This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft File: dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft (raw, json) Hash identifier: OTAL99ceCh9uBkm7JYj0LpGCG38RjWz6VA3DMGbA7t0= Subject key identifier: 4C:5C:7C:13:72:2E:D9:7E:AC:98:3E:4A:4A:BE:E3:F1:5E:3A:01:F2 Authority key identifier: 75:3C:FF:43:0F:7F:17:51:E6:97:BB:30:F8:7F:EF:39:7C:C1:7F:A6 Certificate issuer: /CN=753cff430f7f1751e697bb30f87fef397cc17fa6 Certificate serial: 019B4437B2EB9D5CF9876207B6C2B187F382 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 04:00:59 +0000 Manifest this update: Mon 22 Dec 2025 04:00:59 +0000 Manifest next update: Tue 23 Dec 2025 04:00:59 +0000 Files and hashes: 1: dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.crl (hash: UAqTh63T7C+eEmbhACzypuUpp02VqB0I1B9P6Cx8Q1M=) 2: dnhmPWmpRWX9rAh9nBMTSVjDqxs.roa (hash: fzOf1Or3/SM11VjxsfHMYPlVNvpYFDsl88MJ3GBj7FI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:b2:eb:9d:5c:f9:87:62:07:b6:c2:b1:87:f3:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=753cff430f7f1751e697bb30f87fef397cc17fa6 Validity Not Before: Dec 22 04:00:59 2025 GMT Not After : Dec 23 04:00:59 2025 GMT Subject: CN=4c5c7c13722ed97eac983e4a4abee3f15e3a01f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:44:27:f4:99:9f:36:fb:4d:28:e2:89:90:96: 9c:33:f9:14:77:ae:b9:e7:62:76:a0:62:ca:40:af: 8e:5b:4e:4a:9d:9e:c8:b2:d2:0f:6c:d0:57:8f:85: a5:13:8d:63:a1:8e:4e:2d:72:00:72:12:12:03:00: e0:2f:c2:6d:a4:b4:c3:7a:60:47:17:83:ad:25:fe: 3e:6c:77:db:02:4c:f8:a5:0f:66:aa:a8:d4:e0:fc: 69:75:17:56:83:bd:90:2e:f7:bf:2e:42:00:73:bd: 52:0a:52:b8:f5:1c:c5:b6:a3:90:58:18:03:8e:27: eb:b0:a1:d2:07:0d:70:8d:cf:98:ad:f4:f1:92:86: 2a:56:0f:1b:b1:00:23:31:67:59:cd:fd:d0:76:80: 41:ef:de:fa:88:84:3a:74:a3:1c:f4:d1:0a:ed:9a: 48:9a:3c:f4:ab:d5:24:9a:33:81:4b:91:5d:5e:c6: f7:71:b4:ff:a7:1b:ca:26:70:b4:cb:5c:0a:dd:6d: d1:1f:47:d0:80:b9:04:d8:62:7f:3a:78:0e:59:ef: 12:26:2d:b8:61:99:15:f2:4d:f5:7d:bd:03:06:ad: e2:36:cc:2c:67:71:73:da:1d:94:3e:f1:0f:45:89: 6d:f3:ac:77:87:cf:64:95:c4:99:1d:d6:39:f1:ef: 97:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5C:7C:13:72:2E:D9:7E:AC:98:3E:4A:4A:BE:E3:F1:5E:3A:01:F2 X509v3 Authority Key Identifier: keyid:75:3C:FF:43:0F:7F:17:51:E6:97:BB:30:F8:7F:EF:39:7C:C1:7F:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:22:d4:be:55:44:ba:cf:e7:91:a0:93:ec:e3:f6:e7:9b:b0: 