This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft File: DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft (raw, json) Hash identifier: f94VX3VhCMUgN3Tz9d9xZlW6vSSgDkJ6HCdb0bm2Pa8= Subject key identifier: 2E:DD:5A:17:08:37:91:E5:65:51:A0:0F:A5:8A:8D:DF:50:E0:6C:14 Authority key identifier: 0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68 Certificate issuer: /CN=0f34477aa0f0123138c0472f5b3528e4d2193e68 Certificate serial: 019B304326BA3E9708819201A9CB4F306C3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 07:01:05 +0000 Manifest this update: Thu 18 Dec 2025 07:01:05 +0000 Manifest next update: Fri 19 Dec 2025 07:01:05 +0000 Files and hashes: 1: DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl (hash: xI15rSmZbagNRp6l/PnbKiyPmbPvPDag46UQ9Aebim0=) 2: oiZHTdtEDz6aP8WgUPcMGh6h5wQ.roa (hash: ewlicz9ndLYefeC/+lwNbWi0WIXINkEHOt0Ubc6GHQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:43:26:ba:3e:97:08:81:92:01:a9:cb:4f:30:6c:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f34477aa0f0123138c0472f5b3528e4d2193e68 Validity Not Before: Dec 18 07:01:05 2025 GMT Not After : Dec 19 07:01:05 2025 GMT Subject: CN=2edd5a17083791e56551a00fa58a8ddf50e06c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:70:30:5d:c0:ce:f2:70:b6:7c:ed:32:85:36: 82:1e:a2:e9:2c:3c:4e:2a:23:c2:dd:ef:6f:fc:db: 38:50:f7:21:3d:15:6a:5c:28:26:48:87:a0:bf:f0: 9d:75:68:cd:49:59:d8:0e:a3:82:e0:00:0c:42:63: cb:6b:8f:3b:39:f3:1c:0d:29:74:0b:ba:f2:02:53: 4c:ab:ec:02:77:5c:2f:73:01:53:11:cd:89:b5:c9: 10:9a:6e:6c:eb:9d:7c:25:a8:73:17:f2:cb:30:3a: fa:ee:2c:1b:45:bc:81:74:53:47:d6:84:fc:31:b2: 70:e3:c0:85:37:81:70:ae:c0:57:67:a0:87:27:fe: 90:85:d9:49:af:6a:b3:dc:82:57:61:8d:8b:e1:65: 13:02:1e:52:29:8d:77:74:84:68:3a:c2:85:87:df: 81:a2:8a:8f:c9:92:5a:ff:82:65:70:f1:26:84:3f: 2a:2d:7f:4a:1e:1e:80:aa:26:90:d2:ca:8a:bc:89: 0d:e4:65:7a:79:87:4f:62:32:64:68:d9:3e:41:28: 27:bc:8c:bc:fe:05:ec:90:ec:af:59:8e:94:6c:5f: 69:9c:cc:87:d5:9c:81:5e:f9:4c:81:26:a9:40:8f: c1:2f:ca:a9:cc:c9:52:f9:07:01:e9:fd:57:bc:8f: aa:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:DD:5A:17:08:37:91:E5:65:51:A0:0F:A5:8A:8D:DF:50:E0:6C:14 X509v3 Authority Key Identifier: keyid:0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ef:bf:51:97:f4:b4:ff:a2:bb:dc:1d:a9:d0:7c:60:a2:42: 40:e1:52:b9:ec:5d:1f:ba:f2:01:52:2a:07:5a:8a:74:21:2f: df:63:6c:b4:57:54:8d:bc:7b:a3:ba:2b:d6:40:21:93:d3:37: 96:7b:f0:a2:8f:9d:90:cb:86:ad:93:5a:64:26:6a:52:db:34: 44:27:f7:3e:44:11:52:fd:61:f1:8f:bc:91:4c:9a:1e:8f:88: f8:e3:b6:3b:d9:72:24:a8:a0:ab:2f:7e:4a:69:7a:bf:01:89: 81:b8:01:26:10:4e:3e:df:04:93:2c:1e:ea:07:6e:db:43:0d: dd:ed:01:db:ea:41:3d:2c:15:1b:53:48:14:0b:cf:6e:71:06: 4c:5c:05:e1:39:b5:06:35:49:31:47:f8:41:90:1b:c9:34:e1: 8e:e7:21:57:e2:47:cb:35:77:43:cc:a5:09:fc:6c:0c:ce:dd: bd:b3:21:55:54:01:9e:ae:08:bc:84:fe:4e:a1:b3:8c:ec:1c: ca:e0:53:00:97:64:46:bf:5d:82:e1:e8:02:74:e7:99:9b:58: d2:15:b8:15:be:fc:e9:61:0d:cf:e8:5a:d2:9d:b5:08:1d:c7: 36:f2:89:0a:59:39:cc:92:28:2e:9c:f4:09:14:36:f2:5e:5e: d9:19:68:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswQya6PpcIgZIBqctPMGw8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMzQ0NzdhYTBmMDEyMzEzOGMwNDcyZjViMzUyOGU0ZDIx OTNlNjgwHhcNMjUxMjE4MDcwMTA1WhcNMjUxMjE5MDcwMTA1WjAzMTEwLwYDVQQD EygyZWRkNWExNzA4Mzc5MWU1NjU1MWEwMGZhNThhOGRkZjUwZTA2YzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHAwXcDO8nC2fO0yhTaCHqLpLDxO KiPC3e9v/Ns4UPchPRVqXCgmSIegv/CddWjNSVnYDqOC4AAMQmPLa487OfMcDSl0 C7ryAlNMq+wCd1wvcwFTEc2JtckQmm5s6518JahzF/LLMDr67iwbRbyBdFNH1oT8 MbJw48CFN4FwrsBXZ6CHJ/6QhdlJr2qz3IJXYY2L4WUTAh5SKY13dIRoOsKFh9+B ooqPyZJa/4JlcPEmhD8qLX9KHh6AqiaQ0sqKvIkN5GV6eYdPYjJkaNk+QSgnvIy8 /gXskOyvWY6UbF9pnMyH1ZyBXvlMgSapQI/BL8qpzMlS+QcB6f1XvI+qBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7dWhcIN5HlZVGgD6WKjd9Q4GwUMB8GA1UdIwQY MBaAFA80R3qg8BIxOMBHL1s1KOTSGT5oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHpSSGVxRHdFakU0d0Vjdld6VW81TklaUG1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85ZDRiZWYtOGViZC00ZmRiLWFhZjAt ZTA5YmM0ZWFlMTg5LzEvRHpSSGVxRHdFakU0d0Vjdld6VW81TklaUG1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi85ZDRiZWYtOGViZC00ZmRiLWFhZjAtZTA5YmM0ZWFlMTg5 LzEvRHpSSGVxRHdFakU0d0Vjdld6VW81TklaUG1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi++/UZf0 tP+iu9wdqdB8YKJCQOFSuexdH7ryAVIqB1qKdCEv32NstFdUjbx7o7or1kAhk9M3 lnvwoo+dkMuGrZNaZCZqUts0RCf3PkQRUv1h8Y+8kUyaHo+I+OO2O9lyJKigqy9+ Sml6vwGJgbgBJhBOPt8Ekywe6gdu20MN3e0B2+pBPSwVG1NIFAvPbnEGTFwF4Tm1 BjVJMUf4QZAbyTThjuchV+JHyzV3Q8ylCfxsDM7dvbMhVVQBnq4IvIT+TqGzjOwc yuBTAJdkRr9dguHoAnTnmZtY0hW4Fb786WENz+ha0p21CB3HNvKJClk5zJIoLpz0 CRQ28l5e2RloFw== -----END CERTIFICATE-----Generated at Thu Dec 18 09:51:21 2025 by rpki-client