This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft File: dzAW-WK1v7DODq26fwhzCWUB4SM.mft (raw, json) Hash identifier: Nunj2oQrn7Dgt1XrxoDqQq57kf85O7jqBx4VqWutx2Y= Subject key identifier: A6:05:7C:0E:DD:CD:67:5E:9D:C9:08:45:DA:53:FC:57:EC:91:69:41 Authority key identifier: 77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23 Certificate issuer: /CN=773016f962b5bfb0ce0eadba7f0873096501e123 Certificate serial: 019AF31B6B4C567AACDF6CC6AE52ADB18858 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft Manifest number: 0571 Signing time: Sat 06 Dec 2025 10:00:51 +0000 Manifest this update: Sat 06 Dec 2025 10:00:51 +0000 Manifest next update: Sun 07 Dec 2025 10:00:51 +0000 Files and hashes: 1: NHvBrQG5YnzgdzSKZ5hggmhl7Xk.roa (hash: DyZXFkFBZ3TjHZcSDoVDhCGDJj3juQTuNOexz8QHFtk=) 2: dzAW-WK1v7DODq26fwhzCWUB4SM.crl (hash: +OLoJZmpRi58cv+4kqWcYOpTucpRozUARU32u8HXG28=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:6b:4c:56:7a:ac:df:6c:c6:ae:52:ad:b1:88:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=773016f962b5bfb0ce0eadba7f0873096501e123 Validity Not Before: Dec 6 10:00:51 2025 GMT Not After : Dec 7 10:00:51 2025 GMT Subject: CN=a6057c0eddcd675e9dc90845da53fc57ec916941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ae:65:20:fc:30:ff:b7:56:12:69:ca:10:aa: 0f:a7:43:f3:48:5b:b1:f1:20:7d:51:af:a2:87:26: f4:8b:69:8c:4f:e7:15:0d:bb:25:01:0d:17:5e:87: 74:0c:98:ab:74:1f:73:2f:d3:20:69:8c:80:bc:e4: ef:98:46:0b:53:21:3a:e0:80:50:53:8a:6d:91:a8: 7d:8a:ce:60:b6:00:1c:b7:b0:02:3c:54:b8:64:b6: 37:32:31:96:ad:6b:da:86:1b:fd:32:0e:ee:9a:1c: 3a:bb:fb:44:87:1f:25:16:9a:1f:a5:8d:b4:16:59: 77:05:7d:72:25:c3:f7:7a:d2:0c:25:80:59:93:8c: f2:fc:ce:12:95:9d:f3:d7:c2:71:41:95:62:30:68: 4c:29:31:03:2c:8b:c3:c7:2c:d3:56:77:7e:e9:30: ff:f0:c7:cd:83:5f:ea:f1:23:84:c0:c4:b7:4c:7c: a1:fc:11:fe:1c:6b:0e:c1:9b:9b:27:4c:e9:a6:27: 65:c2:aa:2a:6c:54:3b:2d:bd:c2:14:a2:c4:ef:b2: 97:1e:fc:17:72:01:fa:e3:22:5a:65:6c:6f:61:5a: 7f:79:c7:03:d1:82:9e:bb:e7:d3:fd:a4:9f:64:12: 84:05:76:90:85:f3:9e:50:27:bd:f7:8d:fc:b1:12: a2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:05:7C:0E:DD:CD:67:5E:9D:C9:08:45:DA:53:FC:57:EC:91:69:41 X509v3 Authority Key Identifier: keyid:77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:99:0f:4d:27:6d:a9:37:99:5a:e5:47:10:f4:cf:69:19:fc: 3a:c4:f0:f4:6d:ca:ec:40:5b:f8:16:ad:83:65:b3:82:bb:88: 