This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft File: DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft (raw, json) Hash identifier: cGamXC1vHXiBNyOSJ/p4pobaixjA7Mwz5HHlTJddOjE= Subject key identifier: E5:69:F2:0F:F5:13:0F:02:E1:E3:F1:08:49:60:BC:17:B9:52:FB:D2 Authority key identifier: 0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5 Certificate issuer: /CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5 Certificate serial: 019B4F2929EC4D14B0760A70E07272B64785 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 07:00:56 +0000 Manifest this update: Wed 24 Dec 2025 07:00:56 +0000 Manifest next update: Thu 25 Dec 2025 07:00:56 +0000 Files and hashes: 1: 1-sk04SJKaJ6g1Y9khEpsLFas3Kk.roa (hash: XxZhRBWthERVmL3LKPQQh5B0868NCMjhs1tFs+3eMxM=) 2: 4QpvM3CE_nzBSqatuahpsYYH1qM.roa (hash: Qrg/EHEt9L0x/2vBVqdC/NUou31du+BoDTLXvsaFSGk=) 3: DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl (hash: aoRM2bOVrnLCXYCaL7PuKnwaIPtlf2pgSyTbghadQVs=) 4: OKvzKSdRprY6KmoCf5oHQIz_91A.roa (hash: c7CmyJe2kYuAmiLCH0rQuuU8EyGxHjQvlpZniPCLw0U=) 5: mHALm7hBq5s0140ybe8Xc1F8234.roa (hash: imdhLSNxS5EA5IBXEn3VpwdKjS6o+zDqUc/wlGF8Pzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 07:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:29:ec:4d:14:b0:76:0a:70:e0:72:72:b6:47:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5 Validity Not Before: Dec 24 07:00:56 2025 GMT Not After : Dec 25 07:00:56 2025 GMT Subject: CN=e569f20ff5130f02e1e3f1084960bc17b952fbd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3b:c5:d1:7b:fb:14:c3:07:5b:29:54:7b:d4: 50:64:29:45:b2:3e:2c:92:c8:1f:ae:ac:1f:15:ac: 77:a6:3c:e4:a6:76:73:17:3b:72:1d:9f:a0:38:9e: 24:6d:ee:79:19:2c:88:61:ad:a9:cb:2e:05:14:3b: f0:c8:9a:f6:89:5a:16:cb:bc:60:da:bc:d9:31:3b: a2:c2:6c:53:1e:00:02:be:64:ca:2e:25:d6:2c:17: 07:f3:4d:11:39:f4:80:5e:86:e0:d2:1b:78:24:0e: e2:5a:5a:0c:3b:b5:27:09:8b:d3:55:81:e6:8f:f7: 8f:20:19:77:66:13:c5:67:f6:d8:65:ae:57:9c:43: 5b:36:85:54:ff:90:b2:9f:71:c2:27:dd:8d:09:04: 68:84:43:82:fd:2c:3e:f7:60:0d:5d:97:9e:48:ae: 28:2c:8e:c1:53:96:25:d1:8d:23:d8:b1:52:c8:6c: 86:c0:6e:d6:e2:c8:d7:1e:1f:5c:9f:95:53:e5:c0: 4e:d2:f8:5d:0b:11:43:49:e0:37:21:a3:77:ef:f3: 08:5c:11:5d:4f:16:63:49:7b:f6:51:a9:d5:4f:de: 21:50:53:60:1e:a6:b3:0b:7f:6b:43:bd:ab:db:d0: b5:a0:b2:64:d2:34:28:04:67:6b:15:b8:8e:8d:9d: f8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:69:F2:0F:F5:13:0F:02:E1:E3:F1:08:49:60:BC:17:B9:52:FB:D2 X509v3 Authority Key Identifier: