This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft File: dXzv42s_zGikLAr_gdFEmA8yd38.mft (raw, json) Hash identifier: DDb6FoEnPYGyuoVup/p/rDocL/0Upv8Tba1xH80sTl0= Subject key identifier: 3C:A5:1B:32:3C:18:B7:1D:18:A9:F7:4A:01:18:C4:74:7F:0B:6B:4A Authority key identifier: 75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F Certificate issuer: /CN=757cefe36b3fcc68a42c0aff81d144980f32777f Certificate serial: 019AFE7AD6F566B2960CABBFF1EDAEDE0457 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft Manifest number: 0EBD Signing time: Mon 08 Dec 2025 15:00:54 +0000 Manifest this update: Mon 08 Dec 2025 15:00:54 +0000 Manifest next update: Tue 09 Dec 2025 15:00:54 +0000 Files and hashes: 1: 2MnJb6c5YnNQ1zVgyuJ_IZ3n2QI.roa (hash: k/m6yvyjLdB8+4uEbTkqM+WRV4cgI1Ugl2bD6WkY+xM=) 2: 4Yl_3VM-kdroRBsz7nPcb_MfTYo.roa (hash: 2xScy0N/ISEI1qEUmAbHyPZ6hI9GPPFsgivLJsiPGzo=) 3: AsZ4lIlUC0d5mfRed_ShT3RnpBQ.roa (hash: W7NsqtDHS3yDz7/Se2vS6CdoOqQMP8fqf009dcbuclU=) 4: LPKpfkMJen9TUH4ZfxgOzxqHkNU.roa (hash: ING4rNZCefT1Q8B8npudHtyqQQUdosJKFpOv34aIHJk=) 5: MUsQigUUD2skKaCxyUsENnVfQc0.roa (hash: jiSuFC22L+bIpKGlJw58reJLq1BBaex8I+CdJw/e78g=) 6: N1rTidaACgh8Wl5J2g45GZumvQs.roa (hash: btCaFx/Jws6uzlXHydN6cLSWM9L6FDcS4ymcYrWP048=) 7: UVAz1jDT3iVOFvSm2qO2EdM6DgI.roa (hash: BgGgY29/jzHM3rW+5X9NXDmgQhNrFZgHRGbC0+SNOiA=) 8: dXzv42s_zGikLAr_gdFEmA8yd38.crl (hash: 9B+Y0lGjOzmLhDv+CREixzipweVa4d3wPk9l5PWUTLI=) 9: h4SH4jbcO_QrPdA2Gh6nPhcu90k.roa (hash: i2GmF/BWsi8T4gmbicuCkuelb7temf0e4pvjoHHSntA=) 10: pEFNfAg8nkFQ7szOFzgGqxU8A9I.roa (hash: lNi497sBRC4Xkg5Gl71AZlaivWTnykL+9yjiUscMI7I=) 11: ugpSKfU4cI4BHNBN_7iW8XaPfSI.roa (hash: db0tkxspHpe7xqGkGEEw5zEcWk0GCNRtkvpsh9z8Yis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:7a:d6:f5:66:b2:96:0c:ab:bf:f1:ed:ae:de:04:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=757cefe36b3fcc68a42c0aff81d144980f32777f Validity Not Before: Dec 8 15:00:54 2025 GMT Not After : Dec 9 15:00:54 2025 GMT Subject: CN=3ca51b323c18b71d18a9f74a0118c4747f0b6b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4e:48:1d:7c:aa:20:f3:2e:d4:d7:85:97:72: 5a:f0:c6:25:9f:e4:87:a4:30:16:48:86:d0:a4:f6: 97:d7:15:26:42:8a:fe:0a:be:12:e3:f4:17:59:9e: bf:0d:7a:4d:4a:ec:e0:fe:ca:dd:03:bb:5b:10:3c: 83:9f:03:30:64:bc:60:8c:26:a8:01:80:32:fd:40: d4:27:3a:1a:ef:35:03:19:fe:49:58:12:d3:de:6a: 69:f2:16:ef:a3:61:af:e3:89:a8:19:f3:87:14:7a: 8a:a3:cd:05:c5:40:ba:1e:87:f9:40:28:88:c0:72: 43:51:18:94:4b:28:3c:28:84:19:9e:a9:62:6c:8e: ba:b8:df:9a:0a:e9:43:2e:d2:f8:52:2d:36:74:fe: 22:71:c6:0d:85:c0:a5:30:e6:09:b0:92:58:b1:3a: b1:ae:1e:d1:e1:fa:be:0e:30:dc:53:1d:69:26:dc: 17:9f:b2:21:07:cc:57:8a:4a:bb:b1:55:f7:20:7b: ed:bc:1e:9e:11:9c:99:0c:b5:d9:5f:87:3b:10:07: 87:d0:21:9e:a2:9c:f2:f2:45:a6:80:ab:9b:92:c4: bc:45:b5:78:76:21:19:c4:de:9e:23:e3:41:dd:81: aa:24:a5:93:49:87:28:70:78:bb:e0:59:27:7e:5f: e3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A5:1B:32:3C:18:B7:1D:18:A9:F7:4A:01:18:C4:74:7F:0B:6B:4A X509v3 Authority Key Identifier: keyid:75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e3:e5:28:72:86:82:c8:02:97:78:ce:50:9f:d1:0f:74:1b: ce:72:f7:1f:ef:83:00:72:5a:a5:a9:62:e6:40:38:7c:60:0f: 9d:13:64:74:9c:d5:38:3e:6b:7f:28:1f:cd:48:d6:9e:3c:18: 1b:b2:c9:11:fc:df:dd:c3:14:e8:fc:6c:b8:fd:83:45:8f:20: 84:e9:de:55:79:7b:5d:17:ac:7f:71:34:81:cd:1b:23:59:6c: 3b:71:0d:c8:bb:e8:1d:b5:26:a4:0f:c1:e7:a5:db:ec:95:a7: 1d:cd:4a:75:58:3d:8c:67:90:51:70:fd:4c:22:7f:63:ae:0c: 82:75:02:f2:df:f1:19:88:c4:4f:83:e5:9f:4e:2e:c4:7d:95: 16:d1:12:47:4f:99:87:10:62:5f:0f:7a:03:a1:ee:81:78:84: 4a:8e:16:89:b3:94:1c:19:b8:15:7b:6c:a6:e9:b8:66:3c:d2: 4c:ec:eb:34:66:3b:c0:ba:95:e7:86:60:29:10:e4:f8:c0:61: 88:ac:02:25:ce:71:06:61:30:1f:67:d4:4f:f5:b7:44:48:20: 7e:3c:47:46:ba:f2:f9:6d:26:ab:56:01:ed:44:a2:3b:00:8f: 4c:e8:71:2b:ab:e3:f6:e4:a4:4b:a7:e7:2d:b7:2a:ef:2d:a5: e4:0f:ca:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr+etb1ZrKWDKu/8e2u3gRXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1N2NlZmUzNmIzZmNjNjhhNDJjMGFmZjgxZDE0NDk4MGYz Mjc3N2YwHhcNMjUxMjA4MTUwMDU0WhcNMjUxMjA5MTUwMDU0WjAzMTEwLwYDVQQD EygzY2E1MWIzMjNjMThiNzFkMThhOWY3NGEwMTE4YzQ3NDdmMGI2YjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx05IHXyqIPMu1NeFl3Ja8MYln+SH pDAWSIbQpPaX1xUmQor+Cr4S4/QXWZ6/DXpNSuzg/srdA7tbEDyDnwMwZLxgjCao AYAy/UDUJzoa7zUDGf5JWBLT3mpp8hbvo2Gv44moGfOHFHqKo80FxUC6Hof5QCiI wHJDURiUSyg8KIQZnqlibI66uN+aCulDLtL4Ui02dP4iccYNhcClMOYJsJJYsTqx rh7R4fq+DjDcUx1pJtwXn7IhB8xXikq7sVX3IHvtvB6eEZyZDLXZX4c7EAeH0CGe opzy8kWmgKubksS8RbV4diEZxN6eI+NB3YGqJKWTSYcocHi74Fknfl/jWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDylGzI8GLcdGKn3SgEYxHR/C2tKMB8GA1UdIwQY MBaAFHV87+NrP8xopCwK/4HRRJgPMnd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFh6djQyc196R2lrTEFyX2dkRkVtQTh5ZDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC85NzJkYjYtNzcwZi00NDYyLTlmYzct ZWU5Yjk1MTdmMmVjLzEvZFh6djQyc196R2lrTEFyX2dkRkVtQTh5ZDM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC85NzJkYjYtNzcwZi00NDYyLTlmYzctZWU5Yjk1MTdmMmVj LzEvZFh6djQyc196R2lrTEFyX2dkRkVtQTh5ZDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACuPlKHKG gsgCl3jOUJ/RD3QbznL3H++DAHJapali5kA4fGAPnRNkdJzVOD5rfygfzUjWnjwY G7LJEfzf3cMU6PxsuP2DRY8ghOneVXl7XResf3E0gc0bI1lsO3ENyLvoHbUmpA/B 56Xb7JWnHc1KdVg9jGeQUXD9TCJ/Y64MgnUC8t/xGYjET4Pln04uxH2VFtESR0+Z hxBiXw96A6HugXiESo4WibOUHBm4FXtspum4ZjzSTOzrNGY7wLqV54ZgKRDk+MBh iKwCJc5xBmEwH2fUT/W3REggfjxHRrry+W0mq1YB7USiOwCPTOhxK6vj9uSkS6fn Lbcq7y2l5A/Kig== -----END CERTIFICATE-----Generated at Mon Dec 8 21:23:31 2025 by rpki-client