This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft File: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft (raw, json) Hash identifier: K4Kh2/8Uv7C1xqs5bTdYd5wqWh52uEMD3tFfqZwLuRo= Subject key identifier: 86:65:77:93:28:32:7B:D9:B6:B6:81:2D:79:D5:FB:F5:23:D1:A2:82 Authority key identifier: 0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4 Certificate issuer: /CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4 Certificate serial: 019B221990C6F52E376631CE4FD8B107E292 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft Manifest number: 1777 Signing time: Mon 15 Dec 2025 13:00:59 +0000 Manifest this update: Mon 15 Dec 2025 13:00:59 +0000 Manifest next update: Tue 16 Dec 2025 13:00:59 +0000 Files and hashes: 1: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl (hash: LGdFUoVycbeWxsdhTsEd5nNx4HGRnEvE9er3wsnNhrQ=) 2: ayJmzYBNfcdq3NPJ8M3cFOVfzCs.roa (hash: 0bZlkgsn21QwI80X8EQdx07gNzwAcET4bz9RvPxajWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:90:c6:f5:2e:37:66:31:ce:4f:d8:b1:07:e2:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4 Validity Not Before: Dec 15 13:00:59 2025 GMT Not After : Dec 16 13:00:59 2025 GMT Subject: CN=8665779328327bd9b6b6812d79d5fbf523d1a282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7b:7c:39:ff:d8:6a:7d:2c:0f:ac:8e:d6:95: 49:83:fc:90:02:a1:09:66:a2:d0:8f:09:8b:71:60: 1c:40:ac:57:ef:3c:af:fc:0e:91:7f:75:d0:ec:af: 9b:3f:a6:2f:af:53:16:9b:87:6a:85:76:52:66:cc: 33:75:ed:a0:d2:24:d3:41:84:14:81:1c:de:63:8b: a6:ec:0e:92:f4:6e:fd:1a:c5:aa:68:55:04:cb:3d: ca:12:64:bd:8b:52:de:11:5d:00:88:9b:28:89:62: 04:34:0a:a8:1d:77:2b:cb:45:89:25:ba:43:8b:02: d6:23:2b:0e:d3:86:46:da:eb:28:66:99:3e:35:90: 98:4c:77:31:66:58:73:4d:b8:1d:16:15:20:e1:b7: 93:d6:f6:2d:1a:d8:ac:37:17:8f:4d:43:4a:16:59: cf:c1:2e:03:ac:39:74:af:13:12:a8:3c:70:bb:13: 2b:8b:e0:f9:dd:da:ad:c2:24:ee:2f:7e:52:55:76: 68:82:7c:db:d9:32:0d:87:8e:98:83:c7:aa:ba:74: 3b:aa:c9:20:b0:d1:2d:5e:ae:d4:fa:55:70:ba:a3: be:58:06:d2:90:20:38:f3:fa:dc:0e:ea:b2:0b:8a: 81:0d:38:72:19:2b:9b:51:fc:93:a2:df:a3:4d:cd: 09:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:65:77:93:28:32:7B:D9:B6:B6:81:2D:79:D5:FB:F5:23:D1:A2:82 X509v3 Authority Key Identifier: keyid:0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:d5:da:8d:48:67:a1:69:9e:0e:db:e3:98:96:7b:ff:6a:1e: a9:88:99:df:ae:dd:03:65:1f:9d:01:75:5d:2f:8b:5b:18:b4: