This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft File: dWyevH_4dZ2KEG__rzNeo0b66lc.mft (raw, json) Hash identifier: 5CTB47rmDpe0Yh4pS18eyMJCueWnph5VMMH8+eGS5TU= Subject key identifier: 66:D1:48:C4:A2:C0:EF:BD:2F:D7:CA:67:98:F8:49:9E:3E:84:7A:14 Authority key identifier: 75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57 Certificate issuer: /CN=756c9ebc7ff8759d8a106fffaf335ea346faea57 Certificate serial: 019AF2767AE0C6A29868DD58CCA8B385CB8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 07:00:42 +0000 Manifest this update: Sat 06 Dec 2025 07:00:42 +0000 Manifest next update: Sun 07 Dec 2025 07:00:42 +0000 Files and hashes: 1: dWyevH_4dZ2KEG__rzNeo0b66lc.crl (hash: ZVz0k7r1fjFp5jsq6rSzh5QR+lN92qFwXRpyOeiRg+4=) 2: hx2ek40oJmiSl7Xgir3mC5VHBV0.roa (hash: cCp67/8pyoc4Gg/vx5QrjhBwzCVOnjb7FAHH3PazwOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:7a:e0:c6:a2:98:68:dd:58:cc:a8:b3:85:cb:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=756c9ebc7ff8759d8a106fffaf335ea346faea57 Validity Not Before: Dec 6 07:00:42 2025 GMT Not After : Dec 7 07:00:42 2025 GMT Subject: CN=66d148c4a2c0efbd2fd7ca6798f8499e3e847a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:70:73:22:71:1e:4a:47:4a:b6:09:a7:f0:e9: c7:18:4f:05:1f:c9:08:b8:4d:91:a6:77:b9:c5:40: 9e:f7:88:6c:9a:93:57:27:c4:07:44:f7:93:2b:a1: 59:8f:e2:90:3c:0f:95:6d:01:80:9a:5c:0a:b8:0a: ae:db:54:82:3e:eb:3b:5b:43:0d:00:cd:63:13:7e: ed:f2:90:26:c3:3d:d6:fe:44:d1:e8:04:3e:9e:eb: 76:7d:0b:d9:a5:77:f7:72:9b:a8:03:c4:36:ac:42: 0f:34:9a:6a:24:8d:58:2e:8d:7d:23:8a:0f:3d:1c: 5d:6e:85:6b:a2:67:d9:83:2d:0c:8c:4f:07:e8:3b: e9:31:b6:8a:f7:7e:04:76:14:4a:aa:42:31:a2:48: 07:4c:5b:1d:3f:81:9f:b7:84:7e:bc:45:a4:8a:4d: fa:81:f2:99:39:b9:42:9c:b6:f8:50:70:3d:4c:34: 64:0e:7a:a1:c5:11:94:93:96:2e:f2:0f:5a:cb:56: 56:5f:80:11:cd:3e:e2:00:67:bc:04:3f:79:97:18: a5:4f:0c:c8:3f:da:bd:87:12:24:f2:5a:84:82:5a: 6f:bc:3e:12:29:0f:65:f0:46:c9:cf:26:cf:8f:7c: e7:ca:31:10:69:e9:31:31:90:47:6c:90:29:6e:89: 27:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D1:48:C4:A2:C0:EF:BD:2F:D7:CA:67:98:F8:49:9E:3E:84:7A:14 X509v3 Authority Key Identifier: keyid:75:6C:9E:BC:7F:F8:75:9D:8A:10:6F:FF:AF:33:5E:A3:46:FA:EA:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWyevH_4dZ2KEG__rzNeo0b66lc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5f6530-1166-4b9d-9dfd-caae0edf69f1/1/dWyevH_4dZ2KEG__rzNeo0b66lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:75:c2:b0:7f:42:f7:9e:75:b3:92:65:c0:b9:9a:06:33:7a: 