This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft File: dZBZSelj01d74HYybKC5H_MvloQ.mft (raw, json) Hash identifier: yusaoOloI77RJKTs3zycjdchrHWxEPEYKk183JngW28= Subject key identifier: D3:A4:92:91:7B:FD:0E:8D:48:55:E9:FD:BB:35:1B:2C:A8:DA:C2:BE Authority key identifier: 75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84 Certificate issuer: /CN=75905949e963d3577be076326ca0b91ff32f9684 Certificate serial: 019AAC4C4C2E59CB6A05339B9A339E2863F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft Manifest number: 0862 Signing time: Sat 22 Nov 2025 16:01:12 +0000 Manifest this update: Sat 22 Nov 2025 16:01:12 +0000 Manifest next update: Sun 23 Nov 2025 16:01:12 +0000 Files and hashes: 1: 6DM2EcyU67ptxBh9GKlJrzks2YY.roa (hash: dGsT7/dH6GvyheXKVe0ZbgWrcxrzH7zYFhEqctDv4NQ=) 2: GsWSBNzv988JIATL2hLeFJWT77g.roa (hash: Ly0cVrt55lxuS7TrsXNQWpKEZ4VseFVE3p+bnlbkQgs=) 3: dZBZSelj01d74HYybKC5H_MvloQ.crl (hash: 22l0rGYHU86lWe18N8WCO63gFHTpXcx86RU46JstcEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:4c:4c:2e:59:cb:6a:05:33:9b:9a:33:9e:28:63:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75905949e963d3577be076326ca0b91ff32f9684 Validity Not Before: Nov 22 16:01:12 2025 GMT Not After : Nov 23 16:01:12 2025 GMT Subject: CN=d3a492917bfd0e8d4855e9fdbb351b2ca8dac2be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:84:33:87:13:b2:97:a6:64:41:22:ea:45:f2: 78:c3:9c:c3:b0:58:7c:a1:05:c1:41:73:69:03:6a: 3c:2b:fb:14:76:fa:f1:dd:7d:e9:5b:b4:15:1c:57: cb:04:46:a6:82:65:cc:45:9f:29:9e:92:81:46:9a: 70:1f:68:4a:1e:58:b3:f9:be:e9:c5:98:4a:49:5c: 1a:a9:26:e0:86:56:7a:4e:35:87:4a:64:18:ba:82: 9d:fd:16:00:70:2b:a6:47:23:7a:bf:27:ff:a6:35: dc:0d:40:73:62:53:74:cd:fd:b9:b4:48:6d:bd:37: 9a:74:91:e2:63:23:58:13:68:c3:a3:5f:be:f0:f8: 48:77:ac:d7:64:35:8c:84:bc:a7:b1:ee:04:cb:04: c4:1f:68:39:41:e8:2a:07:0f:13:6c:7b:66:95:23: 62:1c:46:bc:ca:ca:6c:3d:da:ff:ac:d8:90:a7:f6: 4b:fe:72:c9:a0:9a:ca:78:a1:22:86:fa:a0:e7:25: ca:ea:44:a5:e5:51:5b:31:13:e5:2e:3b:c0:6e:4c: 72:d9:7e:5e:e8:28:51:01:ff:a7:d8:ff:5a:fd:1a: 1c:3c:0c:01:b5:5c:74:78:18:78:43:37:14:d3:7a: b3:33:0f:41:58:76:f9:af:f6:d3:3b:2e:44:4b:de: fa:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A4:92:91:7B:FD:0E:8D:48:55:E9:FD:BB:35:1B:2C:A8:DA:C2:BE X509v3 Authority Key Identifier: keyid:75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:02:c9:1e:73:f3:c5:48:b7:56:38:3c:f6:27:39:3f:7a:27: 