This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft File: dz4yeLqiScFN5gXclkssJ1Xf7Po.mft (raw, json) Hash identifier: 6npDi4KhgSzNAVTnm1edaNYkQ9S5Ril4znm1dhwRs+U= Subject key identifier: 6B:1C:69:C8:D7:E9:04:D1:19:27:20:0A:DF:BB:BA:96:DB:0A:2B:6F Authority key identifier: 77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA Certificate issuer: /CN=773e3278baa249c14de605dc964b2c2755dfecfa Certificate serial: 019AF38913D0ABF8C71BBCCD255901E9F1BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 12:00:38 +0000 Manifest this update: Sat 06 Dec 2025 12:00:38 +0000 Manifest next update: Sun 07 Dec 2025 12:00:38 +0000 Files and hashes: 1: dz4yeLqiScFN5gXclkssJ1Xf7Po.crl (hash: YObnSXtD10+9IvvvN+8LTS8TnCacMHQ/f5nzv0hSCcA=) 2: rMYX2ngJRfk9a7fGX1cc8xAfsos.roa (hash: zZBPIZevys4Y238DbVgB+9WvN4FdGE3xhipQLPtn3sg=) 3: z6ZVSnIWLOcBxsAI1RP3xusBmDI.roa (hash: 0P2kU02ZAocYSBgE7zWtiaNGeOEg/Gg5PfdYqLhXNf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:13:d0:ab:f8:c7:1b:bc:cd:25:59:01:e9:f1:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=773e3278baa249c14de605dc964b2c2755dfecfa Validity Not Before: Dec 6 12:00:38 2025 GMT Not After : Dec 7 12:00:38 2025 GMT Subject: CN=6b1c69c8d7e904d11927200adfbbba96db0a2b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5f:4d:9c:04:ac:13:75:de:dd:17:ab:f6:b6: 17:7f:50:60:b3:31:11:0d:b0:54:df:df:f2:12:20: f0:db:a2:ac:c5:2a:54:66:39:ac:45:18:45:e3:37: 7b:ad:5d:95:28:4f:a8:89:e6:e0:6f:53:4e:ee:1a: eb:8b:ae:e2:c2:0b:e3:81:e2:ec:11:e4:0f:b5:13: 95:b3:97:e7:90:8a:7c:9f:ed:1a:cc:ba:9a:53:28: 32:89:7c:a6:81:54:0e:d8:35:d6:83:92:cc:16:f3: 50:03:f2:44:ed:fd:1c:0c:6a:cc:c2:a3:7b:53:6e: 0f:2b:05:76:12:9e:2d:71:22:6e:b9:3a:dc:4e:dc: 1f:75:96:84:ee:4b:ab:f0:ba:79:17:79:d4:0b:50: ee:ec:ad:a7:7c:66:07:a1:b7:be:64:74:a4:44:bd: 6f:68:c0:8b:1e:8a:94:15:de:e9:08:77:29:db:d9: 64:85:d0:3d:25:bc:1d:7e:a3:18:2f:f1:f7:0e:44: 20:ff:ea:30:43:69:19:27:dc:b7:ac:43:0f:16:64: 89:15:cf:8f:c3:c9:c9:59:2f:32:a8:2c:38:90:51: 96:4a:ae:34:b8:79:76:5d:a5:38:a7:b9:51:95:d8: c1:58:54:33:d8:bc:a1:ae:38:05:d2:b5:99:6b:09: 10:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1C:69:C8:D7:E9:04:D1:19:27:20:0A:DF:BB:BA:96:DB:0A:2B:6F X509v3 Authority Key Identifier: keyid:77:3E:32:78:BA:A2:49:C1:4D:E6:05:DC:96:4B:2C:27:55:DF:EC:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dz4yeLqiScFN5gXclkssJ1Xf7Po.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/42ec46-eb84-475a-a478-1f14ec805390/1/dz4yeLqiScFN5gXclkssJ1Xf7Po.