This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft File: dzEQpDcE2VSd9xVuOnieYihbFpM.mft (raw, json) Hash identifier: 9sxdfvQxP9bKviEZb5UcvE0P1vNFpXJF6OVIghUbuyY= Subject key identifier: 2F:CF:39:64:27:5E:DC:B1:FE:17:14:52:AF:FD:9B:D8:67:DC:48:93 Authority key identifier: 77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93 Certificate issuer: /CN=773110a43704d9549df7156e3a789e62285b1693 Certificate serial: 019AF31D56BBA89E24E80E4E94A5E26D2C7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft Manifest number: 1730 Signing time: Sat 06 Dec 2025 10:02:57 +0000 Manifest this update: Sat 06 Dec 2025 10:02:57 +0000 Manifest next update: Sun 07 Dec 2025 10:02:57 +0000 Files and hashes: 1: dzEQpDcE2VSd9xVuOnieYihbFpM.crl (hash: w/aNcoE/KGhxRxRWQ85Squf/H9C6QtRT9DoUhS4v9EU=) 2: lKi6SoPHv8adD_f0H8JMR-0tkso.roa (hash: IDdp81FcSfbScsI5eFdQ3u0Q5w/9MnWkbMQFbCRI7Lw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:56:bb:a8:9e:24:e8:0e:4e:94:a5:e2:6d:2c:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=773110a43704d9549df7156e3a789e62285b1693 Validity Not Before: Dec 6 10:02:57 2025 GMT Not After : Dec 7 10:02:57 2025 GMT Subject: CN=2fcf3964275edcb1fe171452affd9bd867dc4893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1e:6a:10:c5:09:ba:a7:e9:39:a1:8d:7f:71: ae:8b:b0:af:4c:2b:7c:a0:0a:00:0d:fe:cf:95:93: 18:99:54:9f:0c:28:a2:9f:b8:32:3b:fb:db:63:5d: 97:41:e1:8d:ec:a6:2f:38:98:54:2a:c2:4e:b5:6f: 77:e2:9a:22:3f:a9:60:28:07:4f:b8:14:c6:cc:6a: d0:ec:0b:50:c4:55:6c:4b:47:11:45:80:95:49:f0: 2c:9c:0d:f5:6d:73:9b:b8:3d:13:f5:e0:f0:bf:1d: 84:29:bf:f9:28:c0:2c:1c:0b:99:85:49:1c:a1:34: 95:59:c3:48:ad:47:2e:ec:e4:d4:a8:cf:cf:ae:d3: 40:ec:59:24:0c:93:f1:18:2d:2d:c8:22:62:fd:9e: f5:28:07:d9:2f:92:0f:18:f2:6f:5d:63:1a:a6:4a: 51:ed:d1:00:89:16:76:85:7d:93:a1:aa:7d:19:6e: 87:55:24:ee:56:39:b2:5d:f5:52:f4:cb:c4:a7:47: 8b:0b:be:92:5f:ed:a7:f3:e4:d1:34:e6:d6:78:a4: d2:f2:31:35:05:34:9b:eb:bb:c1:e3:a8:e4:6c:b9: 79:b1:a8:78:af:34:da:a9:b3:6c:10:2f:a9:c0:2a: 1d:41:8b:26:35:bc:fd:9e:be:44:00:70:85:0e:35: e3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:CF:39:64:27:5E:DC:B1:FE:17:14:52:AF:FD:9B:D8:67:DC:48:93 X509v3 Authority Key Identifier: keyid:77:31:10:A4:37:04:D9:54:9D:F7:15:6E:3A:78:9E:62:28:5B:16:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzEQpDcE2VSd9xVuOnieYihbFpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/080530-3f81-4479-b5a0-9a38159b794e/1/dzEQpDcE2VSd9xVuOnieYihbFpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:5a:51:b0:12:4c:51:a7:28:a2:4c:f2:0a:f1:34:44:fb:03: 