This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft File: dzvnzzJSpol11eIkWJjAPE-2Ddo.mft (raw, json) Hash identifier: YIdI9wSOzSblrO8SX4NJnUmywDdXXZD9IUCT8L4HNHk= Subject key identifier: 2D:2A:28:9D:A9:DE:F0:3B:F9:F8:A3:AB:B4:8F:4A:30:42:DE:5C:48 Authority key identifier: 77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA Certificate issuer: /CN=773be7cf3252a68975d5e2245898c03c4fb60dda Certificate serial: 019B77804B19FB124668D5A9043CAFE32404 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft Manifest number: 17A7 Signing time: Thu 01 Jan 2026 03:00:54 +0000 Manifest this update: Thu 01 Jan 2026 03:00:54 +0000 Manifest next update: Fri 02 Jan 2026 03:00:54 +0000 Files and hashes: 1: _ImNSv6eqpMmc8LhLdIjg50bCa8.roa (hash: 5CDnviEmi+ap5BPLLzbSLbS6bZVBFFpeZ3xoO+CFdbk=) 2: dzvnzzJSpol11eIkWJjAPE-2Ddo.crl (hash: 4mbvuO5x1jiw51UNNjyLqRqmnfCOJFV7Wfek5uCF+YI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:80:4b:19:fb:12:46:68:d5:a9:04:3c:af:e3:24:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=773be7cf3252a68975d5e2245898c03c4fb60dda Validity Not Before: Jan 1 03:00:54 2026 GMT Not After : Jan 2 03:00:54 2026 GMT Subject: CN=2d2a289da9def03bf9f8a3abb48f4a3042de5c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fe:6c:d8:09:b9:79:4e:44:8d:6a:cb:e1:25: 69:0f:29:39:ec:3a:e5:54:a9:ff:28:a8:56:57:8e: b2:eb:05:ff:75:c2:02:8d:9c:fe:ec:ff:0a:34:d2: 01:04:94:6d:4e:2f:71:ca:30:d9:80:f9:51:e6:e1: f4:02:f7:52:2c:ba:0e:31:24:d5:2c:db:0c:9b:6c: f0:ac:d7:7d:cf:cc:27:21:f1:48:ff:04:2b:02:ea: c8:41:d7:e1:73:3b:32:48:9c:08:ff:c2:70:2b:9d: b3:54:6b:92:8b:da:84:2b:05:85:f2:5f:23:19:d4: 63:2d:c4:05:9f:b8:c0:6a:70:90:ab:18:56:69:95: 98:bc:87:84:cc:18:8c:96:68:3b:56:5e:e8:8d:ad: f8:10:61:65:59:34:ad:15:fd:f9:c0:03:dd:31:20: cc:c6:f6:cd:14:95:df:f5:e6:e2:5e:24:d1:41:66: bf:a9:46:7e:72:34:ef:42:a8:97:b9:89:89:3f:38: b2:e2:fa:e9:59:4f:02:98:e8:6b:ba:05:f7:2f:20: a6:c5:17:08:05:20:be:6a:96:60:bd:a5:da:6c:eb: f9:09:d8:29:f3:49:40:d2:df:ce:ba:52:44:98:db: a0:3b:2c:7f:70:d8:f5:09:b1:8b:2a:06:02:90:a4: f3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:2A:28:9D:A9:DE:F0:3B:F9:F8:A3:AB:B4:8F:4A:30:42:DE:5C:48 X509v3 Authority Key Identifier: keyid:77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:81:24:b4:00:a8:ba:5c:97:9a:cd:42:cd:13:0a:e2:17:85: 04:ab:2f:a6:3a:31:60:13:d9:58:a2:ff:52:22:1c:b2:31:49: 