This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft File: dWyevH_4dZ2KEG__rzNeo0b66lc.mft (raw, json) Hash identifier: BDasssPYLa6eSRzks8C+J8p9VkDhk+jCixTkbvpTocc= Subject key identifier: 26:1C:B5:B9:2D:0C:2E:C3:3F:46:86:23:3D:AA:AB:E5:61:63:16:C0 Authority key identifier: 75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57 Certificate issuer: /CN=756c9ebc7ff8759d8a106fffaf335ea346faea57 Certificate serial: 019B32313D9314F58C63419F94327D6E4A6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 16:00:46 +0000 Manifest this update: Thu 18 Dec 2025 16:00:46 +0000 Manifest next update: Fri 19 Dec 2025 16:00:46 +0000 Files and hashes: 1: dWyevH_4dZ2KEG__rzNeo0b66lc.crl (hash: pSzTNro8hQROLfzcz5IDf9WbB5YA6icprv1uFUDnSXc=) 2: hx2ek40oJmiSl7Xgir3mC5VHBV0.roa (hash: cCp67/8pyoc4Gg/vx5QrjhBwzCVOnjb7FAHH3PazwOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:3d:93:14:f5:8c:63:41:9f:94:32:7d:6e:4a:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=756c9ebc7ff8759d8a106fffaf335ea346faea57 Validity Not Before: Dec 18 16:00:46 2025 GMT Not After : Dec 19 16:00:46 2025 GMT Subject: CN=261cb5b92d0c2ec33f4686233daaabe5616316c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c4:f6:2b:8f:25:16:44:43:b3:e6:66:64:7a: 8d:9c:af:be:14:dd:c8:73:fc:87:d7:86:5e:38:f5: 5d:4f:68:7a:6c:8a:3a:ec:89:24:bf:17:ea:f3:c3: 02:27:52:e3:62:01:70:eb:1d:23:bf:fa:25:dd:0a: 20:67:8d:ce:cd:1f:a8:e3:e4:03:ad:5d:a9:a2:a1: f9:58:ed:2e:63:55:98:50:ed:c5:d7:6f:cc:2a:73: 32:fd:57:21:0a:29:ec:64:39:85:3e:8b:c8:3c:65: ec:5e:14:92:98:9c:fa:ea:20:d9:3f:83:59:eb:06: 41:1e:1d:e3:91:59:3b:44:b9:c2:8d:72:1d:36:e1: 20:4c:6e:30:ba:54:37:ed:76:e6:b5:6e:0f:33:e5: 8a:ce:ce:e5:22:6f:82:51:a8:ce:c6:78:aa:d8:14: e5:6c:02:35:61:c5:e2:d2:52:29:52:b8:49:b1:f7: 09:04:ae:97:51:b8:c1:da:e2:28:3b:37:b9:93:12: 02:ab:c8:1b:b5:3d:7f:01:a4:05:ab:90:9e:55:ad: ae:87:f7:cd:66:8d:d5:de:f7:53:ac:e1:37:fd:99: ca:ce:bc:f6:58:cc:f0:94:74:c1:de:80:cd:8f:a4: 45:1c:9d:17:2b:22:5f:27:e2:ee:dd:cb:71:b5:99: 0a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:1C:B5:B9:2D:0C:2E:C3:3F:46:86:23:3D:AA:AB:E5:61:63:16:C0 X509v3 Authority Key Identifier: keyid:75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:5d:3f:c0:21:c9:b1:81:60:b6:d7:d3:85:69:d7:9b:4a:3b: e7:67:38:b5:08:84:27:5d:42:98:39:01:2e:68:12:87:46:a9: da:57:20:8b:f3:59:98:54:31:38:7b:24:ae:17:a3:bb:98:20: f9:4d:8c:a3:24:66:89:1d:3f:35:a9:90:eb:aa:d1:95:62:39: cf:bf:74:e7:5c:31:bb:35:40:15:06:85:ca:f4:a5:89:ac:49: 55:91:85:e0:ab:c9:01:92:52:08:dc:57:53:09:07:90:e0:c2: 90:83:a2:b9:cd:a6:8e:31:fd:18:46:48:7b:87:ce:8e:7a:e5: 7f:ed:f1:39:18:9d:dd:31:a3:c0:ed:c3:4f:6a:03:3d:16:c7: 76:1f:fa:7c:fe:1c:d3:99:7e:82:01:3e:44:56:df:ae:fd:4b: d3:34:37:e5:47:c8:5f:eb:55:95:de:61:e6:42:f9:24:65:e8: 29:e7:27:e3:54:b1:8c:d9:6c:cf:b1:72:0f:b6:59:9a:6a:d5: 3b:23:3b:d6:af:46:85:35:f5:29:5d:e6:7f:a3:d2:da:3d:9e: 84:af:5e:ce:6d:25:c0:6c:fd:3c:9c:da:b7:92:70:65:38:53: d7:33:49:52:4b:9f:a4:d0:7f:30:1f:74:2b:f5:26:90:f8:14: 6c:ab:79:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMT2TFPWMY0GflDJ9bkptMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NmM5ZWJjN2ZmODc1OWQ4YTEwNmZmZmFmMzM1ZWEzNDZm YWVhNTcwHhcNMjUxMjE4MTYwMDQ2WhcNMjUxMjE5MTYwMDQ2WjAzMTEwLwYDVQQD EygyNjFjYjViOTJkMGMyZWMzM2Y0Njg2MjMzZGFhYWJlNTYxNjMxNmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MT2K48lFkRDs+ZmZHqNnK++FN3I c/yH14ZeOPVdT2h6bIo67Ikkvxfq88MCJ1LjYgFw6x0jv/ol3QogZ43OzR+o4+QD rV2poqH5WO0uY1WYUO3F12/MKnMy/VchCinsZDmFPovIPGXsXhSSmJz66iDZP4NZ 6wZBHh3jkVk7RLnCjXIdNuEgTG4wulQ37XbmtW4PM+WKzs7lIm+CUajOxniq2BTl bAI1YcXi0lIpUrhJsfcJBK6XUbjB2uIoOze5kxICq8gbtT1/AaQFq5CeVa2uh/fN Zo3V3vdTrOE3/ZnKzrz2WMzwlHTB3oDNj6RFHJ0XKyJfJ+Lu3ctxtZkKvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYctbktDC7DP0aGIz2qq+VhYxbAMB8GA1UdIwQY MBaAFHVsnrx/+HWdihBv/68zXqNG+upXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFd5ZXZIXzRkWjJLRUdfX3J6TmVvMGI2NmxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81ZjY1MzAtMTE2Ni00YjlkLTlkZmQt Y2FhZTBlZGY2OWYxLzEvZFd5ZXZIXzRkWjJLRUdfX3J6TmVvMGI2NmxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy81ZjY1MzAtMTE2Ni00YjlkLTlkZmQtY2FhZTBlZGY2OWYx LzEvZFd5ZXZIXzRkWjJLRUdfX3J6TmVvMGI2NmxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqF0/wCHJ sYFgttfThWnXm0o752c4tQiEJ11CmDkBLmgSh0ap2lcgi/NZmFQxOHskrheju5gg +U2MoyRmiR0/NamQ66rRlWI5z79051wxuzVAFQaFyvSliaxJVZGF4KvJAZJSCNxX UwkHkODCkIOiuc2mjjH9GEZIe4fOjnrlf+3xORid3TGjwO3DT2oDPRbHdh/6fP4c 05l+ggE+RFbfrv1L0zQ35UfIX+tVld5h5kL5JGXoKecn41SxjNlsz7FyD7ZZmmrV OyM71q9GhTX1KV3mf6PS2j2ehK9ezm0lwGz9PJzat5JwZThT1zNJUkufpNB/MB90 K/UmkPgUbKt5zg== -----END CERTIFICATE-----Generated at Fri Dec 19 01:57:51 2025 by rpki-client