This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft File: DZgNjKRkrkQzDALWCX0bPjRn4IU.mft (raw, json) Hash identifier: /r6YXOrU7lSrcNzZuZzz+QjhX7AgbPJxB3xeMsMssNo= Subject key identifier: 87:47:35:A4:C5:40:82:B7:93:0B:72:65:A8:3C:26:D5:98:AD:BC:48 Authority key identifier: 0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85 Certificate issuer: /CN=0d980d8ca464ae44330c02d6097d1b3e3467e085 Certificate serial: 019B21E2522CCD038D244AA9A190EDAD8097 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft Manifest number: 0B16 Signing time: Mon 15 Dec 2025 12:00:38 +0000 Manifest this update: Mon 15 Dec 2025 12:00:38 +0000 Manifest next update: Tue 16 Dec 2025 12:00:38 +0000 Files and hashes: 1: 9AG_khzlUq_52M_uwAyAT--X2D8.roa (hash: j5npHva08ps2FjnGO8hTZ3BTaOYOIDt9K8fTqv+VPPw=) 2: DZgNjKRkrkQzDALWCX0bPjRn4IU.crl (hash: K7h/BQEr7fJvJDc/rfg1R1k/ba6iXyAcwaOOf3snhMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:52:2c:cd:03:8d:24:4a:a9:a1:90:ed:ad:80:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d980d8ca464ae44330c02d6097d1b3e3467e085 Validity Not Before: Dec 15 12:00:38 2025 GMT Not After : Dec 16 12:00:38 2025 GMT Subject: CN=874735a4c54082b7930b7265a83c26d598adbc48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5f:e5:b9:17:6d:00:2e:96:bb:d8:ee:f2:8a: 86:3d:fb:70:4e:90:5e:84:65:02:a9:ed:31:b5:6c: e9:9b:f7:69:04:9e:a1:91:e5:07:c2:21:e9:7a:46: 13:a9:7c:87:41:6c:a3:0b:32:ee:b9:9e:d3:9c:95: 3b:ce:3c:19:14:96:6f:9b:c9:40:a7:b8:2b:09:9b: d0:ce:06:71:92:f2:32:1b:23:77:c2:c3:98:dd:71: e9:55:d1:45:48:89:24:81:d5:7e:a3:9a:fb:3b:06: 0d:8b:da:a2:94:3b:1e:7e:1f:ac:85:05:8b:8b:6e: d8:75:fa:ca:be:b9:2a:87:9d:a0:b4:cd:33:9b:fb: 73:19:56:a4:d6:b3:34:d6:ce:f1:06:36:ad:56:c4: 77:60:ed:ad:fe:f2:37:a5:5f:55:98:e6:1e:04:ba: b0:3d:3c:8f:d8:ac:e8:a4:9f:8e:ed:b6:5e:5a:84: 0d:24:ac:62:02:bc:bc:8d:65:9f:85:24:14:0a:81: b5:5f:d7:87:bc:39:3c:c7:d1:76:80:45:7a:ed:29: 2d:11:3b:ec:ac:da:b4:f0:1e:a9:de:11:c6:cc:f6: b4:64:51:9d:86:1b:c8:61:84:d2:68:6d:a2:20:99: 4e:08:ee:36:74:9d:04:e2:de:a3:51:8d:83:76:0f: 6b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:47:35:A4:C5:40:82:B7:93:0B:72:65:A8:3C:26:D5:98:AD:BC:48 X509v3 Authority Key Identifier: keyid:0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:18:9f:32:16:1c:3e:6f:52:bd:ef:d5:05:40:35:8a:b6:5a: 81:a8:db:14:f1:00:3b:5c:9f:64:be:a0:13:68:b3:d1:c7:bc: 