This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft File: MZtnnBRoEIny0HeG3wT3eddBwRo.mft (raw, json) Hash identifier: 8J0oltp2NMS+McwN4KYJe5qMRG5FTb5fE6+cPSGoTpc= Subject key identifier: 44:20:A0:F7:73:7A:05:D4:98:1B:B9:76:6F:34:D2:BC:6E:1C:28:26 Authority key identifier: 31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A Certificate issuer: /CN=319b679c14681089f2d07786df04f779d741c11a Certificate serial: 019B51174537C57256F9F8FD2707F9302C8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft Manifest number: 118D Signing time: Wed 24 Dec 2025 16:00:38 +0000 Manifest this update: Wed 24 Dec 2025 16:00:38 +0000 Manifest next update: Thu 25 Dec 2025 16:00:38 +0000 Files and hashes: 1: MZtnnBRoEIny0HeG3wT3eddBwRo.crl (hash: 6q76T1xf+BxFGWpRXyJgOOlx7N8J/scGBifv7Ra2dmM=) 2: ieLSuIB6mXBKJCQeWp_N4zpRwwc.roa (hash: nbmCndcHBfvvgTeoIuhU4ac4+KNWQuh73nRAwrBR57A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:17:45:37:c5:72:56:f9:f8:fd:27:07:f9:30:2c:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=319b679c14681089f2d07786df04f779d741c11a Validity Not Before: Dec 24 16:00:38 2025 GMT Not After : Dec 25 16:00:38 2025 GMT Subject: CN=4420a0f7737a05d4981bb9766f34d2bc6e1c2826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:39:ad:c9:3b:13:ff:5d:cc:46:7f:b3:da:4d: 64:1f:b6:12:3b:61:b3:b1:bb:e2:6e:9c:e8:3e:8d: 45:a1:5c:5e:b3:5a:17:e9:c7:95:b0:7c:61:2d:78: 88:1f:08:41:fd:24:51:c0:6d:fc:7f:87:7a:e9:7b: 53:47:87:40:49:29:a4:2e:17:c9:4f:d8:ef:f8:42: 70:86:83:06:f2:c6:dc:b0:45:20:a2:d8:e0:71:ea: 2a:54:19:3b:0b:4c:ca:8e:57:dd:02:97:f8:d6:5e: fb:71:1f:34:7f:fb:bd:43:24:2c:13:db:97:ad:11: 2a:2e:48:df:34:23:f2:31:e7:7b:74:a4:82:4f:4d: 8e:ed:14:eb:cf:f6:1f:60:cd:58:d5:88:61:4c:a3: 44:e3:89:2b:a1:97:ea:15:e8:e2:2b:17:46:dd:bf: 63:0f:66:83:12:b9:dc:80:ae:60:6a:8d:4c:12:cb: b9:97:48:73:e0:50:79:72:cb:40:ff:8e:f6:17:01: 84:6b:9e:79:de:ec:57:da:02:90:20:82:10:05:92: 50:14:37:62:ff:0f:3e:b2:f2:45:97:2a:48:0f:51: 46:6b:4f:4a:8a:de:fe:fa:6d:cb:f0:a2:71:23:e9: cc:39:ef:37:bf:47:f7:be:6e:80:57:41:47:d7:35: 9b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:20:A0:F7:73:7A:05:D4:98:1B:B9:76:6F:34:D2:BC:6E:1C:28:26 X509v3 Authority Key Identifier: keyid:31:9B:67:9C:14:68:10:89:F2:D0:77:86:DF:04:F7:79:D7:41:C1:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZtnnBRoEIny0HeG3wT3eddBwRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/139ff2-f5d0-49be-910b-b5c945a0ca16/1/MZtnnBRoEIny0HeG3wT3eddBwRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:42:d5:18:d5:e8:0b:5c:c7:a7:ed:7f:04:cd:c7:50:ae:fc: 