This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft File: dzDRbvGVhk8NvoqGca-2N2g7djs.mft (raw, json) Hash identifier: jaqZYjJSn8Z1mvRKibyC0zeH8bd1VFx2AqShgHRAn3g= Subject key identifier: 05:7B:88:DC:54:CC:25:93:2D:78:51:DB:53:55:A5:1E:46:F3:27:0B Authority key identifier: 77:30:D1:6E:F1:95:86:4F:0D:BE:8A:86:71:AF:B6:37:68:3B:76:3B Certificate issuer: /CN=7730d16ef195864f0dbe8a8671afb637683b763b Certificate serial: 019AF12D16F642B4B83CE6BEFABDC94EDEE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzDRbvGVhk8NvoqGca-2N2g7djs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft Manifest number: 7F Signing time: Sat 06 Dec 2025 01:00:55 +0000 Manifest this update: Sat 06 Dec 2025 01:00:55 +0000 Manifest next update: Sun 07 Dec 2025 01:00:55 +0000 Files and hashes: 1: 0lt-q8djajXZSW3y7vmC1ACoEI4.roa (hash: PA0Abb9rgpKbk80NoqHuVJw2zbwCWQARy+i28/n0L1A=) 2: dzDRbvGVhk8NvoqGca-2N2g7djs.crl (hash: tDHQ72H7pL5lM8QNdFB8A8I6Utsyr6sVsCyU6cersAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft rsync://rpki.ripe.net/repository/DEFAULT/dzDRbvGVhk8NvoqGca-2N2g7djs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:16:f6:42:b4:b8:3c:e6:be:fa:bd:c9:4e:de:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7730d16ef195864f0dbe8a8671afb637683b763b Validity Not Before: Dec 6 01:00:55 2025 GMT Not After : Dec 7 01:00:55 2025 GMT Subject: CN=057b88dc54cc25932d7851db5355a51e46f3270b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:84:da:15:01:86:e2:df:bc:80:98:73:64:dd: d2:e8:89:34:b4:1e:2a:df:8c:f6:6a:e2:ee:d4:92: b3:b0:46:25:ce:39:65:0e:68:0a:0e:01:25:d5:ab: b6:80:fd:27:d3:a3:56:6c:77:b4:c4:b6:84:cb:4e: 9e:25:79:6e:83:53:d0:3b:d3:6f:f4:04:7d:50:5d: c4:ba:17:b1:79:ea:0f:01:b2:bb:7b:76:64:d6:9f: 15:50:24:eb:9c:ee:60:d8:89:fd:08:4b:22:16:56: eb:fa:cb:fd:78:8e:76:75:3e:5d:b3:1a:99:8b:9b: 22:a0:46:bc:04:0d:dc:7b:0d:2e:48:a5:a4:07:0d: 6e:e1:ba:fc:c7:78:6d:6c:16:c7:a1:f6:a4:ee:af: fa:fe:5d:7d:63:7e:6d:d6:82:4a:cf:52:e7:7a:d6: c6:43:7c:a5:2d:3b:d1:85:6a:19:a5:1d:c7:4c:8b: ec:99:5c:ad:f3:cc:5c:ba:b6:9f:8e:ff:52:00:ff: ae:e9:28:9c:b2:c8:7a:16:4a:6c:94:68:f9:57:bb: c4:ea:81:df:9c:14:d5:af:b5:e0:d2:70:99:63:b9: 6a:4d:31:7b:47:17:81:de:76:a8:af:59:97:74:d2: 47:a3:b2:e6:3c:ed:f8:36:5b:ba:f6:75:33:de:19: 50:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:7B:88:DC:54:CC:25:93:2D:78:51:DB:53:55:A5:1E:46:F3:27:0B X509v3 Authority Key Identifier: keyid:77:30:D1:6E:F1:95:86:4F:0D:BE:8A:86:71:AF:B6:37:68:3B:76:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzDRbvGVhk8NvoqGca-2N2g7djs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/fcd855-fc2c-460e-bcea-8d7c8ac0621a/1/dzDRbvGVhk8NvoqGca-2N2g7djs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:20:28:16:67:69:59:4c:42:80:42:86:43:e4:9e:a9:73:4a: ff:79:31:76:62:48:84:64:a9:0b:1a:c0:4d:79:c5:08:ae:27: bc:65:8a:1b:80:71:1f:ae:20:43:7b:f4:8b:56:e9:ab:50:ef: 36:e4:b4:99:95:3e:31:b8:88:fc:68:24:aa:98:a2:c9:82:7e: 75:72:5f:49:2a:29:98:06:7a:8a:33:77:76:b2:17:55:ad:53: b6:e7:18:8f:82:04:55:c6:26:cf:e1:93:90:ec:bc:b0:0c:df: 44:a7:d8:31:ff:49:64:95:41:4c:73:74:74:b1:3d:c3:b6:a0: 4e:ca:fd:39:0c:cf:3f:bf:b6:3a:91:91:14:ec:23:1e:10:07: c7:2a:f2:ea:4f:b4:0e:95:c6:62:f2:5e:38:01:5c:36:ec:d6: 3d:18:13:c0:3d:a4:37:b1:61:a7:e3:4b:32:16:15:05:81:d2: f7:49:9d:89:03:fd:2e:df:7a:8d:b2:b0:ec:3f:e5:70:73:5f: fc:b9:80:5e:85:dd:d8:00:fc:bb:a5:54:cc:ab:21:7a:1c:58: 1d:1c:6e:df:ea:75:06:5a:b7:f6:11:e6:b3:c6:7d:96:83:04: cf:6e:fd:ef:4b:72:75:d0:5e:d5:ee:e1:e0:9a:e5:17:c2:fe: 7a:41:dc:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLRb2QrS4POa++r3JTt7gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MzBkMTZlZjE5NTg2NGYwZGJlOGE4NjcxYWZiNjM3Njgz Yjc2M2IwHhcNMjUxMjA2MDEwMDU1WhcNMjUxMjA3MDEwMDU1WjAzMTEwLwYDVQQD EygwNTdiODhkYzU0Y2MyNTkzMmQ3ODUxZGI1MzU1YTUxZTQ2ZjMyNzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+oTaFQGG4t+8gJhzZN3S6Ik0tB4q 34z2auLu1JKzsEYlzjllDmgKDgEl1au2gP0n06NWbHe0xLaEy06eJXlug1PQO9Nv 9AR9UF3EuhexeeoPAbK7e3Zk1p8VUCTrnO5g2In9CEsiFlbr+sv9eI52dT5dsxqZ i5sioEa8BA3cew0uSKWkBw1u4br8x3htbBbHofak7q/6/l19Y35t1oJKz1LnetbG Q3ylLTvRhWoZpR3HTIvsmVyt88xcurafjv9SAP+u6Sicssh6FkpslGj5V7vE6oHf nBTVr7Xg0nCZY7lqTTF7RxeB3naor1mXdNJHo7LmPO34Nlu69nUz3hlQyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAV7iNxUzCWTLXhR21NVpR5G8ycLMB8GA1UdIwQY MBaAFHcw0W7xlYZPDb6KhnGvtjdoO3Y7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHpEUmJ2R1ZoazhOdm9xR2NhLTJOMmc3ZGpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mY2Q4NTUtZmMyYy00NjBlLWJjZWEt OGQ3YzhhYzA2MjFhLzEvZHpEUmJ2R1ZoazhOdm9xR2NhLTJOMmc3ZGpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mY2Q4NTUtZmMyYy00NjBlLWJjZWEtOGQ3YzhhYzA2MjFh LzEvZHpEUmJ2R1ZoazhOdm9xR2NhLTJOMmc3ZGpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATiAoFmdp WUxCgEKGQ+SeqXNK/3kxdmJIhGSpCxrATXnFCK4nvGWKG4BxH64gQ3v0i1bpq1Dv NuS0mZU+MbiI/GgkqpiiyYJ+dXJfSSopmAZ6ijN3drIXVa1TtucYj4IEVcYmz+GT kOy8sAzfRKfYMf9JZJVBTHN0dLE9w7agTsr9OQzPP7+2OpGRFOwjHhAHxyry6k+0 DpXGYvJeOAFcNuzWPRgTwD2kN7Fhp+NLMhYVBYHS90mdiQP9Lt96jbKw7D/lcHNf /LmAXoXd2AD8u6VUzKshehxYHRxu3+p1Blq39hHms8Z9loMEz27970tyddBe1e7h 4JrlF8L+ekHc1w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:45 2025 by rpki-client