This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft File: MzKH4jvuZ8pmL713n8vBguxVO-M.mft (raw, json) Hash identifier: mm7wzI0j666ThBC9CmM1IaC7yfaEH4wsC3HQkmgI/co= Subject key identifier: 48:00:EA:BF:A8:AB:75:E8:42:9C:B4:34:2B:9E:85:DD:FB:B6:3B:E4 Authority key identifier: 33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3 Certificate issuer: /CN=333287e23bee67ca662fbd779fcbc182ec553be3 Certificate serial: 019B8127D8B3C4F956CB8B0543F59E92574F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft Manifest number: 0B13 Signing time: Sat 03 Jan 2026 00:00:30 +0000 Manifest this update: Sat 03 Jan 2026 00:00:30 +0000 Manifest next update: Sun 04 Jan 2026 00:00:30 +0000 Files and hashes: 1: MzKH4jvuZ8pmL713n8vBguxVO-M.crl (hash: c1w1QvWJuG+q/8t+JwCgU3p4QrRZ3SjHIXRILMCFkqc=) 2: lWJEJ38LG2xnxFB2fT73IqXyIEA.roa (hash: KHwos3EmOZKUtMcSQbvFbuttFTsD5TBtKXWrJtoYgHY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:81:27:d8:b3:c4:f9:56:cb:8b:05:43:f5:9e:92:57:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=333287e23bee67ca662fbd779fcbc182ec553be3 Validity Not Before: Jan 3 00:00:30 2026 GMT Not After : Jan 4 00:00:30 2026 GMT Subject: CN=4800eabfa8ab75e8429cb4342b9e85ddfbb63be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b7:cb:b1:00:9e:a7:41:69:48:55:43:11:69: 98:dd:2e:df:64:94:54:df:55:5d:d9:a9:95:3b:fc: 5d:4a:1d:7c:3d:ad:f9:37:73:6d:8d:06:c2:58:85: d4:4d:d3:66:2f:d2:1a:ce:bb:1b:8f:24:e2:62:93: 18:3d:a4:30:63:66:c0:4f:f5:29:1e:dc:0d:b4:af: 39:ef:78:e9:a2:0d:d2:c3:cb:01:22:f3:cd:16:9f: 0c:95:e2:dd:87:99:dd:8b:b3:8e:da:61:e8:c0:1f: 27:a8:90:dd:96:b6:50:01:e9:35:3d:9b:2b:a8:e0: 85:64:a8:47:36:61:f9:5c:f0:f2:a9:5a:a7:06:37: ae:b8:1c:ac:d1:31:f8:15:d8:c5:a2:7a:91:ba:28: dd:37:e9:57:ec:11:bd:60:d3:d0:c6:4d:af:a0:17: 80:f0:c0:33:76:6a:b1:32:04:22:92:70:97:0b:3e: a4:bf:06:f2:3a:1b:7d:31:7e:b2:07:c7:2c:96:fb: b6:59:64:00:8d:f4:d5:b9:02:20:0c:6d:98:c5:eb: e4:70:03:61:fd:23:5c:14:cb:ff:5f:3f:d0:a3:25: 15:a9:54:71:91:07:2e:82:1e:b8:e2:7d:86:6c:43: 5b:a9:9c:bf:df:a4:ee:69:74:72:6e:24:00:81:df: 0e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:00:EA:BF:A8:AB:75:E8:42:9C:B4:34:2B:9E:85:DD:FB:B6:3B:E4 X509v3 Authority Key Identifier: keyid:33:32:87:E2:3B:EE:67:CA:66:2F:BD:77:9F:CB:C1:82:EC:55:3B:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzKH4jvuZ8pmL713n8vBguxVO-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6cb12c-693d-42c1-8aae-49c072a82595/1/MzKH4jvuZ8pmL713n8vBguxVO-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:a2:92:b8:6d:28:1d:a2:72:6e:74:64:e3:f8:91:76:01:29: b5:a4:6c:4f:2f:f1:7c:fa:8a:26:b7:f6:91:1c:2e:1f:e3:66: 69:3b:f3:60:f8:b3:68:3d:6b:15:7a:77:8d:4a:56:78:b2:e7: b3:a2:c6:68:b0:e6:76:42:d7:f4:f2:1b:e5:38:ed:35:c7:df: 90:f0:c0:c1:1b:20:54:4a:6b:d9:df:55:95:f7:f4:3f:99:f7: 0c:b2:d0:c9:74:c2:aa:5d:4b:84:03:5d:c3:9f:98:12:60:44: 4c:81:c7:2c:48:ec:48:7f:d3:84:0a:ed:20:cc:58:24:48:b7: 61:ad:9f:ae:c3:6f:b0:8a:5c:f3:1a:ad:c6:22:d7:bd:91:f3: 59:7a:f0:4b:77:c8:10:14:fc:9b:99:52:82:25:af:08:00:ec: 2b:4f:73:e9:3b:f6:e7:dd:3d:57:d7:61:bf:7f:7a:d5:cf:29: 30:34:10:05:1f:7d:09:58:e8:07:0d:55:54:5b:0c:a2:2e:c2: 05:01:6f:a9:83:f4:39:5c:fd:6e:1b:00:0c:61:a4:f4:31:c5: 75:cb:11:34:aa:c2:fc:38:44:97:86:85:98:2e:a3:1a:36:59: 85:3e:a6:2b:a4:47:55:ad:67:b4:d5:9b:35:a2:aa:34:8f:84: c7:8d:f1:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuBJ9izxPlWy4sFQ/WekldPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMzI4N2UyM2JlZTY3Y2E2NjJmYmQ3NzlmY2JjMTgyZWM1 NTNiZTMwHhcNMjYwMTAzMDAwMDMwWhcNMjYwMTA0MDAwMDMwWjAzMTEwLwYDVQQD Eyg0ODAwZWFiZmE4YWI3NWU4NDI5Y2I0MzQyYjllODVkZGZiYjYzYmU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrfLsQCep0FpSFVDEWmY3S7fZJRU 31Vd2amVO/xdSh18Pa35N3NtjQbCWIXUTdNmL9IazrsbjyTiYpMYPaQwY2bAT/Up HtwNtK8573jpog3Sw8sBIvPNFp8MleLdh5ndi7OO2mHowB8nqJDdlrZQAek1PZsr qOCFZKhHNmH5XPDyqVqnBjeuuBys0TH4FdjFonqRuijdN+lX7BG9YNPQxk2voBeA 8MAzdmqxMgQiknCXCz6kvwbyOht9MX6yB8cslvu2WWQAjfTVuQIgDG2YxevkcANh /SNcFMv/Xz/QoyUVqVRxkQcugh644n2GbENbqZy/36TuaXRybiQAgd8OiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgA6r+oq3XoQpy0NCuehd37tjvkMB8GA1UdIwQY MBaAFDMyh+I77mfKZi+9d5/LwYLsVTvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXpLSDRqdnVaOHBtTDcxM244dkJndXhWTy1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82Y2IxMmMtNjkzZC00MmMxLThhYWUt NDljMDcyYTgyNTk1LzEvTXpLSDRqdnVaOHBtTDcxM244dkJndXhWTy1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny82Y2IxMmMtNjkzZC00MmMxLThhYWUtNDljMDcyYTgyNTk1 LzEvTXpLSDRqdnVaOHBtTDcxM244dkJndXhWTy1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMqKSuG0o HaJybnRk4/iRdgEptaRsTy/xfPqKJrf2kRwuH+NmaTvzYPizaD1rFXp3jUpWeLLn s6LGaLDmdkLX9PIb5TjtNcffkPDAwRsgVEpr2d9Vlff0P5n3DLLQyXTCql1LhANd w5+YEmBETIHHLEjsSH/ThArtIMxYJEi3Ya2frsNvsIpc8xqtxiLXvZHzWXrwS3fI EBT8m5lSgiWvCADsK09z6Tv25909V9dhv3961c8pMDQQBR99CVjoBw1VVFsMoi7C BQFvqYP0OVz9bhsADGGk9DHFdcsRNKrC/DhEl4aFmC6jGjZZhT6mK6RHVa1ntNWb NaKqNI+Ex43xgg== -----END CERTIFICATE-----Generated at Sat Jan 3 06:31:46 2026 by rpki-client