This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft File: dxPzWC9jkBMFUwtLGTbNbmYRowo.mft (raw, json) Hash identifier: C4Oq1us2c8sljSXr9gpwVFVU3xtSZ+vZ0wlUnKfrwkg= Subject key identifier: BB:08:0C:BF:49:34:C9:F2:42:9C:FA:BB:C9:FC:9D:E2:5F:C5:BF:CC Authority key identifier: 77:13:F3:58:2F:63:90:13:05:53:0B:4B:19:36:CD:6E:66:11:A3:0A Certificate issuer: /CN=7713f3582f63901305530b4b1936cd6e6611a30a Certificate serial: 019B2D7916041E4070E0FA374F26A5357789 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft Manifest number: 0581 Signing time: Wed 17 Dec 2025 18:01:08 +0000 Manifest this update: Wed 17 Dec 2025 18:01:08 +0000 Manifest next update: Thu 18 Dec 2025 18:01:08 +0000 Files and hashes: 1: QBpayCeedHorPlMUrxP80cZpQMk.roa (hash: OQ5xE2z8NMteCC4WWbezxTDqjx0MzAo+K4Av2s6co/8=) 2: dxPzWC9jkBMFUwtLGTbNbmYRowo.crl (hash: ZcUN8W/OP1Liw0a2zbqFTpUuZejwehQVFQcIUpBbQLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 18:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:79:16:04:1e:40:70:e0:fa:37:4f:26:a5:35:77:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7713f3582f63901305530b4b1936cd6e6611a30a Validity Not Before: Dec 17 18:01:08 2025 GMT Not After : Dec 18 18:01:08 2025 GMT Subject: CN=bb080cbf4934c9f2429cfabbc9fc9de25fc5bfcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b6:20:db:cc:a0:67:7e:77:81:14:f1:55:fd: 21:8e:53:2a:cc:29:1a:7f:bd:e4:61:e6:ac:64:d6: 64:f1:4a:d1:d6:50:b3:88:b7:24:38:d2:f2:11:db: e5:e3:ad:63:61:29:5b:32:e6:b0:d1:83:dd:d3:a4: bf:77:ac:59:ed:41:0d:7d:49:57:5d:34:6e:f5:bb: 7a:3c:12:b6:74:6d:e5:fc:88:f5:c8:83:1b:32:4d: 99:ad:2d:7f:a7:c5:0f:6e:2a:4c:de:88:96:34:ce: c2:ab:89:9b:f5:33:39:58:cd:55:da:31:bc:20:28: 99:41:f5:81:3f:85:13:de:8f:ba:a4:f7:f2:d7:de: 2e:35:b2:ac:cb:e6:94:86:dc:90:f9:98:cc:7b:8f: 43:b6:a7:a9:56:a7:11:6d:8b:45:36:4c:00:18:69: 02:82:e6:72:2b:1f:86:5f:de:1f:22:58:17:f0:53: ba:5b:b1:0c:7a:e5:3c:3b:dc:97:3d:80:30:df:5f: b7:b9:e3:d6:0e:9a:2f:a7:6d:d7:0c:33:2c:73:08: 84:c9:91:f8:70:bb:4f:1a:f9:6d:e9:89:96:e3:e6: 0b:5d:7e:40:b6:05:01:e9:fd:11:4d:46:9f:43:20: 0b:38:35:c2:df:f5:3f:a5:4f:e0:33:5b:8d:f6:91: 24:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:08:0C:BF:49:34:C9:F2:42:9C:FA:BB:C9:FC:9D:E2:5F:C5:BF:CC X509v3 Authority Key Identifier: keyid:77:13:F3:58:2F:63:90:13:05:53:0B:4B:19:36:CD:6E:66:11:A3:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:0c:b0:0c:c7:e5:44:be:e4:98:0e:12:01:94:e7:37:23:de: 