This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft File: DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft (raw, json) Hash identifier: GTXlRh5Lml6K0Bz56FfVwoMFMi5q0nTkgwFmoQyyI4E= Subject key identifier: BF:0A:A9:BB:B9:61:4D:40:D8:B8:BD:F7:A2:EB:58:4A:6F:4D:FE:44 Authority key identifier: 0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2 Certificate issuer: /CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2 Certificate serial: 019B5976DC27CF83D706B673E07E66767C23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft Manifest number: 0558 Signing time: Fri 26 Dec 2025 07:02:00 +0000 Manifest this update: Fri 26 Dec 2025 07:02:00 +0000 Manifest next update: Sat 27 Dec 2025 07:02:00 +0000 Files and hashes: 1: 6JHOG8xlyXcJaJHj1p15ZnjcMvA.roa (hash: 7H9LMcEBkurlEfniM3FZBv4N6xpse9Cfq1J2Hc4Zzrg=) 2: DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl (hash: Nl0Mnod5+ieFzIQcg37XKKE53JWZwzi1X59z8PdFehY=) 3: zlURg4ebmdJpRRKJcb6F2eANLUw.roa (hash: d2+6gKcdS2njrjfKwQ9XXY+00MaMzcf8y0Aa2MydLsI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:dc:27:cf:83:d7:06:b6:73:e0:7e:66:76:7c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2 Validity Not Before: Dec 26 07:02:00 2025 GMT Not After : Dec 27 07:02:00 2025 GMT Subject: CN=bf0aa9bbb9614d40d8b8bdf7a2eb584a6f4dfe44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:87:f5:dc:b4:ae:a8:be:20:38:67:61:b8:2d: 63:6d:7e:78:32:6d:8f:bc:64:8f:55:47:ab:fc:aa: a4:5b:b2:da:9d:e8:ca:f0:0e:0e:5d:71:88:62:c3: bd:1d:43:67:7b:b9:72:08:2d:fa:8a:37:12:8d:6a: 41:6b:de:e1:1b:20:28:33:21:d4:62:06:cb:ee:96: a0:47:5e:b7:80:a6:d3:31:1f:20:27:cf:3d:49:fb: c2:0d:bb:ac:59:d9:9c:9b:d8:be:30:65:d6:50:37: 8a:28:19:df:d6:32:d7:d6:2a:c5:2f:cc:60:fb:93: 55:46:2b:df:72:cf:28:c8:9a:7f:33:4a:1d:1e:f1: 79:49:43:51:78:aa:cc:41:58:b4:52:7d:20:3f:54: c4:f7:75:c5:09:9b:62:a0:13:ed:41:b6:f7:95:d1: 72:7b:c1:2a:eb:7a:7b:5a:2f:0b:22:67:ca:11:f9: 61:fe:47:85:d6:00:65:c8:7e:17:0e:8a:16:75:a8: 79:0d:6d:f7:f5:84:1f:d2:aa:2e:63:6f:10:d8:91: 4a:ab:43:44:bf:f3:23:79:18:e0:91:ee:88:9e:b4: 70:9e:ad:e9:bb:75:23:3c:0c:08:13:21:dd:46:9b: cb:16:e4:44:68:55:a6:2d:a6:7e:34:49:a1:18:e7: f7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:0A:A9:BB:B9:61:4D:40:D8:B8:BD:F7:A2:EB:58:4A:6F:4D:FE:44 X509v3 Authority Key Identifier: keyid:0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:24:b4:db:52:93:b0:bc:f3:bb:6d:1c:90:5c:e5:b5:3b:e8: 