This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft File: dWyevH_4dZ2KEG__rzNeo0b66lc.mft (raw, json) Hash identifier: 2FC9T2J4UyWcm5Dg0ThG5yet7/6y5Lp2L0Hwrf9pki0= Subject key identifier: 44:63:BE:04:0F:59:B6:7E:04:45:94:76:3A:A1:3D:7B:6D:78:28:86 Authority key identifier: 75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57 Certificate issuer: /CN=756c9ebc7ff8759d8a106fffaf335ea346faea57 Certificate serial: 019B41A41D5860B561605FA5F14D139659C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 16:00:32 +0000 Manifest this update: Sun 21 Dec 2025 16:00:32 +0000 Manifest next update: Mon 22 Dec 2025 16:00:32 +0000 Files and hashes: 1: dWyevH_4dZ2KEG__rzNeo0b66lc.crl (hash: aB9yC1f0HcqUmcdJzYYQOt5R5f3tjT9FkILgAZz+Hxs=) 2: hx2ek40oJmiSl7Xgir3mC5VHBV0.roa (hash: cCp67/8pyoc4Gg/vx5QrjhBwzCVOnjb7FAHH3PazwOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 16:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:1d:58:60:b5:61:60:5f:a5:f1:4d:13:96:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=756c9ebc7ff8759d8a106fffaf335ea346faea57 Validity Not Before: Dec 21 16:00:32 2025 GMT Not After : Dec 22 16:00:32 2025 GMT Subject: CN=4463be040f59b67e044594763aa13d7b6d782886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7d:b2:7a:26:51:36:63:50:fa:37:64:13:70: 89:c6:c3:60:b0:a1:ea:ab:ed:90:e6:74:eb:42:0e: 88:64:f0:56:77:11:53:a4:16:34:80:ec:a1:8e:92: 5e:65:df:bb:4c:27:95:7b:d7:ec:e7:9b:19:7d:17: 1e:ef:7a:5d:85:49:21:ee:dd:da:8a:1f:23:68:56: d3:da:ff:ae:9f:ee:c9:fc:3c:4b:3c:3b:aa:a6:70: 0b:03:1f:bc:45:42:5a:3c:bb:a2:37:38:ce:56:a8: ee:11:65:be:ed:bc:23:a6:01:85:81:5e:66:21:2b: 69:ad:b2:66:f9:ed:57:91:0c:72:46:c5:d7:fa:cb: 6f:31:13:7c:da:a4:0d:a8:dd:9f:5f:cf:38:03:43: e9:28:9d:3d:28:93:99:26:76:39:e4:ad:29:e8:de: 81:36:94:98:8f:02:82:f2:d2:3f:a2:e8:2e:55:71: f7:17:8e:07:7c:77:0a:b2:82:ef:6b:c5:1d:42:4c: 49:1d:18:54:10:53:20:43:a1:a6:70:0b:17:4e:39: b8:b4:81:83:04:67:96:38:7f:60:1a:c3:4e:68:88: d3:b9:30:b8:fd:08:68:85:18:e4:98:6f:17:17:ac: 33:32:29:41:9b:7d:4e:03:15:39:3a:ed:b0:ae:c2: 5b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:63:BE:04:0F:59:B6:7E:04:45:94:76:3A:A1:3D:7B:6D:78:28:86 X509v3 Authority Key Identifier: keyid:75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:44:73:be:54:2e:89:01:4c:15:45:16:e0:8d:72:20:79:66: fd:aa:25:ae:69:38:ab:cc:52:1e:cf:28:15:95:92:82:3f:95: ed:ca:0b:38:a2:a9:98:42:69:71:6d:ba:42:02:fe:39:ef:19: d1:12:71:c0:02:1f:2f:43:f1:1e:9b:b8:a5:ce:14:b2:2d:c8: 83:b7:6b:48:94:5a:88:cd:21:d5:50:cf:e1:71:c4:65:58:54: 15:17:c1:dc:01:e3:af:95:cf:40:08:18:e9:d5:89:31:97:b8: 61:5c:92:47:05:8f:55:72:7e:8f:92:aa:30:15:47:77:f8:54: 84:50:09:f2:e4:39:25:48:22:21:af:8c:44:64:9e:6d:2d:82: 39:55:2b:21:9c:9c:4f:28:b6:57:8f:7d:14:58:04:2c:01:45: ed:3b:58:a3:bf:57:5f:35:39:0d:bb:44:85:ad:d0:c7:05:d6: 54:f8:74:ba:ca:0c:9a:46:1d:ed:8d:fb:40:51:98:9b:f6:81: b8:e0:45:1d:f1:f5:20:a3:db:75:9c:50:56:2e:b7:b6:06:fb: 7c:a2:26:f1:65:70:d7:7c:7c:bc:46:85:8d:67:6a:33:e9:3a: b3:34:e4:9b:fc:a5:47:dd:70:a9:2c:ff:73:66:9d:b7:66:15: 03:28:c2:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpB1YYLVhYF+l8U0TllnAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NmM5ZWJjN2ZmODc1OWQ4YTEwNmZmZmFmMzM1ZWEzNDZm YWVhNTcwHhcNMjUxMjIxMTYwMDMyWhcNMjUxMjIyMTYwMDMyWjAzMTEwLwYDVQQD Eyg0NDYzYmUwNDBmNTliNjdlMDQ0NTk0NzYzYWExM2Q3YjZkNzgyODg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4H2yeiZRNmNQ+jdkE3CJxsNgsKHq q+2Q5nTrQg6IZPBWdxFTpBY0gOyhjpJeZd+7TCeVe9fs55sZfRce73pdhUkh7t3a ih8jaFbT2v+un+7J/DxLPDuqpnALAx+8RUJaPLuiNzjOVqjuEWW+7bwjpgGFgV5m IStprbJm+e1XkQxyRsXX+stvMRN82qQNqN2fX884A0PpKJ09KJOZJnY55K0p6N6B NpSYjwKC8tI/ouguVXH3F44HfHcKsoLva8UdQkxJHRhUEFMgQ6GmcAsXTjm4tIGD BGeWOH9gGsNOaIjTuTC4/QhohRjkmG8XF6wzMilBm31OAxU5Ou2wrsJbrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERjvgQPWbZ+BEWUdjqhPXtteCiGMB8GA1UdIwQY MBaAFHVsnrx/+HWdihBv/68zXqNG+upXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFd5ZXZIXzRkWjJLRUdfX3J6TmVvMGI2NmxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81ZjY1MzAtMTE2Ni00YjlkLTlkZmQt Y2FhZTBlZGY2OWYxLzEvZFd5ZXZIXzRkWjJLRUdfX3J6TmVvMGI2NmxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy81ZjY1MzAtMTE2Ni00YjlkLTlkZmQtY2FhZTBlZGY2OWYx LzEvZFd5ZXZIXzRkWjJLRUdfX3J6TmVvMGI2NmxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdERzvlQu iQFMFUUW4I1yIHlm/aolrmk4q8xSHs8oFZWSgj+V7coLOKKpmEJpcW26QgL+Oe8Z 0RJxwAIfL0PxHpu4pc4Usi3Ig7drSJRaiM0h1VDP4XHEZVhUFRfB3AHjr5XPQAgY 6dWJMZe4YVySRwWPVXJ+j5KqMBVHd/hUhFAJ8uQ5JUgiIa+MRGSebS2COVUrIZyc Tyi2V499FFgELAFF7TtYo79XXzU5DbtEha3QxwXWVPh0usoMmkYd7Y37QFGYm/aB uOBFHfH1IKPbdZxQVi63tgb7fKIm8WVw13x8vEaFjWdqM+k6szTkm/ylR91wqSz/ c2adt2YVAyjCqw== -----END CERTIFICATE-----Generated at Mon Dec 22 01:34:32 2025 by rpki-client