83:ae:85:51:9e:3f:c9:c8:f0:76:54:8d:c4:18:2e:46:b8:86: df:b9:51:2b:ce:cd:f5:31:dd:c1:6f:73:0f:47:7a:17:df:cb: 67:67:01:c0:82:a0:a8:e8:f1:dd:54:54:89:43:c8:9a:ff:77: f0:08:ff:9c:7f:36:59:fa:0f:37:86:26:6d:8f:d2:e1:59:d4: 2d:db:fd:3d:38:80:a3:f3:5a:9c:d9:ea:bc:fa:4a:95:21:d4: 6b:25:40:27:f5:ab:7e:1b:da:1e:81:bb:cc:ed:54:20:5a:10: ba:06:c8:e6:d6:a0:32:48:ae:06:79:35:a0:df:7b:20:d9:15: f5:48:bf:18:62:99:49:ca:c7:26:30:74:88:3f:dc:9a:00:be: b7:0e:95:04:d3:bd:08:84:e4:cd:04:b0:d3:7c:62:f0:45:e9: b2:72:03:64:ac:f1:94:30:fc:17:fb:0b:67:33:cd:d0:86:19: 0b:ff:db:e5:76:bf:5f:df:89:ea:14:32:96:a2:c9:85:4e:65: ca:b4:75:ec:8f:60:66:4b:bf:e2:8f:e3:bf:11:36:56:59:fb: 65:3f:73:f6:37:d1:07:dd:c8:ab:95:d8:15:9d:cc:42:74:dc: 36:2e:ba:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteRYEHkBw4Po3TyalNXeJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MTNmMzU4MmY2MzkwMTMwNTUzMGI0YjE5MzZjZDZlNjYx MWEzMGEwHhcNMjUxMjE3MTgwMTA4WhcNMjUxMjE4MTgwMTA4WjAzMTEwLwYDVQQD EyhiYjA4MGNiZjQ5MzRjOWYyNDI5Y2ZhYmJjOWZjOWRlMjVmYzViZmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbYg28ygZ353gRTxVf0hjlMqzCka f73kYeasZNZk8UrR1lCziLckONLyEdvl461jYSlbMuaw0YPd06S/d6xZ7UENfUlX XTRu9bt6PBK2dG3l/Ij1yIMbMk2ZrS1/p8UPbipM3oiWNM7Cq4mb9TM5WM1V2jG8 ICiZQfWBP4UT3o+6pPfy194uNbKsy+aUhtyQ+ZjMe49DtqepVqcRbYtFNkwAGGkC guZyKx+GX94fIlgX8FO6W7EMeuU8O9yXPYAw31+3uePWDpovp23XDDMscwiEyZH4 cLtPGvlt6YmW4+YLXX5AtgUB6f0RTUafQyALODXC3/U/pU/gM1uN9pEkWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsIDL9JNMnyQpz6u8n8neJfxb/MMB8GA1UdIwQY MBaAFHcT81gvY5ATBVMLSxk2zW5mEaMKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHhQeldDOWprQk1GVXd0TEdUYk5ibVlSb3dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mNGQ3NmUtMzRhMS00ZDBhLWI5YmQt MTg5ZDUzYWU0ZTNlLzEvZHhQeldDOWprQk1GVXd0TEdUYk5ibVlSb3dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9mNGQ3NmUtMzRhMS00ZDBhLWI5YmQtMTg5ZDUzYWU0ZTNl LzEvZHhQeldDOWprQk1GVXd0TEdUYk5ibVlSb3dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewywDMfl RL7kmA4SAZTnNyPeg66FUZ4/ycjwdlSNxBguRriG37lRK87N9THdwW9zD0d6F9/L Z2cBwIKgqOjx3VRUiUPImv938Aj/nH82WfoPN4YmbY/S4VnULdv9PTiAo/NanNnq vPpKlSHUayVAJ/WrfhvaHoG7zO1UIFoQugbI5tagMkiuBnk1oN97INkV9Ui/GGKZ ScrHJjB0iD/cmgC+tw6VBNO9CITkzQSw03xi8EXpsnIDZKzxlDD8F/sLZzPN0IYZ C//b5Xa/X9+J6hQylqLJhU5lyrR17I9gZku/4o/jvxE2Vln7ZT9z9jfRB93Iq5XY FZ3MQnTcNi66/Q== -----END CERTIFICATE-----Generated at Wed Dec 17 20:48:55 2025 by rpki-client