This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft File: dxPzWC9jkBMFUwtLGTbNbmYRowo.mft (raw, json) Hash identifier: uojSOdS4toaMkY9sw7RzZKRqMSORpbZuvRKb5MH55H0= Subject key identifier: C7:9B:B0:C6:8A:1A:F3:B1:83:3F:20:1F:1F:4B:A0:B3:9E:AD:13:EE Authority key identifier: 77:13:F3:58:2F:63:90:13:05:53:0B:4B:19:36:CD:6E:66:11:A3:0A Certificate issuer: /CN=7713f3582f63901305530b4b1936cd6e6611a30a Certificate serial: 019B2F6774B1153C21857E57C1E52E43AD0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft Manifest number: 0582 Signing time: Thu 18 Dec 2025 03:01:07 +0000 Manifest this update: Thu 18 Dec 2025 03:01:07 +0000 Manifest next update: Fri 19 Dec 2025 03:01:07 +0000 Files and hashes: 1: QBpayCeedHorPlMUrxP80cZpQMk.roa (hash: OQ5xE2z8NMteCC4WWbezxTDqjx0MzAo+K4Av2s6co/8=) 2: dxPzWC9jkBMFUwtLGTbNbmYRowo.crl (hash: c8IRMkqorMS+w2I4WSz1XXf/9ELJmTeCn7tIl34wHRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:74:b1:15:3c:21:85:7e:57:c1:e5:2e:43:ad:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7713f3582f63901305530b4b1936cd6e6611a30a Validity Not Before: Dec 18 03:01:07 2025 GMT Not After : Dec 19 03:01:07 2025 GMT Subject: CN=c79bb0c68a1af3b1833f201f1f4ba0b39ead13ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:97:32:cb:9e:c0:8f:d9:e3:26:1a:ef:12:b7: 23:54:71:43:99:0a:14:fc:11:81:5d:8b:5a:6c:4d: 0d:86:58:bd:10:e1:e7:9a:8a:03:36:da:01:2b:b4: 5c:63:a6:98:81:7f:bc:f5:a6:9f:b4:a3:d2:61:95: b1:33:1a:6e:9d:e1:64:a3:b2:4c:80:73:5a:55:af: 8f:4b:b6:ac:0d:7d:a3:95:9c:d8:3e:3b:69:a0:d5: 7f:f9:c2:2d:dc:eb:ab:89:2d:60:4a:af:c5:91:31: 1c:b8:19:c4:63:92:b0:54:34:66:8a:dc:c5:2c:8c: ba:9d:d5:3f:da:2b:d4:e7:a5:fa:04:8a:8a:5a:50: b1:ed:11:c6:06:35:c4:ee:3c:6a:b0:59:0f:8c:8f: 97:44:38:fc:04:8b:b8:31:6b:19:fb:c9:bf:17:ab: 63:33:c5:ea:bd:c9:d5:d7:19:89:c4:bb:6b:f3:81: c0:05:03:0d:a9:25:36:be:30:85:d0:5b:53:0a:25: 63:7c:95:06:08:f5:93:24:82:5c:31:fd:9f:84:c9: 69:f7:a2:e8:dc:51:0a:eb:ef:3d:4b:9e:96:58:6a: ce:27:4f:e0:7c:60:0f:e4:0b:ba:e9:32:7b:64:e8: 6d:b9:b1:85:e0:ed:1a:b9:ea:fd:18:67:6a:db:a6: 23:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9B:B0:C6:8A:1A:F3:B1:83:3F:20:1F:1F:4B:A0:B3:9E:AD:13:EE X509v3 Authority Key Identifier: keyid:77:13:F3:58:2F:63:90:13:05:53:0B:4B:19:36:CD:6E:66:11:A3:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:b9:9c:13:b0:2c:df:44:e3:9a:51:94:ae:9f:8a:87:03:fb: ca:40:18:d0:79:33:1d:28:d8:6b:b8:ad:21:19:f5:a3:ea:4e: 9a:6a:cd:9f:a3:2c:52:06:1c:f4:77:85:3b:d6:25:aa:17:24: 04:5a:28:68:39:b9:8b:d8:cd:95:cd:6f:06:e8:4a:80:a3:99: f9:c3:4a:38:27:bc:ea:fb:05:cc:8d:c9:53:25:03:b6:1a:20: 57:57:32:a5:b6:ed:01:bf:fc:60:9f:68:fd:31:29:2a:20:4c: ad:db:7f:98:d1:90:b6:a4:33:2a:ac:4c:ed:0a:44:b6:9c:57: 78:1d:e4:03:f3:f5:76:2a:0d:7f:07:e9:62:cb:d0:4b:fd:cc: c8:78:20:f9:14:f5:32:2f:9a:78:95:c7:b7:af:7e:c4:70:2e: 4d:ee:69:89:21:5e:22:97:a5:54:ee:61:9a:e8:2b:dc:97:91: 02:25:a8:9c:d7:bb:c9:c2:66:2a:1c:44:14:17:ab:02:0d:5d: 12:07:0a:a8:97:53:ce:b7:d2:f2:f2:e0:18:53:18:30:3a:ef: 17:fd:81:7a:71:cb:2c:a1:33:18:e9:3a:88:41:de:6f:03:5e: 87:28:13:8a:42:1e:94:94:6c:d6:c8:48:1a:04:61:36:1d:19: 48:1d:8c:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ3SxFTwhhX5XweUuQ60KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MTNmMzU4MmY2MzkwMTMwNTUzMGI0YjE5MzZjZDZlNjYx MWEzMGEwHhcNMjUxMjE4MDMwMTA3WhcNMjUxMjE5MDMwMTA3WjAzMTEwLwYDVQQD EyhjNzliYjBjNjhhMWFmM2IxODMzZjIwMWYxZjRiYTBiMzllYWQxM2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5cyy57Aj9njJhrvErcjVHFDmQoU /BGBXYtabE0Nhli9EOHnmooDNtoBK7RcY6aYgX+89aaftKPSYZWxMxpuneFko7JM gHNaVa+PS7asDX2jlZzYPjtpoNV/+cIt3OuriS1gSq/FkTEcuBnEY5KwVDRmitzF LIy6ndU/2ivU56X6BIqKWlCx7RHGBjXE7jxqsFkPjI+XRDj8BIu4MWsZ+8m/F6tj M8XqvcnV1xmJxLtr84HABQMNqSU2vjCF0FtTCiVjfJUGCPWTJIJcMf2fhMlp96Lo 3FEK6+89S56WWGrOJ0/gfGAP5Au66TJ7ZOhtubGF4O0auer9GGdq26Yj9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMebsMaKGvOxgz8gHx9LoLOerRPuMB8GA1UdIwQY MBaAFHcT81gvY5ATBVMLSxk2zW5mEaMKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHhQeldDOWprQk1GVXd0TEdUYk5ibVlSb3dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mNGQ3NmUtMzRhMS00ZDBhLWI5YmQt MTg5ZDUzYWU0ZTNlLzEvZHhQeldDOWprQk1GVXd0TEdUYk5ibVlSb3dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9mNGQ3NmUtMzRhMS00ZDBhLWI5YmQtMTg5ZDUzYWU0ZTNl LzEvZHhQeldDOWprQk1GVXd0TEdUYk5ibVlSb3dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAybmcE7As 30TjmlGUrp+KhwP7ykAY0HkzHSjYa7itIRn1o+pOmmrNn6MsUgYc9HeFO9Ylqhck BFooaDm5i9jNlc1vBuhKgKOZ+cNKOCe86vsFzI3JUyUDthogV1cypbbtAb/8YJ9o /TEpKiBMrdt/mNGQtqQzKqxM7QpEtpxXeB3kA/P1dioNfwfpYsvQS/3MyHgg+RT1 Mi+aeJXHt69+xHAuTe5piSFeIpelVO5hmugr3JeRAiWonNe7ycJmKhxEFBerAg1d EgcKqJdTzrfS8vLgGFMYMDrvF/2BenHLLKEzGOk6iEHebwNehygTikIelJRs1shI GgRhNh0ZSB2Mhg== -----END CERTIFICATE-----Generated at Thu Dec 18 10:26:48 2025 by rpki-client