This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft File: dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft (raw, json) Hash identifier: KjIzchoN+N+pOVaApegdVLYT1myHY8G8cEiPUzf6q/M= Subject key identifier: 5C:F2:2D:D8:5E:AF:CD:0E:C0:75:0B:81:14:4B:0D:CA:9F:9D:87:32 Authority key identifier: 77:31:B6:2B:0E:15:9B:A6:CC:D8:7F:73:27:5A:86:8E:BC:C4:1A:B8 Certificate issuer: /CN=7731b62b0e159ba6ccd87f73275a868ebcc41ab8 Certificate serial: 019B5418A32337FEA38AEC967188B8EC32BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft Manifest number: 1463 Signing time: Thu 25 Dec 2025 06:00:59 +0000 Manifest this update: Thu 25 Dec 2025 06:00:59 +0000 Manifest next update: Fri 26 Dec 2025 06:00:59 +0000 Files and hashes: 1: Qv3hVGEIw5Ck_5QiJYApdipPmqI.roa (hash: C4rOq98XQlQBOJoaFTi64wzA4+qXQilqH0FLuH6cokY=) 2: dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.crl (hash: DMGg81buMR8d4AyGA7pHgT3aftBoaAgxq4r6SeKAyLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:18:a3:23:37:fe:a3:8a:ec:96:71:88:b8:ec:32:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7731b62b0e159ba6ccd87f73275a868ebcc41ab8 Validity Not Before: Dec 25 06:00:59 2025 GMT Not After : Dec 26 06:00:59 2025 GMT Subject: CN=5cf22dd85eafcd0ec0750b81144b0dca9f9d8732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:58:b4:d2:0f:23:da:1b:0a:55:42:4e:76:e8: cf:81:8c:30:a2:db:06:c4:c0:c0:1d:e7:14:dc:70: 05:4b:5a:a1:27:fb:04:95:a2:e5:67:27:1b:41:20: 2d:f4:99:d8:c5:23:32:d7:e1:30:e7:82:75:50:c8: 80:cf:00:69:81:cb:85:f9:f1:94:0b:44:f7:aa:d6: d1:10:40:83:06:c6:53:27:03:93:42:50:b3:cc:01: be:87:28:a6:f1:9b:c2:e6:af:bb:8e:5e:3c:63:f7: eb:20:24:a1:02:cc:77:4c:f0:69:a7:f2:3a:19:84: 9b:04:71:b5:af:09:14:0a:f2:f1:d6:df:61:fa:95: e4:aa:e3:f7:e3:13:48:a0:a6:3d:e2:ab:b4:81:8f: bd:4a:ba:ab:fc:04:e2:5b:68:f1:0e:f1:d8:31:b1: ac:d7:4d:b2:ed:8a:83:a2:cf:2e:76:8c:c5:3f:8b: 8a:b6:62:21:d4:d3:45:3f:df:85:23:b2:7e:55:91: ca:cf:ec:89:43:10:33:a0:95:38:b5:c6:56:a0:a2: 6b:07:e6:f5:cd:05:eb:f8:6c:e2:bd:51:af:da:ea: 84:2b:8d:39:e1:01:39:e4:8e:cb:ae:6e:e8:53:c5: 20:30:42:53:55:eb:b8:33:65:d7:8e:b9:f9:db:b1: aa:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F2:2D:D8:5E:AF:CD:0E:C0:75:0B:81:14:4B:0D:CA:9F:9D:87:32 X509v3 Authority Key Identifier: keyid:77:31:B6:2B:0E:15:9B:A6:CC:D8:7F:73:27:5A:86:8E:BC:C4:1A:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:be:72:c1:46:99:02:de:f3:3d:1a:d0:5d:33:ed:c0:6f:ee: 