This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft File: diZWxeZrgsBGVL4aJWKbH9allFY.mft (raw, json) Hash identifier: cMhbMNaIkiwMhrwE9cg+uwiAK2b9ByPsBL9rWWfdmBQ= Subject key identifier: CE:6B:79:69:0A:74:DF:2D:DC:7D:E0:7B:82:F9:F1:8D:F9:1E:32:AC Authority key identifier: 76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56 Certificate issuer: /CN=762656c5e66b82c04654be1a25629b1fd6a59456 Certificate serial: 019AF2768E8DBE60DECFE49F7006B78F0B58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft Manifest number: 1261 Signing time: Sat 06 Dec 2025 07:00:47 +0000 Manifest this update: Sat 06 Dec 2025 07:00:47 +0000 Manifest next update: Sun 07 Dec 2025 07:00:47 +0000 Files and hashes: 1: F2enBaDy_Qw9eOK5YyXd7O2TFyo.roa (hash: gx9j7t15QGkKCeRoIsEf7+ccbpVHUlLwcV3VvzvpL3Q=) 2: WBT1E8wMWVVtH50VHvbFOxWnsoc.roa (hash: 5BEbt/cVnX10Y8kVh9GNgAEAt1IoZtioMoHuC8FObvc=) 3: aBAGt66YKPdKQ8RR2EE80USkpUo.roa (hash: iC1feUzfX4kgYVZxGnHiEz5thaZLZj/NmxSIHfu8NW0=) 4: diZWxeZrgsBGVL4aJWKbH9allFY.crl (hash: UUMOtYy7bkRYbGM5VVVeUN84BH8EczebAK7Yl22pX8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:8e:8d:be:60:de:cf:e4:9f:70:06:b7:8f:0b:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=762656c5e66b82c04654be1a25629b1fd6a59456 Validity Not Before: Dec 6 07:00:47 2025 GMT Not After : Dec 7 07:00:47 2025 GMT Subject: CN=ce6b79690a74df2ddc7de07b82f9f18df91e32ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3b:cb:e3:6f:9c:72:6b:b0:48:65:77:2d:e5: 73:89:48:6a:f2:49:03:75:d2:09:e5:28:18:0a:2c: c0:cd:a4:11:44:a0:fa:a5:3b:11:ec:8f:e9:e5:5d: a0:4c:19:10:41:b1:9d:66:90:38:e5:15:e4:86:0a: 4a:c2:65:f2:83:48:25:2e:1d:0b:89:0d:c0:d2:b0: a6:93:52:b3:02:81:43:2f:7a:a6:37:81:27:76:1c: 7d:d7:28:d2:68:6b:f5:dc:ae:66:a4:ec:48:a1:ff: 32:35:e8:9f:14:ef:76:64:58:60:ba:7a:6f:ac:2e: e1:bd:b1:cb:80:6a:ad:0e:69:4e:72:9a:e8:00:5f: a9:b6:17:77:b2:08:c8:54:ae:49:90:dd:53:dc:9f: 74:68:7a:12:a3:e2:b6:f2:88:c0:d4:b2:72:af:6e: e3:4a:45:e3:bf:42:e3:59:85:2c:6c:2d:a9:51:e3: 7f:a3:13:be:80:7b:df:83:19:40:8e:20:65:5c:79: aa:6d:60:83:eb:c2:6b:5b:05:2d:6d:56:de:23:94: a1:77:0f:e0:62:1a:dd:5c:ca:3e:39:aa:6d:20:9c: b0:78:c6:b5:9e:e4:2c:66:e0:28:93:cf:59:ba:9a: 17:3c:84:5b:73:a4:0f:77:99:6f:eb:b2:8c:7e:a6: 79:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6B:79:69:0A:74:DF:2D:DC:7D:E0:7B:82:F9:F1:8D:F9:1E:32:AC X509v3 Authority Key Identifier: keyid:76:26:56:C5:E6:6B:82:C0:46:54:BE:1A:25:62:9B:1F:D6:A5:94:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diZWxeZrgsBGVL4aJWKbH9allFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/198c6b-d715-47b6-86c0-4d22c6b5b1fe/1/diZWxeZrgsBGVL4aJWKbH9allFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:f5:85:d0:0d:86:78:73:f7:0e:c3:62:5d:2a:dc:fc:f9:88: 