b5:98:b0:a5:2c:a2:8a:e3:4a:64:96:88:0b:5b:52:3b:fd:c4: 54:85:bb:56:6e:c6:9e:63:42:1c:c4:a8:9b:69:70:02:92:7a: 5d:e4:36:4d:7b:ba:cd:27:25:9c:43:c1:b6:3d:85:a8:af:0c: 64:e1:93:08:1e:9a:0e:6c:26:bb:f3:2c:df:9a:27:05:e2:7d: f0:62:78:95:af:7f:b4:f9:b4:ce:91:cb:d4:5f:b4:45:1b:79: d1:0a:7d:bb:9c:95:fe:8b:f2:18:be:6e:52:4d:cc:03:e9:b0: 10:5f:4d:55:cf:eb:fc:07:70:fa:82:fb:f3:f8:e6:28:53:76: d4:5c:d7:9e:29:8b:ff:72:13:ae:49:d6:60:8d:9f:92:8b:e1: bd:83:8e:a0:dd:7a:d9:87:26:d3:64:d8:b8:44:dc:f6:78:46: 82:e8:1f:9f:42:4e:4b:8a:ce:7f:9e:d9:6b:43:c4:04:90:03: ed:ad:66:c8:24:7f:8d:ec:04:38:bb:14:4c:20:8f:3c:54:b9: c3:1f:3c:03:c7:5a:76:4a:c3:78:5f:cd:48:25:95:f2:f1:88: e8:59:81:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGZDG9S43ZjHOT9ixB+KSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMzczOTdkOGI2Yzg3M2UyOWJlNmUwOTlkZTdiNzQ2ZWFm ZDBlYjQwHhcNMjUxMjE1MTMwMDU5WhcNMjUxMjE2MTMwMDU5WjAzMTEwLwYDVQQD Eyg4NjY1Nzc5MzI4MzI3YmQ5YjZiNjgxMmQ3OWQ1ZmJmNTIzZDFhMjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXt8Of/Yan0sD6yO1pVJg/yQAqEJ ZqLQjwmLcWAcQKxX7zyv/A6Rf3XQ7K+bP6Yvr1MWm4dqhXZSZswzde2g0iTTQYQU gRzeY4um7A6S9G79GsWqaFUEyz3KEmS9i1LeEV0AiJsoiWIENAqoHXcry0WJJbpD iwLWIysO04ZG2usoZpk+NZCYTHcxZlhzTbgdFhUg4beT1vYtGtisNxePTUNKFlnP wS4DrDl0rxMSqDxwuxMri+D53dqtwiTuL35SVXZognzb2TINh46Yg8equnQ7qskg sNEtXq7U+lVwuqO+WAbSkCA48/rcDuqyC4qBDThyGSubUfyTot+jTc0J0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZld5MoMnvZtraBLXnV+/Uj0aKCMB8GA1UdIwQY MBaAFA83OX2LbIc+Kb5uCZ3nt0bq/Q60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHpjNWZZdHNoejRwdm00Sm5lZTNSdXI5RHJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yMWJhODMtZjk0ZS00NTVhLWEyYjct YTYyNTU2ZDI1NDQ3LzEvRHpjNWZZdHNoejRwdm00Sm5lZTNSdXI5RHJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8yMWJhODMtZjk0ZS00NTVhLWEyYjctYTYyNTU2ZDI1NDQ3 LzEvRHpjNWZZdHNoejRwdm00Sm5lZTNSdXI5RHJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGNXajUhn oWmeDtvjmJZ7/2oeqYiZ367dA2UfnQF1XS+LWxi0tZiwpSyiiuNKZJaIC1tSO/3E VIW7Vm7GnmNCHMSom2lwApJ6XeQ2TXu6zSclnEPBtj2FqK8MZOGTCB6aDmwmu/Ms 35onBeJ98GJ4la9/tPm0zpHL1F+0RRt50Qp9u5yV/ovyGL5uUk3MA+mwEF9NVc/r /Adw+oL78/jmKFN21FzXnimL/3ITrknWYI2fkovhvYOOoN162Ycm02TYuETc9nhG gugfn0JOS4rOf57Za0PEBJAD7a1myCR/jewEOLsUTCCPPFS5wx88A8dadkrDeF/N SCWV8vGI6FmBOw== -----END CERTIFICATE-----Generated at Mon Dec 15 21:25:25 2025 by rpki-client