9e:cf:70:80:d4:2e:ae:dd:78:60:a5:fb:77:f4:ec:98:f8:d3: f6:c4:d7:bd:e6:f1:31:d2:38:26:ef:6d:35:6b:9a:dd:ad:5a: f1:77:28:32:f6:c9:5e:08:e4:b7:06:e3:fa:31:20:1e:d6:87: 50:32:7b:8a:05:08:ae:14:e0:da:5a:5c:63:26:10:2b:f6:7c: 1b:fb:81:5e:a4:22:18:0f:f6:f4:a8:e3:2d:c8:d9:cb:ec:fb: ca:87:51:38:83:b5:02:13:4a:ba:fa:58:04:dc:47:12:a9:cb: f2:5c:60:a1:50:45:f1:90:7b:92:ea:80:d9:68:e4:bd:8e:5a: 00:58:78:14:cc:88:22:25:78:cf:1c:8b:95:51:b3:55:0e:c2: 18:96:1a:96:ce:b5:da:7f:42:c0:05:63:46:b4:1e:9a:e7:83: 36:ea:29:7d:84:d6:47:c5:a4:1e:e6:50:d8:86:16:ea:4e:31: 35:ee:f9:28:ad:ed:0f:9b:af:f9:05:bf:0c:8e:90:f2:ae:37: ab:c2:97:5f:14:c6:49:d5:81:8a:a2:03:3f:c8:5e:15:cf:3b: 3d:1f:45:66:49:eb:9d:c7:b7:18:d5:0c:83:85:b8:a2:fd:71: 27:50:3f:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGKMjN/6jiuyWcYi47DK+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MzFiNjJiMGUxNTliYTZjY2Q4N2Y3MzI3NWE4NjhlYmNj NDFhYjgwHhcNMjUxMjI1MDYwMDU5WhcNMjUxMjI2MDYwMDU5WjAzMTEwLwYDVQQD Eyg1Y2YyMmRkODVlYWZjZDBlYzA3NTBiODExNDRiMGRjYTlmOWQ4NzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFi00g8j2hsKVUJOdujPgYwwotsG xMDAHecU3HAFS1qhJ/sElaLlZycbQSAt9JnYxSMy1+Ew54J1UMiAzwBpgcuF+fGU C0T3qtbREECDBsZTJwOTQlCzzAG+hyim8ZvC5q+7jl48Y/frICShAsx3TPBpp/I6 GYSbBHG1rwkUCvLx1t9h+pXkquP34xNIoKY94qu0gY+9Srqr/ATiW2jxDvHYMbGs 102y7YqDos8udozFP4uKtmIh1NNFP9+FI7J+VZHKz+yJQxAzoJU4tcZWoKJrB+b1 zQXr+GzivVGv2uqEK4054QE55I7Lrm7oU8UgMEJTVeu4M2XXjrn527GqQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzyLdher80OwHULgRRLDcqfnYcyMB8GA1UdIwQY MBaAFHcxtisOFZumzNh/cydaho68xBq4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHpHMkt3NFZtNmJNMkg5ekoxcUdqcnpFR3JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yZWZjZTAtODJlZS00M2NlLThmMjgt NmJmYzMzNTAxNDc5LzEvZHpHMkt3NFZtNmJNMkg5ekoxcUdqcnpFR3JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8yZWZjZTAtODJlZS00M2NlLThmMjgtNmJmYzMzNTAxNDc5 LzEvZHpHMkt3NFZtNmJNMkg5ekoxcUdqcnpFR3JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABL5ywUaZ At7zPRrQXTPtwG/uns9wgNQurt14YKX7d/TsmPjT9sTXvebxMdI4Ju9tNWua3a1a 8XcoMvbJXgjktwbj+jEgHtaHUDJ7igUIrhTg2lpcYyYQK/Z8G/uBXqQiGA/29Kjj LcjZy+z7yodROIO1AhNKuvpYBNxHEqnL8lxgoVBF8ZB7kuqA2WjkvY5aAFh4FMyI IiV4zxyLlVGzVQ7CGJYals612n9CwAVjRrQemueDNuopfYTWR8WkHuZQ2IYW6k4x Ne75KK3tD5uv+QW/DI6Q8q43q8KXXxTGSdWBiqIDP8heFc87PR9FZknrnce3GNUM g4W4ov1xJ1A/0A== -----END CERTIFICATE-----Generated at Thu Dec 25 09:16:24 2025 by rpki-client