This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft File: Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft (raw, json) Hash identifier: ue66HVY1Q9Q84Pll06fkPtDlaJcE+QSWow3iXA1jXFk= Subject key identifier: DD:89:92:72:E6:98:E0:65:22:75:F7:F4:91:B6:7D:90:5B:36:89:33 Authority key identifier: 0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C Certificate issuer: /CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c Certificate serial: 019AF31C7D34176808A17DE4769B17CF9A25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:02:01 +0000 Manifest this update: Sat 06 Dec 2025 10:02:01 +0000 Manifest next update: Sun 07 Dec 2025 10:02:01 +0000 Files and hashes: 1: 8GPy1nq-d8qyd5DzcEoD7_wmnRk.roa (hash: VU25KKsH1DHg8pytMPBtSMEdGMuo9BZsAecAtygfZnk=) 2: Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl (hash: vLaV+5Y8KoYI4CI1OnTKnCXA/In1klgTLK7q2TqEOw8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:7d:34:17:68:08:a1:7d:e4:76:9b:17:cf:9a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f3f1332cff05b22a3a66a6d4c348fbc01de115c Validity Not Before: Dec 6 10:02:01 2025 GMT Not After : Dec 7 10:02:01 2025 GMT Subject: CN=dd899272e698e0652275f7f491b67d905b368933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ed:5b:74:73:b3:5b:85:cd:0e:9e:9a:01:5a: e4:79:d3:5c:b9:32:ae:f3:45:08:3c:78:fe:82:1e: ac:b5:37:4c:d3:c8:79:e7:b5:81:78:8e:0a:69:fd: 19:ae:9a:7b:25:4d:4c:39:ed:04:1c:e4:af:3a:ee: d8:d1:f0:63:4f:4d:32:7f:2b:36:ef:67:cc:67:16: fa:a3:7d:fa:9c:5e:1d:df:37:19:b9:ff:c7:ef:ab: 67:72:bb:43:c8:2f:08:1d:eb:ea:0d:07:89:d7:09: da:86:59:5b:de:91:20:29:89:14:dc:c9:a5:4a:3c: 98:1e:d5:3b:72:ab:3f:d0:39:71:2e:89:28:1e:e2: a5:21:3e:ec:bf:a0:0c:48:33:2d:93:7b:6a:3d:57: cb:30:16:f6:52:c6:d3:56:d9:9f:08:86:9c:5e:a8: 07:9e:00:0e:2e:eb:f9:c7:2b:51:6b:9a:d6:1f:b4: 5b:36:e7:bd:74:62:a4:f9:04:d1:d4:ee:7f:8d:83: 20:74:3a:d8:2e:4b:26:69:fc:c2:ed:66:80:36:d6: ef:11:29:35:b3:3c:6b:46:f2:a8:b9:49:2d:21:53: de:e6:df:a4:8a:1a:1b:7a:18:1d:f6:9f:09:e1:5e: 5f:56:72:3b:6d:e0:36:b1:08:a0:e3:f7:6f:8d:f8: da:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:89:92:72:E6:98:E0:65:22:75:F7:F4:91:B6:7D:90:5B:36:89:33 X509v3 Authority Key Identifier: keyid:0F:3F:13:32:CF:F0:5B:22:A3:A6:6A:6D:4C:34:8F:BC:01:DE:11:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dz8TMs_wWyKjpmptTDSPvAHeEVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Dz8TMs_wWyKjpmptTDSPvAHeEVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:dd:8c:d0:5d:2f:ef:f6:ca:11:44:e5:17:7d:bc:82:f8:1d: