This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft File: dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft (raw, json) Hash identifier: fpfog3nTaEWwqzB3KWB4xxrH04EE7K4BggDRYxTIQ+A= Subject key identifier: 27:A4:57:64:E3:39:86:AB:49:4B:43:CD:AC:0B:D4:5B:E7:E5:05:8F Authority key identifier: 74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C Certificate issuer: /CN=74267f3ecfcc61668e0501bca60ced6dd75d347c Certificate serial: 019B3C7EB20B29D7E0922BB35A932C97A0CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft Manifest number: 1761 Signing time: Sat 20 Dec 2025 16:01:34 +0000 Manifest this update: Sat 20 Dec 2025 16:01:34 +0000 Manifest next update: Sun 21 Dec 2025 16:01:34 +0000 Files and hashes: 1: DkayGfO7JIkj0aP3u5tMKhfrqH0.roa (hash: SB2VJh36vskB6Jgns8zRjcE+4UksZV6puEKomuTZHlg=) 2: dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl (hash: PLR4ep/8UgJptDhuAqPBQoNN6Gjxp72npivG+zzN5zI=) 3: jTx6aqvdEE_gQg73ReX0FkwgmQE.roa (hash: dAhHIig8KT1KxztIrLQE0kBlocl6eJfFH0R4JNRSc1E=) 4: kXcbCMejOpaJKyA1cSI33Gt-rG4.roa (hash: iBpLOB8D/HeQeT6S/JRKzQuf3+rJGJcLZkTdT9ZbR50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:b2:0b:29:d7:e0:92:2b:b3:5a:93:2c:97:a0:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74267f3ecfcc61668e0501bca60ced6dd75d347c Validity Not Before: Dec 20 16:01:34 2025 GMT Not After : Dec 21 16:01:34 2025 GMT Subject: CN=27a45764e33986ab494b43cdac0bd45be7e5058f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:37:00:10:42:00:5c:ab:f4:fc:49:b8:de:67: 52:31:e9:71:78:bb:92:37:cc:75:bf:2f:a6:d6:de: f4:eb:b6:22:46:6e:bc:11:84:11:07:74:f3:44:09: e5:1b:f5:d1:9d:6e:43:0c:19:79:f2:5e:64:12:03: ca:97:99:45:60:c5:78:31:23:6a:a3:68:ab:08:69: 80:00:ab:43:c0:76:fc:7d:06:06:8b:74:56:a4:88: 79:94:0e:e2:8b:28:18:be:4f:6a:5e:ff:dc:15:86: df:e6:e7:84:46:7b:6b:3e:6d:4e:da:9e:59:78:2f: 1a:9f:0e:05:ae:8d:34:38:4c:b5:6d:68:b2:b0:57: 4f:cd:50:16:b9:9f:7c:5c:a6:c8:d9:a5:d4:be:5a: 57:5a:dd:2c:2c:6e:a8:bf:7e:a4:2f:0e:1f:ec:e4: a3:4c:8e:02:d9:ef:3d:1f:04:bd:f1:59:49:84:67: 27:80:0e:88:b0:f3:e5:84:8f:b2:d0:dd:43:26:dd: 9f:55:ae:7e:e0:bd:ad:26:80:90:28:83:a2:8d:51: a0:c7:b0:ba:42:f4:25:f3:88:84:c8:b5:34:7f:f3: 93:dd:d9:ae:84:59:ff:fd:6d:20:56:8b:1b:7f:5a: d8:a7:0d:71:00:d6:d5:e5:4d:a4:05:79:59:f1:e8: 4b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A4:57:64:E3:39:86:AB:49:4B:43:CD:AC:0B:D4:5B:E7:E5:05:8F X509v3 Authority Key Identifier: