This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft File: dzKPMhPqJhROzLqQzV2DRIIfrzs.mft (raw, json) Hash identifier: kfdhPHcT6VbhaJf3mrI3oVdGCx3SAkFUi1L1qUwggmQ= Subject key identifier: AD:80:CF:C7:E6:73:9D:45:18:00:2E:65:A3:6C:11:A0:75:FB:D9:B5 Authority key identifier: 77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B Certificate issuer: /CN=77328f3213ea26144eccba90cd5d8344821faf3b Certificate serial: 019B680D68EE8D7EDF6579E52A60AFCAFA65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft Manifest number: 126A Signing time: Mon 29 Dec 2025 03:01:07 +0000 Manifest this update: Mon 29 Dec 2025 03:01:07 +0000 Manifest next update: Tue 30 Dec 2025 03:01:07 +0000 Files and hashes: 1: IqOWD9aJ14QW67iQSHAr_IsG4xE.roa (hash: w3ZVvZLPlnQKzQOQmLMJRlyI3uHeVIilgUta/ectFxM=) 2: dzKPMhPqJhROzLqQzV2DRIIfrzs.crl (hash: /jSd0P0uMaTgsY/GgcyUcKZvn0tf+56Y5+9QSE8IpLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 03:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:0d:68:ee:8d:7e:df:65:79:e5:2a:60:af:ca:fa:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77328f3213ea26144eccba90cd5d8344821faf3b Validity Not Before: Dec 29 03:01:07 2025 GMT Not After : Dec 30 03:01:07 2025 GMT Subject: CN=ad80cfc7e6739d4518002e65a36c11a075fbd9b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:90:4f:28:56:27:59:a5:45:3e:03:1d:d4:6b: 5c:e8:ef:f9:9c:0f:e1:90:fb:c8:4c:95:61:47:d2: fa:e6:49:a6:69:29:71:99:4c:fa:8b:81:59:8b:67: 2a:e5:7e:77:11:cf:8e:50:c0:13:54:1d:2d:7b:e7: b4:e2:d3:50:4b:a2:09:50:8a:c7:c9:31:9c:75:dd: 29:b9:e3:29:1e:de:2c:8a:3c:f3:d8:2e:b9:75:4e: 7a:8f:41:58:dd:3d:f6:99:fc:b6:06:6b:3c:2b:22: 2e:03:98:72:d2:ad:c8:f1:bd:f1:18:26:e2:20:c2: 46:1a:7d:db:30:d1:80:e7:18:e7:74:a4:0f:ee:ac: d8:c7:af:98:6d:3a:b1:f8:dd:0b:97:ae:95:c4:7e: 3b:11:76:2c:ca:c5:b2:0a:36:1f:96:cb:14:8e:79: f3:90:b6:ad:47:25:12:a8:f0:24:1f:a1:9d:54:c7: cb:cc:55:b5:86:3d:06:55:8d:4a:c4:79:1b:bc:24: 0e:21:08:9a:43:a1:54:ca:75:d0:8b:c6:7f:b8:ae: a4:50:90:6e:c9:3a:4b:28:cd:a5:8c:95:6b:d4:4a: 20:4e:a1:b3:65:00:e8:ed:30:8a:07:e3:8a:f9:a1: 37:87:38:f5:ed:c0:c1:72:9f:d7:60:c3:ee:96:27: b8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:80:CF:C7:E6:73:9D:45:18:00:2E:65:A3:6C:11:A0:75:FB:D9:B5 X509v3 Authority Key Identifier: keyid:77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c3:16:f7:70:2c:37:af:a2:e1:26:81:2e:b2:53:ea:25:e0: f1:37:d5:9c:95:72:8a:f7:7f:cd:d0:47:47:27:48:a8:04:6d: 9c:ec:38:5e:35:79:56:06:fe:02:dd:34:ae:61:b4:b2:12:bf: be:d8:7d:07:d0:65:50:fc:c3:82:a3:ee:b1:b3:4b:e0:bd:98: 55:60:9d:05:8e:fd:b8:5e:76:52:22:9b:6e:69:10:52:be:bf: 68:dc:aa:3f:a9:19:14:00:41:dc:13:48:ae:02:f9:e0:ea:02: 24:24:b4:2c:e4:f7:e2:2f:16:88:5a:ec:2a:af:76:78:2e:2f: 3f:74:3c:28:a8:b1:64:00:68:d4:0a:44:f1:bd:24:21:a4:bf: 8b:90:b9:f4:a4:ec:69:38:19:cb:0d:ff:fc:5b:b5:e9:ba:af: 25:2c:eb:1a:5e:5a:b1:b0:4f:80:e5:62:f1:6f:59:03:5c:a3: 42:59:b8:f9:c7:c0:97:70:bf:3b:21:78:59:2a:8b:96:d9:cb: 2d:2e:ac:65:58:7d:4a:ac:0e:ca:d1:59:f6:a8:87:4c:3f:dc: 5d:ee:1b:fc:c8:9a:d6:f7:03:e7:7e:84:3e:a6:db:91:62:81: 69:f8:de:5c:71:3a:57:04:13:fd:58:43:0c:66:59:a7:c9:21: 71:6a:91:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoDWjujX7fZXnlKmCvyvplMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MzI4ZjMyMTNlYTI2MTQ0ZWNjYmE5MGNkNWQ4MzQ0ODIx ZmFmM2IwHhcNMjUxMjI5MDMwMTA3WhcNMjUxMjMwMDMwMTA3WjAzMTEwLwYDVQQD EyhhZDgwY2ZjN2U2NzM5ZDQ1MTgwMDJlNjVhMzZjMTFhMDc1ZmJkOWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpBPKFYnWaVFPgMd1Gtc6O/5nA/h kPvITJVhR9L65kmmaSlxmUz6i4FZi2cq5X53Ec+OUMATVB0te+e04tNQS6IJUIrH yTGcdd0pueMpHt4sijzz2C65dU56j0FY3T32mfy2Bms8KyIuA5hy0q3I8b3xGCbi IMJGGn3bMNGA5xjndKQP7qzYx6+YbTqx+N0Ll66VxH47EXYsysWyCjYflssUjnnz kLatRyUSqPAkH6GdVMfLzFW1hj0GVY1KxHkbvCQOIQiaQ6FUynXQi8Z/uK6kUJBu yTpLKM2ljJVr1EogTqGzZQDo7TCKB+OK+aE3hzj17cDBcp/XYMPulie48QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2Az8fmc51FGAAuZaNsEaB1+9m1MB8GA1UdIwQY MBaAFHcyjzIT6iYUTsy6kM1dg0SCH687MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHpLUE1oUHFKaFJPekxxUXpWMkRSSUlmcnpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS85MjYyNjktY2IxNy00Y2MyLTg2NTYt ODc4MjdlNTcxMzIzLzEvZHpLUE1oUHFKaFJPekxxUXpWMkRSSUlmcnpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS85MjYyNjktY2IxNy00Y2MyLTg2NTYtODc4MjdlNTcxMzIz LzEvZHpLUE1oUHFKaFJPekxxUXpWMkRSSUlmcnpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8MW93As N6+i4SaBLrJT6iXg8TfVnJVyivd/zdBHRydIqARtnOw4XjV5Vgb+At00rmG0shK/ vth9B9BlUPzDgqPusbNL4L2YVWCdBY79uF52UiKbbmkQUr6/aNyqP6kZFABB3BNI rgL54OoCJCS0LOT34i8WiFrsKq92eC4vP3Q8KKixZABo1ApE8b0kIaS/i5C59KTs aTgZyw3//Fu16bqvJSzrGl5asbBPgOVi8W9ZA1yjQlm4+cfAl3C/OyF4WSqLltnL LS6sZVh9SqwOytFZ9qiHTD/cXe4b/Mia1vcD536EPqbbkWKBafjeXHE6VwQT/VhD DGZZp8khcWqREw== -----END CERTIFICATE-----Generated at Mon Dec 29 12:06:04 2025 by rpki-client