This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft File: dzDRbvGVhk8NvoqGca-2N2g7djs.mft (raw, json) Hash identifier: NHTftw86qLBaVO2BsvSPU90exjaccGQKxJnbfk5KOx4= Subject key identifier: 69:9B:8E:A5:91:6C:25:3A:6C:80:FD:FE:EE:01:3B:E5:2C:D6:14:E8 Authority key identifier: 77:30:D1:6E:F1:95:86:4F:0D:BE:8A:86:71:AF:B6:37:68:3B:76:3B Certificate issuer: /CN=7730d16ef195864f0dbe8a8671afb637683b763b Certificate serial: 019B3C7E2850962B8ED8312B19519548BB9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzDRbvGVhk8NvoqGca-2N2g7djs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft Manifest number: A6 Signing time: Sat 20 Dec 2025 16:00:59 +0000 Manifest this update: Sat 20 Dec 2025 16:00:59 +0000 Manifest next update: Sun 21 Dec 2025 16:00:59 +0000 Files and hashes: 1: 0lt-q8djajXZSW3y7vmC1ACoEI4.roa (hash: PA0Abb9rgpKbk80NoqHuVJw2zbwCWQARy+i28/n0L1A=) 2: dzDRbvGVhk8NvoqGca-2N2g7djs.crl (hash: QUmXuX3ji/fg1oPHyIIowyJM47YK2lRyYb7LUt9rII4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft rsync://rpki.ripe.net/repository/DEFAULT/dzDRbvGVhk8NvoqGca-2N2g7djs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:28:50:96:2b:8e:d8:31:2b:19:51:95:48:bb:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7730d16ef195864f0dbe8a8671afb637683b763b Validity Not Before: Dec 20 16:00:59 2025 GMT Not After : Dec 21 16:00:59 2025 GMT Subject: CN=699b8ea5916c253a6c80fdfeee013be52cd614e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:72:d5:ce:ea:88:e3:c0:e1:fe:9f:f9:ba:02: 33:b3:c8:e2:b0:cc:07:66:09:e2:b5:b8:89:1c:79: e4:d5:d8:64:71:e0:1c:55:a0:9c:24:14:a9:f9:3d: 0a:6a:70:a3:48:22:63:7f:a5:6e:1f:18:18:d4:3b: 2c:28:81:26:06:61:0f:36:b5:35:7d:20:cf:20:fa: bd:fe:0e:94:43:7b:f9:84:57:82:c6:d1:dd:2a:13: 42:6a:07:18:eb:79:a8:d8:c1:59:26:42:00:de:f7: 1a:00:ca:19:c9:47:48:c2:8a:f7:de:4e:00:7a:36: b5:0f:50:85:8b:5d:36:7d:b7:50:88:6a:fc:a4:dc: d3:d6:66:dd:36:6b:5d:82:1c:4c:c2:b5:7e:49:9f: 9e:7e:b8:38:1c:d7:2e:07:db:19:ff:cf:15:dc:07: 05:2a:4c:08:f2:86:6a:98:7f:39:97:28:9c:9e:df: 06:8c:55:05:8f:a0:c3:7c:06:fd:37:cf:3a:76:6f: 94:72:f9:de:2d:63:65:f6:ac:bd:c8:ee:6d:17:7d: b3:d4:f3:81:58:c5:16:0a:28:5c:4c:4a:57:0e:1e: bc:57:cd:f1:43:b3:5a:fa:cf:4b:ba:cd:bf:fa:a9: aa:9c:a4:55:69:2b:c6:dc:08:1e:d4:dd:93:3b:83: fc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9B:8E:A5:91:6C:25:3A:6C:80:FD:FE:EE:01:3B:E5:2C:D6:14:E8 X509v3 Authority Key Identifier: keyid:77:30:D1:6E:F1:95:86:4F:0D:BE:8A:86:71:AF:B6:37:68:3B:76:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzDRbvGVhk8NvoqGca-2N2g7djs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:46:90:4a:e8:b9:cb:16:dd:7e:74:8f:f9:b3:7b:24:98:18: b8:2e:a8:0a:49:f7:68:8a:aa:1a:ea:31:53:b3:cc:23:16:59: ef:d9:56:65:fa:8e:c7:9e:ae:86:07:4f:82:05:42:37:85:e4: 47:70:09:33:5d:5b:4a:31:52:02:d6:ef:60:47:7b:74:50:db: 6b:38:f7:7b:08:2b:bf:07:ca:49:e8:88:65:78:17:c0:78:d3: 6f:45:b6:6c:e5:49:79:a7:a4:d9:55:df:e9:51:b0:10:de:07: 24:cd:0f:d0:23:1b:38:91:f5:8c:cb:f1:6c:0c:1b:26:02:17: 83:45:44:cb:ee:1a:aa:ef:f8:5c:b9:72:9c:da:e4:2b:98:77: ec:20:f2:28:c0:17:ee:f5:59:49:ee:35:33:9d:7d:63:aa:0d: ec:f7:96:a4:70:f2:47:36:49:1b:ee:a5:95:f1:c2:23:b7:2d: db:85:8a:b2:9a:06:42:00:07:7c:8f:1e:fd:59:4e:82:b6:a3: bd:7c:b1:ff:f8:03:87:b7:d0:fa:09:c7:4e:1c:c1:e1:7f:af: 87:3f:a0:7b:db:81:17:aa:75:e7:b5:ef:a2:91:b7:0b:3c:16: f3:1b:70:0f:4d:e7:2e:49:7b:7b:e1:a0:97:9a:87:ac:13:a9: 64:27:1d:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fihQliuO2DErGVGVSLufMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MzBkMTZlZjE5NTg2NGYwZGJlOGE4NjcxYWZiNjM3Njgz Yjc2M2IwHhcNMjUxMjIwMTYwMDU5WhcNMjUxMjIxMTYwMDU5WjAzMTEwLwYDVQQD Eyg2OTliOGVhNTkxNmMyNTNhNmM4MGZkZmVlZTAxM2JlNTJjZDYxNGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnLVzuqI48Dh/p/5ugIzs8jisMwH ZgnitbiJHHnk1dhkceAcVaCcJBSp+T0KanCjSCJjf6VuHxgY1DssKIEmBmEPNrU1 fSDPIPq9/g6UQ3v5hFeCxtHdKhNCagcY63mo2MFZJkIA3vcaAMoZyUdIwor33k4A eja1D1CFi102fbdQiGr8pNzT1mbdNmtdghxMwrV+SZ+efrg4HNcuB9sZ/88V3AcF KkwI8oZqmH85lyicnt8GjFUFj6DDfAb9N886dm+UcvneLWNl9qy9yO5tF32z1POB WMUWCihcTEpXDh68V83xQ7Na+s9Lus2/+qmqnKRVaSvG3Age1N2TO4P8pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmbjqWRbCU6bID9/u4BO+Us1hToMB8GA1UdIwQY MBaAFHcw0W7xlYZPDb6KhnGvtjdoO3Y7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHpEUmJ2R1ZoazhOdm9xR2NhLTJOMmc3ZGpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mY2Q4NTUtZmMyYy00NjBlLWJjZWEt OGQ3YzhhYzA2MjFhLzEvZHpEUmJ2R1ZoazhOdm9xR2NhLTJOMmc3ZGpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mY2Q4NTUtZmMyYy00NjBlLWJjZWEtOGQ3YzhhYzA2MjFh LzEvZHpEUmJ2R1ZoazhOdm9xR2NhLTJOMmc3ZGpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIUaQSui5 yxbdfnSP+bN7JJgYuC6oCkn3aIqqGuoxU7PMIxZZ79lWZfqOx56uhgdPggVCN4Xk R3AJM11bSjFSAtbvYEd7dFDbazj3ewgrvwfKSeiIZXgXwHjTb0W2bOVJeaek2VXf 6VGwEN4HJM0P0CMbOJH1jMvxbAwbJgIXg0VEy+4aqu/4XLlynNrkK5h37CDyKMAX 7vVZSe41M519Y6oN7PeWpHDyRzZJG+6llfHCI7ct24WKspoGQgAHfI8e/VlOgraj vXyx//gDh7fQ+gnHThzB4X+vhz+ge9uBF6p157XvopG3CzwW8xtwD03nLkl7e+Gg l5qHrBOpZCcdHQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:49:08 2025 by rpki-client