This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft File: mmzb9HURP5bKeKB6-9RFjIiIB3E.mft (raw, json) Hash identifier: EH3RK1vQ3/4U4xjFdcE03JZaTb1RdEOiOoGCl+Y6frs= Subject key identifier: A6:77:03:59:51:29:C6:F5:7A:DA:EE:61:C1:AA:48:04:60:71:B1:E0 Authority key identifier: 9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71 Certificate issuer: /CN=9a6cdbf475113f96ca78a07afbd4458c88880771 Certificate serial: 019B44DC5B0274F713CB8627F9650921F017 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft Manifest number: 0653 Signing time: Mon 22 Dec 2025 07:00:50 +0000 Manifest this update: Mon 22 Dec 2025 07:00:50 +0000 Manifest next update: Tue 23 Dec 2025 07:00:50 +0000 Files and hashes: 1: j_X8tJ2h9OHGJHosgdoOoXcoQic.roa (hash: +g3waCGUvWC6G9wCV2Zz7i7n4x4ui8ded+3mDQgQ1Kc=) 2: mmzb9HURP5bKeKB6-9RFjIiIB3E.crl (hash: NnKQhYwXTgafMNWLokh0eSuMaGDZ27xWkCQiBkToXZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:5b:02:74:f7:13:cb:86:27:f9:65:09:21:f0:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a6cdbf475113f96ca78a07afbd4458c88880771 Validity Not Before: Dec 22 07:00:50 2025 GMT Not After : Dec 23 07:00:50 2025 GMT Subject: CN=a67703595129c6f57adaee61c1aa48046071b1e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:8c:8a:82:60:46:96:1c:32:09:46:3b:e2:93: ea:ad:39:1e:00:c6:2f:b1:34:89:67:b2:06:eb:bf: 08:f7:15:87:ff:fa:a3:33:9f:9b:ad:53:79:3c:ee: 06:34:31:96:13:cd:fa:c6:b0:0b:44:ca:3c:00:1f: 37:67:b1:7e:c6:84:8c:00:25:94:9d:21:86:ad:ef: 3c:9c:b2:5b:2d:00:cd:25:55:de:76:2e:a7:df:2b: d0:13:5c:5f:fb:2f:b3:27:1b:78:09:ab:f3:cd:95: fa:88:0b:ec:fc:b6:49:73:98:32:9d:5a:61:7e:d1: 08:c6:be:ba:dc:2f:8d:75:55:a7:29:e4:1c:6e:c4: 3f:c4:ec:55:1c:e9:39:bf:36:24:db:a4:9d:5d:fb: 88:81:29:18:1a:67:75:65:b6:0f:0a:dd:54:f4:38: 67:f5:d5:43:5d:5e:17:73:69:36:d8:85:80:78:d9: e4:25:b4:e0:e2:8c:a6:46:31:0a:49:6c:fb:48:5c: 49:90:3d:d2:66:6f:67:c9:b3:d0:ec:91:8a:ce:c7: 07:f4:ba:7a:23:84:69:f6:d6:59:71:01:e8:35:ec: ce:64:19:ed:fa:43:30:ba:44:ee:cf:ea:84:81:8c: b9:9d:7e:7c:7e:b7:02:47:c4:98:b4:cd:86:bf:ca: 65:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:77:03:59:51:29:C6:F5:7A:DA:EE:61:C1:AA:48:04:60:71:B1:E0 X509v3 Authority Key Identifier: keyid:9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:7d:94:1f:de:b7:7d:d2:d0:bc:e5:d9:f4:de:9d:b3:18:04: 5e:6c:18:93:ad:31:d7:a8:9b:52:21:ba:73:c7:95:01:84:79: 