This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft File: dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft (raw, json) Hash identifier: iOD3j97+yUTIIpz+pKPSdqq7mxDLwafwHaGyOUWdU2c= Subject key identifier: C5:E6:E0:37:F3:89:9B:1F:C2:04:E4:FF:3A:41:B0:51:EE:65:0C:D6 Authority key identifier: 75:3C:FF:43:0F:7F:17:51:E6:97:BB:30:F8:7F:EF:39:7C:C1:7F:A6 Certificate issuer: /CN=753cff430f7f1751e697bb30f87fef397cc17fa6 Certificate serial: 019B6CC5980BEB773288E96E2DF215DD7CB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft Manifest number: 17A3 Signing time: Tue 30 Dec 2025 01:00:47 +0000 Manifest this update: Tue 30 Dec 2025 01:00:47 +0000 Manifest next update: Wed 31 Dec 2025 01:00:47 +0000 Files and hashes: 1: dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.crl (hash: ys2uyIV5NKR+VNWk6QCxpDbhMaBUHwkpJyatj/8qgiI=) 2: dnhmPWmpRWX9rAh9nBMTSVjDqxs.roa (hash: fzOf1Or3/SM11VjxsfHMYPlVNvpYFDsl88MJ3GBj7FI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c5:98:0b:eb:77:32:88:e9:6e:2d:f2:15:dd:7c:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=753cff430f7f1751e697bb30f87fef397cc17fa6 Validity Not Before: Dec 30 01:00:47 2025 GMT Not After : Dec 31 01:00:47 2025 GMT Subject: CN=c5e6e037f3899b1fc204e4ff3a41b051ee650cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4b:09:b0:89:f2:8c:a9:c3:38:39:95:f5:12: 6a:00:79:1f:69:bb:94:5a:67:f7:45:1e:78:6f:af: 1d:68:90:59:3f:98:f7:e9:97:ca:4e:77:e9:f4:ef: 58:96:1e:c6:cc:f6:d5:61:57:d4:fe:2a:a7:20:98: c1:ad:21:c1:a6:09:9a:4c:73:20:dc:0b:c3:0b:27: 16:f8:c9:41:0a:e4:53:07:12:25:74:a7:b6:af:39: 17:fc:38:80:3e:35:ad:9c:88:87:3d:4f:a3:a5:1c: 54:d9:86:79:08:77:a6:f0:73:e3:69:b3:4b:d7:db: 6d:99:8b:9e:08:db:9c:26:45:45:ef:06:eb:9e:2f: 82:d2:76:25:76:cc:e2:e5:96:8f:76:ef:4e:28:3a: f0:e3:b2:e8:f6:ae:8e:c3:4d:3a:5a:4a:ce:3e:72: 29:27:fa:f5:7f:18:08:67:c5:e5:77:86:08:70:9b: 26:3d:ca:eb:8f:71:a9:88:1d:c0:70:15:04:ad:51: 83:d9:f6:4b:5c:fc:4a:9f:03:6e:d4:15:8b:ff:53: c6:eb:0a:1e:5e:d9:24:19:fb:ae:16:bb:99:c1:cb: 3a:cb:a8:83:23:4b:cc:cf:30:20:f0:2a:4c:e8:94: 15:f3:a0:78:72:c8:82:ab:67:01:b7:c6:40:b1:80: 80:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E6:E0:37:F3:89:9B:1F:C2:04:E4:FF:3A:41:B0:51:EE:65:0C:D6 X509v3 Authority Key Identifier: keyid:75:3C:FF:43:0F:7F:17:51:E6:97:BB:30:F8:7F:EF:39:7C:C1:7F:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e5:f3:43:5d:b2:77:9d:31:d7:85:c4:a0:fa:7e:61:f2:09: 