4b:64:7e:dd:87:f6:88:b9:d1:7c:9f:9d:a5:3f:20:18:a2:ef: eb:f7:14:cb:71:31:4b:5d:ce:e9:e2:fe:2a:24:be:2a:e1:2a: 85:ce:b6:d6:14:29:ba:38:90:3f:2d:87:06:8e:1b:b9:66:95: f2:47:e3:4f:bc:50:ff:3d:4c:d0:a7:69:81:fb:83:bc:b4:b0: b0:d5:f7:e1:be:e7:a8:75:20:de:be:05:b1:cc:83:46:be:b0: 18:4e:78:6d:14:4d:14:3e:04:44:97:1e:17:59:35:23:a4:87: 78:66:b4:53:4f:6a:0b:43:cb:43:c4:68:ad:22:7d:d8:c7:0e: d9:e1:5a:24:49:e5:d0:17:6d:7f:3c:29:d9:2a:5c:db:ac:1e: 4a:48:51:ce:19:4b:5a:b8:fe:33:4c:f2:9f:2d:b2:07:ae:eb: b8:db:1b:13:bc:8d:f1:54:38:5a:69:22:6b:3f:b0:2e:40:3f: e7:2e:26:95:a4:68:ef:d1:41:c3:05:3f:b3:40:72:a8:20:4f: 50:99:f5:08:d3:94:f6:d6:d3:15:3c:1b:f0:1b:b5:f8:af:77: d3:27:92:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG2tMVnqs32zGrlKtsYhYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MzAxNmY5NjJiNWJmYjBjZTBlYWRiYTdmMDg3MzA5NjUw MWUxMjMwHhcNMjUxMjA2MTAwMDUxWhcNMjUxMjA3MTAwMDUxWjAzMTEwLwYDVQQD EyhhNjA1N2MwZWRkY2Q2NzVlOWRjOTA4NDVkYTUzZmM1N2VjOTE2OTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy65lIPww/7dWEmnKEKoPp0PzSFux 8SB9Ua+ihyb0i2mMT+cVDbslAQ0XXod0DJirdB9zL9MgaYyAvOTvmEYLUyE64IBQ U4ptkah9is5gtgAct7ACPFS4ZLY3MjGWrWvahhv9Mg7umhw6u/tEhx8lFpofpY20 Fll3BX1yJcP3etIMJYBZk4zy/M4SlZ3z18JxQZViMGhMKTEDLIvDxyzTVnd+6TD/ 8MfNg1/q8SOEwMS3THyh/BH+HGsOwZubJ0zppidlwqoqbFQ7Lb3CFKLE77KXHvwX cgH64yJaZWxvYVp/eccD0YKeu+fT/aSfZBKEBXaQhfOeUCe99438sRKizwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKYFfA7dzWdenckIRdpT/FfskWlBMB8GA1UdIwQY MBaAFHcwFvlitb+wzg6tun8IcwllAeEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHpBVy1XSzF2N0RPRHEyNmZ3aHpDV1VCNFNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MjZmYjQtZThjZC00NWYwLThkYzgt NzY1ZTljMjAzYmUzLzEvZHpBVy1XSzF2N0RPRHEyNmZ3aHpDV1VCNFNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS82MjZmYjQtZThjZC00NWYwLThkYzgtNzY1ZTljMjAzYmUz LzEvZHpBVy1XSzF2N0RPRHEyNmZ3aHpDV1VCNFNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo5kPTSdt qTeZWuVHEPTPaRn8OsTw9G3K7EBb+Batg2WzgruIS2R+3Yf2iLnRfJ+dpT8gGKLv 6/cUy3ExS13O6eL+KiS+KuEqhc621hQpujiQPy2HBo4buWaV8kfjT7xQ/z1M0Kdp gfuDvLSwsNX34b7nqHUg3r4FscyDRr6wGE54bRRNFD4ERJceF1k1I6SHeGa0U09q C0PLQ8RorSJ92McO2eFaJEnl0Bdtfzwp2Spc26weSkhRzhlLWrj+M0zyny2yB67r uNsbE7yN8VQ4Wmkiaz+wLkA/5y4mlaRo79FBwwU/s0ByqCBPUJn1CNOU9tbTFTwb 8Bu1+K930yeSgg== -----END CERTIFICATE-----Generated at Sat Dec 6 19:10:48 2025 by rpki-client