This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft File: dXzv42s_zGikLAr_gdFEmA8yd38.mft (raw, json) Hash identifier: x868LzCCKT92T1rJyT1pXseKSxY6Y43PHdPt5lLmXPE= Subject key identifier: 39:C0:2B:25:A1:BB:9F:A1:4A:35:5F:FC:46:4D:79:2C:5F:F5:27:49 Authority key identifier: 75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F Certificate issuer: /CN=757cefe36b3fcc68a42c0aff81d144980f32777f Certificate serial: 019AF0F5CC5CD5B27C8D6D8FA3DE380E7E07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft Manifest number: 0EB6 Signing time: Sat 06 Dec 2025 00:00:31 +0000 Manifest this update: Sat 06 Dec 2025 00:00:31 +0000 Manifest next update: Sun 07 Dec 2025 00:00:31 +0000 Files and hashes: 1: 2MnJb6c5YnNQ1zVgyuJ_IZ3n2QI.roa (hash: k/m6yvyjLdB8+4uEbTkqM+WRV4cgI1Ugl2bD6WkY+xM=) 2: 4Yl_3VM-kdroRBsz7nPcb_MfTYo.roa (hash: 2xScy0N/ISEI1qEUmAbHyPZ6hI9GPPFsgivLJsiPGzo=) 3: AsZ4lIlUC0d5mfRed_ShT3RnpBQ.roa (hash: W7NsqtDHS3yDz7/Se2vS6CdoOqQMP8fqf009dcbuclU=) 4: LPKpfkMJen9TUH4ZfxgOzxqHkNU.roa (hash: ING4rNZCefT1Q8B8npudHtyqQQUdosJKFpOv34aIHJk=) 5: MUsQigUUD2skKaCxyUsENnVfQc0.roa (hash: jiSuFC22L+bIpKGlJw58reJLq1BBaex8I+CdJw/e78g=) 6: N1rTidaACgh8Wl5J2g45GZumvQs.roa (hash: btCaFx/Jws6uzlXHydN6cLSWM9L6FDcS4ymcYrWP048=) 7: UVAz1jDT3iVOFvSm2qO2EdM6DgI.roa (hash: BgGgY29/jzHM3rW+5X9NXDmgQhNrFZgHRGbC0+SNOiA=) 8: dXzv42s_zGikLAr_gdFEmA8yd38.crl (hash: IRNwC549ulv5x6UuJtWuQxoK6hpy4WcRhR8fztysyVM=) 9: h4SH4jbcO_QrPdA2Gh6nPhcu90k.roa (hash: i2GmF/BWsi8T4gmbicuCkuelb7temf0e4pvjoHHSntA=) 10: pEFNfAg8nkFQ7szOFzgGqxU8A9I.roa (hash: lNi497sBRC4Xkg5Gl71AZlaivWTnykL+9yjiUscMI7I=) 11: ugpSKfU4cI4BHNBN_7iW8XaPfSI.roa (hash: db0tkxspHpe7xqGkGEEw5zEcWk0GCNRtkvpsh9z8Yis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:cc:5c:d5:b2:7c:8d:6d:8f:a3:de:38:0e:7e:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=757cefe36b3fcc68a42c0aff81d144980f32777f Validity Not Before: Dec 6 00:00:31 2025 GMT Not After : Dec 7 00:00:31 2025 GMT Subject: CN=39c02b25a1bb9fa14a355ffc464d792c5ff52749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:25:ab:86:d9:13:86:02:76:33:a7:78:ae:ec: 59:67:c2:92:54:26:31:38:90:39:e7:f1:85:1f:e1: 09:cf:0b:b3:d3:f9:53:b8:8a:88:c0:01:4e:30:1f: 00:f0:70:93:6f:08:5e:ce:4a:b7:38:0e:8f:73:3c: f1:0d:e8:90:a1:41:91:91:9d:62:53:6a:95:f9:aa: 79:df:2f:25:2c:f4:f8:ea:78:d0:94:86:44:82:a5: 16:8c:c2:7f:21:6e:b5:b6:ca:37:e9:1e:25:9f:67: b1:48:6c:64:1d:eb:bd:2e:19:b1:c4:ef:b6:a9:ba: 50:71:4d:d3:3c:56:a0:0a:b6:3f:1f:42:e9:cd:04: 57:eb:ff:8a:1d:13:5e:fe:47:6e:59:23:8e:7c:f9: 78:24:d0:7e:1d:c3:5d:a9:0c:c7:8d:74:e5:37:a4: 3c:b8:1f:a2:25:23:7f:1d:4a:9c:cc:aa:3d:e2:9b: 1c:ff:04:12:cf:8a:62:98:aa:25:3e:96:ca:67:2a: d0:cc:8b:ac:5c:3a:45:22:7b:8e:bd:71:e8:73:b5: d8:30:26:03:11:6d:b0:ed:34:dc:34:34:43:19:dc: 22:e9:75:c8:39:71:56:42:90:f0:7f:28:b5:88:8a: 3c:60:c2:74:05:17:8a:ac:28:74:aa:73:d6:dd:3f: