This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft File: dzR-Fo1pZYVFN05qC2jSS5f80AY.mft (raw, json) Hash identifier: Hr3sOym+kgJndPVczGcNEux3Gm97CgvI5AAdsvODEss= Subject key identifier: E2:9F:18:42:70:68:D7:04:89:C9:27:12:E7:D7:43:97:99:23:FD:B9 Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06 Certificate issuer: /CN=77347e168d69658545374e6a0b68d24b97fcd006 Certificate serial: 019B101314CA21C9197E9CFA6ACC2E006FCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft Manifest number: 08A9 Signing time: Fri 12 Dec 2025 01:00:44 +0000 Manifest this update: Fri 12 Dec 2025 01:00:44 +0000 Manifest next update: Sat 13 Dec 2025 01:00:44 +0000 Files and hashes: 1: Dtmeeo2Ahqu20IUfCd65FxwTl2k.roa (hash: I+vjjlJcdrLb3KMRUhvwUitmKXx1JxbgC5EfsL3L6hI=) 2: MA5FazDAuWizu2sArINAiZDNSkk.roa (hash: RRjoWKPkJksBjTPCtL+V2nNMKG6oIx2+O6vH374Aw7I=) 3: dzR-Fo1pZYVFN05qC2jSS5f80AY.crl (hash: MU5MFSIrlvhpazhfNKv06qpTSYBLbW8DL/j85YsWVL4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:14:ca:21:c9:19:7e:9c:fa:6a:cc:2e:00:6f:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006 Validity Not Before: Dec 12 01:00:44 2025 GMT Not After : Dec 13 01:00:44 2025 GMT Subject: CN=e29f18427068d70489c92712e7d743979923fdb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:48:c5:1f:5e:2c:c4:90:f4:69:63:f8:41:3f: cf:9d:4e:09:fc:4c:83:99:be:9e:d3:c6:b6:4a:9d: 1d:29:70:7b:88:fc:57:68:44:09:79:b7:87:ce:f5: 81:4f:16:74:75:41:a0:df:f7:5f:7f:83:0e:68:1f: 6b:b6:e5:ae:fe:dd:0c:35:ec:a1:28:35:02:f6:f6: 53:cb:49:bf:b2:4a:00:5e:e8:c5:d5:98:d8:ff:10: ae:b5:0d:98:9d:15:d1:69:ad:8e:06:05:79:fa:0e: 71:fd:4f:cf:28:14:28:28:08:bd:fa:06:26:d8:2f: 24:ea:cd:0d:76:f6:1e:3e:a5:39:fe:37:3a:82:0b: df:b3:1f:c1:c3:a1:de:10:0c:bd:fd:b9:ca:84:87: 22:66:ed:5e:ab:19:3a:43:92:82:b5:b5:f8:1e:f3: 1d:19:1f:70:11:7c:b1:1a:e2:64:dc:ba:9a:80:4b: 0d:d8:17:45:e3:40:d7:94:94:aa:81:de:08:64:7a: 28:38:13:fe:be:b2:16:10:07:2c:91:6f:03:64:fb: 9f:79:e5:1b:eb:bb:ee:36:10:78:60:a8:b3:ed:30: b3:a0:c0:1f:be:4f:57:b2:58:57:c5:54:67:ed:09: 77:ac:b3:e6:f0:05:71:9d:be:8e:e5:16:31:4b:00: 82:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:9F:18:42:70:68:D7:04:89:C9:27:12:E7:D7:43:97:99:23:FD:B9 X509v3 Authority Key Identifier: keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:14:4b:c2:84:9a:e5:86:15:1f:18:34:38:32:91:92:b5:b7: 