03:16:aa:14:46:65:43:f1:91:f9:53:d5:43:0e:ef:c2:8b:39: bf:8c:02:8b:94:9d:08:32:88:1b:d6:31:71:fd:08:a5:ed:ad: 77:a1:49:4b:a8:62:6b:f9:46:5e:ea:15:9c:a4:5d:79:1f:92: 9f:65:0f:51:76:ee:77:e5:33:3c:fa:dc:e6:db:bd:69:a8:c4: 18:3a:5e:b1:fe:ab:57:dc:88:20:1f:7b:c0:2b:22:d4:3a:85: 21:4f:c6:06:98:dd:0d:08:6d:fb:9a:03:f6:01:cf:82:85:b3: 60:75:fa:8f:09:fa:ae:c4:ff:6e:16:1e:ac:78:92:14:28:e9: eb:12:85:80:a9:70:f1:12:f0:4d:c2:97:0a:d4:64:b8:14:e1: 79:cf:aa:a7:bb:79:09:78:bc:85:08:cb:84:74:9a:99:9e:73: d6:9a:1a:5e:eb:85:33:16:e8:b9:ba:07:b2:dc:fd:a7:a5:96: 09:84:ac:96:ec:ff:6f:b9:d5:da:51:81:78:3d:3f:a2:d2:0c: 11:a0:2c:c5:b3:95:b5:47:af:a7:c9:87:e9:88:55:7e:99:a1: da:96:d7:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4lIszQONJEqpoZDtrYCXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkOTgwZDhjYTQ2NGFlNDQzMzBjMDJkNjA5N2QxYjNlMzQ2 N2UwODUwHhcNMjUxMjE1MTIwMDM4WhcNMjUxMjE2MTIwMDM4WjAzMTEwLwYDVQQD Eyg4NzQ3MzVhNGM1NDA4MmI3OTMwYjcyNjVhODNjMjZkNTk4YWRiYzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3V/luRdtAC6Wu9ju8oqGPftwTpBe hGUCqe0xtWzpm/dpBJ6hkeUHwiHpekYTqXyHQWyjCzLuuZ7TnJU7zjwZFJZvm8lA p7grCZvQzgZxkvIyGyN3wsOY3XHpVdFFSIkkgdV+o5r7OwYNi9qilDsefh+shQWL i27YdfrKvrkqh52gtM0zm/tzGVak1rM01s7xBjatVsR3YO2t/vI3pV9VmOYeBLqw PTyP2KzopJ+O7bZeWoQNJKxiAry8jWWfhSQUCoG1X9eHvDk8x9F2gEV67SktETvs rNq08B6p3hHGzPa0ZFGdhhvIYYTSaG2iIJlOCO42dJ0E4t6jUY2Ddg9roQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdHNaTFQIK3kwtyZag8JtWYrbxIMB8GA1UdIwQY MBaAFA2YDYykZK5EMwwC1gl9Gz40Z+CFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFpnTmpLUmtya1F6REFMV0NYMGJQalJuNElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS82MzU2OWUtZjQ1OC00NDY3LWE0MTUt ZjZmZjI4MWZiYzMyLzEvRFpnTmpLUmtya1F6REFMV0NYMGJQalJuNElVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS82MzU2OWUtZjQ1OC00NDY3LWE0MTUtZjZmZjI4MWZiYzMy LzEvRFpnTmpLUmtya1F6REFMV0NYMGJQalJuNElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkRifMhYc Pm9Sve/VBUA1irZagajbFPEAO1yfZL6gE2iz0ce8AxaqFEZlQ/GR+VPVQw7vwos5 v4wCi5SdCDKIG9Yxcf0Ipe2td6FJS6hia/lGXuoVnKRdeR+Sn2UPUXbud+UzPPrc 5tu9aajEGDpesf6rV9yIIB97wCsi1DqFIU/GBpjdDQht+5oD9gHPgoWzYHX6jwn6 rsT/bhYerHiSFCjp6xKFgKlw8RLwTcKXCtRkuBThec+qp7t5CXi8hQjLhHSamZ5z 1poaXuuFMxbouboHstz9p6WWCYSsluz/b7nV2lGBeD0/otIMEaAsxbOVtUevp8mH 6YhVfpmh2pbXkw== -----END CERTIFICATE-----Generated at Mon Dec 15 14:45:03 2025 by rpki-client