This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft File: dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft (raw, json) Hash identifier: JLddSc+Qa2HR/On8uSxw9tJVrExXYRv6mJZ57eEQVJ0= Subject key identifier: 32:06:C8:DE:B5:F4:41:29:64:6B:CC:38:BB:EC:22:91:E4:59:B7:DC Authority key identifier: 75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63 Certificate issuer: /CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63 Certificate serial: 019B3E6D422912B73C33DC42BE5A19B1069F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 01:01:46 +0000 Manifest this update: Sun 21 Dec 2025 01:01:46 +0000 Manifest next update: Mon 22 Dec 2025 01:01:46 +0000 Files and hashes: 1: 8lBoSilDtW0ItY1m1FNkzFR9g7g.roa (hash: eMaeIeeNpB0IKHLHfs7pADlpK9Gp8r9cF63rKmEO7/4=) 2: dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl (hash: hg+NVQcIIIgG4ZOd5bodGiZp+2QeMVghXeTMTumi5e0=) 3: vijarIUYgiNYSjUBEIP4lkhLgNI.roa (hash: 2GV5AIMYaF2M+jJbsLpgLW6R69LfUwGZ1/GjUEqVegk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 01:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:42:29:12:b7:3c:33:dc:42:be:5a:19:b1:06:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63 Validity Not Before: Dec 21 01:01:46 2025 GMT Not After : Dec 22 01:01:46 2025 GMT Subject: CN=3206c8deb5f44129646bcc38bbec2291e459b7dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b9:6d:f6:43:9b:14:89:de:34:c6:fd:af:46: 10:1a:3d:ce:ed:7f:8c:c1:bc:e7:82:8b:c3:e5:ed: 04:8d:e6:15:2c:22:bb:86:11:92:e0:74:83:05:c9: 87:ef:e2:e4:09:19:2e:99:54:88:98:bc:50:42:48: 19:52:b1:18:9a:05:e5:6b:44:9b:0c:39:df:f3:61: 13:a4:d2:42:dc:ef:da:52:ed:98:f7:25:e3:8e:3c: 29:de:1c:1b:34:0c:c3:76:c1:02:25:9a:f7:6e:2e: de:64:78:e0:75:66:60:df:bd:bb:aa:77:96:a5:09: ec:ee:43:26:1c:c2:59:ad:8a:09:09:d8:9b:f2:ed: c6:d3:af:a7:13:9e:73:dd:da:57:20:b0:5a:89:e9: f5:de:c8:fc:d5:d5:12:f0:0f:12:15:0a:ad:38:31: 23:eb:21:5a:f7:84:46:3d:f7:f1:16:a6:6a:a5:01: e2:ee:60:37:8f:d6:d8:7c:12:ea:53:dc:e3:e3:cf: 6d:69:c4:04:70:2f:03:08:64:99:14:c5:e6:b2:39: ca:88:4b:88:a4:84:38:fa:72:46:5c:08:e7:df:f0: 08:e1:3b:99:84:60:8b:e7:94:03:f2:87:f6:46:1f: 6b:9f:ef:b8:56:4b:26:86:a0:c6:b6:86:ff:80:52: 82:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:06:C8:DE:B5:F4:41:29:64:6B:CC:38:BB:EC:22:91:E4:59:B7:DC X509v3 Authority Key Identifier: keyid:75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:7e:3c:f5:79:d3:b8:c2:d8:52:88:c9:23:1f:08:5d:7c:58: 