48:d0:e7:0a:09:cd:26:32:94:15:25:2c:47:e6:cd:54:35:1b: e2:b9:eb:96:14:a9:8a:ef:d5:d5:7c:26:d4:0f:b3:40:54:43: 20:1f:dd:23:bf:0e:77:e3:a0:fe:8f:67:7f:4c:cf:6d:d9:63: 03:33:b0:44:7a:ef:94:38:15:2e:ee:99:ba:30:eb:a7:f4:02: 2f:3f:93:f4:19:ec:ab:d3:b2:43:22:b0:f8:fe:4a:ea:d8:0b: 24:c7:0f:a0:50:aa:4f:f0:3e:f0:ff:01:2a:6d:64:3f:22:84: 0b:15:d5:79:64:7c:ed:6b:23:6b:2d:17:41:71:76:95:3b:3b: 0e:9b:cb:22:9a:07:0d:af:a5:d2:9f:57:3f:4e:98:35:13:dd: 7b:a3:d2:95:cb:de:58:b5:46:d6:92:0d:74:c8:f3:08:58:42: 04:63:8d:f6:c7:c8:e5:0a:28:d7:1a:9f:a8:92:91:5e:f1:6f: 4c:f5:49:b7:b4:8c:4d:93:4c:9e:30:b0:29:1b:9a:3d:41:76: 80:5d:80:37:17:33:c6:25:bb:7d:83:b2:6f:86:3e:54:e8:f3: 37:17:f3:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3FsCdPcTy4Yn+WUJIfAXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNmNkYmY0NzUxMTNmOTZjYTc4YTA3YWZiZDQ0NThjODg4 ODA3NzEwHhcNMjUxMjIyMDcwMDUwWhcNMjUxMjIzMDcwMDUwWjAzMTEwLwYDVQQD EyhhNjc3MDM1OTUxMjljNmY1N2FkYWVlNjFjMWFhNDgwNDYwNzFiMWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIyKgmBGlhwyCUY74pPqrTkeAMYv sTSJZ7IG678I9xWH//qjM5+brVN5PO4GNDGWE836xrALRMo8AB83Z7F+xoSMACWU nSGGre88nLJbLQDNJVXedi6n3yvQE1xf+y+zJxt4CavzzZX6iAvs/LZJc5gynVph ftEIxr663C+NdVWnKeQcbsQ/xOxVHOk5vzYk26SdXfuIgSkYGmd1ZbYPCt1U9Dhn 9dVDXV4Xc2k22IWAeNnkJbTg4oymRjEKSWz7SFxJkD3SZm9nybPQ7JGKzscH9Lp6 I4Rp9tZZcQHoNezOZBnt+kMwukTuz+qEgYy5nX58frcCR8SYtM2Gv8plewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZ3A1lRKcb1etruYcGqSARgcbHgMB8GA1UdIwQY MBaAFJps2/R1ET+WynigevvURYyIiAdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW16YjlIVVJQNWJLZUtCNi05UkZqSWlJQjNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi80NzM1NzctNGMzMS00Mjk1LWFiZGUt ZGMyZmVhYzM3ODI5LzEvbW16YjlIVVJQNWJLZUtCNi05UkZqSWlJQjNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi80NzM1NzctNGMzMS00Mjk1LWFiZGUtZGMyZmVhYzM3ODI5 LzEvbW16YjlIVVJQNWJLZUtCNi05UkZqSWlJQjNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj32UH963 fdLQvOXZ9N6dsxgEXmwYk60x16ibUiG6c8eVAYR5SNDnCgnNJjKUFSUsR+bNVDUb 4rnrlhSpiu/V1Xwm1A+zQFRDIB/dI78Od+Og/o9nf0zPbdljAzOwRHrvlDgVLu6Z ujDrp/QCLz+T9Bnsq9OyQyKw+P5K6tgLJMcPoFCqT/A+8P8BKm1kPyKECxXVeWR8 7Wsjay0XQXF2lTs7DpvLIpoHDa+l0p9XP06YNRPde6PSlcveWLVG1pINdMjzCFhC BGON9sfI5Qoo1xqfqJKRXvFvTPVJt7SMTZNMnjCwKRuaPUF2gF2ANxczxiW7fYOy b4Y+VOjzNxfzag== -----END CERTIFICATE-----Generated at Mon Dec 22 16:12:20 2025 by rpki-client