This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft File: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft (raw, json) Hash identifier: M9YynwCUPy1BS6kDWleHnyN0uOVkF85qBuplcnQIzVE= Subject key identifier: B8:BA:3B:E9:9B:A1:8C:EC:EF:BF:74:BA:17:87:76:3A:0A:BE:DC:0F Authority key identifier: 0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4 Certificate issuer: /CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4 Certificate serial: 019B3B34F7A8EFA78F31E9E037D3E2410045 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft Manifest number: 1784 Signing time: Sat 20 Dec 2025 10:01:25 +0000 Manifest this update: Sat 20 Dec 2025 10:01:25 +0000 Manifest next update: Sun 21 Dec 2025 10:01:25 +0000 Files and hashes: 1: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl (hash: wpjvXE7GKua0SHXl75lY8Hth5lA3S7+BdzJ4VnimrRI=) 2: ayJmzYBNfcdq3NPJ8M3cFOVfzCs.roa (hash: 0bZlkgsn21QwI80X8EQdx07gNzwAcET4bz9RvPxajWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:f7:a8:ef:a7:8f:31:e9:e0:37:d3:e2:41:00:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4 Validity Not Before: Dec 20 10:01:25 2025 GMT Not After : Dec 21 10:01:25 2025 GMT Subject: CN=b8ba3be99ba18cecefbf74ba1787763a0abedc0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:86:74:3a:e0:0c:55:00:cc:15:69:2b:d2:41: e2:d3:d0:ce:55:ef:d6:1e:67:ea:c6:34:83:f2:95: c6:74:de:ff:22:6c:1e:93:cc:d4:8a:ab:51:04:0c: 3f:44:1d:9d:b3:26:a4:8f:40:93:c2:61:8e:79:c2: 5f:b0:0c:1f:37:11:a0:6e:36:f6:6f:e4:db:7d:3a: 70:1c:e9:79:24:ca:72:64:aa:76:85:fc:f9:26:fd: 34:cf:e5:9f:c6:f4:38:c0:73:e8:7b:f4:36:92:88: a4:52:f8:8c:16:66:87:df:c9:2c:1d:e2:7d:7c:9b: b4:18:7c:a5:33:43:e1:0a:05:2d:54:80:0f:6f:bf: 34:e4:96:94:5a:70:e5:4c:e3:48:99:aa:4f:3c:1e: 95:2f:ce:c9:dd:74:4f:84:8d:97:f6:99:c7:02:21: c6:02:05:3c:a8:a7:c3:07:2a:40:19:a8:a2:5b:fd: 4b:f1:88:c2:64:e7:70:10:ea:f8:71:3a:ca:0b:47: 19:02:ab:61:a9:0e:ef:b5:17:f2:46:67:38:89:1a: a8:8d:4c:47:35:d2:c2:ce:69:8d:6d:30:8d:77:f2: 19:e8:41:88:56:7b:a5:8d:50:31:41:fc:52:04:22: 43:57:5f:f6:38:9c:56:29:4b:d9:63:d5:3e:b8:41: 11:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:BA:3B:E9:9B:A1:8C:EC:EF:BF:74:BA:17:87:76:3A:0A:BE:DC:0F X509v3 Authority Key Identifier: keyid:0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:39:1d:bd:18:51:74:25:9a:67:3e:8d:fd:94:69:84:ca:cc: f9:dd:e5:17:23:4b:92:66:b2:65:e1:cb:37:66:0a:95:3c:9a: d9:c9:2e:33:53:92:1a:11:1b:23:9d:6f:32:11:7c:b9:e2:b6: 56:74:20:5f:f0:68:5e:b9:84:98:10:f2:ca:32:2b:6b:9e:d6: e5:d2:a2:2b:f8:98:bc:d1:a4:88:fa:d6:7c:d1:db:88:02:ce: f8:17:cb:88:9e:9f:e8:46:e4:37:3d:be:c9:f9:89:0c:1d:2b: a9:e1:4a:5c:e9:b1:54:c6:e4:fe:0b:09:ec:db:8b:93:53:8d: e5:c7:ec:17:cb:ae:7a:5a:f1:b9:67:be:e1:51:5a:80:b2:4a: f3:f6:89:49:99:b8:dc:59:8e:46:ad:a5:e0:dc:26:8e:c0:5f: 47:14:37:26:a6:97:be:8d:3a:30:ff:81:a2:32:e5:a8:ca:c0: 90:27:0d:18:d7:d3:15:57:2c:bc:b9:ba:c4:13:30:ed:0d:62: 37:2d:4b:11:9c:73:67:34:cb:55:68:e2:6c:33:a7:81:9d:68: 95:e3:91:60:4c:fb:87:04:4e:f1:da:5d:f0:70:cb:17:03:10: 8f:09:08:5c:0b:4a:27:4b:c7:7e:bc:3e:56:65:f8:ba:5e:28: ae:d4:88:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NPeo76ePMengN9PiQQBFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMzczOTdkOGI2Yzg3M2UyOWJlNmUwOTlkZTdiNzQ2ZWFm ZDBlYjQwHhcNMjUxMjIwMTAwMTI1WhcNMjUxMjIxMTAwMTI1WjAzMTEwLwYDVQQD EyhiOGJhM2JlOTliYTE4Y2VjZWZiZjc0YmExNzg3NzYzYTBhYmVkYzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYZ0OuAMVQDMFWkr0kHi09DOVe/W HmfqxjSD8pXGdN7/Imwek8zUiqtRBAw/RB2dsyakj0CTwmGOecJfsAwfNxGgbjb2 b+TbfTpwHOl5JMpyZKp2hfz5Jv00z+WfxvQ4wHPoe/Q2koikUviMFmaH38ksHeJ9 fJu0GHylM0PhCgUtVIAPb7805JaUWnDlTONImapPPB6VL87J3XRPhI2X9pnHAiHG AgU8qKfDBypAGaiiW/1L8YjCZOdwEOr4cTrKC0cZAqthqQ7vtRfyRmc4iRqojUxH NdLCzmmNbTCNd/IZ6EGIVnuljVAxQfxSBCJDV1/2OJxWKUvZY9U+uEERrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLi6O+mboYzs7790uheHdjoKvtwPMB8GA1UdIwQY MBaAFA83OX2LbIc+Kb5uCZ3nt0bq/Q60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHpjNWZZdHNoejRwdm00Sm5lZTNSdXI5RHJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yMWJhODMtZjk0ZS00NTVhLWEyYjct YTYyNTU2ZDI1NDQ3LzEvRHpjNWZZdHNoejRwdm00Sm5lZTNSdXI5RHJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8yMWJhODMtZjk0ZS00NTVhLWEyYjctYTYyNTU2ZDI1NDQ3 LzEvRHpjNWZZdHNoejRwdm00Sm5lZTNSdXI5RHJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApjkdvRhR dCWaZz6N/ZRphMrM+d3lFyNLkmayZeHLN2YKlTya2ckuM1OSGhEbI51vMhF8ueK2 VnQgX/BoXrmEmBDyyjIra57W5dKiK/iYvNGkiPrWfNHbiALO+BfLiJ6f6EbkNz2+ yfmJDB0rqeFKXOmxVMbk/gsJ7NuLk1ON5cfsF8uuelrxuWe+4VFagLJK8/aJSZm4 3FmORq2l4NwmjsBfRxQ3JqaXvo06MP+BojLlqMrAkCcNGNfTFVcsvLm6xBMw7Q1i Ny1LEZxzZzTLVWjibDOngZ1oleORYEz7hwRO8dpd8HDLFwMQjwkIXAtKJ0vHfrw+ VmX4ul4ortSI9Q== -----END CERTIFICATE-----Generated at Sat Dec 20 19:31:17 2025 by rpki-client