This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft File: mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft (raw, json) Hash identifier: Q+FXQpBUAFHkFl+ix5K76mXi/ZhNSnMK8SzJSO1/LcI= Subject key identifier: 03:34:1C:1C:3C:46:96:62:4A:83:20:30:42:85:55:7D:85:3F:D6:E8 Authority key identifier: 9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8 Certificate issuer: /CN=9b37f13abd98277c691fc76ce933410d5d3f37c8 Certificate serial: 019B6731730162743D0313967ABEC6739D02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft Manifest number: 179F Signing time: Sun 28 Dec 2025 23:00:52 +0000 Manifest this update: Sun 28 Dec 2025 23:00:52 +0000 Manifest next update: Mon 29 Dec 2025 23:00:52 +0000 Files and hashes: 1: 1-FBfA_qZ4ESfWWb5CknBppCISTE.roa (hash: QzTjcdbwU5fU8MtxewS2wXNIG8qK/6tc0F56xQAkXFI=) 2: mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl (hash: /z3GRFu1dS7lfSuXYyMUY7wIPMoiNyfEeFQrk3j+2v4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:31:73:01:62:74:3d:03:13:96:7a:be:c6:73:9d:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b37f13abd98277c691fc76ce933410d5d3f37c8 Validity Not Before: Dec 28 23:00:52 2025 GMT Not After : Dec 29 23:00:52 2025 GMT Subject: CN=03341c1c3c4696624a8320304285557d853fd6e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c6:94:8c:e0:c9:64:d7:a8:59:c0:54:e2:5b: a8:ac:a6:42:0c:46:9f:a8:d2:f7:f3:33:21:4d:95: cb:62:28:18:7f:50:3a:b0:30:1f:5a:c0:a4:cb:e3: 66:e2:0e:28:93:d4:f5:45:71:5f:f1:08:f6:dd:97: 18:d2:d6:99:5c:84:a5:b4:d3:dc:73:d5:ca:a2:2a: 38:95:4b:f8:b4:e6:f9:f8:09:20:2f:0f:7b:97:4d: 8f:64:e4:43:52:64:ae:d3:2d:1e:35:3a:24:31:fa: 89:9c:9d:d1:92:50:07:13:a8:9e:02:5a:2e:40:f7: 92:ea:70:60:28:71:ee:66:8e:c5:00:fa:b8:72:eb: 13:d4:0c:b6:00:8b:1e:95:7a:80:62:c8:68:f3:32: bc:dd:94:3a:dd:f5:f5:44:b2:27:e1:45:32:29:c6: 80:1c:2f:4d:e3:db:1c:59:5a:88:e9:d8:f1:05:16: da:69:d0:d5:35:7b:20:a8:f1:99:bf:ee:c6:61:9f: 12:1a:a1:f9:6b:dc:d3:b4:42:12:7f:e7:7c:ed:d2: 02:ee:da:21:8b:2a:9f:b7:90:eb:0f:68:ef:78:38: 23:8c:82:5e:0b:8f:d9:34:6e:46:fc:c7:c3:a4:5f: eb:56:a1:45:bc:c7:51:28:d5:b2:d5:aa:1f:6c:66: 12:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:34:1C:1C:3C:46:96:62:4A:83:20:30:42:85:55:7D:85:3F:D6:E8 X509v3 Authority Key Identifier: keyid:9B:37:F1:3A:BD:98:27:7C:69:1F:C7:6C:E9:33:41:0D:5D:3F:37:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c20633-f797-4b65-b983-06a4123b461e/1/mzfxOr2YJ3xpH8ds6TNBDV0_N8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d3:fa:d9:bc:ae:bb:e6:1d:eb:50:8e:a3:b6:c9:ce:f3:33: 