This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft File: DIZmK3UsijvnLoVEOU_5JvaPv34.mft (raw, json) Hash identifier: eMyWTs+9zt0rI9QJzvnjQQT3bIPymT0p5sv0SNNvypk= Subject key identifier: 14:40:94:AE:2E:22:02:51:A4:65:F4:2E:95:12:EE:DE:53:81:9D:50 Authority key identifier: 0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E Certificate issuer: /CN=0c86662b752c8a3be72e8544394ff926f68fbf7e Certificate serial: 019AF1D19C6383A90BC9DD6F5ECC7D873857 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 04:00:37 +0000 Manifest this update: Sat 06 Dec 2025 04:00:37 +0000 Manifest next update: Sun 07 Dec 2025 04:00:37 +0000 Files and hashes: 1: DIZmK3UsijvnLoVEOU_5JvaPv34.crl (hash: TCZC7F6RtedL2RI1x2RwBv5tBaLu0+sIB18JFa6ZTYk=) 2: OKYG51ny4JzR_NLTt0NMC5jjs5w.roa (hash: q7wWYvvmDZVEwvT4mSRrL9j7EyJqRlFav3ZfehvFtAs=) 3: ZQQ0gAGZL_jGDDuR_dzAPHQgjqs.roa (hash: 1IkjnF/CrXtM+w2XOvbsVxbee7zsKOEnEqn8FcXAMF8=) 4: qLpskkGdWMp75uesslOqcJ0MWnE.roa (hash: X4MuNwdwba0DvT/WVM9tY1i1XGTLnQOuEconDao1Nw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:9c:63:83:a9:0b:c9:dd:6f:5e:cc:7d:87:38:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c86662b752c8a3be72e8544394ff926f68fbf7e Validity Not Before: Dec 6 04:00:37 2025 GMT Not After : Dec 7 04:00:37 2025 GMT Subject: CN=144094ae2e220251a465f42e9512eede53819d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:f1:f5:45:35:f4:77:25:6d:6b:77:cc:f4:40: df:05:fb:e8:d3:92:c5:51:f3:01:0f:db:f4:52:5f: 3f:f7:ef:f3:7c:12:53:0c:19:c2:4f:00:20:c7:1c: 80:70:86:14:8a:6e:b4:4b:5b:d1:68:05:67:19:cd: 63:02:36:1c:a2:fc:ed:4d:60:ee:0a:bb:4f:12:50: ff:b0:be:c7:e6:d0:23:88:2f:17:07:3e:94:22:59: 91:75:7e:dd:10:f1:2f:09:f2:92:33:e3:9b:46:c1: 38:04:83:6a:be:ff:82:f4:35:a5:73:76:a8:9b:20: 4e:9c:ff:b2:6c:18:dd:d8:71:80:99:8a:35:97:88: 3c:4a:af:09:14:1c:35:5d:4b:d1:c3:59:15:33:01: 73:e1:59:81:7f:12:de:e1:da:64:be:d0:9d:e8:03: 83:c8:b0:80:f2:4b:ba:3f:f0:1e:68:c8:ce:1f:3a: a2:c4:ae:ca:98:71:12:3f:f6:2c:41:51:4a:43:81: 43:49:9e:ff:c7:12:2a:cb:f0:5c:21:41:42:f7:5d: 18:f4:e7:fa:4c:61:78:45:7a:de:93:88:3d:7a:de: 9a:d2:a8:0f:72:c1:20:4c:64:2c:e9:19:8f:d7:8a: 05:ac:d8:07:ae:41:20:85:14:61:91:03:16:94:4d: 35:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:40:94:AE:2E:22:02:51:A4:65:F4:2E:95:12:EE:DE:53:81:9D:50 X509v3 Authority Key Identifier: keyid:0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:7c:0e:c0:4b:16:8e:8d:f5:9c:31:27:c5:36:30:73:54:a8: 