This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft File: d6dcTie5EIG4MB56fE_ZA-AmGGI.mft (raw, json) Hash identifier: BcRvrRBilm5YFa8cFFgAViSn9yT4G+up2buNbNaamK0= Subject key identifier: EA:A1:64:BB:28:45:04:3E:95:31:95:55:2E:52:D6:60:53:1E:73:64 Authority key identifier: 77:A7:5C:4E:27:B9:10:81:B8:30:1E:7A:7C:4F:D9:03:E0:26:18:62 Certificate issuer: /CN=77a75c4e27b91081b8301e7a7c4fd903e0261862 Certificate serial: 019B3C7E24F000B80C45917D3CC3762262E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d6dcTie5EIG4MB56fE_ZA-AmGGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft Manifest number: 0707 Signing time: Sat 20 Dec 2025 16:00:58 +0000 Manifest this update: Sat 20 Dec 2025 16:00:58 +0000 Manifest next update: Sun 21 Dec 2025 16:00:58 +0000 Files and hashes: 1: d6dcTie5EIG4MB56fE_ZA-AmGGI.crl (hash: rMmetQ+81soEfqxiECGUKzbM5HlN4w0RMT7K5TK+OnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft rsync://rpki.ripe.net/repository/DEFAULT/d6dcTie5EIG4MB56fE_ZA-AmGGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:24:f0:00:b8:0c:45:91:7d:3c:c3:76:22:62:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77a75c4e27b91081b8301e7a7c4fd903e0261862 Validity Not Before: Dec 20 16:00:58 2025 GMT Not After : Dec 21 16:00:58 2025 GMT Subject: CN=eaa164bb2845043e953195552e52d660531e7364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:27:59:83:c2:e4:53:d0:89:0b:e8:71:6a:96: 72:93:78:1c:a3:34:eb:a7:88:3e:e4:aa:e6:8c:7b: cf:6b:62:f2:81:3a:eb:0c:c2:a1:6a:c1:c6:7e:fa: e0:3c:f0:9e:c0:b9:ad:83:dd:23:ff:e9:dd:56:58: 79:f5:27:c3:80:fb:c3:57:86:96:0b:4d:87:82:95: 2c:57:ea:9f:74:f8:9d:80:d8:81:40:6d:c4:01:35: 49:85:e5:a0:58:a7:7d:6e:66:f5:da:07:15:dd:ca: ce:f4:4a:f5:0d:85:cd:ed:f6:86:57:f9:d5:5f:3a: 5b:7a:47:61:8d:96:af:b0:99:e7:e5:83:0b:3a:67: 90:8e:8c:5b:7b:8e:9d:ac:b0:97:e1:71:7a:3d:cf: f1:a8:47:ec:cb:4d:87:66:c4:97:4f:bd:fa:75:67: f0:18:a0:2b:bd:47:91:2e:91:5c:9d:80:fd:a5:09: bd:e7:41:25:7e:2e:ba:07:34:cb:46:d6:36:bc:ac: 31:65:91:f7:8d:a9:aa:61:10:a4:92:06:9b:eb:a9: 5d:07:48:1b:a7:82:49:5e:08:fc:54:59:51:f8:f0: c3:69:fd:e4:e5:37:a6:3b:7e:cf:c8:9a:1d:8d:a7: 36:da:23:9c:63:60:56:69:91:69:e1:4e:2c:f5:be: 29:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A1:64:BB:28:45:04:3E:95:31:95:55:2E:52:D6:60:53:1E:73:64 X509v3 Authority Key Identifier: keyid:77:A7:5C:4E:27:B9:10:81:B8:30:1E:7A:7C:4F:D9:03:E0:26:18:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6dcTie5EIG4MB56fE_ZA-AmGGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/257314-29a7-4f12-9e7a-5776f83afc9b/1/d6dcTie5EIG4MB56fE_ZA-AmGGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:a6:cd:b0:18:09:87:65:30:71:e4:1b:85:78:10:24:47:7d: 