This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft File: dzR-Fo1pZYVFN05qC2jSS5f80AY.mft (raw, json) Hash identifier: JU+WEdQEsIH+j/6sMiPm9TQJhBvy+TWyHrAeLcsr93A= Subject key identifier: A0:03:B9:82:22:C5:6B:E2:96:02:AE:32:C7:50:C9:34:B7:BC:34:44 Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06 Certificate issuer: /CN=77347e168d69658545374e6a0b68d24b97fcd006 Certificate serial: 019B36B2C899FB9B89E209AC0AF7E8A37771 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft Manifest number: 08BD Signing time: Fri 19 Dec 2025 13:00:44 +0000 Manifest this update: Fri 19 Dec 2025 13:00:44 +0000 Manifest next update: Sat 20 Dec 2025 13:00:44 +0000 Files and hashes: 1: Dtmeeo2Ahqu20IUfCd65FxwTl2k.roa (hash: I+vjjlJcdrLb3KMRUhvwUitmKXx1JxbgC5EfsL3L6hI=) 2: MA5FazDAuWizu2sArINAiZDNSkk.roa (hash: RRjoWKPkJksBjTPCtL+V2nNMKG6oIx2+O6vH374Aw7I=) 3: dzR-Fo1pZYVFN05qC2jSS5f80AY.crl (hash: AY1GArRjxMoPgzDK5cHIbzHJUdFnhnqQGat1aTgTDvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b2:c8:99:fb:9b:89:e2:09:ac:0a:f7:e8:a3:77:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006 Validity Not Before: Dec 19 13:00:44 2025 GMT Not After : Dec 20 13:00:44 2025 GMT Subject: CN=a003b98222c56be29602ae32c750c934b7bc3444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c1:79:58:a6:e0:51:8f:b8:01:b8:c9:5c:4c: 8e:a1:da:2b:bc:04:eb:84:f3:c4:80:80:1b:23:90: de:8c:20:9a:96:7e:29:9f:41:61:1b:92:e6:d8:26: 7e:ed:94:a9:57:16:f1:95:7a:17:2a:07:48:c4:55: 8b:db:4f:6e:6d:89:f5:cd:e9:4d:e6:1e:e1:39:24: 43:13:c4:be:eb:c7:fd:a4:1e:e4:e5:cc:c9:a6:0f: af:ea:aa:5e:b3:49:a2:b7:43:a2:61:b5:e5:9b:53: ed:d1:14:d9:95:dd:b1:4f:a9:d0:88:da:0f:3c:66: 25:b2:cb:ac:e5:20:b8:c0:a1:7c:bb:95:24:f1:00: 57:aa:6c:9d:de:68:90:55:e5:49:59:6f:16:74:97: 88:66:a8:7b:41:bc:66:d2:df:45:f5:15:61:16:4b: ec:a4:f9:c7:98:aa:34:e6:62:55:17:68:11:d4:20: 0e:b7:e6:f2:a2:32:e0:54:72:12:d7:15:56:f2:0b: ee:51:37:23:90:65:4a:20:87:45:bd:0e:65:57:8f: fd:9d:f3:ee:74:8e:0c:ba:6b:15:c3:ba:1f:13:b2: 1c:32:1c:91:eb:31:4d:de:e4:cc:d1:7e:60:0e:d2: 3a:3d:06:c9:89:4f:c5:d2:39:21:6f:e1:b6:bb:07: b3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:03:B9:82:22:C5:6B:E2:96:02:AE:32:C7:50:C9:34:B7:BC:34:44 X509v3 Authority Key Identifier: keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:85:51:9e:a5:9c:9b:c4:69:22:63:31:f6:1b:fa:ea:68:47: e9:fa:4f:03:14:f2:a1:5a:1c:a9:e1:e4:4e:85:d2:98:e3:b2: 39:6d:b0:b9:dd:39:0f:96:ce:75:b9:c7:e7:9a:2f:6e:37:07: 16:f9:d4:e1:27:29:4d:09:d5:a9:38:93:0b:c1:36:77:bb:bd: 47:76:fb:c1:17:ac:44:8c:dc:44:72:42:26:aa:44:c8:e8:51: ee:d1:16:e0:5f:5d:89:c0:c6:79:84:49:d4:21:76:a5:1c:93: a4:81:a3:38:09:1b:a9:0a:9a:59:28:84:88:6f:53:e2:f1:6a: 95:a6:f3:3c:05:a5:7f:05:03:af:ad:21:88:2b:77:ec:ab:80: 98:04:85:33:20:04:3a:4b:0f:4a:f5:39:20:0d:0b:0d:54:a3: 74:44:06:48:b6:92:01:eb:4e:fa:a9:e7:86:45:bd:ad:c9:aa: b5:0d:57:6c:c2:20:3e:7d:b6:41:41:77:68:2e:3a:d2:9d:49: bd:a3:00:cd:d8:cc:79:ce:cd:74:08:db:6d:fc:05:4b:bc:b6: 51:f6:db:91:ec:da:2d:b9:2a:16:89:29:9c:85:78:51:70:42: 55:9b:6c:bb:37:5f:70:ac:86:be:7b:e7:24:d0:46:ca:95:1f: 53:6d:58:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2ssiZ+5uJ4gmsCvfoo3dxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MzQ3ZTE2OGQ2OTY1ODU0NTM3NGU2YTBiNjhkMjRiOTdm Y2QwMDYwHhcNMjUxMjE5MTMwMDQ0WhcNMjUxMjIwMTMwMDQ0WjAzMTEwLwYDVQQD EyhhMDAzYjk4MjIyYzU2YmUyOTYwMmFlMzJjNzUwYzkzNGI3YmMzNDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMF5WKbgUY+4AbjJXEyOodorvATr hPPEgIAbI5DejCCaln4pn0FhG5Lm2CZ+7ZSpVxbxlXoXKgdIxFWL209ubYn1zelN 5h7hOSRDE8S+68f9pB7k5czJpg+v6qpes0mit0OiYbXlm1Pt0RTZld2xT6nQiNoP PGYlssus5SC4wKF8u5Uk8QBXqmyd3miQVeVJWW8WdJeIZqh7Qbxm0t9F9RVhFkvs pPnHmKo05mJVF2gR1CAOt+byojLgVHIS1xVW8gvuUTcjkGVKIIdFvQ5lV4/9nfPu dI4MumsVw7ofE7IcMhyR6zFN3uTM0X5gDtI6PQbJiU/F0jkhb+G2uwezfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKADuYIixWvilgKuMsdQyTS3vDREMB8GA1UdIwQY MBaAFHc0fhaNaWWFRTdOagto0kuX/NAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8yNmEwYTMtMjJmMS00Y2ExLWE2Y2Qt NjdlYmJjOGM2ODYyLzEvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8yNmEwYTMtMjJmMS00Y2ExLWE2Y2QtNjdlYmJjOGM2ODYy LzEvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYVRnqWc m8RpImMx9hv66mhH6fpPAxTyoVocqeHkToXSmOOyOW2wud05D5bOdbnH55ovbjcH FvnU4ScpTQnVqTiTC8E2d7u9R3b7wResRIzcRHJCJqpEyOhR7tEW4F9dicDGeYRJ 1CF2pRyTpIGjOAkbqQqaWSiEiG9T4vFqlabzPAWlfwUDr60hiCt37KuAmASFMyAE OksPSvU5IA0LDVSjdEQGSLaSAetO+qnnhkW9rcmqtQ1XbMIgPn22QUF3aC460p1J vaMAzdjMec7NdAjbbfwFS7y2UfbbkezaLbkqFokpnIV4UXBCVZtsuzdfcKyGvnvn JNBGypUfU21Yeg== -----END CERTIFICATE-----Generated at Fri Dec 19 21:49:56 2025 by rpki-client