This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft File: dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft (raw, json) Hash identifier: cBCleAYmRIczMByFlGpyf9z2yMHMI7GHj1BJEdmNXnA= Subject key identifier: 7A:7C:66:55:DD:D1:5C:9B:44:CF:9A:37:0F:02:40:68:DA:46:A2:71 Authority key identifier: 77:31:B6:2B:0E:15:9B:A6:CC:D8:7F:73:27:5A:86:8E:BC:C4:1A:B8 Certificate issuer: /CN=7731b62b0e159ba6ccd87f73275a868ebcc41ab8 Certificate serial: 019AF578117C98856855E9CEB4DDCBE56D9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft Manifest number: 1432 Signing time: Sat 06 Dec 2025 21:01:17 +0000 Manifest this update: Sat 06 Dec 2025 21:01:17 +0000 Manifest next update: Sun 07 Dec 2025 21:01:17 +0000 Files and hashes: 1: Qv3hVGEIw5Ck_5QiJYApdipPmqI.roa (hash: C4rOq98XQlQBOJoaFTi64wzA4+qXQilqH0FLuH6cokY=) 2: dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.crl (hash: HwWA59H4mt96U9pVoWeB+kTaXVuz0Op6LYKwF3O6+Lc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:11:7c:98:85:68:55:e9:ce:b4:dd:cb:e5:6d:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7731b62b0e159ba6ccd87f73275a868ebcc41ab8 Validity Not Before: Dec 6 21:01:17 2025 GMT Not After : Dec 7 21:01:17 2025 GMT Subject: CN=7a7c6655ddd15c9b44cf9a370f024068da46a271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c6:da:04:a2:a4:e2:12:5e:80:ba:f3:d1:a1: e8:72:82:f0:6f:a4:a4:df:a2:fe:6d:ac:b2:2c:ec: a8:3c:f7:f7:d6:a0:0b:75:28:08:d2:53:4e:12:f1: ff:3f:2f:21:e0:bf:f4:d4:cc:64:3d:a4:25:b9:69: 56:2f:bd:44:3c:45:ac:7c:31:0d:eb:86:31:d6:c2: 7e:35:40:83:26:bb:62:0d:74:2c:fb:b4:0d:bb:b0: b1:ee:ce:f5:a1:27:39:1b:12:43:86:99:87:f5:c0: 5b:11:f2:be:7e:73:3b:3b:62:0c:b5:06:97:a6:af: bb:c5:ee:7b:1a:de:3f:d5:9c:b1:fa:bd:ac:0b:b1: d1:8b:6b:b7:02:24:b5:89:f4:0c:03:6b:87:fe:e2: e7:c7:06:e3:48:70:84:49:42:e6:cd:fc:57:d9:6e: 84:47:cf:e4:d3:45:34:4b:e3:b5:fc:7c:a3:7c:a0: 6c:11:ec:1c:e3:08:82:14:e6:af:60:ef:fd:c6:1f: 20:af:0b:87:c8:79:7c:b3:2b:97:95:01:cf:c5:dc: 48:59:69:d8:a2:73:47:7e:de:1e:80:7a:1a:06:72: 2d:a8:03:36:82:d5:31:02:7e:66:ed:46:a5:40:d6: 8e:d9:b5:1c:d1:68:1f:44:33:1f:70:8c:2b:9e:cd: ac:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:7C:66:55:DD:D1:5C:9B:44:CF:9A:37:0F:02:40:68:DA:46:A2:71 X509v3 Authority Key Identifier: keyid:77:31:B6:2B:0E:15:9B:A6:CC:D8:7F:73:27:5A:86:8E:BC:C4:1A:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2efce0-82ee-43ce-8f28-6bfc33501479/1/dzG2Kw4Vm6bM2H9zJ1qGjrzEGrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:58:bb:8c:1d:e9:c2:ee:75:e3:8d:12:e0:9a:a5:e1:d2:7b: 