f0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C0:2B:25:A1:BB:9F:A1:4A:35:5F:FC:46:4D:79:2C:5F:F5:27:49 X509v3 Authority Key Identifier: keyid:75:7C:EF:E3:6B:3F:CC:68:A4:2C:0A:FF:81:D1:44:98:0F:32:77:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXzv42s_zGikLAr_gdFEmA8yd38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/972db6-770f-4462-9fc7-ee9b9517f2ec/1/dXzv42s_zGikLAr_gdFEmA8yd38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b0:93:3f:62:2f:2c:57:67:ec:98:64:84:fe:2e:b6:d9:c9: 52:37:37:69:43:60:e0:e3:4d:1b:7c:a3:99:2c:f2:da:ea:17: 1b:b6:d2:13:20:22:71:1a:f7:04:90:aa:4c:62:b1:f7:b6:1b: ea:2e:e2:cf:41:c7:58:0a:5f:15:51:df:6f:88:48:87:97:4a: 7f:6b:57:11:b7:83:27:6d:18:a0:dc:8e:26:30:64:1a:8f:6c: 34:1f:15:37:10:be:5b:e5:90:de:8f:60:c2:2e:dd:0b:2a:cf: d1:d8:dd:d9:67:95:d5:26:da:f7:e0:92:8b:2d:95:46:82:a0: 4c:58:82:47:fd:45:d8:00:a7:01:26:d7:b2:8e:64:34:96:57: 1f:78:9d:12:0b:38:6e:c8:59:15:7e:0c:86:3e:a4:31:18:2a: 8c:e5:db:7b:b8:66:f1:8d:b5:20:14:ce:91:c9:62:fc:fd:64: 16:9e:d7:93:e9:e1:ec:73:36:0e:5e:ac:71:00:c3:d7:36:80: 76:d7:6b:5b:db:dc:7e:ab:c3:a6:4f:56:b9:0c:b5:b6:40:84: 33:a2:d5:f8:9b:63:f8:8e:6a:6c:eb:07:34:86:5c:ce:5f:fb: 4b:f6:8b:57:75:7c:36:f4:5e:ff:04:81:4b:58:fc:09:4b:a5: c8:29:57:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9cxc1bJ8jW2Po944Dn4HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1N2NlZmUzNmIzZmNjNjhhNDJjMGFmZjgxZDE0NDk4MGYz Mjc3N2YwHhcNMjUxMjA2MDAwMDMxWhcNMjUxMjA3MDAwMDMxWjAzMTEwLwYDVQQD EygzOWMwMmIyNWExYmI5ZmExNGEzNTVmZmM0NjRkNzkyYzVmZjUyNzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iWrhtkThgJ2M6d4ruxZZ8KSVCYx OJA55/GFH+EJzwuz0/lTuIqIwAFOMB8A8HCTbwhezkq3OA6PczzxDeiQoUGRkZ1i U2qV+ap53y8lLPT46njQlIZEgqUWjMJ/IW61tso36R4ln2exSGxkHeu9LhmxxO+2 qbpQcU3TPFagCrY/H0LpzQRX6/+KHRNe/kduWSOOfPl4JNB+HcNdqQzHjXTlN6Q8 uB+iJSN/HUqczKo94psc/wQSz4pimKolPpbKZyrQzIusXDpFInuOvXHoc7XYMCYD EW2w7TTcNDRDGdwi6XXIOXFWQpDwfyi1iIo8YMJ0BReKrCh0qnPW3T/w5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDnAKyWhu5+hSjVf/EZNeSxf9SdJMB8GA1UdIwQY MBaAFHV87+NrP8xopCwK/4HRRJgPMnd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFh6djQyc196R2lrTEFyX2dkRkVtQTh5ZDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC85NzJkYjYtNzcwZi00NDYyLTlmYzct ZWU5Yjk1MTdmMmVjLzEvZFh6djQyc196R2lrTEFyX2dkRkVtQTh5ZDM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC85NzJkYjYtNzcwZi00NDYyLTlmYzctZWU5Yjk1MTdmMmVj LzEvZFh6djQyc196R2lrTEFyX2dkRkVtQTh5ZDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPrCTP2Iv LFdn7JhkhP4uttnJUjc3aUNg4ONNG3yjmSzy2uoXG7bSEyAicRr3BJCqTGKx97Yb 6i7iz0HHWApfFVHfb4hIh5dKf2tXEbeDJ20YoNyOJjBkGo9sNB8VNxC+W+WQ3o9g wi7dCyrP0djd2WeV1Sba9+CSiy2VRoKgTFiCR/1F2ACnASbXso5kNJZXH3idEgs4 bshZFX4Mhj6kMRgqjOXbe7hm8Y21IBTOkcli/P1kFp7Xk+nh7HM2Dl6scQDD1zaA dtdrW9vcfqvDpk9WuQy1tkCEM6LV+Jtj+I5qbOsHNIZczl/7S/aLV3V8NvRe/wSB S1j8CUulyClXYw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:03 2025 by rpki-client