03:1d:b2:4f:95:15:9d:41:e7:0a:1b:74:29:3c:72:84:78:d5: 2f:0d:cb:54:7c:61:44:45:4c:89:2b:c9:10:77:e1:1c:a0:f2: fc:05:15:b7:39:65:78:ec:22:84:04:75:40:35:2f:e1:eb:e6: b9:33:0e:85:87:5a:c7:71:75:df:ae:0c:aa:ec:50:7d:b3:d9: 71:73:4c:25:9c:27:80:49:32:d6:b8:d7:b6:59:43:36:88:99: 06:f0:75:fd:cb:7e:3e:99:c9:2b:92:ff:5c:00:bc:3c:25:7a: a9:75:d9:07:b8:e6:44:f6:e6:5c:14:fd:6d:be:60:e0:22:53: 21:8d:08:2e:fd:9b:1b:78:89:a0:14:3e:5b:fb:c6:85:0b:db: e4:d5:59:25:ab:39:09:9c:a7:8b:08:26:c5:5d:fa:1d:de:c2: 66:24:b3:c3:c4:17:24:a2:12:65:eb:28:73:c3:ba:09:5a:f5: 37:d5:78:69:cf:59:e1:99:0a:56:6e:e9:2f:5d:96:f0:73:9b: ab:56:22:84:09:3a:7a:14:12:9b:29:c8:49:4b:d8:45:b4:de: 51:86:84:0f:3a:a9:0f:14:36:36:83:ac:39:6a:a5:81:94:24: af:d6:eb:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydo6NvmDez+SfcAa3jwtYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MjY1NmM1ZTY2YjgyYzA0NjU0YmUxYTI1NjI5YjFmZDZh NTk0NTYwHhcNMjUxMjA2MDcwMDQ3WhcNMjUxMjA3MDcwMDQ3WjAzMTEwLwYDVQQD EyhjZTZiNzk2OTBhNzRkZjJkZGM3ZGUwN2I4MmY5ZjE4ZGY5MWUzMmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjvL42+ccmuwSGV3LeVziUhq8kkD ddIJ5SgYCizAzaQRRKD6pTsR7I/p5V2gTBkQQbGdZpA45RXkhgpKwmXyg0glLh0L iQ3A0rCmk1KzAoFDL3qmN4Endhx91yjSaGv13K5mpOxIof8yNeifFO92ZFhgunpv rC7hvbHLgGqtDmlOcproAF+pthd3sgjIVK5JkN1T3J90aHoSo+K28ojA1LJyr27j SkXjv0LjWYUsbC2pUeN/oxO+gHvfgxlAjiBlXHmqbWCD68JrWwUtbVbeI5Shdw/g YhrdXMo+OaptIJyweMa1nuQsZuAok89ZupoXPIRbc6QPd5lv67KMfqZ5qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5reWkKdN8t3H3ge4L58Y35HjKsMB8GA1UdIwQY MBaAFHYmVsXma4LARlS+GiVimx/WpZRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGlaV3hlWnJnc0JHVkw0YUpXS2JIOWFsbEZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8xOThjNmItZDcxNS00N2I2LTg2YzAt NGQyMmM2YjViMWZlLzEvZGlaV3hlWnJnc0JHVkw0YUpXS2JIOWFsbEZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8xOThjNmItZDcxNS00N2I2LTg2YzAtNGQyMmM2YjViMWZl LzEvZGlaV3hlWnJnc0JHVkw0YUpXS2JIOWFsbEZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPWF0A2G eHP3DsNiXSrc/PmIAx2yT5UVnUHnCht0KTxyhHjVLw3LVHxhREVMiSvJEHfhHKDy /AUVtzlleOwihAR1QDUv4evmuTMOhYdax3F1364MquxQfbPZcXNMJZwngEky1rjX tllDNoiZBvB1/ct+PpnJK5L/XAC8PCV6qXXZB7jmRPbmXBT9bb5g4CJTIY0ILv2b G3iJoBQ+W/vGhQvb5NVZJas5CZyniwgmxV36Hd7CZiSzw8QXJKISZesoc8O6CVr1 N9V4ac9Z4ZkKVm7pL12W8HObq1YihAk6ehQSmynISUvYRbTeUYaEDzqpDxQ2NoOs OWqlgZQkr9brxw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:20:24 2025 by rpki-client