This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft File: dzalyFoI2AdJBBy5z6UX-31Ym6g.mft (raw, json) Hash identifier: QucngOV+vVR/dc/GR3WutblgDPXJYzsTjpWYtgdRD80= Subject key identifier: 4A:13:5F:8F:DE:9D:07:39:56:9B:D8:D4:09:FD:50:0D:61:33:4B:2F Authority key identifier: 77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8 Certificate issuer: /CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8 Certificate serial: 019B4324ADA7C537126E01C3C57EA1CDFAE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft Manifest number: 1795 Signing time: Sun 21 Dec 2025 23:00:35 +0000 Manifest this update: Sun 21 Dec 2025 23:00:35 +0000 Manifest next update: Mon 22 Dec 2025 23:00:35 +0000 Files and hashes: 1: dzalyFoI2AdJBBy5z6UX-31Ym6g.crl (hash: WZP9AM253btMgZUNf9FS+wk5MGJH/ZJjfsXh0ovFcnY=) 2: lX0LK1nSiHuzV_SMOweQSMztoO8.roa (hash: FSFbPLbWej0Nx3zMGDu+OsUG2lUiqW2+msdd/cNwwCI=) 3: m-mEC3MQWEKPGGG-lSkfc_YkjKY.roa (hash: mn8IMLUm7FiquI9qNoEzKGH7Q8r7mj6TH3z7eAZCOtY=) 4: pOouLLrM_fPZOnQs6zwFn5Phg1A.roa (hash: /KoAmA+1k0JwlfyqAV8ggH0wccERUauLpX2rgBT+8fk=) 5: zgslkGsdDbo-83qCCgJ7ueeD908.roa (hash: oQmBgVS3Wh0yqMQW3hPh1qFWDPXgZCrq5bbnQf1I4lM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:ad:a7:c5:37:12:6e:01:c3:c5:7e:a1:cd:fa:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8 Validity Not Before: Dec 21 23:00:35 2025 GMT Not After : Dec 22 23:00:35 2025 GMT Subject: CN=4a135f8fde9d0739569bd8d409fd500d61334b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9f:ba:ea:9c:bc:db:50:5f:e1:8a:f8:f0:b6: e4:46:1b:3d:c8:9c:54:72:9c:df:5b:d4:83:0c:1a: 59:40:65:fb:8b:05:dc:3e:fc:3f:f8:62:de:69:77: b8:20:f9:7b:f9:02:91:3a:60:20:6c:d6:de:5b:74: 22:a1:23:56:94:6e:21:99:bc:e8:e3:cc:79:82:98: 9b:c6:31:d4:b6:be:e5:a5:d6:21:2d:fa:95:03:fc: 61:f0:5a:82:a7:f8:89:d1:b7:ab:0c:5e:46:3c:e3: 01:62:64:88:48:13:f0:d7:c3:f9:a3:c6:db:ed:a7: 8c:32:0f:cc:6d:e4:99:be:b9:85:cb:47:e5:00:3b: 59:19:47:54:74:69:e1:e2:54:16:8f:d6:8a:b3:53: 3a:09:75:17:41:d6:3e:a2:fa:68:b1:d1:9d:86:47: 06:40:f9:65:41:f0:95:a0:ff:47:c4:32:54:77:c9: 0d:be:55:a3:5f:a2:08:98:9e:17:93:09:8e:d2:d5: 5d:02:14:48:18:23:e7:4e:de:44:93:f0:f2:96:6b: a1:e0:9e:9d:34:c0:4b:f0:cf:b7:b8:d4:18:a9:49: 85:09:b6:bb:c3:96:1c:4a:53:93:72:1d:75:09:0c: 9a:51:e5:3f:e5:c4:4d:7f:e4:28:6d:f0:08:8c:23: 94:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:13:5F:8F:DE:9D:07:39:56:9B:D8:D4:09:FD:50:0D:61:33:4B:2F X509v3 Authority Key Identifier: keyid:77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:09:ac:5f:53:96:e3:3a:3f:1d:fa:2d:9e:f9:a0:f7:5a:f0: 5d:11:52:25:4c:76:83:f3:75:e9:c7:c2:76:56:cc:12:31:35: 5d:8d:b3:60:c5:f3:fb:de:a8:dc:b5:23:ba:77:f4:6f:fe:9f: f4:0e:69:9c:65:2c:ec:b0:53:28:09:b0:9b:2b:db:a5:19:9c: 0f:54:a8:a9:e4:20:97:b4:1f:c4:df:29:61:fa:26:99:d6:3b: 80:9e:fb:e3:44:ab:c7:9f:f3:24:c6:ab:ba:e3:18:1d:af:51: 77:a9:b7:1e:c3:73:7c:8b:66:85:b5:26:72:21:22:d7:b2:18: 10:20:e0:6b:a8:bc:1a:1a:a3:98:cf:e5:fd:27:1d:81:2b:21: 0a:65:da:07:cb:fb:ba:bc:7c:76:12:c4:69:29:c9:46:9f:70: 01:e8:b4:ad:02:99:b7:06:44:75:19:59:a7:c2:6c:e5:c0:63: 51:27:3e:9f:3c:ab:dd:79:c3:1e:42:06:3e:b8:3f:96:b3:fd: b4:d3:90:53:e1:f2:2a:8a:e5:8b:51:6a:c8:1a:3e:9c:8e:b9: b4:4d:1a:c4:95:06:e7:19:ef:3b:89:ac:db:9c:3a:83:2c:c8: b0:26:e7:20:1b:c2:26:4c:71:6f:3c:6a:d2:87:28:8b:9b:52: da:75:68:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJK2nxTcSbgHDxX6hzfrjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MzZhNWM4NWEwOGQ4MDc0OTA0MWNiOWNmYTUxN2ZiN2Q1 ODliYTgwHhcNMjUxMjIxMjMwMDM1WhcNMjUxMjIyMjMwMDM1WjAzMTEwLwYDVQQD Eyg0YTEzNWY4ZmRlOWQwNzM5NTY5YmQ4ZDQwOWZkNTAwZDYxMzM0YjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ+66py821Bf4Yr48LbkRhs9yJxU cpzfW9SDDBpZQGX7iwXcPvw/+GLeaXe4IPl7+QKROmAgbNbeW3QioSNWlG4hmbzo 48x5gpibxjHUtr7lpdYhLfqVA/xh8FqCp/iJ0berDF5GPOMBYmSISBPw18P5o8bb 7aeMMg/MbeSZvrmFy0flADtZGUdUdGnh4lQWj9aKs1M6CXUXQdY+ovposdGdhkcG QPllQfCVoP9HxDJUd8kNvlWjX6IImJ4XkwmO0tVdAhRIGCPnTt5Ek/Dylmuh4J6d NMBL8M+3uNQYqUmFCba7w5YcSlOTch11CQyaUeU/5cRNf+QobfAIjCOU0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEoTX4/enQc5VpvY1An9UA1hM0svMB8GA1UdIwQY MBaAFHc2pchaCNgHSQQcuc+lF/t9WJuoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHphbHlGb0kyQWRKQkJ5NXo2VVgtMzFZbTZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82ZGEyODktYWJlYy00OWY1LWE3NTkt Y2YxZjRjN2M5MjIyLzEvZHphbHlGb0kyQWRKQkJ5NXo2VVgtMzFZbTZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82ZGEyODktYWJlYy00OWY1LWE3NTktY2YxZjRjN2M5MjIy LzEvZHphbHlGb0kyQWRKQkJ5NXo2VVgtMzFZbTZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQmsX1OW 4zo/Hfotnvmg91rwXRFSJUx2g/N16cfCdlbMEjE1XY2zYMXz+96o3LUjunf0b/6f 9A5pnGUs7LBTKAmwmyvbpRmcD1SoqeQgl7QfxN8pYfommdY7gJ7740Srx5/zJMar uuMYHa9Rd6m3HsNzfItmhbUmciEi17IYECDga6i8GhqjmM/l/ScdgSshCmXaB8v7 urx8dhLEaSnJRp9wAei0rQKZtwZEdRlZp8Js5cBjUSc+nzyr3XnDHkIGPrg/lrP9 tNOQU+HyKorli1FqyBo+nI65tE0axJUG5xnvO4ms25w6gyzIsCbnIBvCJkxxbzxq 0ocoi5tS2nVowA== -----END CERTIFICATE-----Generated at Mon Dec 22 06:30:01 2025 by rpki-client