This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft File: dzEQpDcE2VSd9xVuOnieYihbFpM.mft (raw, json) Hash identifier: EAlXxt9rw9neIzhGkH8D+F9Zp84s9BPIbHelK8DmzUo= Subject key identifier: C9:FF:1B:15:91:1C:23:82:2A:EF:90:BA:73:D1:D7:21:F6:77:0D:56 Authority key identifier: 77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93 Certificate issuer: /CN=773110a43704d9549df7156e3a789e62285b1693 Certificate serial: 019B38A1FADDE8744864E174E9014AFA4FAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft Manifest number: 1754 Signing time: Fri 19 Dec 2025 22:01:38 +0000 Manifest this update: Fri 19 Dec 2025 22:01:38 +0000 Manifest next update: Sat 20 Dec 2025 22:01:38 +0000 Files and hashes: 1: dzEQpDcE2VSd9xVuOnieYihbFpM.crl (hash: zMh+YNjzH4TdToEPlxH3TNOvJjRh8mPNj6Zx+afvWu8=) 2: lKi6SoPHv8adD_f0H8JMR-0tkso.roa (hash: IDdp81FcSfbScsI5eFdQ3u0Q5w/9MnWkbMQFbCRI7Lw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:fa:dd:e8:74:48:64:e1:74:e9:01:4a:fa:4f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=773110a43704d9549df7156e3a789e62285b1693 Validity Not Before: Dec 19 22:01:38 2025 GMT Not After : Dec 20 22:01:38 2025 GMT Subject: CN=c9ff1b15911c23822aef90ba73d1d721f6770d56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4a:41:78:6a:7a:61:3b:92:43:e1:4b:c8:06: 15:16:96:4d:51:45:4e:89:c8:22:28:9a:4b:b1:a1: 2f:ab:96:37:1d:1d:12:fd:1f:49:99:3f:b7:1a:41: a0:11:2e:a8:c4:40:3d:9f:0b:bf:b7:b0:eb:bc:15: b9:45:40:a2:87:51:8e:41:a5:b9:de:67:22:aa:2d: 81:4b:71:26:90:93:98:ef:05:92:ef:b5:36:0b:d4: dc:7a:dd:72:b0:c6:5f:9c:8e:ba:a9:a7:8d:78:68: 61:cc:29:c3:89:f3:42:ba:38:0f:2b:67:9d:c6:df: dc:68:21:83:03:69:17:a3:63:f0:65:89:f9:1d:ff: a1:48:09:49:73:aa:7f:7b:bf:ea:18:a6:7e:b2:65: ff:3e:ac:98:40:3d:b2:31:7f:81:b2:ba:9a:ec:9e: 17:ed:2f:98:44:0d:66:73:5d:64:e9:cb:24:6a:57: be:26:21:2f:25:f1:32:70:3f:76:2a:0b:81:2b:01: 40:2a:30:01:ba:cd:d0:5a:bd:72:f9:85:f6:c1:44: 36:f6:42:f2:b7:cc:5a:fd:b6:c8:47:7a:f7:51:d6: a9:dc:ec:73:00:d8:03:4d:e0:ff:12:02:c8:1d:e9: e3:82:c2:be:7f:03:be:ce:b6:35:50:04:70:78:44: 9d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:FF:1B:15:91:1C:23:82:2A:EF:90:BA:73:D1:D7:21:F6:77:0D:56 X509v3 Authority Key Identifier: keyid:77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:d5:be:f6:a2:be:40:31:b7:1c:ef:f6:d4:d6:ae:01:db:57: 1e:75:c0:6d:18:f7:01:fd:94:f5:de:eb:2a:d9:fa:a1:5c:b2: 