4e:89:56:48:3c:19:3e:40:48:78:25:d2:35:ad:b3:b0:e5:25: 28:87:88:58:80:e2:a1:e5:cc:ce:ef:57:a5:ca:00:a4:25:39: 93:c7:8b:06:9f:ba:60:87:de:c4:13:c1:75:cd:83:df:3a:c8: 3c:28:3d:34:05:a4:f8:89:73:dc:de:c6:67:b8:b2:09:44:db: 6e:92:f9:6f:2f:02:25:ef:ea:df:7b:dd:ce:31:69:e2:d5:fa: 90:d0:11:e9:53:c8:74:09:e0:ed:2f:52:5f:78:98:5c:e9:1e: b6:53:cd:62:3f:c4:6b:56:b4:47:0b:3b:e8:c6:8b:d9:e7:d1: 6a:f1:45:b1:8d:69:ce:7c:ad:6a:ac:51:01:62:08:a5:44:76: ef:27:6d:d8:08:41:52:1c:6e:d7:e2:74:fa:c2:76:2f:86:a7: 75:a2:5e:0b:40:d2:18:0d:01:78:16:4c:6b:06:05:e8:6f:56: 42:95:d6:15:41:be:4f:9c:f0:10:1c:08:3b:82:7e:b2:fa:32: 6e:de:97:0a:6a:f8:34:bf:de:e5:26:7b:ca:39:67:ba:38:86: 0d:be:ee:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3gEsZ+xJGaNWpBDyv4yQEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3M2JlN2NmMzI1MmE2ODk3NWQ1ZTIyNDU4OThjMDNjNGZi NjBkZGEwHhcNMjYwMTAxMDMwMDU0WhcNMjYwMTAyMDMwMDU0WjAzMTEwLwYDVQQD EygyZDJhMjg5ZGE5ZGVmMDNiZjlmOGEzYWJiNDhmNGEzMDQyZGU1YzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/5s2Am5eU5EjWrL4SVpDyk57Drl VKn/KKhWV46y6wX/dcICjZz+7P8KNNIBBJRtTi9xyjDZgPlR5uH0AvdSLLoOMSTV LNsMm2zwrNd9z8wnIfFI/wQrAurIQdfhczsySJwI/8JwK52zVGuSi9qEKwWF8l8j GdRjLcQFn7jAanCQqxhWaZWYvIeEzBiMlmg7Vl7oja34EGFlWTStFf35wAPdMSDM xvbNFJXf9ebiXiTRQWa/qUZ+cjTvQqiXuYmJPziy4vrpWU8CmOhrugX3LyCmxRcI BSC+apZgvaXabOv5Cdgp80lA0t/OulJEmNugOyx/cNj1CbGLKgYCkKTzYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0qKJ2p3vA7+fijq7SPSjBC3lxIMB8GA1UdIwQY MBaAFHc7588yUqaJddXiJFiYwDxPtg3aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHp2bnp6SlNwb2wxMWVJa1dKakFQRS0yRGRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jYmEwZDMtNTk0NC00NzQ3LTg4MzUt YmVkMDU2N2VmYTZiLzEvZHp2bnp6SlNwb2wxMWVJa1dKakFQRS0yRGRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9jYmEwZDMtNTk0NC00NzQ3LTg4MzUtYmVkMDU2N2VmYTZi LzEvZHp2bnp6SlNwb2wxMWVJa1dKakFQRS0yRGRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl4EktACo ulyXms1CzRMK4heFBKsvpjoxYBPZWKL/UiIcsjFJTolWSDwZPkBIeCXSNa2zsOUl KIeIWIDioeXMzu9XpcoApCU5k8eLBp+6YIfexBPBdc2D3zrIPCg9NAWk+Ilz3N7G Z7iyCUTbbpL5by8CJe/q33vdzjFp4tX6kNAR6VPIdAng7S9SX3iYXOketlPNYj/E a1a0Rws76MaL2efRavFFsY1pznytaqxRAWIIpUR27ydt2AhBUhxu1+J0+sJ2L4an daJeC0DSGA0BeBZMawYF6G9WQpXWFUG+T5zwEBwIO4J+svoybt6XCmr4NL/e5SZ7 yjlnujiGDb7umQ== -----END CERTIFICATE-----Generated at Thu Jan 1 08:45:56 2026 by rpki-client