9c:d8:32:4f:fa:e3:e1:5f:2d:43:6d:dc:81:5d:22:fe:6f:e3: 33:fd:cd:af:42:8c:fb:a0:d5:5b:1e:1e:c7:27:65:98:e0:5d: 44:94:2c:70:3f:ff:73:86:d7:6e:09:ea:f2:fa:19:c2:29:09: f0:46:f7:cb:36:e0:3e:96:19:f7:f1:b0:98:e3:eb:84:a8:14: 6a:e0:1f:68:a7:48:78:04:c8:e8:91:68:a7:e2:34:f8:7f:a2: 4d:b4:38:96:10:cc:b4:d1:a3:32:0d:52:88:20:94:07:67:41: 19:b3:68:9c:7f:a2:d6:a4:73:47:d5:b7:e5:3a:68:a1:db:94: 91:63:f9:d1:bf:83:fb:48:6d:c9:07:ff:c9:49:0a:db:06:52: 02:33:b1:47:0b:44:88:4a:36:7e:2e:5c:2b:4c:d3:e7:0e:6e: e9:62:d4:f1:7c:f6:db:09:59:02:20:ac:a4:5a:d1:89:68:f0: d4:47:6e:b0:44:9f:f9:75:c1:f7:6f:ce:a7:72:24:b4:5f:b3: cb:ff:60:cb:21:ad:13:fa:d2:3f:02:5d:d4:bb:36:8c:0c:50: 81:aa:97:35:74:1d:d0:10:e9:87:fb:59:c9:c5:a3:5e:f8:d9: 06:a4:64:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydnrgxqKYaN1YzKizhcuLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NmM5ZWJjN2ZmODc1OWQ4YTEwNmZmZmFmMzM1ZWEzNDZm YWVhNTcwHhcNMjUxMjA2MDcwMDQyWhcNMjUxMjA3MDcwMDQyWjAzMTEwLwYDVQQD Eyg2NmQxNDhjNGEyYzBlZmJkMmZkN2NhNjc5OGY4NDk5ZTNlODQ3YTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHBzInEeSkdKtgmn8OnHGE8FH8kI uE2Rpne5xUCe94hsmpNXJ8QHRPeTK6FZj+KQPA+VbQGAmlwKuAqu21SCPus7W0MN AM1jE37t8pAmwz3W/kTR6AQ+nut2fQvZpXf3cpuoA8Q2rEIPNJpqJI1YLo19I4oP PRxdboVromfZgy0MjE8H6DvpMbaK934EdhRKqkIxokgHTFsdP4Gft4R+vEWkik36 gfKZOblCnLb4UHA9TDRkDnqhxRGUk5Yu8g9ay1ZWX4ARzT7iAGe8BD95lxilTwzI P9q9hxIk8lqEglpvvD4SKQ9l8EbJzybPj3znyjEQaekxMZBHbJApboknSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGbRSMSiwO+9L9fKZ5j4SZ4+hHoUMB8GA1UdIwQY MBaAFHVsnrx/+HWdihBv/68zXqNG+upXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFd5ZXZIXzRkWjJLRUdfX3J6TmVvMGI2NmxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy81ZjY1MzAtMTE2Ni00YjlkLTlkZmQt Y2FhZTBlZGY2OWYxLzEvZFd5ZXZIXzRkWjJLRUdfX3J6TmVvMGI2NmxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy81ZjY1MzAtMTE2Ni00YjlkLTlkZmQtY2FhZTBlZGY2OWYx LzEvZFd5ZXZIXzRkWjJLRUdfX3J6TmVvMGI2NmxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApXXCsH9C 9551s5JlwLmaBjN6nNgyT/rj4V8tQ23cgV0i/m/jM/3Nr0KM+6DVWx4exydlmOBd RJQscD//c4bXbgnq8voZwikJ8Eb3yzbgPpYZ9/GwmOPrhKgUauAfaKdIeATI6JFo p+I0+H+iTbQ4lhDMtNGjMg1SiCCUB2dBGbNonH+i1qRzR9W35TpooduUkWP50b+D +0htyQf/yUkK2wZSAjOxRwtEiEo2fi5cK0zT5w5u6WLU8Xz22wlZAiCspFrRiWjw 1EdusESf+XXB92/Op3IktF+zy/9gyyGtE/rSPwJd1Ls2jAxQgaqXNXQd0BDph/tZ ycWjXvjZBqRk4A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:10:09 2025 by rpki-client