This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft File: dzEQpDcE2VSd9xVuOnieYihbFpM.mft (raw, json) Hash identifier: jocaT5vgxdgHzFLCE7+g8BiiMK5n5Fs6LT6LcKIS3ik= Subject key identifier: E9:CB:37:42:9D:18:CC:D3:48:10:64:FD:8D:49:2F:10:87:E6:54:6E Authority key identifier: 77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93 Certificate issuer: /CN=773110a43704d9549df7156e3a789e62285b1693 Certificate serial: 019B66FB5666DF51829B296B8408A0DBD6EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft Manifest number: 176C Signing time: Sun 28 Dec 2025 22:01:46 +0000 Manifest this update: Sun 28 Dec 2025 22:01:46 +0000 Manifest next update: Mon 29 Dec 2025 22:01:46 +0000 Files and hashes: 1: dzEQpDcE2VSd9xVuOnieYihbFpM.crl (hash: Vrvo6SIUwb7QLHUGl0PAPlIMQyRo+UiS6xWJ2M46DLc=) 2: lKi6SoPHv8adD_f0H8JMR-0tkso.roa (hash: IDdp81FcSfbScsI5eFdQ3u0Q5w/9MnWkbMQFbCRI7Lw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fb:56:66:df:51:82:9b:29:6b:84:08:a0:db:d6:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=773110a43704d9549df7156e3a789e62285b1693 Validity Not Before: Dec 28 22:01:46 2025 GMT Not After : Dec 29 22:01:46 2025 GMT Subject: CN=e9cb37429d18ccd3481064fd8d492f1087e6546e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9f:29:3c:50:4a:4a:4d:0e:a5:4c:5f:e3:c3: 04:13:55:a1:84:36:99:50:e8:bf:3f:95:70:2c:74: e9:5e:db:59:25:75:78:39:44:72:f6:08:66:6d:c2: b9:df:28:ae:b5:b1:79:c2:d2:1e:71:66:a2:65:2b: c3:5e:e7:6a:da:37:8c:3a:bc:f0:a9:6d:b5:40:ef: e7:8c:54:80:2c:f0:77:f9:41:97:a2:e0:c6:f3:94: ef:43:a2:51:23:52:64:8a:ed:67:a9:0a:7c:5f:7a: 06:75:0c:47:9e:1f:4d:a9:79:72:7b:a7:f3:49:6d: 8f:c4:fe:0a:34:54:3e:04:32:e6:55:a6:d4:18:0a: bf:85:96:9d:07:57:a2:bc:93:3f:8d:b3:b4:65:14: 61:72:6a:1d:02:f4:6f:bb:6f:a2:e8:5d:78:e8:ce: 75:83:79:04:80:6e:53:3b:c2:fd:bd:63:d9:8f:70: 1d:7b:4d:d7:77:b5:a7:01:2a:2c:a3:10:a7:d9:e8: f1:07:b7:ad:8c:6d:ba:17:a2:a8:39:6a:d7:59:05: 22:fb:32:55:69:e7:cc:dc:30:b9:9d:64:0a:0d:5c: 60:34:d5:98:9d:fc:71:a9:c0:08:2a:32:eb:5a:10: 5c:47:3c:c9:00:c5:55:ff:cf:66:43:0f:96:a8:28: 98:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:CB:37:42:9D:18:CC:D3:48:10:64:FD:8D:49:2F:10:87:E6:54:6E X509v3 Authority Key Identifier: keyid:77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:c3:fd:82:68:1d:b7:2a:08:c0:af:3d:5f:39:5e:76:0d:75: c5:4c:40:95:08:d6:49:f9:09:15:b6:52:d1:25:b4:a4:c9:b4: 