This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft File: dzalyFoI2AdJBBy5z6UX-31Ym6g.mft (raw, json) Hash identifier: TzbtouWFx1YTnYeyeBQSRmtuX2PFGSmfb2wTHglb4kU= Subject key identifier: 04:E6:AC:FF:98:9D:54:2F:32:BF:D9:C7:EA:95:87:A9:45:E0:2C:04 Authority key identifier: 77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8 Certificate issuer: /CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8 Certificate serial: 019B397D69123E4031ADABE8ED336A8B8CE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft Manifest number: 1790 Signing time: Sat 20 Dec 2025 02:01:18 +0000 Manifest this update: Sat 20 Dec 2025 02:01:18 +0000 Manifest next update: Sun 21 Dec 2025 02:01:18 +0000 Files and hashes: 1: dzalyFoI2AdJBBy5z6UX-31Ym6g.crl (hash: WdCJI8QBSt82EHB3VEK26NQEvzrUqTQPnjDr+so5Zj4=) 2: lX0LK1nSiHuzV_SMOweQSMztoO8.roa (hash: FSFbPLbWej0Nx3zMGDu+OsUG2lUiqW2+msdd/cNwwCI=) 3: m-mEC3MQWEKPGGG-lSkfc_YkjKY.roa (hash: mn8IMLUm7FiquI9qNoEzKGH7Q8r7mj6TH3z7eAZCOtY=) 4: pOouLLrM_fPZOnQs6zwFn5Phg1A.roa (hash: /KoAmA+1k0JwlfyqAV8ggH0wccERUauLpX2rgBT+8fk=) 5: zgslkGsdDbo-83qCCgJ7ueeD908.roa (hash: oQmBgVS3Wh0yqMQW3hPh1qFWDPXgZCrq5bbnQf1I4lM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:69:12:3e:40:31:ad:ab:e8:ed:33:6a:8b:8c:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8 Validity Not Before: Dec 20 02:01:18 2025 GMT Not After : Dec 21 02:01:18 2025 GMT Subject: CN=04e6acff989d542f32bfd9c7ea9587a945e02c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:27:ec:32:16:5d:48:ba:ef:da:68:ed:cd:07: 1f:45:56:8d:1f:d1:6a:78:b6:c7:1c:ab:b0:13:25: f2:1b:65:84:47:04:d8:1d:09:66:5e:81:0b:98:2e: c5:9b:38:c7:80:fd:2f:a1:72:21:78:35:b7:1e:74: 0f:5c:de:f8:4e:53:58:d2:30:20:65:7b:86:a0:00: 4a:e1:f3:d5:2d:1e:24:33:df:bd:2d:70:bf:28:61: f1:71:92:a8:b0:00:0b:81:2e:57:ec:2d:1c:2f:0d: 56:d9:97:9f:37:67:3b:a6:19:d9:8e:66:57:2c:1e: 46:d2:dc:d3:4d:1f:cb:e7:a3:5b:5b:a8:f8:87:6c: e3:0e:1a:db:c6:1f:75:3c:e2:bc:a9:75:ad:0f:e5: 94:98:ce:5b:ce:f8:0d:31:a9:a7:79:25:be:62:50: dc:b4:fe:aa:45:92:6e:75:93:42:9a:45:22:8f:fc: b9:e8:17:ac:32:79:bb:b0:76:5e:a5:ab:c0:64:bc: 34:d7:c7:d4:ff:09:87:aa:28:06:9f:b0:2c:0e:cb: 23:01:c8:41:4c:44:f2:d5:e9:42:bc:df:91:54:3b: be:2b:ca:99:3d:70:fa:28:f2:ae:d1:9c:72:5a:40: ec:8e:28:04:07:71:fa:71:d4:80:48:6f:17:dc:d4: 26:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:E6:AC:FF:98:9D:54:2F:32:BF:D9:C7:EA:95:87:A9:45:E0:2C:04 X509v3 Authority Key Identifier: