This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft File: Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft (raw, json) Hash identifier: sCeN0oT9/yFn/Zz/PIye0vxkjwPK19SSpwUZQKgw15A= Subject key identifier: C8:17:07:1C:0F:C5:1B:D6:52:42:61:47:9D:EC:7C:C8:27:72:BF:26 Authority key identifier: 0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C Certificate issuer: /CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c Certificate serial: 019B405A89741510D74E10E00A014978BC0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 10:00:33 +0000 Manifest this update: Sun 21 Dec 2025 10:00:33 +0000 Manifest next update: Mon 22 Dec 2025 10:00:33 +0000 Files and hashes: 1: 8GPy1nq-d8qyd5DzcEoD7_wmnRk.roa (hash: VU25KKsH1DHg8pytMPBtSMEdGMuo9BZsAecAtygfZnk=) 2: Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl (hash: DPqOX5v6+vs2QPQXsCYemIR8j7oXhHrkZb8UWLpdwjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:89:74:15:10:d7:4e:10:e0:0a:01:49:78:bc:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c Validity Not Before: Dec 21 10:00:33 2025 GMT Not After : Dec 22 10:00:33 2025 GMT Subject: CN=c817071c0fc51bd6524261479dec7cc82772bf26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d9:fd:34:c3:ef:bc:fa:08:f8:96:4f:70:ee: 31:46:d7:93:be:0d:7d:fc:94:ef:fd:09:a2:0e:ed: f7:af:76:f2:eb:db:ef:72:12:6e:a0:08:4a:f8:01: 61:e5:25:d5:8e:00:a0:50:96:5a:77:36:e4:7c:e5: 9a:27:d0:e7:b6:f4:85:b0:62:bd:76:ae:bf:ad:be: 8b:a5:a7:1a:85:74:17:62:dd:d5:3a:f6:89:b2:7d: 41:6e:76:f3:9c:45:6b:35:cc:bc:cc:a8:9e:59:b8: e9:ed:6e:48:30:2c:ff:1d:50:e0:61:ad:52:4c:59: 5f:06:67:db:42:f3:f4:fc:d5:64:98:13:47:c5:76: d7:96:c4:53:5f:ba:1f:64:2e:75:94:5d:4b:8a:73: 95:6d:94:a4:fa:d6:51:fb:02:24:f5:51:69:7a:c2: a4:d1:3f:7e:10:8e:17:a1:7e:d6:fb:c1:c7:5a:ef: 02:78:26:3e:de:c7:cd:75:cb:3b:14:b1:c2:b4:7d: 3b:c9:3a:cf:00:a0:da:4e:2c:96:c2:13:94:a0:c7: f4:a4:10:0a:5a:9e:40:cb:48:39:15:0f:47:12:ca: 2c:79:67:1b:32:83:04:ef:01:d3:f2:65:a3:95:7e: f8:d3:49:03:3f:e9:55:68:f8:f9:5b:49:ec:3f:2f: 9e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:17:07:1C:0F:C5:1B:D6:52:42:61:47:9D:EC:7C:C8:27:72:BF:26 X509v3 Authority Key Identifier: keyid:0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:73:d0:17:e5:80:64:81:3a:5f:92:f7:3f:cb:aa:99:38:d1: 71:11:3e:67:4a:cd:f0:7b:c6:c6:bf:ce:8f:47:03:a9:7b:d3: 