This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft File: DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft (raw, json) Hash identifier: dGA28JIlChvypO4ATIGwhDIIRfFDQYU1l9sLp134w3Y= Subject key identifier: 66:78:AE:20:E7:AA:3B:A6:CB:33:C3:A3:CA:74:EC:BB:2A:3C:1D:76 Authority key identifier: 0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68 Certificate issuer: /CN=0f34477aa0f0123138c0472f5b3528e4d2193e68 Certificate serial: 019B5ABFABF3BFE8EFF8E8F888DA684AA8D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 13:01:09 +0000 Manifest this update: Fri 26 Dec 2025 13:01:09 +0000 Manifest next update: Sat 27 Dec 2025 13:01:09 +0000 Files and hashes: 1: DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl (hash: +EAAgP1phVHt61Pe2A31P6m23weUStdg4PsXZg+MSVM=) 2: oiZHTdtEDz6aP8WgUPcMGh6h5wQ.roa (hash: ewlicz9ndLYefeC/+lwNbWi0WIXINkEHOt0Ubc6GHQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:ab:f3:bf:e8:ef:f8:e8:f8:88:da:68:4a:a8:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f34477aa0f0123138c0472f5b3528e4d2193e68 Validity Not Before: Dec 26 13:01:09 2025 GMT Not After : Dec 27 13:01:09 2025 GMT Subject: CN=6678ae20e7aa3ba6cb33c3a3ca74ecbb2a3c1d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:97:db:08:fa:81:2e:39:e6:5c:ab:2f:7d:35: 78:25:ab:21:c3:10:82:09:70:30:f2:93:64:c7:8e: 91:9f:76:0c:7f:fc:47:71:d1:0a:87:70:46:c8:94: ea:32:8b:c4:27:21:7a:4a:b3:44:69:be:5c:90:6b: 87:85:ad:f4:bf:48:29:6d:d0:4b:2a:0e:a1:a1:08: 54:9e:cc:dc:63:b5:3f:00:69:41:df:21:8d:be:0c: eb:5c:35:e3:9b:ee:4d:8d:ed:83:75:fb:54:14:20: 57:e7:af:48:01:4a:bf:3d:0e:46:8a:42:d7:5b:4d: e6:c2:35:82:e6:21:f0:fc:3b:29:db:00:9b:ff:54: 1b:ce:07:3e:a4:97:ac:73:eb:aa:ba:d0:6a:01:58: 45:9c:80:9b:30:6a:b5:67:4e:a5:82:21:60:a3:b7: c3:9b:cb:57:bd:98:4d:9c:7d:3b:bb:3e:42:d5:08: 9c:c7:90:1a:62:e0:96:56:ba:a6:1c:d5:cd:e9:7a: 9f:39:af:43:20:71:28:2d:55:fb:8c:d9:a9:d4:bb: 0c:82:e5:41:5d:3b:80:06:44:ea:70:17:ca:da:1f: 9f:e0:2e:11:b2:dd:4b:1a:cb:3d:e1:8e:7b:7b:bf: 25:06:cb:91:f5:f9:46:db:95:ed:de:47:4d:83:3c: 96:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:78:AE:20:E7:AA:3B:A6:CB:33:C3:A3:CA:74:EC:BB:2A:3C:1D:76 X509v3 Authority Key Identifier: keyid:0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:30:d7:28:55:6e:45:5c:89:0d:9f:5d:a3:f6:2c:0a:83:9d: d5:84:34:f9:cd:6a:da:e4:40:d0:19:51:43:08:ed:a0:45:b3: 