68:5a:39:9a:23:8d:12:54:19:cd:de:9e:5b:73:34:91:dc:db: e0:fe:ca:28:56:bb:0c:76:db:11:a1:d6:05:f4:ab:87:8a:fe: 21:ec:92:80:ba:49:25:2f:31:80:85:85:ce:43:66:70:bc:56: b5:b2:8d:a1:d3:70:37:62:64:f7:60:ed:e4:98:ca:6b:13:7f: 4e:a8:bb:af:9b:51:0c:e4:1a:2c:f5:9c:cf:01:ea:28:5f:db: ea:23:9c:e1:b0:6b:ce:09:bc:c3:93:d4:f9:8b:d2:b0:a9:f4: b2:73:89:9a:0b:61:bb:c1:3c:a3:76:86:8f:65:78:e8:90:c5: bd:4c:45:dc:65:2f:dd:99:3a:85:66:fa:67:37:ed:62:7f:43: 03:51:5c:54:3d:7d:df:09:eb:c3:a9:de:1f:c0:2c:5e:20:fc: ec:35:41:06:7a:e3:d6:3f:33:a8:28:24:bf:ca:4e:f8:47:93: fa:cc:eb:0f:af:16:81:35:fe:84:81:66:97:e1:fa:02:6c:39: 03:e4:ee:7f:04:77:fa:2a:60:e0:d9:f1:ac:51:f3:0b:f8:88: 09:dd:05:06:20:09:14:f3:42:1a:47:42:05:7e:ca:87:9e:ff: 8c:08:5c:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRF0U3xXJW+fj9Jwf5MCyLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxOWI2NzljMTQ2ODEwODlmMmQwNzc4NmRmMDRmNzc5ZDc0 MWMxMWEwHhcNMjUxMjI0MTYwMDM4WhcNMjUxMjI1MTYwMDM4WjAzMTEwLwYDVQQD Eyg0NDIwYTBmNzczN2EwNWQ0OTgxYmI5NzY2ZjM0ZDJiYzZlMWMyODI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8DmtyTsT/13MRn+z2k1kH7YSO2Gz sbvibpzoPo1FoVxes1oX6ceVsHxhLXiIHwhB/SRRwG38f4d66XtTR4dASSmkLhfJ T9jv+EJwhoMG8sbcsEUgotjgceoqVBk7C0zKjlfdApf41l77cR80f/u9QyQsE9uX rREqLkjfNCPyMed7dKSCT02O7RTrz/YfYM1Y1YhhTKNE44kroZfqFejiKxdG3b9j D2aDErncgK5gao1MEsu5l0hz4FB5cstA/472FwGEa5553uxX2gKQIIIQBZJQFDdi /w8+svJFlypID1FGa09Kit7++m3L8KJxI+nMOe83v0f3vm6AV0FH1zWbtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQgoPdzegXUmBu5dm800rxuHCgmMB8GA1UdIwQY MBaAFDGbZ5wUaBCJ8tB3ht8E93nXQcEaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVp0bm5CUm9FSW55MEhlRzN3VDNlZGRCd1JvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xMzlmZjItZjVkMC00OWJlLTkxMGIt YjVjOTQ1YTBjYTE2LzEvTVp0bm5CUm9FSW55MEhlRzN3VDNlZGRCd1JvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8xMzlmZjItZjVkMC00OWJlLTkxMGItYjVjOTQ1YTBjYTE2 LzEvTVp0bm5CUm9FSW55MEhlRzN3VDNlZGRCd1JvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0LVGNXo C1zHp+1/BM3HUK78aFo5miONElQZzd6eW3M0kdzb4P7KKFa7DHbbEaHWBfSrh4r+ IeySgLpJJS8xgIWFzkNmcLxWtbKNodNwN2Jk92Dt5JjKaxN/Tqi7r5tRDOQaLPWc zwHqKF/b6iOc4bBrzgm8w5PU+YvSsKn0snOJmgthu8E8o3aGj2V46JDFvUxF3GUv 3Zk6hWb6ZzftYn9DA1FcVD193wnrw6neH8AsXiD87DVBBnrj1j8zqCgkv8pO+EeT +szrD68WgTX+hIFml+H6Amw5A+TufwR3+ipg4NnxrFHzC/iICd0FBiAJFPNCGkdC BX7Kh57/jAhc6g== -----END CERTIFICATE-----Generated at Wed Dec 24 22:10:46 2025 by rpki-client