This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft File: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft (raw, json) Hash identifier: 4MhfnBDRv2N6ENZ0d8sMXPXF3xiauTrhzbctun0nKjI= Subject key identifier: 13:5C:83:24:01:9B:E9:EA:71:8E:B2:BC:C0:EE:85:37:A6:DE:58:94 Authority key identifier: FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7 Certificate issuer: /CN=fdd2b36206439bbce15b363f09eeff1d738cecc7 Certificate serial: 019AF0BF91477CC481FD276A3671B0CFB51D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft Manifest number: 1775 Signing time: Fri 05 Dec 2025 23:01:17 +0000 Manifest this update: Fri 05 Dec 2025 23:01:17 +0000 Manifest next update: Sat 06 Dec 2025 23:01:17 +0000 Files and hashes: 1: _dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl (hash: nKN4Ao2h0bip9Rty4Im0Afu4JuQTmggZE+m4jVMC72U=) 2: hn0oOL_Phy31I2IYdCocfuCMl4Y.roa (hash: pL8SqciTf3yJI1mNpTYcxXjCVmcDvB9gR79xz18ukNA=) 3: n4Gl-s-Z4-ZJ7aZsYXedLjfUwYs.roa (hash: 2ovoFydr5EnhNhzcx+FRnrZsnjvX8pqDu1VDKcopbtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:91:47:7c:c4:81:fd:27:6a:36:71:b0:cf:b5:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd2b36206439bbce15b363f09eeff1d738cecc7 Validity Not Before: Dec 5 23:01:17 2025 GMT Not After : Dec 6 23:01:17 2025 GMT Subject: CN=135c8324019be9ea718eb2bcc0ee8537a6de5894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c3:9c:45:03:7e:40:86:15:11:d1:bf:2b:87: 47:8d:f9:02:1b:7d:3e:5c:9f:d3:bf:a9:5a:fa:27: e5:3e:25:5d:cb:6a:38:a8:7c:c3:67:c7:cd:cc:49: 69:e3:ff:a6:6f:7e:82:97:44:59:5e:1c:c8:d8:58: 5c:37:67:b6:aa:f9:33:bf:d4:dc:25:aa:d2:bd:f7: ec:e0:a4:77:c6:0d:f2:cd:5f:11:c7:8e:27:e1:59: 82:cc:e9:f3:54:53:ec:ca:9f:50:18:28:3b:3f:c3: 12:58:d9:81:03:ca:95:f6:bd:7d:69:3d:02:d8:8d: 91:0d:b0:be:c0:97:92:85:bc:15:e1:c5:30:28:7f: 3a:6d:69:cf:19:30:2a:94:49:18:00:e7:a9:87:be: 10:f8:16:26:4e:13:b9:66:7d:9d:17:2b:1d:fc:7c: b2:4a:1c:b8:dd:5c:98:41:0f:64:15:3c:e9:31:24: cc:06:ba:37:e8:9d:21:62:8e:cb:db:3f:9e:05:05: 37:fc:7d:ec:ce:58:78:10:e5:61:74:19:81:d2:95: ed:76:44:e0:d7:6b:cb:59:02:05:19:9f:86:4b:a5: aa:6e:c0:34:20:c5:02:aa:d9:8e:3e:6e:78:62:48: 38:74:e7:d0:54:48:ff:02:66:da:b0:7c:e7:ad:3d: 8a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:5C:83:24:01:9B:E9:EA:71:8E:B2:BC:C0:EE:85:37:A6:DE:58:94 X509v3 Authority Key Identifier: keyid:FD:D2:B3:62:06:43:9B:BC:E1:5B:36:3F:09:EE:FF:1D:73:8C:EC:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/62b909-1e3e-4a1b-9e24-b01e0297b070/1/_dKzYgZDm7zhWzY_Ce7_HXOM7Mc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:1e:97:bf:92:c6:94:b1:38:08:1d:2f:c0:43:bb:11:bd:3f: 