3d:fd:fb:b6:4c:d9:3f:12:42:eb:ab:e2:7f:0e:4f:fd:ba:26: 60:b3:9f:ca:ef:6a:90:bd:f4:1d:43:07:5d:5e:8f:92:c2:dd: 86:2e:86:4a:e9:a9:b0:2d:d5:9b:f1:4b:72:7c:1d:60:a6:05: 3b:a3:ba:57:0f:f7:c4:1e:0b:62:d1:3c:ab:df:e2:23:35:83: 94:a3:c0:7d:4e:be:39:cb:9c:c2:20:ae:ad:d0:a0:6c:80:6e: a0:f9:2e:69:1e:a4:b8:83:d9:97:16:01:e2:d2:a1:4a:3c:b8: 8e:42:10:62:dd:b7:1c:89:8b:a4:55:2d:0b:12:5a:bf:f1:a3: fb:ce:14:00:b8:d7:5f:6a:0a:ed:47:90:cd:5a:31:b7:32:97: 9e:e9:4d:d6:69:d9:48:60:14:aa:d6:52:82:0a:29:b1:0c:af: 1a:aa:66:19:85:4b:41:76:63:81:8a:f1:3d:51:e6:44:f7:03: 8d:9d:d1:f8:34:9c:b5:a9:14:b1:d2:a2:cd:ae:ae:95:f5:69: c3:d5:5b:d5:77:83:a3:90:b5:03:28:ff:88:ac:e7:58:41:d6: 40:ff:d2:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWol0FRDXThDgCgFJeLwMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmM2YxMzMyY2ZmMDViMjJhM2E2NmE2ZDRjMzQ4ZmJjMDFk ZTExNWMwHhcNMjUxMjIxMTAwMDMzWhcNMjUxMjIyMTAwMDMzWjAzMTEwLwYDVQQD EyhjODE3MDcxYzBmYzUxYmQ2NTI0MjYxNDc5ZGVjN2NjODI3NzJiZjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotn9NMPvvPoI+JZPcO4xRteTvg19 /JTv/QmiDu33r3by69vvchJuoAhK+AFh5SXVjgCgUJZadzbkfOWaJ9DntvSFsGK9 dq6/rb6LpacahXQXYt3VOvaJsn1BbnbznEVrNcy8zKieWbjp7W5IMCz/HVDgYa1S TFlfBmfbQvP0/NVkmBNHxXbXlsRTX7ofZC51lF1LinOVbZSk+tZR+wIk9VFpesKk 0T9+EI4XoX7W+8HHWu8CeCY+3sfNdcs7FLHCtH07yTrPAKDaTiyWwhOUoMf0pBAK Wp5Ay0g5FQ9HEsoseWcbMoME7wHT8mWjlX7400kDP+lVaPj5W0nsPy+eMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMgXBxwPxRvWUkJhR53sfMgncr8mMB8GA1UdIwQY MBaAFA8/EzLP8Fsio6ZqbUw0j7wB3hFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHo4VE1zX3dXeUtqcG1wdFREU1B2QUhlRVZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81MjNiOTUtM2RkYy00ODE4LTkyNjUt ZGFhZjI5MjExOTQ5LzEvRHo4VE1zX3dXeUtqcG1wdFREU1B2QUhlRVZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi81MjNiOTUtM2RkYy00ODE4LTkyNjUtZGFhZjI5MjExOTQ5 LzEvRHo4VE1zX3dXeUtqcG1wdFREU1B2QUhlRVZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWnPQF+WA ZIE6X5L3P8uqmTjRcRE+Z0rN8HvGxr/Oj0cDqXvTPf37tkzZPxJC66vifw5P/bom YLOfyu9qkL30HUMHXV6PksLdhi6GSumpsC3Vm/FLcnwdYKYFO6O6Vw/3xB4LYtE8 q9/iIzWDlKPAfU6+OcucwiCurdCgbIBuoPkuaR6kuIPZlxYB4tKhSjy4jkIQYt23 HImLpFUtCxJav/Gj+84UALjXX2oK7UeQzVoxtzKXnulN1mnZSGAUqtZSggopsQyv GqpmGYVLQXZjgYrxPVHmRPcDjZ3R+DSctakUsdKiza6ulfVpw9Vb1XeDo5C1Ayj/ iKznWEHWQP/SpA== -----END CERTIFICATE-----Generated at Sun Dec 21 19:27:22 2025 by rpki-client