49:a8:b5:bb:15:a4:d4:23:00:68:51:46:7b:80:5a:fa:1f:3a: 91:6d:89:44:e8:b5:c6:02:96:b0:7d:48:cf:f6:1d:2a:07:e9: bc:ef:e1:6f:96:42:df:24:7f:dc:e6:18:5f:34:b9:28:01:a7: 90:7a:26:26:62:0f:30:61:79:8e:81:a2:ed:45:e5:8f:c2:77: 13:8f:a8:34:2b:e0:c0:b9:e0:73:6c:2a:7a:e3:2c:6e:ec:34: c9:b8:2a:46:91:bf:3b:bf:9e:42:8c:12:19:b5:45:48:22:2b: 06:d7:dc:98:8c:93:ba:c6:da:dd:4a:9c:32:d8:da:e4:fa:27: d7:10:85:23:03:5d:c3:d3:23:27:1f:f5:12:f0:a1:23:9f:a3: 9e:ee:0b:d6:97:a7:93:70:4a:a0:d6:4d:ab:3e:b9:77:9a:45: 7d:75:1b:87:eb:60:f3:73:42:7b:31:1a:b1:d5:68:3c:23:a7: 5a:12:5e:c7:4e:ac:cd:3a:5e:56:73:09:78:b8:80:8c:ab:ef: 54:00:ea:c7:34:e2:2a:97:87:41:bc:4c:f2:62:c8:12:9f:ea: f4:00:35:80:39:a0:02:46:95:a9:ed:f9:36:08:66:59:b6:6f: 3a:83:21:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdtwnz4PXBrZz4H5mdnwjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlYWNjNjYyY2ViZmFkOWZmZjljMGY4NzQwMGNmMGNmMDNm NTQ3YTIwHhcNMjUxMjI2MDcwMjAwWhcNMjUxMjI3MDcwMjAwWjAzMTEwLwYDVQQD EyhiZjBhYTliYmI5NjE0ZDQwZDhiOGJkZjdhMmViNTg0YTZmNGRmZTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYf13LSuqL4gOGdhuC1jbX54Mm2P vGSPVUer/KqkW7LanejK8A4OXXGIYsO9HUNne7lyCC36ijcSjWpBa97hGyAoMyHU YgbL7pagR163gKbTMR8gJ889SfvCDbusWdmcm9i+MGXWUDeKKBnf1jLX1irFL8xg +5NVRivfcs8oyJp/M0odHvF5SUNReKrMQVi0Un0gP1TE93XFCZtioBPtQbb3ldFy e8Eq63p7Wi8LImfKEflh/keF1gBlyH4XDooWdah5DW339YQf0qouY28Q2JFKq0NE v/MjeRjgke6InrRwnq3pu3UjPAwIEyHdRpvLFuREaFWmLaZ+NEmhGOf3lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8Kqbu5YU1A2Li996LrWEpvTf5EMB8GA1UdIwQY MBaAFA6sxmLOv62f/5wPh0AM8M8D9UeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHF6R1lzNl9yWl9fbkEtSFFBend6d1AxUjZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8xMmNkMTMtN2Y3Yi00MTUwLTkyYjgt MTg4MGU3ZWYxZGI0LzEvRHF6R1lzNl9yWl9fbkEtSFFBend6d1AxUjZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8xMmNkMTMtN2Y3Yi00MTUwLTkyYjgtMTg4MGU3ZWYxZGI0 LzEvRHF6R1lzNl9yWl9fbkEtSFFBend6d1AxUjZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMiS021KT sLzzu20ckFzltTvoSai1uxWk1CMAaFFGe4Ba+h86kW2JROi1xgKWsH1Iz/YdKgfp vO/hb5ZC3yR/3OYYXzS5KAGnkHomJmIPMGF5joGi7UXlj8J3E4+oNCvgwLngc2wq euMsbuw0ybgqRpG/O7+eQowSGbVFSCIrBtfcmIyTusba3UqcMtja5Pon1xCFIwNd w9MjJx/1EvChI5+jnu4L1penk3BKoNZNqz65d5pFfXUbh+tg83NCezEasdVoPCOn WhJex06szTpeVnMJeLiAjKvvVADqxzTiKpeHQbxM8mLIEp/q9AA1gDmgAkaVqe35 NghmWbZvOoMhug== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:30 2025 by rpki-client