b0:73:f4:ba:a7:09:8f:f3:66:8d:d3:c8:4e:a1:f8:df:fd:09: 01:8a:38:ed:2d:65:55:33:3e:96:ba:d4:bd:f4:57:67:ff:58: 91:77:ca:be:13:06:d7:0e:fe:06:3d:52:10:08:78:3f:6e:cb: 09:77:14:b6:5d:b5:35:47:92:a2:3f:4b:ef:f0:fd:33:06:aa: 05:b8:fb:76:5a:12:34:8b:33:f0:35:29:e3:ee:57:80:c2:6e: 6d:d0:48:19:13:cb:11:86:24:5b:a2:cb:c5:01:36:bc:9f:27: 24:52:ba:99:2d:93:98:ec:51:d2:ce:e4:63:55:a3:a7:3f:b0: b9:59:70:eb:b3:f2:10:c7:fb:99:89:ff:86:bb:a0:8c:b7:11: 97:5b:dc:2b:43:6f:83:62:6c:f9:ab:5c:7b:76:83:bf:e3:47: fa:68:cb:c6:6f:a6:0a:69:92:1a:b4:c8:44:d6:1b:9f:38:fa: 95:79:25:68:f8:77:69:87:fd:da:5b:d4:00:64:3a:e5:29:ac: 17:45:06:d5:74:de:b5:5c:69:d1:93:8c:92:27:3d:05:65:0e: c6:8b:01:f0:aa:56:87:1a:13:29:62:15:32:22:fb:d4:ee:31: a3:6f:d1:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHH00F2gIoX3kdpsXz5olMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmM2YxMzMyY2ZmMDViMjJhM2E2NmE2ZDRjMzQ4ZmJjMDFk ZTExNWMwHhcNMjUxMjA2MTAwMjAxWhcNMjUxMjA3MTAwMjAxWjAzMTEwLwYDVQQD EyhkZDg5OTI3MmU2OThlMDY1MjI3NWY3ZjQ5MWI2N2Q5MDViMzY4OTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqe1bdHOzW4XNDp6aAVrkedNcuTKu 80UIPHj+gh6stTdM08h557WBeI4Kaf0Zrpp7JU1MOe0EHOSvOu7Y0fBjT00yfys2 72fMZxb6o336nF4d3zcZuf/H76tncrtDyC8IHevqDQeJ1wnahllb3pEgKYkU3Mml SjyYHtU7cqs/0DlxLokoHuKlIT7sv6AMSDMtk3tqPVfLMBb2UsbTVtmfCIacXqgH ngAOLuv5xytRa5rWH7RbNue9dGKk+QTR1O5/jYMgdDrYLksmafzC7WaANtbvESk1 szxrRvKouUktIVPe5t+kihobehgd9p8J4V5fVnI7beA2sQig4/dvjfjaYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2JknLmmOBlInX39JG2fZBbNokzMB8GA1UdIwQY MBaAFA8/EzLP8Fsio6ZqbUw0j7wB3hFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHo4VE1zX3dXeUtqcG1wdFREU1B2QUhlRVZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81MjNiOTUtM2RkYy00ODE4LTkyNjUt ZGFhZjI5MjExOTQ5LzEvRHo4VE1zX3dXeUtqcG1wdFREU1B2QUhlRVZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi81MjNiOTUtM2RkYy00ODE4LTkyNjUtZGFhZjI5MjExOTQ5 LzEvRHo4VE1zX3dXeUtqcG1wdFREU1B2QUhlRVZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdt2M0F0v 7/bKEUTlF328gvgdsHP0uqcJj/NmjdPITqH43/0JAYo47S1lVTM+lrrUvfRXZ/9Y kXfKvhMG1w7+Bj1SEAh4P27LCXcUtl21NUeSoj9L7/D9MwaqBbj7dloSNIsz8DUp 4+5XgMJubdBIGRPLEYYkW6LLxQE2vJ8nJFK6mS2TmOxR0s7kY1Wjpz+wuVlw67Py EMf7mYn/hrugjLcRl1vcK0Nvg2Js+atce3aDv+NH+mjLxm+mCmmSGrTIRNYbnzj6 lXklaPh3aYf92lvUAGQ65SmsF0UG1XTetVxp0ZOMkic9BWUOxosB8KpWhxoTKWIV MiL71O4xo2/RTw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:28:49 2025 by rpki-client