keyid:0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:cb:4a:d4:89:ea:87:59:6d:0a:4f:19:50:bf:93:17:48:e3: 5e:e3:3a:d9:6e:48:2b:c3:61:c6:49:66:2c:58:78:2c:b0:d0: 23:cd:79:e4:0b:e6:75:17:8d:2c:3c:42:49:1d:53:a8:d2:ed: 5c:d3:c8:56:57:87:d6:dd:0a:62:7c:cb:df:55:37:d2:68:3a: 24:1f:93:01:12:e8:2a:96:11:ca:98:4e:6d:3a:49:8c:17:b8: 96:fc:3b:c7:c6:f0:94:e1:d3:e8:ef:e3:d8:69:b1:63:c2:4a: 72:f2:54:2d:13:e4:6c:a9:df:94:67:8f:4a:72:49:84:25:f9: 77:9f:d3:aa:49:ae:0f:7c:a5:25:52:4b:63:0f:ae:75:47:5e: 4a:66:bb:a0:22:6e:a0:96:54:26:5c:c3:ea:2f:da:0b:80:62: d5:4a:2c:56:38:2a:c6:f5:37:22:30:a1:0a:bf:67:7a:51:23: 27:49:db:13:a2:f2:58:93:5a:10:43:f0:f4:7a:77:fd:71:ed: 70:fd:3b:65:e3:f9:0c:da:e0:60:48:4c:ee:bf:98:f8:3e:c1: 07:f9:1f:53:1a:c0:ee:84:3a:06:51:e6:83:71:0c:d2:c7:c7: df:d0:07:db:e8:33:61:a4:63:43:67:4d:ee:1d:29:54:a2:bf: 36:97:4c:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKSnsTRSwdgpw4HJytkeFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkOTMwMmQ1NDZlMDY4YzJmZDc2NzdkOWQ1MjAwYWRkMzZj OGJjZDUwHhcNMjUxMjI0MDcwMDU2WhcNMjUxMjI1MDcwMDU2WjAzMTEwLwYDVQQD EyhlNTY5ZjIwZmY1MTMwZjAyZTFlM2YxMDg0OTYwYmMxN2I5NTJmYmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzvF0Xv7FMMHWylUe9RQZClFsj4s ksgfrqwfFax3pjzkpnZzFztyHZ+gOJ4kbe55GSyIYa2pyy4FFDvwyJr2iVoWy7xg 2rzZMTuiwmxTHgACvmTKLiXWLBcH800ROfSAXobg0ht4JA7iWloMO7UnCYvTVYHm j/ePIBl3ZhPFZ/bYZa5XnENbNoVU/5Cyn3HCJ92NCQRohEOC/Sw+92ANXZeeSK4o LI7BU5Yl0Y0j2LFSyGyGwG7W4sjXHh9cn5VT5cBO0vhdCxFDSeA3IaN37/MIXBFd TxZjSXv2UanVT94hUFNgHqazC39rQ72r29C1oLJk0jQoBGdrFbiOjZ34oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOVp8g/1Ew8C4ePxCElgvBe5UvvSMB8GA1UdIwQY MBaAFA2TAtVG4GjC/XZ32dUgCt02yLzVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFpNQzFVYmdhTUw5ZG5mWjFTQUszVGJJdk5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wMTAxNjEtYjg0MC00NDk3LWFmYmUt NGJlZjQzZDNmYjE3LzEvRFpNQzFVYmdhTUw5ZG5mWjFTQUszVGJJdk5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8wMTAxNjEtYjg0MC00NDk3LWFmYmUtNGJlZjQzZDNmYjE3 LzEvRFpNQzFVYmdhTUw5ZG5mWjFTQUszVGJJdk5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8tK1Inq h1ltCk8ZUL+TF0jjXuM62W5IK8NhxklmLFh4LLDQI8155AvmdReNLDxCSR1TqNLt XNPIVleH1t0KYnzL31U30mg6JB+TARLoKpYRyphObTpJjBe4lvw7x8bwlOHT6O/j 2GmxY8JKcvJULRPkbKnflGePSnJJhCX5d5/TqkmuD3ylJVJLYw+udUdeSma7oCJu oJZUJlzD6i/aC4Bi1UosVjgqxvU3IjChCr9nelEjJ0nbE6LyWJNaEEPw9Hp3/XHt cP07ZeP5DNrgYEhM7r+Y+D7BB/kfUxrA7oQ6BlHmg3EM0sfH39AH2+gzYaRjQ2dN 7h0pVKK/NpdM9w== -----END CERTIFICATE-----Generated at Wed Dec 24 16:39:10 2025 by rpki-client