This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft File: MzIOLzxa2t8VOgdYvGALbqFPTu0.mft (raw, json) Hash identifier: 5UgTgzM0QlBeLj8Y6Fyxc/Y6vNjd+Q0YHK3AJxjEUr8= Subject key identifier: 97:B8:ED:2A:87:AA:8D:F3:2B:03:E6:2F:E3:EE:50:16:D7:9F:73:70 Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED Certificate issuer: /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed Certificate serial: 019B41DB12F40C99CDD4C3172EA35D32AD00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 17:00:34 +0000 Manifest this update: Sun 21 Dec 2025 17:00:34 +0000 Manifest next update: Mon 22 Dec 2025 17:00:34 +0000 Files and hashes: 1: AvN828iiRV3-eQ2nvQTTlCpY0ts.roa (hash: AwFnD9flCXRJg5DrdW5vdLxIK1uSbmEP3XgEVnfdU14=) 2: FQUs67egorGqDEk7kbjYvrfoO_s.roa (hash: JDbs+c69xkht9mxZidbikteQkaoI44/OAWxvpFrO2Bk=) 3: MzIOLzxa2t8VOgdYvGALbqFPTu0.crl (hash: 57FZrrKKDR5rNSWNhZ5D6e4tsm0+2HtOZRZ/0n8nbq4=) 4: i7kir30T-x2Qz6fkdJRMDQPIadY.roa (hash: YG8gHBLUzQIrRJ7lENe/ITyj1BXcOdJeuTbpC4dPomc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:12:f4:0c:99:cd:d4:c3:17:2e:a3:5d:32:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed Validity Not Before: Dec 21 17:00:34 2025 GMT Not After : Dec 22 17:00:34 2025 GMT Subject: CN=97b8ed2a87aa8df32b03e62fe3ee5016d79f7370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a4:9d:0d:7a:ab:36:b3:8e:86:67:de:41:c4: 6d:ee:4c:b6:42:b7:4a:6f:bd:4a:c6:4f:cf:36:d0: 43:83:cf:6f:21:67:5f:79:c7:41:40:a8:b5:52:83: e4:5a:23:51:75:15:05:3b:b5:8e:61:be:bd:41:ce: 75:9b:9a:e9:97:8f:01:c0:1d:ad:c6:0e:b1:24:71: 74:2a:bf:f8:89:fd:3e:cb:9c:ef:41:ca:23:9c:33: 73:d2:cf:92:f5:27:41:9f:f5:1c:a6:84:51:c6:f1: 28:a7:ab:c4:3e:b6:2e:8a:fa:9f:d7:c5:7f:3e:b8: 4b:3d:f6:f5:66:68:61:ce:ab:cb:4f:42:29:c8:43: 80:73:15:99:5b:cc:0a:e0:3e:d2:e9:3a:eb:8e:94: 51:50:6f:6b:bc:27:93:2c:05:6c:7f:58:49:55:38: 5f:61:39:52:c2:da:31:6c:9f:ba:42:55:12:7d:6e: 69:e8:30:af:d6:b9:4b:98:3a:c6:fc:71:a4:d9:46: 31:e9:01:f7:a0:e2:c5:bc:03:5d:45:af:f7:c5:91: a9:af:72:74:ab:32:81:51:7e:72:db:87:ac:48:ed: d2:de:5f:57:c6:85:a6:5b:67:02:c2:c2:a9:b8:70: f2:3a:7b:f4:17:30:fb:54:48:8e:01:05:6e:3e:dd: 7d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B8:ED:2A:87:AA:8D:F3:2B:03:E6:2F:E3:EE:50:16:D7:9F:73:70 X509v3 Authority Key Identifier: keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:14:fd:88:1b:0b:1c:1a:77:61:78:fd:fd:55:77:15:16:14: e8:c4:79:e1:cb:e1:2d:38:af:ef:6d:13:0a:4c:3f:01:9a:c8: d2:f6:99:45:55:dd:79:50:f2:8c:40:56:bc:a7:c4:62:46:87: ec:ee:a3:4e:50:10:99:ee:0e:32:21:ee:61:b6:b3:e8:04:7c: 25:9f:c1:db:40:d8:5e:7b:b1:e4:b2:35:c0:db:f5:b3:16:4a: f6:17:cb:95:07:01:86:77:7c:9f:c7:28:eb:0e:ff:1b:df:6d: 5e:a1:7b:96:5c:37:7b:bf:d3:0a:3e:ae:50:89:1d:aa:ac:06: 51:bf:2c:bc:ea:46:7e:0b:e0:5c:33:80:21:ca:7c:a7:3e:8d: 6f:f1:7b:c0:a5:ce:d2:fc:37:50:dc:20:88:3d:14:f5:60:74: 72:d4:b9:a7:6b:10:24:f3:4c:62:fc:7d:1e:16:8c:47:da:74: f8:e1:01:34:dd:97:a6:fa:dc:63:8c:8d:14:a0:45:b1:78:da: 2e:04:0b:90:8f:4d:b4:41:7a:90:98:37:df:62:53:3d:d1:d1: 66:aa:5e:95:49:9e:1b:d2:3b:79:3f:78:d7:7d:e6:a3:c1:b6: 5f:00:47:10:48:73:69:a8:48:93:b3:6e:d9:24:0a:39:29:76: b5:17:67:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB2xL0DJnN1MMXLqNdMq0AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMzIwZTJmM2M1YWRhZGYxNTNhMDc1OGJjNjAwYjZlYTE0 ZjRlZWQwHhcNMjUxMjIxMTcwMDM0WhcNMjUxMjIyMTcwMDM0WjAzMTEwLwYDVQQD Eyg5N2I4ZWQyYTg3YWE4ZGYzMmIwM2U2MmZlM2VlNTAxNmQ3OWY3MzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KSdDXqrNrOOhmfeQcRt7ky2QrdK b71Kxk/PNtBDg89vIWdfecdBQKi1UoPkWiNRdRUFO7WOYb69Qc51m5rpl48BwB2t xg6xJHF0Kr/4if0+y5zvQcojnDNz0s+S9SdBn/UcpoRRxvEop6vEPrYuivqf18V/ PrhLPfb1ZmhhzqvLT0IpyEOAcxWZW8wK4D7S6TrrjpRRUG9rvCeTLAVsf1hJVThf YTlSwtoxbJ+6QlUSfW5p6DCv1rlLmDrG/HGk2UYx6QH3oOLFvANdRa/3xZGpr3J0 qzKBUX5y24esSO3S3l9XxoWmW2cCwsKpuHDyOnv0FzD7VEiOAQVuPt19VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJe47SqHqo3zKwPmL+PuUBbXn3NwMB8GA1UdIwQY MBaAFDMyDi88WtrfFToHWLxgC26hT07tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXpJT0x6eGEydDhWT2dkWXZHQUxicUZQVHUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yNDQ5MDEtYWUyZC00NDE4LTlkOTMt ZTE1NDRjNTdlMzhiLzEvTXpJT0x6eGEydDhWT2dkWXZHQUxicUZQVHUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8yNDQ5MDEtYWUyZC00NDE4LTlkOTMtZTE1NDRjNTdlMzhi LzEvTXpJT0x6eGEydDhWT2dkWXZHQUxicUZQVHUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvBT9iBsL HBp3YXj9/VV3FRYU6MR54cvhLTiv720TCkw/AZrI0vaZRVXdeVDyjEBWvKfEYkaH 7O6jTlAQme4OMiHuYbaz6AR8JZ/B20DYXnux5LI1wNv1sxZK9hfLlQcBhnd8n8co 6w7/G99tXqF7llw3e7/TCj6uUIkdqqwGUb8svOpGfgvgXDOAIcp8pz6Nb/F7wKXO 0vw3UNwgiD0U9WB0ctS5p2sQJPNMYvx9HhaMR9p0+OEBNN2XpvrcY4yNFKBFsXja LgQLkI9NtEF6kJg332JTPdHRZqpelUmeG9I7eT94133mo8G2XwBHEEhzaahIk7Nu 2SQKOSl2tRdnmQ== -----END CERTIFICATE-----Generated at Sun Dec 21 18:58:08 2025 by rpki-client