0d:d1:2f:a8:40:ba:c1:39:a1:1e:fc:3f:a7:99:b3:18:39:27: b6:58:8a:95:43:9f:21:f3:35:c4:f8:39:52:5e:3e:b5:76:b1: 4a:df:14:81:e8:80:82:97:a5:91:87:91:1f:82:50:d7:a3:2d: 43:5b:ee:1c:af:f5:14:0b:2c:c2:c9:d2:5b:57:65:32:6d:40: 09:3b:eb:55:b5:a2:a7:54:fe:76:1b:c5:8d:5c:9f:79:44:69: 49:50:00:c7:94:4b:9b:75:73:0d:7b:ef:93:4e:77:98:06:c1: bf:b2:ae:4a:c0:d3:24:6c:b2:bd:00:1c:93:6c:ae:eb:49:2f: 23:d3:97:af:9a:56:8c:13:2b:52:df:f9:50:1c:f2:12:40:f5: 0e:e0:4e:62:20:35:98:63:c0:b4:c2:e5:f1:bf:ec:3a:83:04: fe:be:35:df:b1:66:a9:18:5c:28:51:2d:52:5b:5f:c1:16:64: 6d:07:e3:c4:5f:ae:84:d3:8e:9d:83:66:20:ad:aa:05:59:4d: 88:e1:0e:55:6f:f8:b3:5b:37:d9:b4:1b:4c:e4:6c:14:9a:18: 41:8b:eb:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav6vzv+jv+Oj4iNpoSqjVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMzQ0NzdhYTBmMDEyMzEzOGMwNDcyZjViMzUyOGU0ZDIx OTNlNjgwHhcNMjUxMjI2MTMwMTA5WhcNMjUxMjI3MTMwMTA5WjAzMTEwLwYDVQQD Eyg2Njc4YWUyMGU3YWEzYmE2Y2IzM2MzYTNjYTc0ZWNiYjJhM2MxZDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypfbCPqBLjnmXKsvfTV4JashwxCC CXAw8pNkx46Rn3YMf/xHcdEKh3BGyJTqMovEJyF6SrNEab5ckGuHha30v0gpbdBL Kg6hoQhUnszcY7U/AGlB3yGNvgzrXDXjm+5Nje2DdftUFCBX569IAUq/PQ5GikLX W03mwjWC5iHw/Dsp2wCb/1Qbzgc+pJesc+uqutBqAVhFnICbMGq1Z06lgiFgo7fD m8tXvZhNnH07uz5C1Qicx5AaYuCWVrqmHNXN6XqfOa9DIHEoLVX7jNmp1LsMguVB XTuABkTqcBfK2h+f4C4Rst1LGss94Y57e78lBsuR9flG25Xt3kdNgzyW7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZ4riDnqjumyzPDo8p07LsqPB12MB8GA1UdIwQY MBaAFA80R3qg8BIxOMBHL1s1KOTSGT5oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHpSSGVxRHdFakU0d0Vjdld6VW81TklaUG1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85ZDRiZWYtOGViZC00ZmRiLWFhZjAt ZTA5YmM0ZWFlMTg5LzEvRHpSSGVxRHdFakU0d0Vjdld6VW81TklaUG1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi85ZDRiZWYtOGViZC00ZmRiLWFhZjAtZTA5YmM0ZWFlMTg5 LzEvRHpSSGVxRHdFakU0d0Vjdld6VW81TklaUG1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTDXKFVu RVyJDZ9do/YsCoOd1YQ0+c1q2uRA0BlRQwjtoEWzDdEvqEC6wTmhHvw/p5mzGDkn tliKlUOfIfM1xPg5Ul4+tXaxSt8UgeiAgpelkYeRH4JQ16MtQ1vuHK/1FAsswsnS W1dlMm1ACTvrVbWip1T+dhvFjVyfeURpSVAAx5RLm3VzDXvvk053mAbBv7KuSsDT JGyyvQAck2yu60kvI9OXr5pWjBMrUt/5UBzyEkD1DuBOYiA1mGPAtMLl8b/sOoME /r4137FmqRhcKFEtUltfwRZkbQfjxF+uhNOOnYNmIK2qBVlNiOEOVW/4s1s32bQb TORsFJoYQYvr0Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:27 2025 by rpki-client