92:93:68:97:40:14:ef:04:e1:10:54:0a:be:c8:3a:f5:2d:b7: 11:49:d1:36:61:f6:2c:34:3b:d8:27:9e:7a:3f:06:05:23:5f: 8a:c5:d4:1f:aa:42:27:14:ae:36:05:ce:91:d2:45:96:43:e3: e4:00:d3:5f:39:36:2f:f0:88:48:d0:29:b4:42:32:43:33:0e: 39:34:85:83:a7:ad:de:16:db:ab:cd:d3:51:b9:05:b6:59:49: f2:17:74:4d:71:12:e9:2d:57:05:a2:6c:b9:5d:31:3f:76:4d: fd:1d:60:92:44:8c:e9:ac:d4:97:ba:73:65:c5:ff:32:e8:d7: c5:26:86:be:91:12:3a:d1:46:f1:ae:ef:44:fb:e3:dd:4c:c1: 3e:9a:aa:cf:bb:db:c4:bd:ec:89:b7:e2:66:c4:78:26:9b:02: 18:5d:07:af:cc:6f:a2:ca:0a:1f:ab:f9:a5:66:81:5e:df:34: 3c:e6:14:fe:a0:2a:4b:97:a2:72:df:04:d6:d6:52:9a:e1:f5: 73:ff:af:f0:c2:cd:15:2b:23:f1:4c:bb:74:3c:5d:66:28:0a: 4b:ee:17:78:e1:9a:52:37:dd:e9:2b:da:6e:6b:00:86:90:e6: 2e:3d:3c:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fiTwALgMRZF9PMN2ImLpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YTc1YzRlMjdiOTEwODFiODMwMWU3YTdjNGZkOTAzZTAy NjE4NjIwHhcNMjUxMjIwMTYwMDU4WhcNMjUxMjIxMTYwMDU4WjAzMTEwLwYDVQQD EyhlYWExNjRiYjI4NDUwNDNlOTUzMTk1NTUyZTUyZDY2MDUzMWU3MzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmidZg8LkU9CJC+hxapZyk3gcozTr p4g+5KrmjHvPa2LygTrrDMKhasHGfvrgPPCewLmtg90j/+ndVlh59SfDgPvDV4aW C02HgpUsV+qfdPidgNiBQG3EATVJheWgWKd9bmb12gcV3crO9Er1DYXN7faGV/nV XzpbekdhjZavsJnn5YMLOmeQjoxbe46drLCX4XF6Pc/xqEfsy02HZsSXT736dWfw GKArvUeRLpFcnYD9pQm950Elfi66BzTLRtY2vKwxZZH3jamqYRCkkgab66ldB0gb p4JJXgj8VFlR+PDDaf3k5TemO37PyJodjac22iOcY2BWaZFp4U4s9b4paQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqhZLsoRQQ+lTGVVS5S1mBTHnNkMB8GA1UdIwQY MBaAFHenXE4nuRCBuDAeenxP2QPgJhhiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDZkY1RpZTVFSUc0TUI1NmZFX1pBLUFtR0dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yNTczMTQtMjlhNy00ZjEyLTllN2Et NTc3NmY4M2FmYzliLzEvZDZkY1RpZTVFSUc0TUI1NmZFX1pBLUFtR0dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8yNTczMTQtMjlhNy00ZjEyLTllN2EtNTc3NmY4M2FmYzli LzEvZDZkY1RpZTVFSUc0TUI1NmZFX1pBLUFtR0dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIabNsBgJ h2UwceQbhXgQJEd9kpNol0AU7wThEFQKvsg69S23EUnRNmH2LDQ72Ceeej8GBSNf isXUH6pCJxSuNgXOkdJFlkPj5ADTXzk2L/CISNAptEIyQzMOOTSFg6et3hbbq83T UbkFtllJ8hd0TXES6S1XBaJsuV0xP3ZN/R1gkkSM6azUl7pzZcX/MujXxSaGvpES OtFG8a7vRPvj3UzBPpqqz7vbxL3sibfiZsR4JpsCGF0Hr8xvosoKH6v5pWaBXt80 POYU/qAqS5eict8E1tZSmuH1c/+v8MLNFSsj8Uy7dDxdZigKS+4XeOGaUjfd6Sva bmsAhpDmLj08xQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:18:50 2025 by rpki-client