84:a9:dc:71:7c:9c:3a:52:34:fd:60:6e: c4:45:1a:c2:2d:df:57:2e:44:83:98:8d:02:30:7f:f5:a8:b6: 2c:35:f1:42:fb:cd:e1:b2:9f:a0:e1:59:d2:23:0e:88:8f:3c: 23:d1:c6:91:e8:01:d9:2e:e8:51:73:8a:2b:31:4f:a0:34:ba: 39:0a:46:b9:fc:11:15:08:6d:40:4b:d5:35:52:b4:c3:62:a3: c5:e3:d3:02:79:b2:0d:c4:3b:20:c1:a3:0b:bb:bf:fa:68:af: 9b:89:67:57:41:3f:c3:6a:c9:8a:79:f7:fa:a5:b7:60:c1:79: 07:e6:0a:99:bd:e7:10:2b:15:dd:9c:3c:17:83:f2:d7:f7:29: 89:6f:4e:4d:25:c3:32:26:f6:7f:43:71:a1:a8:9d:f1:5b:48: bd:cc:8f:9a:c8:2d:6d:ec:86:f1:91:3f:b2:d0:a4:66:0f:23: c3:2d:c6:c9:81:ef:90:04:b9:1e:10:93:ab:d7:68:65:0e:06: 79:9f:1a:cb:7a:0c:25:11:86:93:46:c6:de:52:fe:52:54:bb: 97:27:7c:88:b4:a8:87:75:fd:cc:3d:c2:e9:6b:87:67:d5:01: c4:69:22:ba:a8:12:56:e8:fc:56:05:8f:69:32:d8:0c:bc:0b: 8e:10:fa:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7TMe5nZTJ+2n4gXDhTcZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxOTJjNTJmMzYwYTNhNzJmZTIyNDQxYWMzZmM3ZTBlNTIy NWVlOTEwHhcNMjUxMjIxMDgwMTA4WhcNMjUxMjIyMDgwMTA4WjAzMTEwLwYDVQQD EyhjMDQyYWFhZmU0YzA5MzYyNTBjOGM3NDI4NzRmYTM4MGIxMGIxNWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji+rcjI17P0c5C4hVaZeIAmpJ7hA QTTlIB1dmgGu9QPACLfHkULQJ8giShyoyRYBqtfEXfwXkOhA9yoRi+PjDkiEnwfP aeoWGmZquvUDGay/RcUgTWSSw5ZtqcMAGvZ/+uYmJY7X0nUYsVrRrJfbL6BeJGxe qdCez/8eiiO8/eSscrKbpMxSHTe8EwvrJPnpLHw8Ti+5ySfTmviOIWAYZjbqrH9s gptkr6Vjup5b4zpOWARct/UBKGPLuO9vvpGAHL/8SblQmwplqL33NH7+NGki89OY fZkU1b/6GR9LFmx2WE7K1MiVXAFHhrvlcPr4VJ0JEQJkd5Ckr1YqEzAkJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBCqq/kwJNiUMjHQodPo4CxCxWqMB8GA1UdIwQY MBaAFDGSxS82Cjpy/iJEGsP8fg5SJe6RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVpMRkx6WUtPbkwtSWtRYXdfeC1EbElsN3BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81MjRiZmUtYzVhZS00ZjY3LTg0MTMt Mjc0OGM0MDAyYzJlLzEvTVpMRkx6WUtPbkwtSWtRYXdfeC1EbElsN3BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81MjRiZmUtYzVhZS00ZjY3LTg0MTMtMjc0OGM0MDAyYzJl LzEvTVpMRkx6WUtPbkwtSWtRYXdfeC1EbElsN3BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6Lt23fV hKnccXycOlI0/WBuxEUawi3fVy5Eg5iNAjB/9ai2LDXxQvvN4bKfoOFZ0iMOiI88 I9HGkegB2S7oUXOKKzFPoDS6OQpGufwRFQhtQEvVNVK0w2KjxePTAnmyDcQ7IMGj C7u/+mivm4lnV0E/w2rJinn3+qW3YMF5B+YKmb3nECsV3Zw8F4Py1/cpiW9OTSXD Mib2f0Nxoaid8VtIvcyPmsgtbeyG8ZE/stCkZg8jwy3GyYHvkAS5HhCTq9doZQ4G eZ8ay3oMJRGGk0bG3lL+UlS7lyd8iLSoh3X9zD3C6WuHZ9UBxGkiuqgSVuj8VgWP aTLYDLwLjhD6mQ== -----END CERTIFICATE-----Generated at Sun Dec 21 10:03:46 2025 by rpki-client