This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft File: dzrmY60KGjBy29hnmSt9jfJaRJo.mft (raw, json) Hash identifier: 6y7vo5kfxWYmNqGvkQgpxaqoQSz5F6UlxtqVaRP45cU= Subject key identifier: 62:16:5A:1E:AF:C9:72:C7:17:51:1F:12:45:A2:B4:48:DF:DC:04:A0 Authority key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A Certificate issuer: /CN=773ae663ad0a1a3072dbd867992b7d8df25a449a Certificate serial: 019B4438A4348DD676221309899A2655750E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft Manifest number: 1709 Signing time: Mon 22 Dec 2025 04:02:01 +0000 Manifest this update: Mon 22 Dec 2025 04:02:01 +0000 Manifest next update: Tue 23 Dec 2025 04:02:01 +0000 Files and hashes: 1: W3cGjj5mP2VwYAqEMAUXYILQLSQ.roa (hash: lkOt9jyUsLPzSy3eR6w1RPwgQQo35GOFeKt51+wXZBI=) 2: dzrmY60KGjBy29hnmSt9jfJaRJo.crl (hash: gU8jXarwj+LWPZh6FdH42r9HrdhFeiwbODu0DD0y6BA=) 3: eRk2-urEJNMbXDnC8eQR6ctcmdk.roa (hash: o6MwtXvGmVhwal2DT9hiuath6IiwR2vvCWGgaPAuFxc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:a4:34:8d:d6:76:22:13:09:89:9a:26:55:75:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a Validity Not Before: Dec 22 04:02:01 2025 GMT Not After : Dec 23 04:02:01 2025 GMT Subject: CN=62165a1eafc972c717511f1245a2b448dfdc04a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a0:28:a3:32:5f:c2:2b:09:41:01:8b:36:66: 2e:f9:79:8d:34:32:33:cf:e3:ea:ec:cb:05:76:29: b9:8b:b9:dc:98:07:a0:2d:e3:ba:b1:10:a2:54:97: e6:52:07:72:b9:43:85:01:9c:20:fc:db:f5:41:c1: 7b:8c:f0:1d:c9:2b:09:1c:df:4a:35:f3:f8:78:fd: ec:f8:b4:4f:43:94:4f:af:00:aa:fa:d8:c3:4c:c7: 6e:32:27:77:d9:4f:c4:19:68:80:b4:a3:55:18:15: 25:e9:16:30:73:ef:93:30:f8:27:a6:49:b3:32:da: 27:b8:0d:5f:3c:fe:ef:1e:0a:c4:4c:9e:5b:7d:26: 93:06:7b:19:55:66:d3:56:a7:d0:8e:fd:cb:b2:ca: dc:0d:f6:92:05:d7:1a:fd:76:56:a5:84:b3:25:fa: c0:ad:32:4e:58:c7:02:27:a9:65:ee:c6:f2:5c:16: cf:d1:cc:e3:e3:26:a6:8d:94:2e:ae:2d:a4:c9:7c: 8d:9f:33:90:90:33:8e:58:41:61:87:f6:12:d8:a9: 21:f2:e8:c6:4b:6d:b4:d3:92:40:8b:ea:b7:69:50: 7b:d7:51:57:0f:a8:ba:3c:68:51:dc:78:77:6e:b0: a7:91:dc:48:00:de:8b:f7:00:a4:36:d3:e8:80:2c: e5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:16:5A:1E:AF:C9:72:C7:17:51:1F:12:45:A2:B4:48:DF:DC:04:A0 X509v3 Authority Key Identifier: keyid:77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:4a:c0:bc:3d:03:a7:2e:d3:67:b0:2f:14:38:d7:31:98:87: 47:25:42:4c:a6:ff:e1:d8:6f:58:2c:96:ff:bc:ea:bf:58:38: 