This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft File: dzalyFoI2AdJBBy5z6UX-31Ym6g.mft (raw, json) Hash identifier: g3gr+L5XUCKDAprZWV6f0RCmOEbeIRazOnzV2R6Nu4Q= Subject key identifier: 07:18:2E:B6:30:46:50:60:9E:61:F5:30:59:B1:D9:CD:60:0D:68:56 Authority key identifier: 77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8 Certificate issuer: /CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8 Certificate serial: 019B4EBB72075FB80967462F3B7DF6F6E51B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft Manifest number: 179B Signing time: Wed 24 Dec 2025 05:01:05 +0000 Manifest this update: Wed 24 Dec 2025 05:01:05 +0000 Manifest next update: Thu 25 Dec 2025 05:01:05 +0000 Files and hashes: 1: dzalyFoI2AdJBBy5z6UX-31Ym6g.crl (hash: H4cOb1+GkhDInO6iAtV5612xXR7zldqvU755kpnUEgg=) 2: lX0LK1nSiHuzV_SMOweQSMztoO8.roa (hash: FSFbPLbWej0Nx3zMGDu+OsUG2lUiqW2+msdd/cNwwCI=) 3: m-mEC3MQWEKPGGG-lSkfc_YkjKY.roa (hash: mn8IMLUm7FiquI9qNoEzKGH7Q8r7mj6TH3z7eAZCOtY=) 4: pOouLLrM_fPZOnQs6zwFn5Phg1A.roa (hash: /KoAmA+1k0JwlfyqAV8ggH0wccERUauLpX2rgBT+8fk=) 5: zgslkGsdDbo-83qCCgJ7ueeD908.roa (hash: oQmBgVS3Wh0yqMQW3hPh1qFWDPXgZCrq5bbnQf1I4lM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:72:07:5f:b8:09:67:46:2f:3b:7d:f6:f6:e5:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8 Validity Not Before: Dec 24 05:01:05 2025 GMT Not After : Dec 25 05:01:05 2025 GMT Subject: CN=07182eb6304650609e61f53059b1d9cd600d6856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bd:a8:19:0e:e8:05:35:27:08:37:da:4f:07: 03:ff:bd:d9:14:2d:a4:55:14:99:75:03:6e:b9:c2: 38:60:d2:ca:87:5c:9c:77:db:e3:e0:d9:69:ec:30: 03:dd:82:f4:a7:ff:4c:e7:1c:51:a4:52:19:d7:23: 30:8f:08:47:0e:4b:46:ac:55:74:75:d1:c4:9d:63: 09:14:00:2d:2f:01:e3:ba:0e:26:9a:74:61:7b:e0: c6:93:b8:85:55:0f:97:ba:4b:a8:e0:81:1e:30:73: 99:20:ec:1d:be:54:12:d9:6c:3f:f6:6a:8b:a5:7c: 57:53:39:70:4b:93:fc:6c:48:bf:47:e5:93:ca:14: 08:95:32:4c:af:ec:24:cb:3e:9a:16:2c:75:af:32: 4b:b4:1b:5a:6f:83:88:1b:6a:8e:f8:7a:07:92:7b: b1:00:73:95:42:5b:8d:6b:6c:cb:3c:e6:7f:f7:9e: 97:59:37:18:d4:1a:aa:e2:46:39:34:20:06:dd:12: 5a:d1:a1:12:d2:50:6b:fe:f6:58:85:c0:a0:73:b4: 97:c2:24:cb:54:36:c6:ab:fb:11:f7:95:f1:71:48: f7:6e:8b:d3:7c:c1:a4:9c:bc:ee:18:14:7e:58:9d: ea:a6:45:0f:18:ee:a9:96:c7:6d:73:9e:a0:63:19: 91:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:18:2E:B6:30:46:50:60:9E:61:F5:30:59:B1:D9:CD:60:0D:68:56 X509v3 Authority Key Identifier: keyid:77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:4a:fa:dd:0d:c8:0c:17:54:2a:47:98:75:43:19:60:68:78: 47:6d:c5:25:75:a5:7b:ca:db:19:d6:3e:86:b3:25:cb:d6:df: fb:eb:ef:ab:de:69:bf:19:38:0b:02:35:f1:eb:2d:c4:c4:ad: 05:a4:b4:6f:10:8e:74:c4:b7:0d:49:e8:7f:a2:18:41:c1:84: b9:a4:6c:f2:56:59:da:24:9d:6e:80:b2:cd:21:5e:91:55:95: 62:be:77:f2:7b:79:5d:e0:d2:55:ed:d9:9e:b4:26:f0:47:81: 3d:1f:85:43:49:bc:37:ac:c3:ce:c7:94:d8:02:ff:a8:73:a6: ab:10:01:93:db:cd:1a:31:24:9f:90:07:e5:f4:f7:fe:52:9d: 05:7b:dc:2e:24:44:8a:51:4d:1d:c7:88:7e:ab:ed:7d:a6:72: ee:09:a9:25:58:d2:48:94:a3:94:3c:f8:c1:47:96:97:9a:e2: f9:56:d8:82:95:4a:a4:d8:69:e0:6d:00:56:83:5c:80:29:00: d2:9a:41:6d:b7:36:bd:e3:0a:63:fb:d5:5e:e5:33:85:bb:13: d8:a9:cd:0d:26:84:2f:b1:ab:43:bb:f2:72:96:72:89:94:9f: 34:8b:80:5e:ff:5a:7e:43:16:07:16:f5:05:c7:eb:63:97:16: dd:dd:96:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu3IHX7gJZ0YvO3329uUbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MzZhNWM4NWEwOGQ4MDc0OTA0MWNiOWNmYTUxN2ZiN2Q1 ODliYTgwHhcNMjUxMjI0MDUwMTA1WhcNMjUxMjI1MDUwMTA1WjAzMTEwLwYDVQQD EygwNzE4MmViNjMwNDY1MDYwOWU2MWY1MzA1OWIxZDljZDYwMGQ2ODU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur2oGQ7oBTUnCDfaTwcD/73ZFC2k VRSZdQNuucI4YNLKh1ycd9vj4Nlp7DAD3YL0p/9M5xxRpFIZ1yMwjwhHDktGrFV0 ddHEnWMJFAAtLwHjug4mmnRhe+DGk7iFVQ+Xukuo4IEeMHOZIOwdvlQS2Ww/9mqL pXxXUzlwS5P8bEi/R+WTyhQIlTJMr+wkyz6aFix1rzJLtBtab4OIG2qO+HoHknux AHOVQluNa2zLPOZ/956XWTcY1Bqq4kY5NCAG3RJa0aES0lBr/vZYhcCgc7SXwiTL VDbGq/sR95XxcUj3bovTfMGknLzuGBR+WJ3qpkUPGO6plsdtc56gYxmRawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAcYLrYwRlBgnmH1MFmx2c1gDWhWMB8GA1UdIwQY MBaAFHc2pchaCNgHSQQcuc+lF/t9WJuoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHphbHlGb0kyQWRKQkJ5NXo2VVgtMzFZbTZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82ZGEyODktYWJlYy00OWY1LWE3NTkt Y2YxZjRjN2M5MjIyLzEvZHphbHlGb0kyQWRKQkJ5NXo2VVgtMzFZbTZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC82ZGEyODktYWJlYy00OWY1LWE3NTktY2YxZjRjN2M5MjIy LzEvZHphbHlGb0kyQWRKQkJ5NXo2VVgtMzFZbTZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFkr63Q3I DBdUKkeYdUMZYGh4R23FJXWle8rbGdY+hrMly9bf++vvq95pvxk4CwI18estxMSt BaS0bxCOdMS3DUnof6IYQcGEuaRs8lZZ2iSdboCyzSFekVWVYr538nt5XeDSVe3Z nrQm8EeBPR+FQ0m8N6zDzseU2AL/qHOmqxABk9vNGjEkn5AH5fT3/lKdBXvcLiRE ilFNHceIfqvtfaZy7gmpJVjSSJSjlDz4wUeWl5ri+VbYgpVKpNhp4G0AVoNcgCkA 0ppBbbc2veMKY/vVXuUzhbsT2KnNDSaEL7GrQ7vycpZyiZSfNIuAXv9afkMWBxb1 BcfrY5cW3d2WUA== -----END CERTIFICATE-----Generated at Wed Dec 24 10:31:11 2025 by rpki-client