This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft File: dIZPUCPsYmPvnxb5AYf18oBh0RU.mft (raw, json) Hash identifier: DeyTm7Cd0Ek3NG33r0oy8GkEY4a1cZeAYYPm4y6aX6w= Subject key identifier: C6:26:8F:05:15:E1:40:24:4A:41:F0:C2:0C:65:89:21:35:EC:18:5A Authority key identifier: 74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15 Certificate issuer: /CN=74864f5023ec6263ef9f16f90187f5f28061d115 Certificate serial: 019B4392DD42684979FC83DD80250CB6D618 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft Manifest number: 0D79 Signing time: Mon 22 Dec 2025 01:00:56 +0000 Manifest this update: Mon 22 Dec 2025 01:00:56 +0000 Manifest next update: Tue 23 Dec 2025 01:00:56 +0000 Files and hashes: 1: dIZPUCPsYmPvnxb5AYf18oBh0RU.crl (hash: r7uHUPe5ouJ789qEJJVNMN9S9xeJ7VInYVYIX73dCTs=) 2: vj_VJ7c4UiwkU_5yyGsly7O6qIk.roa (hash: RoD9r1uYXNwcvEQVZCci6nqFAbGm9X9wv8JUg9I5naM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:dd:42:68:49:79:fc:83:dd:80:25:0c:b6:d6:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74864f5023ec6263ef9f16f90187f5f28061d115 Validity Not Before: Dec 22 01:00:56 2025 GMT Not After : Dec 23 01:00:56 2025 GMT Subject: CN=c6268f0515e140244a41f0c20c65892135ec185a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b6:dc:72:92:a4:4c:17:18:0b:bb:fd:19:ac: 2b:5d:b5:b2:b4:1e:e6:9b:d9:80:01:51:67:a3:b4: 57:19:2e:90:74:b8:b6:0e:8d:49:3c:9a:ff:32:86: a0:5c:c6:2a:3d:bf:c9:00:0a:61:4b:9f:d2:99:3d: 8e:0e:0c:50:da:5d:cd:52:7a:2a:33:92:ef:2d:5c: cf:d9:c3:a5:5e:9c:fa:45:ea:7d:61:aa:9b:b0:11: a1:81:cd:47:46:2b:94:7a:0c:20:f0:ce:90:9a:55: 02:11:77:03:d6:73:ae:cd:c9:e3:92:73:fd:97:2d: e6:c5:e5:f0:43:1b:32:2f:e5:3f:2a:93:54:aa:7f: 3b:ef:3f:3a:42:fe:e9:ff:9e:cc:a0:6b:4b:b9:a7: 2b:17:b7:80:3a:5f:28:d9:8f:72:71:6a:4b:5d:c3: 2f:91:f4:c3:e7:15:69:96:d5:25:fe:40:78:8a:52: 9d:10:e3:af:45:a3:5a:77:70:22:b4:69:e1:2c:7a: 9a:24:58:a2:6e:bb:c9:a8:72:64:13:b7:30:64:75: e0:88:bd:c5:1d:9a:39:23:11:cc:7b:64:86:4c:0a: d4:ab:bb:f8:4d:27:0d:4c:cf:6e:f9:74:91:04:8e: e7:3d:6e:0e:7f:be:30:b0:ae:c8:cf:9f:8c:17:f9: c5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:26:8F:05:15:E1:40:24:4A:41:F0:C2:0C:65:89:21:35:EC:18:5A X509v3 Authority Key Identifier: keyid:74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:b0:b9:8d:2b:3f:a6:b7:1a:16:82:ef:17:28:26:8b:d2:36: 65:8e:95:27:14:ff:ef:b1:b9:98:c0:31:21:8a:c5:b3:82:7a: a8:0d:43:aa:62:c1:ae:9b:01:e0:73:90:20:08:60:8d:5d:81: 52:e8:2a:a5:ee:9e:fa:2d:ef:c8:a0:95:05:7e:da:97:e5:a1: 0a:0d:e4:39:e2:84:78:49:46:a4:6b:3f:dd:1b:9c:45:e7:29: f1:cd:43:8b:84:ba:fa:f3:c6:be:75:a3:b4:92:ff:24:8f:2b: 1a:45:81:2c:87:da:77:6b:67:a5:20:ee:5f:18:cb:56:5e:31: 07:e2:76:02:a5:aa:ff:1b:49:e5:bc:a8:92:16:f3:01:a0:2e: 6c:4b:47:c7:50:28:39:5f:ce:c0:8c:50:6a:d4:26:7a:14:0e: 73:c9:c3:0e:d6:9a:4e:2f:25:0d:fd:60:52:b2:65:2c:36:8f: 88:41:b0:4a:87:0d:48:49:40:c6:9c:bb:5e:a9:6b:c6:0a:ad: 4f:ea:b7:9d:de:c5:a5:e1:6d:f2:d9:69:27:b4:aa:1b:98:30: bc:ec:0f:66:a4:b8:48:5f:16:e2:d2:f6:12:10:2b:3b:8e:e1: 15:f0:da:7e:54:e8:73:b4:c4:fc:e0:08:3a:16:b8:9d:de:a8: 38:43:41:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkt1CaEl5/IPdgCUMttYYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ODY0ZjUwMjNlYzYyNjNlZjlmMTZmOTAxODdmNWYyODA2 MWQxMTUwHhcNMjUxMjIyMDEwMDU2WhcNMjUxMjIzMDEwMDU2WjAzMTEwLwYDVQQD EyhjNjI2OGYwNTE1ZTE0MDI0NGE0MWYwYzIwYzY1ODkyMTM1ZWMxODVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27bccpKkTBcYC7v9GawrXbWytB7m m9mAAVFno7RXGS6QdLi2Do1JPJr/MoagXMYqPb/JAAphS5/SmT2ODgxQ2l3NUnoq M5LvLVzP2cOlXpz6Rep9YaqbsBGhgc1HRiuUegwg8M6QmlUCEXcD1nOuzcnjknP9 ly3mxeXwQxsyL+U/KpNUqn877z86Qv7p/57MoGtLuacrF7eAOl8o2Y9ycWpLXcMv kfTD5xVpltUl/kB4ilKdEOOvRaNad3AitGnhLHqaJFiibrvJqHJkE7cwZHXgiL3F HZo5IxHMe2SGTArUq7v4TScNTM9u+XSRBI7nPW4Of74wsK7Iz5+MF/nFnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYmjwUV4UAkSkHwwgxliSE17BhaMB8GA1UdIwQY MBaAFHSGT1Aj7GJj758W+QGH9fKAYdEVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZElaUFVDUHNZbVB2bnhiNUFZZjE4b0JoMFJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wY2E0ZGYtMmUwNi00NDA2LTk2ODgt NzhmMDI4MDVjNzA5LzEvZElaUFVDUHNZbVB2bnhiNUFZZjE4b0JoMFJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8wY2E0ZGYtMmUwNi00NDA2LTk2ODgtNzhmMDI4MDVjNzA5 LzEvZElaUFVDUHNZbVB2bnhiNUFZZjE4b0JoMFJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs7C5jSs/ prcaFoLvFygmi9I2ZY6VJxT/77G5mMAxIYrFs4J6qA1DqmLBrpsB4HOQIAhgjV2B Uugqpe6e+i3vyKCVBX7al+WhCg3kOeKEeElGpGs/3RucRecp8c1Di4S6+vPGvnWj tJL/JI8rGkWBLIfad2tnpSDuXxjLVl4xB+J2AqWq/xtJ5byokhbzAaAubEtHx1Ao OV/OwIxQatQmehQOc8nDDtaaTi8lDf1gUrJlLDaPiEGwSocNSElAxpy7Xqlrxgqt T+q3nd7FpeFt8tlpJ7SqG5gwvOwPZqS4SF8W4tL2EhArO47hFfDaflToc7TE/OAI Oha4nd6oOENBpQ== -----END CERTIFICATE-----Generated at Mon Dec 22 06:12:58 2025 by rpki-client