keyid:74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ae:2c:e0:33:85:5e:99:d5:24:23:11:a9:c6:2c:18:d9:42: 18:d8:87:f8:13:33:5d:f8:6f:1c:70:b0:d2:03:cf:cb:f2:29: ea:2b:87:17:15:6e:79:8b:54:ad:8d:33:b5:e0:5e:cf:cb:a5: 14:ed:e3:fc:91:bf:f5:de:7c:02:81:9b:9a:2c:01:93:dc:db: 66:8d:6f:1f:38:bd:84:d7:b9:e5:e0:26:a8:f3:bd:27:b6:c3: b5:81:e7:96:42:11:5d:a3:07:42:81:75:17:eb:1c:b2:af:12: bc:f4:0f:07:74:91:b2:d5:1b:e4:02:60:86:48:c2:42:a2:dd: 90:61:75:c5:50:dd:7a:66:6e:e0:89:d5:51:95:1d:27:1e:15: 15:45:80:a3:c9:7e:40:b1:74:32:2b:bf:11:e4:31:40:65:69: 70:45:c7:a7:7f:d8:4d:a3:a7:a2:17:cb:7a:93:53:18:f9:b0: 62:a1:b6:cb:d7:f5:78:45:eb:b1:f1:4e:ee:3d:63:f8:db:9c: d1:60:c7:52:38:7b:ca:1a:ff:65:3c:fb:24:c5:7c:35:1b:30: 92:23:b4:12:f3:a3:57:15:ae:0d:96:cc:5a:fb:f4:e4:cf:66: 08:92:d4:f2:bf:d7:87:65:4a:75:5e:41:75:ea:d7:4f:63:f2: cc:c4:14:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8frILKdfgkiuzWpMsl6DMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MjY3ZjNlY2ZjYzYxNjY4ZTA1MDFiY2E2MGNlZDZkZDc1 ZDM0N2MwHhcNMjUxMjIwMTYwMTM0WhcNMjUxMjIxMTYwMTM0WjAzMTEwLwYDVQQD EygyN2E0NTc2NGUzMzk4NmFiNDk0YjQzY2RhYzBiZDQ1YmU3ZTUwNThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDcAEEIAXKv0/Em43mdSMelxeLuS N8x1vy+m1t7067YiRm68EYQRB3TzRAnlG/XRnW5DDBl58l5kEgPKl5lFYMV4MSNq o2irCGmAAKtDwHb8fQYGi3RWpIh5lA7iiygYvk9qXv/cFYbf5ueERntrPm1O2p5Z eC8anw4Fro00OEy1bWiysFdPzVAWuZ98XKbI2aXUvlpXWt0sLG6ov36kLw4f7OSj TI4C2e89HwS98VlJhGcngA6IsPPlhI+y0N1DJt2fVa5+4L2tJoCQKIOijVGgx7C6 QvQl84iEyLU0f/OT3dmuhFn//W0gVosbf1rYpw1xANbV5U2kBXlZ8ehLMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCekV2TjOYarSUtDzawL1Fvn5QWPMB8GA1UdIwQY MBaAFHQmfz7PzGFmjgUBvKYM7W3XXTR8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZENaX1BzX01ZV2FPQlFHOHBnenRiZGRkTkh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MGNiODAtNGU2ZC00NmE1LWIxYjQt NGUzZjRkNjhmNjgyLzEvZENaX1BzX01ZV2FPQlFHOHBnenRiZGRkTkh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny83MGNiODAtNGU2ZC00NmE1LWIxYjQtNGUzZjRkNjhmNjgy LzEvZENaX1BzX01ZV2FPQlFHOHBnenRiZGRkTkh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO64s4DOF XpnVJCMRqcYsGNlCGNiH+BMzXfhvHHCw0gPPy/Ip6iuHFxVueYtUrY0zteBez8ul FO3j/JG/9d58AoGbmiwBk9zbZo1vHzi9hNe55eAmqPO9J7bDtYHnlkIRXaMHQoF1 F+scsq8SvPQPB3SRstUb5AJghkjCQqLdkGF1xVDdemZu4InVUZUdJx4VFUWAo8l+ QLF0Miu/EeQxQGVpcEXHp3/YTaOnohfLepNTGPmwYqG2y9f1eEXrsfFO7j1j+Nuc 0WDHUjh7yhr/ZTz7JMV8NRswkiO0EvOjVxWuDZbMWvv05M9mCJLU8r/Xh2VKdV5B derXT2PyzMQU4A== -----END CERTIFICATE-----Generated at Sun Dec 21 01:51:05 2025 by rpki-client