6f:1c:0a:f3:9e:eb:40:8f:d5:4c:60:ca:d2:e9:96:1e:f2:f6: 36:13:9f:7a:de:a4:63:15:b9:5a:a1:f9:a4:fb:f4:87:1d:53: 50:3b:1c:cb:d0:55:61:50:10:e0:95:ce:1b:6e:ae:3f:7b:60: f4:cc:cb:af:94:10:03:dd:89:be:e2:3e:d5:77:1b:d7:e4:ce: 59:45:48:d9:b4:27:d5:73:8f:28:3d:6b:80:53:f0:bd:eb:ad: ad:2b:61:d0:ff:ea:5e:4e:22:36:69:67:2e:b0:4d:e5:63:cb: b9:bf:b6:6d:54:f0:93:2a:96:4f:9c:93:f3:e9:f4:6d:df:fd: 50:66:ed:65:52:6e:70:6a:95:65:d4:36:75:5a:ba:65:bd:8e: 09:c2:07:f8:6d:da:34:6b:89:62:46:bd:03:91:d2:27:3e:ed: 1d:8d:92:30:65:4d:53:0e:df:7c:c6:bc:62:3f:30:02:dc:f2: 78:e2:0d:71:90:4c:db:29:b9:49:1f:27:6a:bf:7b:f4:ba:35: fe:67:b0:65:c6:dc:a9:b7:bd:db:ea:a5:b9:02:ef:17:8a:96: 69:d3:83:1f:f4:14:df:cb:ab:90:5c:8c:f6:a7:ca:4b:47:bc: c0:25:4a:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5FHfMSB/SdqNnGwz7UdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDJiMzYyMDY0MzliYmNlMTViMzYzZjA5ZWVmZjFkNzM4 Y2VjYzcwHhcNMjUxMjA1MjMwMTE3WhcNMjUxMjA2MjMwMTE3WjAzMTEwLwYDVQQD EygxMzVjODMyNDAxOWJlOWVhNzE4ZWIyYmNjMGVlODUzN2E2ZGU1ODk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMOcRQN+QIYVEdG/K4dHjfkCG30+ XJ/Tv6la+iflPiVdy2o4qHzDZ8fNzElp4/+mb36Cl0RZXhzI2FhcN2e2qvkzv9Tc JarSvffs4KR3xg3yzV8Rx44n4VmCzOnzVFPsyp9QGCg7P8MSWNmBA8qV9r19aT0C 2I2RDbC+wJeShbwV4cUwKH86bWnPGTAqlEkYAOeph74Q+BYmThO5Zn2dFysd/Hyy Shy43VyYQQ9kFTzpMSTMBro36J0hYo7L2z+eBQU3/H3szlh4EOVhdBmB0pXtdkTg 12vLWQIFGZ+GS6WqbsA0IMUCqtmOPm54Ykg4dOfQVEj/AmbasHznrT2KBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNcgyQBm+nqcY6yvMDuhTem3liUMB8GA1UdIwQY MBaAFP3Ss2IGQ5u84Vs2Pwnu/x1zjOzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RLellnWkRtN3poV3pZX0NlN19IWE9NN01jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS82MmI5MDktMWUzZS00YTFiLTllMjQt YjAxZTAyOTdiMDcwLzEvX2RLellnWkRtN3poV3pZX0NlN19IWE9NN01jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS82MmI5MDktMWUzZS00YTFiLTllMjQtYjAxZTAyOTdiMDcw LzEvX2RLellnWkRtN3poV3pZX0NlN19IWE9NN01jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcx6Xv5LG lLE4CB0vwEO7Eb0/bxwK857rQI/VTGDK0umWHvL2NhOfet6kYxW5WqH5pPv0hx1T UDscy9BVYVAQ4JXOG26uP3tg9MzLr5QQA92JvuI+1Xcb1+TOWUVI2bQn1XOPKD1r gFPwveutrSth0P/qXk4iNmlnLrBN5WPLub+2bVTwkyqWT5yT8+n0bd/9UGbtZVJu cGqVZdQ2dVq6Zb2OCcIH+G3aNGuJYka9A5HSJz7tHY2SMGVNUw7ffMa8Yj8wAtzy eOINcZBM2ym5SR8nar979Lo1/mewZcbcqbe92+qluQLvF4qWadODH/QU38urkFyM 9qfKS0e8wCVKIg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:54 2025 by rpki-client