8e:ac:59:7c:b9:be:f6:db:59:25:8c:c2:25:cc:4d:f1:b1:51: 14:c5:92:b8:18:15:15:23:2a:41:e5:30:67:68:44:dd:1b:9e: a7:5a:0b:c3:37:f9:41:33:bd:1c:18:db:1b:ad:b5:6a:2c:dc: cc:a3:84:a6:3a:98:7f:d7:5e:eb:7c:bc:84:34:6e:5e:3e:17: 98:e8:98:7a:99:f6:07:60:39:03:bd:a1:4a:42:b2:07:fe:5b: 53:b0:94:7e:27:d3:00:87:67:dc:78:ab:f8:50:fe:53:75:07: b6:01:2b:fe:d2:6e:cd:19:c2:10:49:70:45:c4:49:92:ae:b4: 42:d7:6f:35:b1:f5:1b:20:de:d6:66:65:51:66:83:93:49:5a: 71:e3:9f:ce:32:04:24:0f:4a:b0:37:8d:9a:7a:be:90:5a:77: 36:7d:99:73:fa:cb:88:38:8a:c8:75:32:1c:d6:59:af:92:bb: b4:a6:cc:bd:4a:9e:76:66:90:dd:cb:22:2f:a9:2c:18:e1:1e: 9c:1f:11:46:3d:23:e6:cb:2b:4e:fa:63:34:d0:81:fb:a2:df: 23:ff:d0:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm+1Zm31GCmylrhAig29bsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MzExMGE0MzcwNGQ5NTQ5ZGY3MTU2ZTNhNzg5ZTYyMjg1 YjE2OTMwHhcNMjUxMjI4MjIwMTQ2WhcNMjUxMjI5MjIwMTQ2WjAzMTEwLwYDVQQD EyhlOWNiMzc0MjlkMThjY2QzNDgxMDY0ZmQ4ZDQ5MmYxMDg3ZTY1NDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZ8pPFBKSk0OpUxf48MEE1WhhDaZ UOi/P5VwLHTpXttZJXV4OURy9ghmbcK53yiutbF5wtIecWaiZSvDXudq2jeMOrzw qW21QO/njFSALPB3+UGXouDG85TvQ6JRI1Jkiu1nqQp8X3oGdQxHnh9NqXlye6fz SW2PxP4KNFQ+BDLmVabUGAq/hZadB1eivJM/jbO0ZRRhcmodAvRvu2+i6F146M51 g3kEgG5TO8L9vWPZj3Ade03Xd7WnASosoxCn2ejxB7etjG26F6KoOWrXWQUi+zJV aefM3DC5nWQKDVxgNNWYnfxxqcAIKjLrWhBcRzzJAMVV/89mQw+WqCiYDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOnLN0KdGMzTSBBk/Y1JLxCH5lRuMB8GA1UdIwQY MBaAFHcxEKQ3BNlUnfcVbjp4nmIoWxaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHpFUXBEY0UyVlNkOXhWdU9uaWVZaWhiRnBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wODA1MzAtM2Y4MS00NDc5LWI1YTAt OWEzODE1OWI3OTRlLzEvZHpFUXBEY0UyVlNkOXhWdU9uaWVZaWhiRnBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8wODA1MzAtM2Y4MS00NDc5LWI1YTAtOWEzODE1OWI3OTRl LzEvZHpFUXBEY0UyVlNkOXhWdU9uaWVZaWhiRnBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoMP9gmgd tyoIwK89Xzledg11xUxAlQjWSfkJFbZS0SW0pMm0jqxZfLm+9ttZJYzCJcxN8bFR FMWSuBgVFSMqQeUwZ2hE3Ruep1oLwzf5QTO9HBjbG621aizczKOEpjqYf9de63y8 hDRuXj4XmOiYepn2B2A5A72hSkKyB/5bU7CUfifTAIdn3Hir+FD+U3UHtgEr/tJu zRnCEElwRcRJkq60QtdvNbH1GyDe1mZlUWaDk0laceOfzjIEJA9KsDeNmnq+kFp3 Nn2Zc/rLiDiKyHUyHNZZr5K7tKbMvUqedmaQ3csiL6ksGOEenB8RRj0j5ssrTvpj NNCB+6LfI//QYg== -----END CERTIFICATE-----Generated at Mon Dec 29 02:40:00 2025 by rpki-client