keyid:77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:87:55:41:3c:0b:87:55:88:f8:bb:c5:d3:eb:67:19:1d:7d: 00:be:a6:b5:d2:df:3d:d2:b5:5b:22:e3:65:82:c4:b8:9d:b1: 25:6a:36:4c:c7:02:23:c0:81:21:0d:b3:f4:60:73:e5:cf:ca: 05:53:98:27:2f:8b:ee:1b:30:c2:74:69:03:69:dd:d8:6c:ed: 07:6e:0e:12:28:8b:c0:5c:d3:7c:98:28:e6:2d:77:e7:5c:05: 55:1b:79:df:43:b1:83:ed:32:fe:06:0e:9d:92:ac:d7:ce:89: 18:87:d7:3f:77:a9:3b:6a:fd:7f:32:b3:3a:59:66:ed:ee:99: 78:60:4e:bd:85:c9:a2:24:86:ac:65:22:f5:e5:17:b5:56:e8: 77:f6:c7:df:04:e8:0b:63:ed:6c:1c:c2:bb:32:0f:a0:d0:d1: 2c:2d:23:21:e1:1d:55:3e:40:07:5e:a4:3f:e6:4c:62:e8:7f: c3:0d:91:c6:b6:ba:8b:6d:43:c4:95:c6:68:63:91:5a:02:4d: 29:f1:2f:ab:77:0f:8f:d4:c9:61:b2:b2:ce:f5:d2:5b:13:d7: ba:53:1f:9d:8a:21:7f:c0:5e:fb:61:9a:99:fd:5d:d9:28:43: 9b:f3:48:54:20:98:d6:21:82:85:ec:dd:6a:2f:66:b2:3f:f7: fb:18:77:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fWkSPkAxravo7TNqi4zpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MzZhNWM4NWEwOGQ4MDc0OTA0MWNiOWNmYTUxN2ZiN2Q1 ODliYTgwHhcNMjUxMjIwMDIwMTE4WhcNMjUxMjIxMDIwMTE4WjAzMTEwLwYDVQQD EygwNGU2YWNmZjk4OWQ1NDJmMzJiZmQ5YzdlYTk1ODdhOTQ1ZTAyYzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuifsMhZdSLrv2mjtzQcfRVaNH9Fq eLbHHKuwEyXyG2WERwTYHQlmXoELmC7FmzjHgP0voXIheDW3HnQPXN74TlNY0jAg ZXuGoABK4fPVLR4kM9+9LXC/KGHxcZKosAALgS5X7C0cLw1W2ZefN2c7phnZjmZX LB5G0tzTTR/L56NbW6j4h2zjDhrbxh91POK8qXWtD+WUmM5bzvgNMamneSW+YlDc tP6qRZJudZNCmkUij/y56BesMnm7sHZepavAZLw018fU/wmHqigGn7AsDssjAchB TETy1elCvN+RVDu+K8qZPXD6KPKu0ZxyWkDsjigEB3H6cdSASG8X3NQmewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATmrP+YnVQvMr/Zx+qVh6lF4CwEMB8GA1UdIwQY MBaAFHc2pchaCNgHSQQcuc+lF/t9WJuoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHphbHlGb0kyQWRKQkJ5NXo2VVgtMzFZbTZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82ZGEyODktYWJlYy00OWY1LWE3NTkt Y2YxZjRjN2M5MjIyLzEvZHphbHlGb0kyQWRKQkJ5NXo2VVgtMzFZbTZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82ZGEyODktYWJlYy00OWY1LWE3NTktY2YxZjRjN2M5MjIy LzEvZHphbHlGb0kyQWRKQkJ5NXo2VVgtMzFZbTZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATIdVQTwL h1WI+LvF0+tnGR19AL6mtdLfPdK1WyLjZYLEuJ2xJWo2TMcCI8CBIQ2z9GBz5c/K BVOYJy+L7hswwnRpA2nd2GztB24OEiiLwFzTfJgo5i1351wFVRt530Oxg+0y/gYO nZKs186JGIfXP3epO2r9fzKzOllm7e6ZeGBOvYXJoiSGrGUi9eUXtVbod/bH3wTo C2PtbBzCuzIPoNDRLC0jIeEdVT5AB16kP+ZMYuh/ww2Rxra6i21DxJXGaGORWgJN KfEvq3cPj9TJYbKyzvXSWxPXulMfnYohf8Be+2Gamf1d2ShDm/NIVCCY1iGChezd ai9msj/3+xh3mQ== -----END CERTIFICATE-----Generated at Sat Dec 20 04:42:31 2025 by rpki-client