0a:6e:81:d2:e4:26:e2:ff:c9:b8:32:41:36:f6:f2:af:ac:05: 45:ab:5f:34:cc:5d:a7:aa:fc:d3:a3:e1:56:71:ed:de:c1:1c: 91:17:fe:c3:17:a9:ff:a6:7f:4a:1d:80:8b:4f:0d:cd:5d:d9: f9:30:08:e9:84:fa:35:fa:c9:e4:de:20:f5:f5:bb:27:3b:bc: 62:8e:7b:48:d5:68:2e:f7:86:82:09:3b:fc:6e:8f:2a:dd:3f: 6b:21:37:66:51:d0:a5:41:f8:ec:9a:9b:e3:53:ce:11:95:41: 29:ef:18:e3:40:21:91:cc:64:64:c9:c8:b2:91:26:17:62:f6: d6:4f:25:7e:d3:3b:15:0f:3e:63:65:39:9f:31:5d:f7:c8:f5: 7b:11:60:0d:7e:2f:8c:a4:97:49:0e:8f:4b:ac:bf:3a:5b:bc: f8:d8:2e:e3:81:15:9d:e3:f4:41:b6:31:d8:e0:9b:9d:91:ea: bf:79:ab:a2:05:c0:39:35:08:74:c2:5c:0e:6e:86:c1:1a:50: 36:36:1f:85:f1:0e:c0:79:14:07:7e:01:7b:85:ac:9b:0b:f9: a9:20:37:91:9c:50:fe:1c:39:d3:db:6e:ad:a6:8b:01:7b:d1: 6a:04:02:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxZgL63cyiOluLfIV3XyyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1M2NmZjQzMGY3ZjE3NTFlNjk3YmIzMGY4N2ZlZjM5N2Nj MTdmYTYwHhcNMjUxMjMwMDEwMDQ3WhcNMjUxMjMxMDEwMDQ3WjAzMTEwLwYDVQQD EyhjNWU2ZTAzN2YzODk5YjFmYzIwNGU0ZmYzYTQxYjA1MWVlNjUwY2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUsJsInyjKnDODmV9RJqAHkfabuU Wmf3RR54b68daJBZP5j36ZfKTnfp9O9Ylh7GzPbVYVfU/iqnIJjBrSHBpgmaTHMg 3AvDCycW+MlBCuRTBxIldKe2rzkX/DiAPjWtnIiHPU+jpRxU2YZ5CHem8HPjabNL 19ttmYueCNucJkVF7wbrni+C0nYldszi5ZaPdu9OKDrw47Lo9q6Ow006WkrOPnIp J/r1fxgIZ8Xld4YIcJsmPcrrj3GpiB3AcBUErVGD2fZLXPxKnwNu1BWL/1PG6woe XtkkGfuuFruZwcs6y6iDI0vMzzAg8CpM6JQV86B4csiCq2cBt8ZAsYCAEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXm4DfziZsfwgTk/zpBsFHuZQzWMB8GA1UdIwQY MBaAFHU8/0MPfxdR5pe7MPh/7zl8wX+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFR6X1F3OV9GMUhtbDdzdy1IX3ZPWHpCZjZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82MDJiZmUtN2E0MC00ZjVhLTllYzkt MzdhNWQ5Y2E2NTU4LzEvZFR6X1F3OV9GMUhtbDdzdy1IX3ZPWHpCZjZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS82MDJiZmUtN2E0MC00ZjVhLTllYzktMzdhNWQ5Y2E2NTU4 LzEvZFR6X1F3OV9GMUhtbDdzdy1IX3ZPWHpCZjZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACuXzQ12y d50x14XEoPp+YfIJCm6B0uQm4v/JuDJBNvbyr6wFRatfNMxdp6r806PhVnHt3sEc kRf+wxep/6Z/Sh2Ai08NzV3Z+TAI6YT6NfrJ5N4g9fW7Jzu8Yo57SNVoLveGggk7 /G6PKt0/ayE3ZlHQpUH47Jqb41POEZVBKe8Y40AhkcxkZMnIspEmF2L21k8lftM7 FQ8+Y2U5nzFd98j1exFgDX4vjKSXSQ6PS6y/Olu8+Ngu44EVneP0QbYx2OCbnZHq v3mrogXAOTUIdMJcDm6GwRpQNjYfhfEOwHkUB34Be4Wsmwv5qSA3kZxQ/hw509tu raaLAXvRagQCVw== -----END CERTIFICATE-----Generated at Tue Dec 30 10:33:17 2025 by rpki-client