This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft File: dzrmY60KGjBy29hnmSt9jfJaRJo.mft (raw, json) Hash identifier: EannJftGEDzzGd/SU1by56VREA4JLvxnZL9xMabNF4g= Subject key identifier: A4:ED:CD:F9:E1:1A:9E:4D:24:7D:53:47:F9:E6:93:20:36:5E:49:5F Authority key identifier: 77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A Certificate issuer: /CN=773ae663ad0a1a3072dbd867992b7d8df25a449a Certificate serial: 019AF50A32DC72433C73B6B00B451115854C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft Manifest number: 16E0 Signing time: Sat 06 Dec 2025 19:01:17 +0000 Manifest this update: Sat 06 Dec 2025 19:01:17 +0000 Manifest next update: Sun 07 Dec 2025 19:01:17 +0000 Files and hashes: 1: W3cGjj5mP2VwYAqEMAUXYILQLSQ.roa (hash: lkOt9jyUsLPzSy3eR6w1RPwgQQo35GOFeKt51+wXZBI=) 2: dzrmY60KGjBy29hnmSt9jfJaRJo.crl (hash: EWBvAo2GkGvhEF+9X8s3H1XMpj7RCCWGlzBwFYpQTJY=) 3: eRk2-urEJNMbXDnC8eQR6ctcmdk.roa (hash: o6MwtXvGmVhwal2DT9hiuath6IiwR2vvCWGgaPAuFxc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:32:dc:72:43:3c:73:b6:b0:0b:45:11:15:85:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=773ae663ad0a1a3072dbd867992b7d8df25a449a Validity Not Before: Dec 6 19:01:17 2025 GMT Not After : Dec 7 19:01:17 2025 GMT Subject: CN=a4edcdf9e11a9e4d247d5347f9e69320365e495f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:67:3e:b1:95:ff:de:c7:b3:e5:b4:78:e7:4d: 80:c3:e6:5a:30:6a:ea:f9:3c:75:a2:6b:1d:f4:bf: 83:7f:07:5f:ed:ef:10:6b:98:10:b3:25:df:b4:bb: 1a:87:6b:be:75:b4:8d:a7:7c:de:5a:55:fb:db:65: 5e:b2:0b:7b:9f:ba:eb:2d:ff:c6:35:78:e9:a7:56: cd:ab:8f:eb:7d:88:5c:19:f0:e9:3b:e8:53:9b:fc: 03:f7:ce:2f:ca:02:97:ec:4b:d9:d4:84:8e:3e:b7: 78:a0:30:cd:8e:af:85:e9:49:5a:29:47:be:52:37: 2e:8a:25:c2:fa:56:98:7d:b2:93:b1:82:fd:2d:ba: 86:88:98:1f:84:18:2c:69:bd:c3:74:8c:14:2a:58: eb:c5:6c:f8:fa:2f:d5:73:e4:f6:83:0e:6f:5f:fd: d1:ce:98:f0:58:95:90:74:fc:c5:72:69:39:19:7f: e7:e3:7f:fd:b1:6c:d6:03:de:5f:d0:33:6e:43:a9: 0d:e4:d4:f0:87:61:51:cc:82:13:0d:06:5d:54:e0: 49:2a:2b:2b:f8:fc:86:bd:e4:87:4a:18:51:a7:07: 50:fa:e9:28:44:34:dd:f3:f0:d4:9e:58:35:df:d3: 9b:51:c5:13:8d:93:71:40:f0:07:ec:0c:26:b7:93: d4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:ED:CD:F9:E1:1A:9E:4D:24:7D:53:47:F9:E6:93:20:36:5E:49:5F X509v3 Authority Key Identifier: keyid:77:3A:E6:63:AD:0A:1A:30:72:DB:D8:67:99:2B:7D:8D:F2:5A:44:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzrmY60KGjBy29hnmSt9jfJaRJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/092fdc-c300-41a5-9015-662ec818d23d/1/dzrmY60KGjBy29hnmSt9jfJaRJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:ab:7c:2d:6d:ab:90:ed:df:be:f6:af:37:54:bb:1b:29:b2: e4:5d:9a:80:81:40:68:e8:72:48:c1:9f:78:61:7c:e6:60:04: b6:20:a3:df:b0:7c:54:53:5e:6d:e5:0b:13:11:7a:44:5c:ec: 33:ca:3d:6f:5a:81:dc:8b:14:72:17:43:88:9f:ce:5c:75:17: 1a:1e:29:24:26:79:92:37:15:21:5d:72:b5:e0:9c:46:91:be: ae:9a:4c:67:01:24:e0:91:05:55:30:53:c6:c0:f7:06:d0:7d: 13:04:b4:f3:db:d8:48:4e:bf:af:4f:c8:45:7f:af:cc:de:3a: 84:89:3d:a0:83:f6:06:69:52:1b:c1:21:5b:79:d0:3d:af:ad: 5e:14:ce:ee:c0:74:4a:71:2f:46:55:4b:be:ee:a8:a3:de:ad: 13:17:6a:57:31:41:40:9b:60:48:75:4d:97:0e:0e:2f:6e:e3: cf:4e:c9:1f:44:45:bd:8f:33:6e:41:38:e1:48:8d:fe:03:b2: e4:dd:0b:5c:87:af:0a:65:a9:a6:0b:26:b2:24:be:20:ec:7c: 2b:41:77:85:13:49:75:57:6f:3b:d4:7c:7a:65:83:16:53:32: 28:d4:0e:52:45:e0:6b:53:a8:e0:23:4a:08:b8:ae:d3:60:de: 40:21:e6:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CjLcckM8c7awC0URFYVMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3M2FlNjYzYWQwYTFhMzA3MmRiZDg2Nzk5MmI3ZDhkZjI1 YTQ0OWEwHhcNMjUxMjA2MTkwMTE3WhcNMjUxMjA3MTkwMTE3WjAzMTEwLwYDVQQD EyhhNGVkY2RmOWUxMWE5ZTRkMjQ3ZDUzNDdmOWU2OTMyMDM2NWU0OTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2c+sZX/3sez5bR4502Aw+ZaMGrq +Tx1omsd9L+Dfwdf7e8Qa5gQsyXftLsah2u+dbSNp3zeWlX722Vesgt7n7rrLf/G NXjpp1bNq4/rfYhcGfDpO+hTm/wD984vygKX7EvZ1ISOPrd4oDDNjq+F6UlaKUe+ UjcuiiXC+laYfbKTsYL9LbqGiJgfhBgsab3DdIwUKljrxWz4+i/Vc+T2gw5vX/3R zpjwWJWQdPzFcmk5GX/n43/9sWzWA95f0DNuQ6kN5NTwh2FRzIITDQZdVOBJKisr +PyGveSHShhRpwdQ+ukoRDTd8/DUnlg139ObUcUTjZNxQPAH7Awmt5PUHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTtzfnhGp5NJH1TR/nmkyA2XklfMB8GA1UdIwQY MBaAFHc65mOtChowctvYZ5krfY3yWkSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHpybVk2MEtHakJ5Mjlobm1TdDlqZkphUkpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wOTJmZGMtYzMwMC00MWE1LTkwMTUt NjYyZWM4MThkMjNkLzEvZHpybVk2MEtHakJ5Mjlobm1TdDlqZkphUkpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8wOTJmZGMtYzMwMC00MWE1LTkwMTUtNjYyZWM4MThkMjNk LzEvZHpybVk2MEtHakJ5Mjlobm1TdDlqZkphUkpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASat8LW2r kO3fvvavN1S7Gymy5F2agIFAaOhySMGfeGF85mAEtiCj37B8VFNebeULExF6RFzs M8o9b1qB3IsUchdDiJ/OXHUXGh4pJCZ5kjcVIV1yteCcRpG+rppMZwEk4JEFVTBT xsD3BtB9EwS089vYSE6/r0/IRX+vzN46hIk9oIP2BmlSG8EhW3nQPa+tXhTO7sB0 SnEvRlVLvu6oo96tExdqVzFBQJtgSHVNlw4OL27jz07JH0RFvY8zbkE44UiN/gOy 5N0LXIevCmWppgsmsiS+IOx8K0F3hRNJdVdvO9R8emWDFlMyKNQOUkXga1Oo4CNK CLiu02DeQCHm4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 22:06:54 2025 by rpki-client