36:27:03:51:b9:bc:d2:59:63:9d:d8:9b:98:c1:18:30:31:61: 5c:48:0e:c8:9a:fb:bf:a0:9d:5d:ec:5d:a8:5e:3f:73:ca:5f: 18:9b:38:1f:be:91:67:0b:c5:aa:43:a5:7a:d8:fd:88:45:c4: e4:cf:56:e7:ba:9f:0b:97:54:19:68:83:64:12:d7:52:b4:fd: 9b:de:3e:8e:d9:69:dd:5c:da:b4:5c:0b:6f:47:c4:21:34:69: c4:38:c5:f9:91:f6:52:b6:f6:18:07:d7:e3:df:dc:6d:01:39: ea:31:55:e8:0e:82:83:47:01:4a:b6:84:60:7f:ba:d7:3e:fa: 46:15:10:fe:60:08:73:e7:09:fe:24:68:06:45:f1:7f:08:5d: 06:6e:a7:6b:0a:c6:75:84:96:89:ee:64:77:60:37:83:29:b0: e8:42:b4:46:05:e8:ce:9d:6b:23:40:ba:93:4e:1a:e0:34:75: 7f:35:3d:54:82:80:de:40:9a:b4:1d:09:22:38:04:1f:7e:47: 0a:bd:52:3c:53:52:74:64:56:6f:96:98:bf:bf:4d:18:7d:ba: 9b:80:81:e7:3c:82:23:00:73:e8:4e:42:9a:f2:75:8a:22:bc: 1f:be:31:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eBF8mIVoVenOtN3L5W2eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MzFiNjJiMGUxNTliYTZjY2Q4N2Y3MzI3NWE4NjhlYmNj NDFhYjgwHhcNMjUxMjA2MjEwMTE3WhcNMjUxMjA3MjEwMTE3WjAzMTEwLwYDVQQD Eyg3YTdjNjY1NWRkZDE1YzliNDRjZjlhMzcwZjAyNDA2OGRhNDZhMjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cbaBKKk4hJegLrz0aHocoLwb6Sk 36L+bayyLOyoPPf31qALdSgI0lNOEvH/Py8h4L/01MxkPaQluWlWL71EPEWsfDEN 64Yx1sJ+NUCDJrtiDXQs+7QNu7Cx7s71oSc5GxJDhpmH9cBbEfK+fnM7O2IMtQaX pq+7xe57Gt4/1Zyx+r2sC7HRi2u3AiS1ifQMA2uH/uLnxwbjSHCESULmzfxX2W6E R8/k00U0S+O1/HyjfKBsEewc4wiCFOavYO/9xh8grwuHyHl8syuXlQHPxdxIWWnY onNHft4egHoaBnItqAM2gtUxAn5m7UalQNaO2bUc0WgfRDMfcIwrns2s5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHp8ZlXd0VybRM+aNw8CQGjaRqJxMB8GA1UdIwQY MBaAFHcxtisOFZumzNh/cydaho68xBq4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHpHMkt3NFZtNmJNMkg5ekoxcUdqcnpFR3JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yZWZjZTAtODJlZS00M2NlLThmMjgt NmJmYzMzNTAxNDc5LzEvZHpHMkt3NFZtNmJNMkg5ekoxcUdqcnpFR3JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8yZWZjZTAtODJlZS00M2NlLThmMjgtNmJmYzMzNTAxNDc5 LzEvZHpHMkt3NFZtNmJNMkg5ekoxcUdqcnpFR3JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFi7jB3p wu51440S4Jql4dJ7NicDUbm80lljndibmMEYMDFhXEgOyJr7v6CdXexdqF4/c8pf GJs4H76RZwvFqkOletj9iEXE5M9W57qfC5dUGWiDZBLXUrT9m94+jtlp3VzatFwL b0fEITRpxDjF+ZH2Urb2GAfX49/cbQE56jFV6A6Cg0cBSraEYH+61z76RhUQ/mAI c+cJ/iRoBkXxfwhdBm6nawrGdYSWie5kd2A3gymw6EK0RgXozp1rI0C6k04a4DR1 fzU9VIKA3kCatB0JIjgEH35HCr1SPFNSdGRWb5aYv79NGH26m4CB5zyCIwBz6E5C mvJ1iiK8H74x+A== -----END CERTIFICATE-----Generated at Sun Dec 7 04:44:08 2025 by rpki-client