90:43:a6:18:03:91:a2:b3:1c:d2:8f:12:f9:58:d6:8c:f7:50: f4:6a:d5:0e:a0:2a:26:7d:31:e2:bc:4d:65:6a:0e:14:cf:e8: 91:88:04:c8:2b:85:9c:e7:ba:b7:a2:42:35:f3:7b:95:a2:b5: 16:93:d2:16:59:7c:6f:a4:0e:a2:63:8a:f5:cc:fd:80:d1:51: c7:a6:af:10:4e:98:03:ea:ff:ed:2e:fd:97:5f:a4:10:52:1b: 54:ee:bb:bf:27:82:61:ac:06:1e:cf:c8:36:64:50:82:cc:bf: ac:53:ff:27:6d:d0:20:a3:b0:f0:ad:85:21:1f:04:c2:35:69: 18:87:e9:71:0a:66:7a:e5:85:35:db:23:2d:97:6a:e9:9e:c8: 48:dc:af:79:71:67:93:ff:6c:17:a4:72:ce:51:02:a5:c6:79: e8:90:1c:cc:66:70:93:c5:bd:39:5f:98:cc:cc:a6:14:95:c8: 65:09:3a:66:99:aa:70:a5:fd:ed:f0:9b:df:c5:63:bf:6b:93: 4e:f6:e7:f6:1f:3f:2e:56:42:4e:f0:ae:d8:60:4a:2f:aa:02: 93:8e:d3:73:c3:a9:4a:46:95:32:ee:34:80:3d:c4:dd:ef:9c: 83:95:2b:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN7LrnVz5h2IHtsKxh/OCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1M2NmZjQzMGY3ZjE3NTFlNjk3YmIzMGY4N2ZlZjM5N2Nj MTdmYTYwHhcNMjUxMjIyMDQwMDU5WhcNMjUxMjIzMDQwMDU5WjAzMTEwLwYDVQQD Eyg0YzVjN2MxMzcyMmVkOTdlYWM5ODNlNGE0YWJlZTNmMTVlM2EwMWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EQn9JmfNvtNKOKJkJacM/kUd665 52J2oGLKQK+OW05KnZ7IstIPbNBXj4WlE41joY5OLXIAchISAwDgL8JtpLTDemBH F4OtJf4+bHfbAkz4pQ9mqqjU4PxpdRdWg72QLve/LkIAc71SClK49RzFtqOQWBgD jifrsKHSBw1wjc+YrfTxkoYqVg8bsQAjMWdZzf3QdoBB7976iIQ6dKMc9NEK7ZpI mjz0q9UkmjOBS5FdXsb3cbT/pxvKJnC0y1wK3W3RH0fQgLkE2GJ/OngOWe8SJi24 YZkV8k31fb0DBq3iNswsZ3Fz2h2UPvEPRYlt86x3h89klcSZHdY58e+X6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExcfBNyLtl+rJg+Skq+4/FeOgHyMB8GA1UdIwQY MBaAFHU8/0MPfxdR5pe7MPh/7zl8wX+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFR6X1F3OV9GMUhtbDdzdy1IX3ZPWHpCZjZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82MDJiZmUtN2E0MC00ZjVhLTllYzkt MzdhNWQ5Y2E2NTU4LzEvZFR6X1F3OV9GMUhtbDdzdy1IX3ZPWHpCZjZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS82MDJiZmUtN2E0MC00ZjVhLTllYzktMzdhNWQ5Y2E2NTU4 LzEvZFR6X1F3OV9GMUhtbDdzdy1IX3ZPWHpCZjZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIiLUvlVE us/nkaCT7OP255uwkEOmGAORorMc0o8S+VjWjPdQ9GrVDqAqJn0x4rxNZWoOFM/o kYgEyCuFnOe6t6JCNfN7laK1FpPSFll8b6QOomOK9cz9gNFRx6avEE6YA+r/7S79 l1+kEFIbVO67vyeCYawGHs/INmRQgsy/rFP/J23QIKOw8K2FIR8EwjVpGIfpcQpm euWFNdsjLZdq6Z7ISNyveXFnk/9sF6RyzlECpcZ56JAczGZwk8W9OV+YzMymFJXI ZQk6ZpmqcKX97fCb38Vjv2uTTvbn9h8/LlZCTvCu2GBKL6oCk47Tc8OpSkaVMu40 gD3E3e+cg5Ur3Q== -----END CERTIFICATE-----Generated at Mon Dec 22 08:33:43 2025 by rpki-client