92:c1:26:2c:79:67:be:32:d6:f1:24:eb:db:f9:86:54:38:97: 72:51:84:48:43:bc:79:2e:25:26:66:1f:2f:87:7e:cd:2c:e8: 99:0d:9b:96:bd:b5:e6:f4:ce:e2:fa:91:b3:e9:b9:e5:d2:f3: e5:db:63:2a:42:18:45:3e:58:d3:2b:7d:63:41:cd:8a:f2:33: ab:05:1d:ac:e7:eb:20:0d:9c:4e:4e:0e:67:bd:6c:d8:5f:5b: 9a:d5:a9:09:8e:07:f7:bc:ed:ee:4f:68:d6:8f:91:74:42:9d: c8:4f:41:10:a8:4a:8c:cf:30:24:9c:c1:7e:ee:a0:9a:c3:d1: 5c:69:f8:19:71:25:eb:6c:81:b7:02:22:0b:ec:2f:73:f6:8a: a0:05:fb:e4:d5:8a:25:28:22:2d:cd:b0:e6:93:c6:09:45:4c: 84:1f:b3:df:6d:27:29:c1:3b:df:9e:26:c7:ac:82:1c:e8:53: fa:54:5e:d5:e5:82:65:a9:47:08:78:f3:5e:47:59:f9:49:4e: ae:98:ce:ad:76:f8:70:3c:7d:15:06:75:ac:1a:11:45:4b:6f: 20:fb:88:a9:c9:ab:6e:30:c8:85:d6:b5:c9:06:2f:7b:20:ce: 24:4b:59:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bUIpErc8M9xCvloZsQafMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1OWQ2YWZiOGRkZjhmOGMwZGQ2NjA3OTBlZGNiYTFmM2Iz NzBjNjMwHhcNMjUxMjIxMDEwMTQ2WhcNMjUxMjIyMDEwMTQ2WjAzMTEwLwYDVQQD EygzMjA2YzhkZWI1ZjQ0MTI5NjQ2YmNjMzhiYmVjMjI5MWU0NTliN2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsblt9kObFIneNMb9r0YQGj3O7X+M wbzngovD5e0EjeYVLCK7hhGS4HSDBcmH7+LkCRkumVSImLxQQkgZUrEYmgXla0Sb DDnf82ETpNJC3O/aUu2Y9yXjjjwp3hwbNAzDdsECJZr3bi7eZHjgdWZg3727qneW pQns7kMmHMJZrYoJCdib8u3G06+nE55z3dpXILBaien13sj81dUS8A8SFQqtODEj 6yFa94RGPffxFqZqpQHi7mA3j9bYfBLqU9zj489tacQEcC8DCGSZFMXmsjnKiEuI pIQ4+nJGXAjn3/AI4TuZhGCL55QD8of2Rh9rn++4VksmhqDGtob/gFKChwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIGyN619EEpZGvMOLvsIpHkWbfcMB8GA1UdIwQY MBaAFHWdavuN34+MDdZgeQ7cuh87NwxjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFoxcS00M2ZqNHdOMW1CNUR0eTZIenMzREdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xNmI3ZjQtZmExNS00N2E2LTlmYzUt MjU0YmNiY2VjMDM3LzEvZFoxcS00M2ZqNHdOMW1CNUR0eTZIenMzREdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xNmI3ZjQtZmExNS00N2E2LTlmYzUtMjU0YmNiY2VjMDM3 LzEvZFoxcS00M2ZqNHdOMW1CNUR0eTZIenMzREdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW3489XnT uMLYUojJIx8IXXxYksEmLHlnvjLW8STr2/mGVDiXclGESEO8eS4lJmYfL4d+zSzo mQ2blr215vTO4vqRs+m55dLz5dtjKkIYRT5Y0yt9Y0HNivIzqwUdrOfrIA2cTk4O Z71s2F9bmtWpCY4H97zt7k9o1o+RdEKdyE9BEKhKjM8wJJzBfu6gmsPRXGn4GXEl 62yBtwIiC+wvc/aKoAX75NWKJSgiLc2w5pPGCUVMhB+z320nKcE7354mx6yCHOhT +lRe1eWCZalHCHjzXkdZ+UlOrpjOrXb4cDx9FQZ1rBoRRUtvIPuIqcmrbjDIhda1 yQYveyDOJEtZVA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:44:40 2025 by rpki-client