9f:2b:e1:ff:1f:67:be:97:c9:40:50:a1:e7:93:a0:f6:66:0d: b2:b8:13:50:00:6e:8c:b7:9a:80:c6:9e:84:cf:8a:66:16:86: d4:d0:d0:6d:fe:4a:89:e6:35:98:98:8a:fb:a5:c1:22:b7:8b: a9:27:da:3f:80:7b:1d:a9:20:a7:62:d6:92:95:73:b7:43:6f: e3:9f:99:6d:c6:03:6c:f6:cb:c4:6a:1a:4d:0c:ab:51:2d:4a: aa:cb:80:71:db:f4:49:9a:79:dc:cf:cc:70:b2:46:fe:07:04: 0f:e8:89:1f:7c:09:52:02:7f:2e:83:c6:8b:a3:a9:6d:d5:39: e5:60:18:00:5b:a3:78:59:85:77:11:e3:4d:1b:f5:16:fa:ae: e0:a1:f8:05:85:52:4a:19:04:67:b4:00:5a:52:d6:d1:da:81: 0f:9b:0f:ec:d9:5f:57:72:72:95:4b:e2:34:37:cc:bd:59:9e: 3a:df:ab:cb:8e:57:78:42:e1:75:c6:19:4e:de:b9:08:f9:2b: ff:7a:22:28:6b:4e:29:ef:01:4c:ee:84:c2:b8:33:8e:7a:51: 14:4b:4f:93:45:20:f7:b6:5d:02:2c:49:31:43:f3:1a:70:f8: 0b:56:cc:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQExTKIckZfpz6aswuAG/KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MzQ3ZTE2OGQ2OTY1ODU0NTM3NGU2YTBiNjhkMjRiOTdm Y2QwMDYwHhcNMjUxMjEyMDEwMDQ0WhcNMjUxMjEzMDEwMDQ0WjAzMTEwLwYDVQQD EyhlMjlmMTg0MjcwNjhkNzA0ODljOTI3MTJlN2Q3NDM5Nzk5MjNmZGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0jFH14sxJD0aWP4QT/PnU4J/EyD mb6e08a2Sp0dKXB7iPxXaEQJebeHzvWBTxZ0dUGg3/dff4MOaB9rtuWu/t0MNeyh KDUC9vZTy0m/skoAXujF1ZjY/xCutQ2YnRXRaa2OBgV5+g5x/U/PKBQoKAi9+gYm 2C8k6s0NdvYePqU5/jc6ggvfsx/Bw6HeEAy9/bnKhIciZu1eqxk6Q5KCtbX4HvMd GR9wEXyxGuJk3LqagEsN2BdF40DXlJSqgd4IZHooOBP+vrIWEAcskW8DZPufeeUb 67vuNhB4YKiz7TCzoMAfvk9XslhXxVRn7Ql3rLPm8AVxnb6O5RYxSwCCRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOKfGEJwaNcEicknEufXQ5eZI/25MB8GA1UdIwQY MBaAFHc0fhaNaWWFRTdOagto0kuX/NAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8yNmEwYTMtMjJmMS00Y2ExLWE2Y2Qt NjdlYmJjOGM2ODYyLzEvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8yNmEwYTMtMjJmMS00Y2ExLWE2Y2QtNjdlYmJjOGM2ODYy LzEvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxRLwoSa 5YYVHxg0ODKRkrW3nyvh/x9nvpfJQFCh55Og9mYNsrgTUABujLeagMaehM+KZhaG 1NDQbf5KieY1mJiK+6XBIreLqSfaP4B7Hakgp2LWkpVzt0Nv45+ZbcYDbPbLxGoa TQyrUS1KqsuAcdv0SZp53M/McLJG/gcED+iJH3wJUgJ/LoPGi6OpbdU55WAYAFuj eFmFdxHjTRv1Fvqu4KH4BYVSShkEZ7QAWlLW0dqBD5sP7NlfV3JylUviNDfMvVme Ot+ry45XeELhdcYZTt65CPkr/3oiKGtOKe8BTO6EwrgzjnpRFEtPk0Ug97ZdAixJ MUPzGnD4C1bM/w== -----END CERTIFICATE-----Generated at Fri Dec 12 09:24:15 2025 by rpki-client