23:86:64:24:6f:8f:14:90:ff:f1:cb:6f:2d:b4:b6:c8:05:fc: 52:c0:cc:04:ed:15:2f:e9:29:d5:ae:8f:f0:98:4e:25:f7:6d: 42:50:33:a7:b7:89:74:f2:ba:d9:4f:56:d2:2c:99:ec:46:ea: 0c:a3:b7:66:3b:75:be:b6:8d:8a:da:ec:10:16:a7:b1:27:4b: 18:d2:51:ec:52:70:a4:ca:08:95:02:c6:20:75:a0:93:49:b0: e5:dc:dc:66:77:b3:c3:ab:80:2b:c7:5a:7b:de:e0:bb:27:70: 58:21:69:16:08:c8:00:cb:7a:7d:d8:13:29:d1:3a:27:f0:f2: 32:b1:a7:56:7f:2b:a5:ff:95:64:90:e6:37:a7:92:bc:ce:03: ed:25:aa:08:35:49:21:64:9a:69:04:d3:ea:d1:f8:ea:6f:8d: 3b:ed:2e:82:5d:d4:38:3c:6d:c5:7a:38:e6:55:79:b4:d4:a8: d7:54:28:46:83:c0:2c:ff:94:70:b0:2a:93:06:6d:c8:38:2d: 68:63:33:5f:8a:71:a0:90:75:f0:c8:67:b6:59:4e:c3:7f:c1: 49:5b:be:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ofrd6HRIZOF06QFK+k+qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MzExMGE0MzcwNGQ5NTQ5ZGY3MTU2ZTNhNzg5ZTYyMjg1 YjE2OTMwHhcNMjUxMjE5MjIwMTM4WhcNMjUxMjIwMjIwMTM4WjAzMTEwLwYDVQQD EyhjOWZmMWIxNTkxMWMyMzgyMmFlZjkwYmE3M2QxZDcyMWY2NzcwZDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEpBeGp6YTuSQ+FLyAYVFpZNUUVO icgiKJpLsaEvq5Y3HR0S/R9JmT+3GkGgES6oxEA9nwu/t7DrvBW5RUCih1GOQaW5 3mciqi2BS3EmkJOY7wWS77U2C9Tcet1ysMZfnI66qaeNeGhhzCnDifNCujgPK2ed xt/caCGDA2kXo2PwZYn5Hf+hSAlJc6p/e7/qGKZ+smX/PqyYQD2yMX+Bsrqa7J4X 7S+YRA1mc11k6cskale+JiEvJfEycD92KguBKwFAKjABus3QWr1y+YX2wUQ29kLy t8xa/bbIR3r3Udap3OxzANgDTeD/EgLIHenjgsK+fwO+zrY1UARweESdJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMn/GxWRHCOCKu+QunPR1yH2dw1WMB8GA1UdIwQY MBaAFHcxEKQ3BNlUnfcVbjp4nmIoWxaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHpFUXBEY0UyVlNkOXhWdU9uaWVZaWhiRnBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wODA1MzAtM2Y4MS00NDc5LWI1YTAt OWEzODE1OWI3OTRlLzEvZHpFUXBEY0UyVlNkOXhWdU9uaWVZaWhiRnBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8wODA1MzAtM2Y4MS00NDc5LWI1YTAtOWEzODE1OWI3OTRl LzEvZHpFUXBEY0UyVlNkOXhWdU9uaWVZaWhiRnBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtW+9qK+ QDG3HO/21NauAdtXHnXAbRj3Af2U9d7rKtn6oVyyI4ZkJG+PFJD/8ctvLbS2yAX8 UsDMBO0VL+kp1a6P8JhOJfdtQlAzp7eJdPK62U9W0iyZ7EbqDKO3Zjt1vraNitrs EBansSdLGNJR7FJwpMoIlQLGIHWgk0mw5dzcZnezw6uAK8dae97guydwWCFpFgjI AMt6fdgTKdE6J/DyMrGnVn8rpf+VZJDmN6eSvM4D7SWqCDVJIWSaaQTT6tH46m+N O+0ugl3UODxtxXo45lV5tNSo11QoRoPALP+UcLAqkwZtyDgtaGMzX4pxoJB18Mhn tllOw3/BSVu+Pg== -----END CERTIFICATE-----Generated at Sat Dec 20 03:18:05 2025 by rpki-client