This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft File: dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft (raw, json) Hash identifier: jrrHInnCZfWsQGpwkVNMPaDAleAV6JOWSz8TwVtVg4U= Subject key identifier: AD:FD:E5:A1:83:44:40:47:A2:88:D9:8F:76:8C:C7:58:D8:43:03:BA Authority key identifier: 75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69 Certificate issuer: /CN=759d27ce072ca336d3afaab8879f94ec63455669 Certificate serial: 019B53AB7EAF6AFC987664F5E89FD48DAB3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft Manifest number: 0855 Signing time: Thu 25 Dec 2025 04:01:46 +0000 Manifest this update: Thu 25 Dec 2025 04:01:46 +0000 Manifest next update: Fri 26 Dec 2025 04:01:46 +0000 Files and hashes: 1: dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl (hash: 1+AMm2xUlTgPUmZ5YXne2Gw+dW5Vd3HnZNuz92TKkgI=) 2: mbPOWtU-NBbIGZZNzzLtOWcmxj8.roa (hash: qn4MOETPNEkOlTCM8W+7rEv5tZsC1gxAMBahRUzoOCw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:7e:af:6a:fc:98:76:64:f5:e8:9f:d4:8d:ab:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=759d27ce072ca336d3afaab8879f94ec63455669 Validity Not Before: Dec 25 04:01:46 2025 GMT Not After : Dec 26 04:01:46 2025 GMT Subject: CN=adfde5a183444047a288d98f768cc758d84303ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:eb:08:6d:11:de:1d:27:62:b3:1b:7e:da:71: af:fe:93:b3:3e:5c:f1:cf:6e:d2:a1:9a:a6:71:e3: df:f6:1e:c7:8b:14:4a:36:2e:27:61:74:52:87:f2: e2:09:2a:4d:5c:11:17:87:1a:87:58:83:d3:b0:66: f3:0e:1b:e6:a8:61:c2:fa:ab:ca:98:28:3c:33:56: fd:81:dc:94:e0:64:9f:19:f8:91:1c:12:e3:bb:1e: e4:61:7f:8b:90:d1:ca:8c:99:ec:5f:55:07:39:f2: 15:29:82:e2:37:7f:ee:47:bb:b4:b6:da:dc:f0:69: 9c:d3:86:dc:b8:4f:7d:27:44:8c:50:ee:88:4b:26: 8a:95:0c:d5:74:41:45:c3:c4:13:eb:11:55:ea:06: 77:c3:67:64:f2:6f:18:95:38:a2:e8:ac:00:2a:98: cd:42:07:1e:06:2a:21:45:33:8f:41:14:1a:d5:d0: 7a:0c:1b:23:e0:37:b5:23:10:72:ef:eb:46:6b:85: df:16:90:e5:d8:d5:5c:ff:06:66:66:f2:d5:b6:cf: 9b:7d:b6:92:2a:eb:a5:35:2b:ae:fc:3a:ac:49:7f: 70:b6:07:c6:6b:83:0e:f0:7c:02:85:03:c1:cc:ec: a8:4b:cf:6d:6a:30:c8:d7:ec:11:71:34:34:98:8d: 5f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FD:E5:A1:83:44:40:47:A2:88:D9:8F:76:8C:C7:58:D8:43:03:BA X509v3 Authority Key Identifier: keyid:75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e9:0a:2e:09:e6:5d:4a:4f:d6:c1:cc:4b:d1:1f:85:0d:44: 