This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft File: dzalyFoI2AdJBBy5z6UX-31Ym6g.mft (raw, json) Hash identifier: fo/GJ/jbisXrfXx8FggKOpWZCEEeog5uVYfs77VCik0= Subject key identifier: C4:9C:99:81:5A:C9:E6:08:5A:51:ED:5C:08:B3:22:37:58:02:2B:28 Authority key identifier: 77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8 Certificate issuer: /CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8 Certificate serial: 019B262D169A6F34BA33FB8295AD816B4C48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft Manifest number: 1786 Signing time: Tue 16 Dec 2025 08:00:47 +0000 Manifest this update: Tue 16 Dec 2025 08:00:47 +0000 Manifest next update: Wed 17 Dec 2025 08:00:47 +0000 Files and hashes: 1: dzalyFoI2AdJBBy5z6UX-31Ym6g.crl (hash: eE9IuN7+eahLQLm7wZTflUwhX8N5q5g9a3wNdyYBPkU=) 2: lX0LK1nSiHuzV_SMOweQSMztoO8.roa (hash: FSFbPLbWej0Nx3zMGDu+OsUG2lUiqW2+msdd/cNwwCI=) 3: m-mEC3MQWEKPGGG-lSkfc_YkjKY.roa (hash: mn8IMLUm7FiquI9qNoEzKGH7Q8r7mj6TH3z7eAZCOtY=) 4: pOouLLrM_fPZOnQs6zwFn5Phg1A.roa (hash: /KoAmA+1k0JwlfyqAV8ggH0wccERUauLpX2rgBT+8fk=) 5: zgslkGsdDbo-83qCCgJ7ueeD908.roa (hash: oQmBgVS3Wh0yqMQW3hPh1qFWDPXgZCrq5bbnQf1I4lM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:16:9a:6f:34:ba:33:fb:82:95:ad:81:6b:4c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8 Validity Not Before: Dec 16 08:00:47 2025 GMT Not After : Dec 17 08:00:47 2025 GMT Subject: CN=c49c99815ac9e6085a51ed5c08b3223758022b28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ac:96:59:eb:91:d5:03:ca:b4:7c:51:29:47: 51:ae:d3:35:c2:25:a1:7f:85:f5:1f:ab:c5:18:7b: 59:20:db:b3:94:ec:f9:cf:76:50:74:52:c1:f6:d1: 94:a2:1e:2f:bb:82:f7:3d:49:0b:d3:40:75:ee:08: bc:4f:5b:a0:2e:79:6d:ec:43:85:89:37:c7:33:21: 9d:5a:c9:83:cd:94:6c:f7:a1:3d:4f:18:c6:5e:85: c4:14:9f:d6:b8:44:66:a5:75:99:7b:cc:95:89:b4: f1:c6:09:f6:57:3a:d0:bd:02:36:62:1b:21:d1:0c: 44:53:71:65:74:cf:41:ba:f0:d4:53:08:be:8e:99: 1e:08:42:0d:4e:2b:bf:92:06:4c:c5:29:31:d1:de: 15:73:fc:5b:f4:ad:78:bd:42:5c:96:09:68:f6:9e: 39:48:dc:68:81:ac:1e:b0:ee:ad:fc:c8:9b:ef:85: 11:00:93:39:b7:6f:4c:68:10:f5:eb:01:bb:37:6d: fe:07:36:67:ee:a3:58:64:85:2f:f9:a5:45:3b:5f: f7:b0:65:fe:0d:1f:87:99:e8:42:de:e5:27:b3:e8: 96:9c:40:5b:53:89:07:b4:4e:e8:30:b9:05:25:19: 23:66:83:6b:a2:fc:83:04:2b:f6:f3:cb:21:e3:17: 8e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9C:99:81:5A:C9:E6:08:5A:51:ED:5C:08:B3:22:37:58:02:2B:28 X509v3 Authority Key Identifier: keyid:77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:8d:0f:b4:68:08:06:12:b1:be:8e:95:23:69:2a:9a:85:ec: ab:1a:61:1a:ca:77:28:8a:40:ee:93:a2:67:93:eb:9b:71:0e: 12:3a:2f:d8:5f:1c:56:df:f6:be:18:b7:4c:e9:5e:58:6c:de: 32:3a:d8:5f:2f:aa:cd:66:5f:71:4e:83:e6:44:b9:2b:6a:4e: 87:04:75:52:9a:84:a0:b6:1d:11:42:ba:0d:19:4b:d4:06:5e: 2d:48:4a:f4:54:64:55:ef:69:43:69:3e:0b:e4:ee:a5:4e:40: e9:50:ce:a1:79:8f:1f:71:2c:bc:68:67:d7:8a:12:43:02:51: fe:5d:29:35:19:c1:47:cc:bc:90:70:df:83:26:0f:76:41:65: 96:33:1c:be:9d:bc:9f:36:40:16:4c:f3:3d:85:95:85:ea:b8: 4d:55:e7:08:7d:a6:29:5e:9b:42:c6:3c:09:67:78:90:98:f2: 54:4a:a9:1b:b2:44:8d:1a:d1:54:7f:74:0a:1a:89:7b:34:9b: 04:65:3f:5a:17:21:3a:12:cc:57:a8:b8:9e:fb:7f:c2:a3:d4: be:14:2b:39:9a:fc:25:d9:9c:f5:62:c5:cc:19:69:76:8f:c4: 87:40:6b:36:4d:11:e1:55:f7:eb:c9:89:4f:87:7a:8f:7a:9e: 9d:f7:c7:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLRaabzS6M/uCla2Ba0xIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MzZhNWM4NWEwOGQ4MDc0OTA0MWNiOWNmYTUxN2ZiN2Q1 ODliYTgwHhcNMjUxMjE2MDgwMDQ3WhcNMjUxMjE3MDgwMDQ3WjAzMTEwLwYDVQQD EyhjNDljOTk4MTVhYzllNjA4NWE1MWVkNWMwOGIzMjIzNzU4MDIyYjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuayWWeuR1QPKtHxRKUdRrtM1wiWh f4X1H6vFGHtZINuzlOz5z3ZQdFLB9tGUoh4vu4L3PUkL00B17gi8T1ugLnlt7EOF iTfHMyGdWsmDzZRs96E9TxjGXoXEFJ/WuERmpXWZe8yVibTxxgn2VzrQvQI2Yhsh 0QxEU3FldM9BuvDUUwi+jpkeCEINTiu/kgZMxSkx0d4Vc/xb9K14vUJclglo9p45 SNxogawesO6t/Mib74URAJM5t29MaBD16wG7N23+BzZn7qNYZIUv+aVFO1/3sGX+ DR+HmehC3uUns+iWnEBbU4kHtE7oMLkFJRkjZoNrovyDBCv288sh4xeOIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMScmYFayeYIWlHtXAizIjdYAisoMB8GA1UdIwQY MBaAFHc2pchaCNgHSQQcuc+lF/t9WJuoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHphbHlGb0kyQWRKQkJ5NXo2VVgtMzFZbTZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82ZGEyODktYWJlYy00OWY1LWE3NTkt Y2YxZjRjN2M5MjIyLzEvZHphbHlGb0kyQWRKQkJ5NXo2VVgtMzFZbTZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82ZGEyODktYWJlYy00OWY1LWE3NTktY2YxZjRjN2M5MjIy LzEvZHphbHlGb0kyQWRKQkJ5NXo2VVgtMzFZbTZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfI0PtGgI BhKxvo6VI2kqmoXsqxphGsp3KIpA7pOiZ5Prm3EOEjov2F8cVt/2vhi3TOleWGze MjrYXy+qzWZfcU6D5kS5K2pOhwR1UpqEoLYdEUK6DRlL1AZeLUhK9FRkVe9pQ2k+ C+TupU5A6VDOoXmPH3EsvGhn14oSQwJR/l0pNRnBR8y8kHDfgyYPdkFlljMcvp28 nzZAFkzzPYWVheq4TVXnCH2mKV6bQsY8CWd4kJjyVEqpG7JEjRrRVH90ChqJezSb BGU/WhchOhLMV6i4nvt/wqPUvhQrOZr8Jdmc9WLFzBlpdo/Eh0BrNk0R4VX368mJ T4d6j3qenffH9Q== -----END CERTIFICATE-----Generated at Tue Dec 16 11:47:06 2025 by rpki-client