This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft File: dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft (raw, json) Hash identifier: OMcaTINnKwxysckvOfjfNaBmVbQPII+rNqO4F2UIJsg= Subject key identifier: AE:AE:7B:4C:27:3E:50:64:F6:17:09:F8:AD:2A:2F:9B:A1:50:25:91 Authority key identifier: 74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C Certificate issuer: /CN=74267f3ecfcc61668e0501bca60ced6dd75d347c Certificate serial: 019B255213F695D496346866ED62DA33170F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft Manifest number: 1755 Signing time: Tue 16 Dec 2025 04:01:34 +0000 Manifest this update: Tue 16 Dec 2025 04:01:34 +0000 Manifest next update: Wed 17 Dec 2025 04:01:34 +0000 Files and hashes: 1: DkayGfO7JIkj0aP3u5tMKhfrqH0.roa (hash: SB2VJh36vskB6Jgns8zRjcE+4UksZV6puEKomuTZHlg=) 2: dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl (hash: GJCU/XHsG39CZ8lNG6MNYdzcnW/x+HaZp/X29TB64Yc=) 3: jTx6aqvdEE_gQg73ReX0FkwgmQE.roa (hash: dAhHIig8KT1KxztIrLQE0kBlocl6eJfFH0R4JNRSc1E=) 4: kXcbCMejOpaJKyA1cSI33Gt-rG4.roa (hash: iBpLOB8D/HeQeT6S/JRKzQuf3+rJGJcLZkTdT9ZbR50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:13:f6:95:d4:96:34:68:66:ed:62:da:33:17:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74267f3ecfcc61668e0501bca60ced6dd75d347c Validity Not Before: Dec 16 04:01:34 2025 GMT Not After : Dec 17 04:01:34 2025 GMT Subject: CN=aeae7b4c273e5064f61709f8ad2a2f9ba1502591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e4:66:96:09:8d:be:50:41:12:83:f2:b1:7d: f2:45:e9:1f:b9:b5:0d:be:9b:ef:16:13:68:35:60: 87:7d:40:35:56:6e:df:45:eb:bd:65:f6:19:66:5b: 31:ed:25:9e:8c:9a:32:64:df:13:27:32:e7:21:37: 80:90:13:05:c2:1e:fb:35:46:09:d1:1c:79:bb:ac: d8:e1:a0:6a:ac:5d:1f:c5:59:f0:fa:37:cd:f4:5e: bc:33:0c:19:c8:c4:50:03:44:98:a1:d3:b9:bd:95: 69:3a:48:05:c2:8a:a7:60:ef:9c:db:8d:ac:d4:af: c5:78:16:d3:03:61:e0:a8:dd:c7:27:e9:b7:dd:b8: 48:17:8a:71:49:7d:ea:26:3c:48:3e:d4:05:1a:03: 57:cb:dd:80:fb:69:bb:2d:d7:99:d6:b9:8a:79:ce: df:26:7d:76:0c:9a:0d:fd:04:89:0f:d5:7a:b5:f5: 1b:97:96:c5:d9:bb:63:bf:6a:b3:20:7e:f6:3b:54: 14:a6:24:bf:61:91:df:7d:20:8e:b9:50:34:d8:f2: 47:f4:a2:60:cf:40:1f:0a:c0:35:40:b8:76:5b:25: 7a:bd:3d:12:91:aa:d1:e3:64:4f:d6:9e:19:13:89: dd:f1:ca:40:7b:0e:53:58:d9:c8:0f:73:e8:4f:73: b1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AE:7B:4C:27:3E:50:64:F6:17:09:F8:AD:2A:2F:9B:A1:50:25:91 X509v3 Authority Key Identifier: keyid:74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:77:ca:f1:e1:de:cf:82:50:1e:4f:e8:51:ad:f1:0c:e8:90: 35:7d:15:99:fe:5c:17:83:fb:59:6b:64:87:08:ce:c3:16:02: 80:82:70:2f:6a:d4:48:26:67:5c:e3:82:00:24:98:23:2b:00: 94:6b:1e:91:aa:7f:a7:47:fd:69:de:c5:c4:4b:ef:37:5d:8e: 23:ab:47:ce:71:0b:73:cb:f1:bf:60:90:e7:63:48:82:9f:71: 46:dc:2c:5a:d6:bd:cb:89:aa:b2:2d:53:f5:6d:56:4e:1e:4d: 70:7c:08:b7:d7:00:14:8d:18:2d:b2:fd:f0:a5:bf:1e:bc:c1: 1a:ac:4d:47:fa:55:6f:c8:b6:ca:7b:f0:af:f0:7c:5d:0c:a9: a0:cf:60:e2:90:3a:05:8b:8c:11:fe:b4:c9:dd:65:b4:fe:84: d0:e3:bc:d6:b4:91:6e:90:ed:ef:b7:2f:65:d9:4f:9c:a6:37: fb:d0:7b:88:3f:b8:fe:db:cf:05:2b:c9:50:8a:2b:9b:45:9d: 68:10:ed:eb:d8:cb:bf:a3:b6:37:c1:ad:23:6a:99:41:ab:c1: 97:7f:b6:64:ef:34:ec:d1:3f:33:dd:25:90:5f:f8:7a:c3:3f: bc:b8:70:31:ac:13:58:82:1e:1f:e5:5e:b9:01:4a:2c:12:ba: 30:57:cb:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUhP2ldSWNGhm7WLaMxcPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MjY3ZjNlY2ZjYzYxNjY4ZTA1MDFiY2E2MGNlZDZkZDc1 ZDM0N2MwHhcNMjUxMjE2MDQwMTM0WhcNMjUxMjE3MDQwMTM0WjAzMTEwLwYDVQQD EyhhZWFlN2I0YzI3M2U1MDY0ZjYxNzA5ZjhhZDJhMmY5YmExNTAyNTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneRmlgmNvlBBEoPysX3yRekfubUN vpvvFhNoNWCHfUA1Vm7fReu9ZfYZZlsx7SWejJoyZN8TJzLnITeAkBMFwh77NUYJ 0Rx5u6zY4aBqrF0fxVnw+jfN9F68MwwZyMRQA0SYodO5vZVpOkgFwoqnYO+c242s 1K/FeBbTA2HgqN3HJ+m33bhIF4pxSX3qJjxIPtQFGgNXy92A+2m7LdeZ1rmKec7f Jn12DJoN/QSJD9V6tfUbl5bF2btjv2qzIH72O1QUpiS/YZHffSCOuVA02PJH9KJg z0AfCsA1QLh2WyV6vT0SkarR42RP1p4ZE4nd8cpAew5TWNnID3PoT3OxmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6ue0wnPlBk9hcJ+K0qL5uhUCWRMB8GA1UdIwQY MBaAFHQmfz7PzGFmjgUBvKYM7W3XXTR8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZENaX1BzX01ZV2FPQlFHOHBnenRiZGRkTkh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MGNiODAtNGU2ZC00NmE1LWIxYjQt NGUzZjRkNjhmNjgyLzEvZENaX1BzX01ZV2FPQlFHOHBnenRiZGRkTkh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny83MGNiODAtNGU2ZC00NmE1LWIxYjQtNGUzZjRkNjhmNjgy LzEvZENaX1BzX01ZV2FPQlFHOHBnenRiZGRkTkh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnfK8eHe z4JQHk/oUa3xDOiQNX0Vmf5cF4P7WWtkhwjOwxYCgIJwL2rUSCZnXOOCACSYIysA lGsekap/p0f9ad7FxEvvN12OI6tHznELc8vxv2CQ52NIgp9xRtwsWta9y4mqsi1T 9W1WTh5NcHwIt9cAFI0YLbL98KW/HrzBGqxNR/pVb8i2ynvwr/B8XQypoM9g4pA6 BYuMEf60yd1ltP6E0OO81rSRbpDt77cvZdlPnKY3+9B7iD+4/tvPBSvJUIorm0Wd aBDt69jLv6O2N8GtI2qZQavBl3+2ZO807NE/M90lkF/4esM/vLhwMawTWIIeH+Ve uQFKLBK6MFfLAQ== -----END CERTIFICATE-----Generated at Tue Dec 16 11:12:11 2025 by rpki-client