81:98:e9:e0:ef:be:e2:66:e0:48:24:df:b1:41:c4:3f:ff:62: e9:9e:97:85:e5:2d:dc:06:57:a2:2c:28:f8:ec:6d:82:15:ac: 33:30:1c:4c:76:40:59:dc:5f:93:d6:f1:99:b2:f2:f7:60:91: cb:15:98:5e:4d:39:8c:9a:12:43:16:b9:d2:ec:d0:f5:d1:0f: 9b:95:b0:bc:af:a0:8b:05:1f:f7:0f:f1:86:99:4d:a4:b5:9e: 4c:f2:c5:45:a3:07:73:2d:9f:fd:e7:c8:ba:d7:90:58:3e:3f: c1:3e:17:7d:04:6b:e4:93:6f:0e:89:06:77:60:b7:ba:09:dd: 5e:c5:11:bd:40:05:92:72:70:b8:64:b0:62:3d:89:44:ae:19: 67:eb:05:1e:13:05:d0:18:a6:d3:cf:f4:d0:c7:7d:d0:0a:cb: b2:dd:fe:b4:5d:76:4f:8b:91:8e:ae:2b:c4:39:78:52:0c:34: 2e:88:53:d4:66:38:af:cd:12:f5:4e:e6:de:88:80:d0:a2:70: bd:31:b5:23:2b:4f:98:66:85:49:3b:c6:90:9a:1b:0c:14:3e: dd:30:4e:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOKQ0jdZ2IhMJiZomVXUOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3M2FlNjYzYWQwYTFhMzA3MmRiZDg2Nzk5MmI3ZDhkZjI1 YTQ0OWEwHhcNMjUxMjIyMDQwMjAxWhcNMjUxMjIzMDQwMjAxWjAzMTEwLwYDVQQD Eyg2MjE2NWExZWFmYzk3MmM3MTc1MTFmMTI0NWEyYjQ0OGRmZGMwNGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKAoozJfwisJQQGLNmYu+XmNNDIz z+Pq7MsFdim5i7ncmAegLeO6sRCiVJfmUgdyuUOFAZwg/Nv1QcF7jPAdySsJHN9K NfP4eP3s+LRPQ5RPrwCq+tjDTMduMid32U/EGWiAtKNVGBUl6RYwc++TMPgnpkmz MtonuA1fPP7vHgrETJ5bfSaTBnsZVWbTVqfQjv3LssrcDfaSBdca/XZWpYSzJfrA rTJOWMcCJ6ll7sbyXBbP0czj4yamjZQuri2kyXyNnzOQkDOOWEFhh/YS2Kkh8ujG S22005JAi+q3aVB711FXD6i6PGhR3Hh3brCnkdxIAN6L9wCkNtPogCzl6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIWWh6vyXLHF1EfEkWitEjf3ASgMB8GA1UdIwQY MBaAFHc65mOtChowctvYZ5krfY3yWkSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHpybVk2MEtHakJ5Mjlobm1TdDlqZkphUkpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wOTJmZGMtYzMwMC00MWE1LTkwMTUt NjYyZWM4MThkMjNkLzEvZHpybVk2MEtHakJ5Mjlobm1TdDlqZkphUkpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8wOTJmZGMtYzMwMC00MWE1LTkwMTUtNjYyZWM4MThkMjNk LzEvZHpybVk2MEtHakJ5Mjlobm1TdDlqZkphUkpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANUrAvD0D py7TZ7AvFDjXMZiHRyVCTKb/4dhvWCyW/7zqv1g4gZjp4O++4mbgSCTfsUHEP/9i 6Z6XheUt3AZXoiwo+OxtghWsMzAcTHZAWdxfk9bxmbLy92CRyxWYXk05jJoSQxa5 0uzQ9dEPm5WwvK+giwUf9w/xhplNpLWeTPLFRaMHcy2f/efIuteQWD4/wT4XfQRr 5JNvDokGd2C3ugndXsURvUAFknJwuGSwYj2JRK4ZZ+sFHhMF0Bim08/00Md90ArL st3+tF12T4uRjq4rxDl4Ugw0LohT1GY4r80S9U7m3oiA0KJwvTG1IytPmGaFSTvG kJobDBQ+3TBOcQ== -----END CERTIFICATE-----Generated at Mon Dec 22 05:37:14 2025 by rpki-client