8f:d9:13:20:3f:14:34:b8:ac:57:2a:a3:bb:57:4c:66:c5:3d: 4f:4a:20:f5:0c:ab:29:59:d6:01:69:19:c5:68:51:fb:18:c9: 33:6f:1d:56:54:dd:73:14:69:dd:06:ba:02:b4:0e:4a:89:d0: 5c:ff:83:20:7c:89:e5:e7:c0:4f:6c:9a:e9:a8:22:c6:44:2c: dd:05:82:01:5a:a3:79:24:15:dc:08:99:d0:65:a7:5b:b2:50: 61:c5:d8:6b:d9:fc:94:63:68:f2:00:f9:1a:69:27:64:f7:40: e7:4e:e0:14:2f:4b:18:f0:1b:f1:f1:e9:1c:2c:75:75:25:ca: 0e:20:ec:6c:5d:7e:94:23:da:7e:37:1d:95:d9:72:1f:8f:74: 05:e3:6f:b8:0a:6f:44:47:56:6f:eb:fb:7a:82:6e:07:cb:55: 75:da:5f:31:88:f1:ec:2d:3b:24:be:37:73:4d:96:eb:be:46: b7:63:63:f9:89:40:f3:f7:11:97:4f:99:17:15:c2:9f:3e:73: a7:34:ee:91:d2:d1:2d:93:3e:3a:a1:ea:6a:2b:00:86:39:f0: dc:aa:45:10:fe:c6:c8:9a:1c:69:49:4b:cf:2a:fb:b3:67:4d: ae:ba:6b:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsTEwuWctqBTObmjOeKGPzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1OTA1OTQ5ZTk2M2QzNTc3YmUwNzYzMjZjYTBiOTFmZjMy Zjk2ODQwHhcNMjUxMTIyMTYwMTEyWhcNMjUxMTIzMTYwMTEyWjAzMTEwLwYDVQQD EyhkM2E0OTI5MTdiZmQwZThkNDg1NWU5ZmRiYjM1MWIyY2E4ZGFjMmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4QzhxOyl6ZkQSLqRfJ4w5zDsFh8 oQXBQXNpA2o8K/sUdvrx3X3pW7QVHFfLBEamgmXMRZ8pnpKBRppwH2hKHliz+b7p xZhKSVwaqSbghlZ6TjWHSmQYuoKd/RYAcCumRyN6vyf/pjXcDUBzYlN0zf25tEht vTeadJHiYyNYE2jDo1++8PhId6zXZDWMhLynse4EywTEH2g5QegqBw8TbHtmlSNi HEa8yspsPdr/rNiQp/ZL/nLJoJrKeKEihvqg5yXK6kSl5VFbMRPlLjvAbkxy2X5e 6ChRAf+n2P9a/RocPAwBtVx0eBh4QzcU03qzMw9BWHb5r/bTOy5ES976lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNOkkpF7/Q6NSFXp/bs1Gyyo2sK+MB8GA1UdIwQY MBaAFHWQWUnpY9NXe+B2MmyguR/zL5aEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFpCWlNlbGowMWQ3NEhZeWJLQzVIX012bG9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kNjFmNzMtYWMwYi00NWJjLWE1YTQt MWE4MzAxYjdlNmRlLzEvZFpCWlNlbGowMWQ3NEhZeWJLQzVIX012bG9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9kNjFmNzMtYWMwYi00NWJjLWE1YTQtMWE4MzAxYjdlNmRl LzEvZFpCWlNlbGowMWQ3NEhZeWJLQzVIX012bG9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbgLJHnPz xUi3Vjg89ic5P3onj9kTID8UNLisVyqju1dMZsU9T0og9QyrKVnWAWkZxWhR+xjJ M28dVlTdcxRp3Qa6ArQOSonQXP+DIHyJ5efAT2ya6agixkQs3QWCAVqjeSQV3AiZ 0GWnW7JQYcXYa9n8lGNo8gD5GmknZPdA507gFC9LGPAb8fHpHCx1dSXKDiDsbF1+ lCPafjcdldlyH490BeNvuApvREdWb+v7eoJuB8tVddpfMYjx7C07JL43c02W675G t2Nj+YlA8/cRl0+ZFxXCnz5zpzTukdLRLZM+OqHqaisAhjnw3KpFEP7GyJocaUlL zyr7s2dNrrprdw== -----END CERTIFICATE-----Generated at Sat Nov 22 21:43:01 2025 by rpki-client