1f:ab:1d:c4:a0:ad:d3:7e:00:7b:4b:f6:b2:91:e5:e7:49:92: d6:da:ee:fe:b8:ac:4d:8e:7f:60:ae:77:12:9b:5f:ec:0d:ae: f3:1d:00:cb:ec:03:54:e8:17:d6:89:43:32:07:58:85:bb:1e: c9:34:74:25:da:0b:d9:86:c5:84:4f:80:c9:15:67:79:7f:34: 4a:ad:93:3b:3f:d7:58:5e:b4:9b:77:9f:fe:00:22:d7:cc:e9: 72:e8:58:75:40:b0:ea:aa:48:4f:3e:fb:65:b3:de:4e:bb:1f: 01:34:2e:a5:5a:fa:0c:a6:f0:89:14:ae:9e:59:60:13:02:4e: 38:a3:d7:f1:02:b4:ad:88:51:fd:d6:a7:d0:cc:5c:da:36:07: d1:3d:11:9d:ef:ae:65:99:19:46:93:be:66:d7:1b:93:0e:fc: 91:e2:7a:a1:c9:9e:4a:b8:3b:97:17:fd:b7:93:13:cf:3f:61: da:f0:bb:0f:92:28:b4:5a:fc:98:88:8b:a8:f9:a5:20:28:85: a9:8c:6e:a5:32:a3:dd:de:ce:1a:56:34:89:b7:e3:bb:bf:60: 52:ce:f7:a7:fa:38:bc:0b:7b:db:36:b6:ea:06:1b:47:16:71: 04:eb:46:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Zxjg6kLyd1vXsx9hzhXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjODY2NjJiNzUyYzhhM2JlNzJlODU0NDM5NGZmOTI2ZjY4 ZmJmN2UwHhcNMjUxMjA2MDQwMDM3WhcNMjUxMjA3MDQwMDM3WjAzMTEwLwYDVQQD EygxNDQwOTRhZTJlMjIwMjUxYTQ2NWY0MmU5NTEyZWVkZTUzODE5ZDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PH1RTX0dyVta3fM9EDfBfvo05LF UfMBD9v0Ul8/9+/zfBJTDBnCTwAgxxyAcIYUim60S1vRaAVnGc1jAjYcovztTWDu CrtPElD/sL7H5tAjiC8XBz6UIlmRdX7dEPEvCfKSM+ObRsE4BINqvv+C9DWlc3ao myBOnP+ybBjd2HGAmYo1l4g8Sq8JFBw1XUvRw1kVMwFz4VmBfxLe4dpkvtCd6AOD yLCA8ku6P/AeaMjOHzqixK7KmHESP/YsQVFKQ4FDSZ7/xxIqy/BcIUFC910Y9Of6 TGF4RXrek4g9et6a0qgPcsEgTGQs6RmP14oFrNgHrkEghRRhkQMWlE01FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRAlK4uIgJRpGX0LpUS7t5TgZ1QMB8GA1UdIwQY MBaAFAyGZit1LIo75y6FRDlP+Sb2j79+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRElabUszVXNpanZuTG9WRU9VXzVKdmFQdjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wOWM0YjItNDZhOS00Zjg4LTk5Yjgt MWNjYzljMjk1ZThlLzEvRElabUszVXNpanZuTG9WRU9VXzVKdmFQdjM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8wOWM0YjItNDZhOS00Zjg4LTk5YjgtMWNjYzljMjk1ZThl LzEvRElabUszVXNpanZuTG9WRU9VXzVKdmFQdjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHwOwEsW jo31nDEnxTYwc1SoH6sdxKCt034Ae0v2spHl50mS1tru/risTY5/YK53Eptf7A2u 8x0Ay+wDVOgX1olDMgdYhbseyTR0JdoL2YbFhE+AyRVneX80Sq2TOz/XWF60m3ef /gAi18zpcuhYdUCw6qpITz77ZbPeTrsfATQupVr6DKbwiRSunllgEwJOOKPX8QK0 rYhR/dan0Mxc2jYH0T0Rne+uZZkZRpO+Ztcbkw78keJ6ocmeSrg7lxf9t5MTzz9h 2vC7D5IotFr8mIiLqPmlICiFqYxupTKj3d7OGlY0ibfju79gUs73p/o4vAt72za2 6gYbRxZxBOtG+g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:39:46 2025 by rpki-client