5f:2b:be:a5:9b:db:2c:46:ba:34:34:49:d9:92:13:5d:12:df: 61:d8:91:ed:3e:16:bf:ba:03:ac:fa:ff:6e:83:5e:72:7a:ae: 79:76:77:4d:57:45:a5:2e:50:6b:ac:6c:26:ea:b5:5b:a4:d5: c9:c0:dc:a9:4f:69:40:af:a2:84:13:19:b8:1a:5f:14:d7:16: bc:4e:52:99:e0:6d:ee:36:cb:50:20:0f:aa:34:fe:cb:b9:d1: 71:71:bb:46:db:72:3f:ef:2c:cd:83:1b:53:c9:60:d8:15:2b: bf:36:6f:dd:fc:e4:f8:9b:55:73:66:ec:17:c8:2e:75:77:7d: a5:7e:68:ae:75:f0:e7:10:ce:ee:cb:f4:13:76:83:34:55:80: 74:6c:48:c3:46:7d:85:00:56:c5:2d:8c:4b:a9:56:60:e1:f9: 4d:9a:07:86:e6:68:10:99:3c:4e:56:a6:94:3c:85:6e:ca:4c: 0d:57:26:d4:4c:81:92:a9:a8:05:b1:c3:1e:d0:4a:bb:9b:26: 5b:b4:ac:41:35:ae:a8:54:6c:fc:fd:7f:27:97:28:1c:08:dd: a1:7e:65:e2:f6:79:1b:6f:05:00:3c:16:98:cd:d1:73:23:23: 45:9f:2c:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnMXMBYnQ9AxOWer7Gc50CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMzdmMTNhYmQ5ODI3N2M2OTFmYzc2Y2U5MzM0MTBkNWQz ZjM3YzgwHhcNMjUxMjI4MjMwMDUyWhcNMjUxMjI5MjMwMDUyWjAzMTEwLwYDVQQD EygwMzM0MWMxYzNjNDY5NjYyNGE4MzIwMzA0Mjg1NTU3ZDg1M2ZkNmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMaUjODJZNeoWcBU4luorKZCDEaf qNL38zMhTZXLYigYf1A6sDAfWsCky+Nm4g4ok9T1RXFf8Qj23ZcY0taZXISltNPc c9XKoio4lUv4tOb5+AkgLw97l02PZORDUmSu0y0eNTokMfqJnJ3RklAHE6ieAlou QPeS6nBgKHHuZo7FAPq4cusT1Ay2AIselXqAYsho8zK83ZQ63fX1RLIn4UUyKcaA HC9N49scWVqI6djxBRbaadDVNXsgqPGZv+7GYZ8SGqH5a9zTtEISf+d87dIC7toh iyqft5DrD2jveDgjjIJeC4/ZNG5G/MfDpF/rVqFFvMdRKNWy1aofbGYS/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAM0HBw8RpZiSoMgMEKFVX2FP9boMB8GA1UdIwQY MBaAFJs38Tq9mCd8aR/HbOkzQQ1dPzfIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXpmeE9yMllKM3hwSDhkczZUTkJEVjBfTjhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jMjA2MzMtZjc5Ny00YjY1LWI5ODMt MDZhNDEyM2I0NjFlLzEvbXpmeE9yMllKM3hwSDhkczZUTkJEVjBfTjhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jMjA2MzMtZjc5Ny00YjY1LWI5ODMtMDZhNDEyM2I0NjFl LzEvbXpmeE9yMllKM3hwSDhkczZUTkJEVjBfTjhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfNP62byu u+Yd61COo7bJzvMzXyu+pZvbLEa6NDRJ2ZITXRLfYdiR7T4Wv7oDrPr/boNecnqu eXZ3TVdFpS5Qa6xsJuq1W6TVycDcqU9pQK+ihBMZuBpfFNcWvE5SmeBt7jbLUCAP qjT+y7nRcXG7RttyP+8szYMbU8lg2BUrvzZv3fzk+JtVc2bsF8gudXd9pX5ornXw 5xDO7sv0E3aDNFWAdGxIw0Z9hQBWxS2MS6lWYOH5TZoHhuZoEJk8TlamlDyFbspM DVcm1EyBkqmoBbHDHtBKu5smW7SsQTWuqFRs/P1/J5coHAjdoX5l4vZ5G28FADwW mM3RcyMjRZ8sBQ== -----END CERTIFICATE-----Generated at Mon Dec 29 04:15:56 2025 by rpki-client