75:6d:b9:d1:79:bb:12:28:65:68:85:fe:72:ff:2e:7a:3e:f3: c3:96:c8:00:1e:ef:c4:75:f2:ac:f3:ba:51:f9:6b:4c:f2:a4: b8:14:b8:25:2b:cb:f0:f2:8e:d0:42:0b:38:12:4b:02:75:87: f1:8d:46:14:51:48:e4:6d:51:87:7d:22:cd:85:db:28:1d:c4: 16:28:d6:8f:1a:9b:43:66:a5:5b:39:44:e2:de:00:28:90:04: ad:d5:ec:9f:4e:08:6b:97:5a:5b:7d:6a:f1:58:0a:b8:0a:0f: 2f:f8:be:de:a3:79:bd:b5:26:23:3d:4f:1e:88:2b:04:e3:d5: b2:1a:f6:57:f8:58:fb:1c:3c:ba:93:f8:cf:ae:1b:b9:ac:7f: 37:51:f9:2c:ea:22:1d:c7:19:f0:6a:19:b8:6f:91:a9:7f:6f: b6:9f:63:ec:77:43:5e:39:20:fd:15:26:52:d7:30:18:90:45: 0f:01:73:39:a8:28:c1:a7:59:18:b6:49:4e:e8:90:f8:a0:d3: c4:4d:bf:7c:1f:0a:94:ef:a0:7e:99:d9:7f:34:4f:10:1d:6c: 10:5e:2c:6f:8d:c3:75:16:8d:40:d8:8c:09:b7:9c:8a:7f:15: fa:66:05:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHVa7qJ4k6A5OlKXibSx+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MzExMGE0MzcwNGQ5NTQ5ZGY3MTU2ZTNhNzg5ZTYyMjg1 YjE2OTMwHhcNMjUxMjA2MTAwMjU3WhcNMjUxMjA3MTAwMjU3WjAzMTEwLwYDVQQD EygyZmNmMzk2NDI3NWVkY2IxZmUxNzE0NTJhZmZkOWJkODY3ZGM0ODkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB5qEMUJuqfpOaGNf3Gui7CvTCt8 oAoADf7PlZMYmVSfDCiin7gyO/vbY12XQeGN7KYvOJhUKsJOtW934poiP6lgKAdP uBTGzGrQ7AtQxFVsS0cRRYCVSfAsnA31bXObuD0T9eDwvx2EKb/5KMAsHAuZhUkc oTSVWcNIrUcu7OTUqM/PrtNA7FkkDJPxGC0tyCJi/Z71KAfZL5IPGPJvXWMapkpR 7dEAiRZ2hX2Toap9GW6HVSTuVjmyXfVS9MvEp0eLC76SX+2n8+TRNObWeKTS8jE1 BTSb67vB46jkbLl5sah4rzTaqbNsEC+pwCodQYsmNbz9nr5EAHCFDjXjwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/POWQnXtyx/hcUUq/9m9hn3EiTMB8GA1UdIwQY MBaAFHcxEKQ3BNlUnfcVbjp4nmIoWxaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHpFUXBEY0UyVlNkOXhWdU9uaWVZaWhiRnBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8wODA1MzAtM2Y4MS00NDc5LWI1YTAt OWEzODE1OWI3OTRlLzEvZHpFUXBEY0UyVlNkOXhWdU9uaWVZaWhiRnBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8wODA1MzAtM2Y4MS00NDc5LWI1YTAtOWEzODE1OWI3OTRl LzEvZHpFUXBEY0UyVlNkOXhWdU9uaWVZaWhiRnBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl1pRsBJM UacookzyCvE0RPsDdW250Xm7EihlaIX+cv8uej7zw5bIAB7vxHXyrPO6UflrTPKk uBS4JSvL8PKO0EILOBJLAnWH8Y1GFFFI5G1Rh30izYXbKB3EFijWjxqbQ2alWzlE 4t4AKJAErdXsn04Ia5daW31q8VgKuAoPL/i+3qN5vbUmIz1PHogrBOPVshr2V/hY +xw8upP4z64buax/N1H5LOoiHccZ8GoZuG+RqX9vtp9j7HdDXjkg/RUmUtcwGJBF DwFzOagowadZGLZJTuiQ+KDTxE2/fB8KlO+gfpnZfzRPEB1sEF4sb43DdRaNQNiM Cbecin8V+mYF7w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:23:06 2025 by rpki-client