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:0c:9a:92:6b:c0:38:6b:9d:f3:d0:50:af:ca:7d:99:01:38: 78:de:ac:67:7c:57:84:ce:4b:57:3c:7c:c6:70:14:8a:2b:39: 95:76:cc:91:f2:66:82:ae:4a:c6:5c:5a:5d:64:ea:5a:ae:c3: fe:4b:f2:2c:f4:96:e1:df:b5:63:42:d9:be:72:89:0d:c0:68: 1c:68:be:46:cf:49:45:63:0c:aa:aa:20:60:aa:4d:03:45:af: 4d:c9:a9:e4:e3:2f:c6:cf:29:6f:70:26:fb:f4:ae:a1:c1:1e: 8b:78:6f:24:14:47:48:e2:d0:97:b8:c8:b7:b8:62:ae:8d:ad: 38:4a:04:27:98:1a:95:38:7e:2c:ed:ba:87:5a:43:8c:0a:92: d4:d5:f2:75:25:0d:be:07:47:73:73:ad:16:08:b9:05:20:b6: fe:be:73:72:85:56:a7:81:e4:94:9b:06:c4:b7:a6:9f:27:83: 97:3d:b5:a0:f0:6e:f9:77:e6:3d:6e:04:2c:a4:20:b5:4a:81: f0:15:5a:62:65:c9:85:73:56:38:30:b8:d1:8d:b9:a1:46:4f: 4b:ff:ea:5e:1d:fb:41:a4:e6:e5:b2:af:1d:d1:dd:14:e8:b8: c4:b5:3d:28:4f:35:45:bf:d8:5d:6b:a5:3c:92:bd:3f:8b:0f: ac:99:3b:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziRPQq/jHG7zNJVkB6fG+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3M2UzMjc4YmFhMjQ5YzE0ZGU2MDVkYzk2NGIyYzI3NTVk ZmVjZmEwHhcNMjUxMjA2MTIwMDM4WhcNMjUxMjA3MTIwMDM4WjAzMTEwLwYDVQQD Eyg2YjFjNjljOGQ3ZTkwNGQxMTkyNzIwMGFkZmJiYmE5NmRiMGEyYjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3l9NnASsE3Xe3Rer9rYXf1BgszER DbBU39/yEiDw26KsxSpUZjmsRRhF4zd7rV2VKE+oiebgb1NO7hrri67iwgvjgeLs EeQPtROVs5fnkIp8n+0azLqaUygyiXymgVQO2DXWg5LMFvNQA/JE7f0cDGrMwqN7 U24PKwV2Ep4tcSJuuTrcTtwfdZaE7kur8Lp5F3nUC1Du7K2nfGYHobe+ZHSkRL1v aMCLHoqUFd7pCHcp29lkhdA9JbwdfqMYL/H3DkQg/+owQ2kZJ9y3rEMPFmSJFc+P w8nJWS8yqCw4kFGWSq40uHl2XaU4p7lRldjBWFQz2LyhrjgF0rWZawkQnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGscacjX6QTRGScgCt+7upbbCitvMB8GA1UdIwQY MBaAFHc+Mni6oknBTeYF3JZLLCdV3+z6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHo0eWVMcWlTY0ZONWdYY2xrc3NKMVhmN1BvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80MmVjNDYtZWI4NC00NzVhLWE0Nzgt MWYxNGVjODA1MzkwLzEvZHo0eWVMcWlTY0ZONWdYY2xrc3NKMVhmN1BvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy80MmVjNDYtZWI4NC00NzVhLWE0NzgtMWYxNGVjODA1Mzkw LzEvZHo0eWVMcWlTY0ZONWdYY2xrc3NKMVhmN1BvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAyakmvA OGud89BQr8p9mQE4eN6sZ3xXhM5LVzx8xnAUiis5lXbMkfJmgq5KxlxaXWTqWq7D /kvyLPSW4d+1Y0LZvnKJDcBoHGi+Rs9JRWMMqqogYKpNA0WvTcmp5OMvxs8pb3Am +/SuocEei3hvJBRHSOLQl7jIt7hiro2tOEoEJ5galTh+LO26h1pDjAqS1NXydSUN vgdHc3OtFgi5BSC2/r5zcoVWp4HklJsGxLemnyeDlz21oPBu+XfmPW4ELKQgtUqB 8BVaYmXJhXNWODC40Y25oUZPS//qXh37QaTm5bKvHdHdFOi4xLU9KE81Rb/YXWul PJK9P4sPrJk7XA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:37:22 2025 by rpki-client