66:bd:2c:29:00:e9:c2:cf:41:ec:5a:57:40:58:b1:4e:d6:83: fb:3f:58:4e:43:0d:3b:67:70:3a:cc:99:08:3b:0f:47:a1:63: d1:52:fd:3d:a7:82:1e:cb:cb:e2:c0:8a:5c:77:96:f9:59:b7: 82:9d:bb:df:b9:16:86:e1:b3:df:26:68:b3:7d:d2:17:eb:fd: f5:12:50:10:44:99:2d:56:a0:a4:8a:9f:ad:f5:7d:a6:58:ae: ba:67:c8:20:b2:ed:1a:2a:9c:8e:e6:67:7a:d9:91:4a:b8:77: c4:70:95:de:4b:0d:e5:6b:d5:48:36:93:5e:01:04:6e:cc:b5: 80:53:a6:93:81:8b:5f:0f:7b:d3:18:85:02:bc:ba:07:3d:5f: b2:69:5f:d7:c5:51:b2:e4:5b:de:dc:dc:a9:18:57:39:ca:58: bf:f9:02:cf:6b:c3:9a:a9:78:dc:5b:cc:18:95:d3:08:16:7c: b2:1c:0f:e8:55:df:0a:27:23:fb:8b:7d:f1:20:70:d8:e7:76: 3f:01:94:49:1a:4a:2e:27:07:5e:f7:da:95:d7:2a:0f:29:ca: e5:43:2a:e6:13:7f:3f:d2:a2:53:a9:5f:76:3c:4d:e3:87:68: 90:50:9b:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq36vavyYdmT16J/Ujas/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1OWQyN2NlMDcyY2EzMzZkM2FmYWFiODg3OWY5NGVjNjM0 NTU2NjkwHhcNMjUxMjI1MDQwMTQ2WhcNMjUxMjI2MDQwMTQ2WjAzMTEwLwYDVQQD EyhhZGZkZTVhMTgzNDQ0MDQ3YTI4OGQ5OGY3NjhjYzc1OGQ4NDMwM2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3esIbRHeHSdisxt+2nGv/pOzPlzx z27SoZqmcePf9h7HixRKNi4nYXRSh/LiCSpNXBEXhxqHWIPTsGbzDhvmqGHC+qvK mCg8M1b9gdyU4GSfGfiRHBLjux7kYX+LkNHKjJnsX1UHOfIVKYLiN3/uR7u0ttrc 8Gmc04bcuE99J0SMUO6ISyaKlQzVdEFFw8QT6xFV6gZ3w2dk8m8YlTii6KwAKpjN QgceBiohRTOPQRQa1dB6DBsj4De1IxBy7+tGa4XfFpDl2NVc/wZmZvLVts+bfbaS KuulNSuu/DqsSX9wtgfGa4MO8HwChQPBzOyoS89tajDI1+wRcTQ0mI1fWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK395aGDREBHoojZj3aMx1jYQwO6MB8GA1UdIwQY MBaAFHWdJ84HLKM206+quIeflOxjRVZpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFowbnpnY3NvemJUcjZxNGg1LVU3R05GVm1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mMTdhMjctNDU5OS00NWI1LWE2NmUt NzAxMjNmNDk1MTEwLzEvZFowbnpnY3NvemJUcjZxNGg1LVU3R05GVm1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9mMTdhMjctNDU5OS00NWI1LWE2NmUtNzAxMjNmNDk1MTEw LzEvZFowbnpnY3NvemJUcjZxNGg1LVU3R05GVm1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbekKLgnm XUpP1sHMS9EfhQ1EZr0sKQDpws9B7FpXQFixTtaD+z9YTkMNO2dwOsyZCDsPR6Fj 0VL9PaeCHsvL4sCKXHeW+Vm3gp2737kWhuGz3yZos33SF+v99RJQEESZLVagpIqf rfV9pliuumfIILLtGiqcjuZnetmRSrh3xHCV3ksN5WvVSDaTXgEEbsy1gFOmk4GL Xw970xiFAry6Bz1fsmlf18VRsuRb3tzcqRhXOcpYv/kCz2vDmql43FvMGJXTCBZ8 shwP6FXfCicj+4t98SBw2Od2PwGUSRpKLicHXvfaldcqDynK5UMq5hN/P9KiU6lf djxN44dokFCbbg== -----END CERTIFICATE-----Generated at Thu Dec 25 07:02:53 2025 by rpki-client