This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft File: mZ333A7VGPHsaZdM-YzsqtoahoA.mft (raw, json) Hash identifier: FPwSCm1DDKFDtHeV8BFiOMoyS3A3BjzRmKRaks8RlBI= Subject key identifier: 65:67:DD:68:95:2B:98:79:E2:0F:5C:A2:EF:3F:96:E8:36:AF:59:41 Authority key identifier: 99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80 Certificate issuer: /CN=999df7dc0ed518f1ec69974cf98cecaada1a8680 Certificate serial: 019B37C5D8011D93E3EB4EE143B91A04EE65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft Manifest number: 179A Signing time: Fri 19 Dec 2025 18:01:11 +0000 Manifest this update: Fri 19 Dec 2025 18:01:11 +0000 Manifest next update: Sat 20 Dec 2025 18:01:11 +0000 Files and hashes: 1: M1e_sHBZe8qgiUREj14kOD1XlAM.roa (hash: d7KGc1JohmxwmIRoXPt7y5NJGhBi1FLXs4b6xoFAzhc=) 2: VDSC__kYP5_4kXHu2u3139bBQnM.roa (hash: ZCOyTsAtgAk5HLmIWIyYiY4LjMxxRnLlXw4wf8pNdoU=) 3: mZ333A7VGPHsaZdM-YzsqtoahoA.crl (hash: bd/x7Kj4Y87Aqut6mNRu/kvP21L/jJxJS5ovdIsbNFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:d8:01:1d:93:e3:eb:4e:e1:43:b9:1a:04:ee:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=999df7dc0ed518f1ec69974cf98cecaada1a8680 Validity Not Before: Dec 19 18:01:11 2025 GMT Not After : Dec 20 18:01:11 2025 GMT Subject: CN=6567dd68952b9879e20f5ca2ef3f96e836af5941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e5:7e:af:91:28:45:fc:42:54:f9:48:d8:e7: 40:63:7e:de:cb:f0:d1:36:34:f4:80:a1:b7:a3:96: db:0e:b1:d3:36:f6:09:94:45:a8:ac:fc:f9:84:80: 4f:a4:a0:22:e6:17:5d:15:bc:4d:4e:83:04:60:23: f0:1a:94:ec:ff:3f:d2:dd:ab:7c:d6:98:3f:4c:93: d7:45:77:d3:68:f2:45:be:1e:3c:b4:26:fb:d9:53: 0f:72:17:d1:6b:2b:5a:62:68:da:62:7d:82:06:cb: 94:66:bc:2e:4a:33:a4:cd:b8:0f:c4:d7:b6:4c:e6: 2a:9a:d3:66:69:a7:26:a4:a3:2f:b5:5d:39:f4:6c: 2d:a5:d5:ee:f3:1a:3e:dc:60:46:0a:11:6e:98:23: c1:4c:a3:1c:1a:4f:1e:a4:5b:a5:4f:d2:26:ad:30: 67:18:2b:07:43:e3:21:d1:81:c2:5e:be:5a:82:f7: 47:47:bb:69:d7:86:9a:ce:11:53:79:eb:27:3b:4b: c6:08:9a:7e:bf:f5:aa:0d:f3:9c:eb:42:d8:13:5a: d5:97:a2:9c:f4:5f:fe:1d:a7:2b:0c:37:21:f0:02: 9f:5e:1d:b0:04:0a:67:73:85:1e:a7:71:5c:bf:b7: b6:59:ea:b2:66:29:a1:d6:03:1a:7d:dc:a4:e2:75: e3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:67:DD:68:95:2B:98:79:E2:0F:5C:A2:EF:3F:96:E8:36:AF:59:41 X509v3 Authority Key Identifier: keyid:99:9D:F7:DC:0E:D5:18:F1:EC:69:97:4C:F9:8C:EC:AA:DA:1A:86:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZ333A7VGPHsaZdM-YzsqtoahoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ba88f2-215f-4f89-a3af-138b787de3e3/1/mZ333A7VGPHsaZdM-YzsqtoahoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:b7:80:15:bd:0f:f8:ee:71:0a:85:c8:ca:32:1a:27:ea:b0: 3f:3c:24:cb:5f:e5:fa:02:ea:13:24:58:d1:3e:29:91:92:53: 78:e4:c4:bf:85:63:26:64:cd:21:2d:d4:16:1b:64:cb:4e:de: df:de:bc:db:cb:97:04:96:5f:b2:da:65:21:78:04:55:b1:86: 81:a2:5d:e3:a3:5b:39:b7:a6:c9:cf:78:13:84:e0:05:d2:65: 01:c3:df:7f:8b:6c:61:14:77:bf:cd:5d:b9:44:34:f9:c8:4f: 45:fd:a8:8b:ae:d6:53:fc:ec:99:e9:86:f5:f8:ea:95:c6:e5: 9b:ee:bc:51:bd:01:bd:bc:45:21:f5:77:13:42:42:f9:01:b7: 16:ad:ca:bc:fd:3d:00:b8:f0:eb:cc:61:d2:21:da:3a:51:e2: a4:53:55:53:c2:3f:b6:9e:cc:cf:bd:86:b3:de:57:88:d7:30: da:40:73:57:a3:a3:32:86:99:7f:fd:c1:e0:f7:00:08:8e:6d: ec:2c:db:99:a6:ac:17:6c:25:2b:ca:79:39:4b:ab:63:6a:e7: 79:83:98:e5:c1:c6:7e:dc:5e:aa:6c:69:8d:da:17:b5:86:71: b5:54:d7:c8:f2:3d:c8:45:86:c2:00:0b:a4:24:f8:40:dc:12: 8b:e3:e8:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xdgBHZPj607hQ7kaBO5lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5OWRmN2RjMGVkNTE4ZjFlYzY5OTc0Y2Y5OGNlY2FhZGEx YTg2ODAwHhcNMjUxMjE5MTgwMTExWhcNMjUxMjIwMTgwMTExWjAzMTEwLwYDVQQD Eyg2NTY3ZGQ2ODk1MmI5ODc5ZTIwZjVjYTJlZjNmOTZlODM2YWY1OTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuV+r5EoRfxCVPlI2OdAY37ey/DR NjT0gKG3o5bbDrHTNvYJlEWorPz5hIBPpKAi5hddFbxNToMEYCPwGpTs/z/S3at8 1pg/TJPXRXfTaPJFvh48tCb72VMPchfRaytaYmjaYn2CBsuUZrwuSjOkzbgPxNe2 TOYqmtNmaacmpKMvtV059GwtpdXu8xo+3GBGChFumCPBTKMcGk8epFulT9ImrTBn GCsHQ+Mh0YHCXr5agvdHR7tp14aazhFTeesnO0vGCJp+v/WqDfOc60LYE1rVl6Kc 9F/+HacrDDch8AKfXh2wBApnc4Uep3Fcv7e2WeqyZimh1gMafdyk4nXjOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVn3WiVK5h54g9cou8/lug2r1lBMB8GA1UdIwQY MBaAFJmd99wO1Rjx7GmXTPmM7KraGoaAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iYTg4ZjItMjE1Zi00Zjg5LWEzYWYt MTM4Yjc4N2RlM2UzLzEvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9iYTg4ZjItMjE1Zi00Zjg5LWEzYWYtMTM4Yjc4N2RlM2Uz LzEvbVozMzNBN1ZHUEhzYVpkTS1ZenNxdG9haG9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgreAFb0P +O5xCoXIyjIaJ+qwPzwky1/l+gLqEyRY0T4pkZJTeOTEv4VjJmTNIS3UFhtky07e 396828uXBJZfstplIXgEVbGGgaJd46NbObemyc94E4TgBdJlAcPff4tsYRR3v81d uUQ0+chPRf2oi67WU/zsmemG9fjqlcblm+68Ub0BvbxFIfV3E0JC+QG3Fq3KvP09 ALjw68xh0iHaOlHipFNVU8I/tp7Mz72Gs95XiNcw2kBzV6OjMoaZf/3B4PcACI5t 7CzbmaasF2wlK8p5OUurY2rneYOY5cHGftxeqmxpjdoXtYZxtVTXyPI9yEWGwgAL pCT4QNwSi+Ponw== -----END CERTIFICATE-----Generated at Fri Dec 19 22:00:18 2025 by rpki-client