This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft File: dZBZSelj01d74HYybKC5H_MvloQ.mft (raw, json) Hash identifier: XABR0wQyNOc7wzLZMJk1nht+8WJKqr4btAoxG7TkQTs= Subject key identifier: C4:2E:64:1F:4F:72:E6:FF:51:9D:0F:5F:5A:8F:0C:71:0C:8C:F8:E1 Authority key identifier: 75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84 Certificate issuer: /CN=75905949e963d3577be076326ca0b91ff32f9684 Certificate serial: 019B318C7399938377C7BA6A31E4B52E559B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft Manifest number: 08A7 Signing time: Thu 18 Dec 2025 13:00:46 +0000 Manifest this update: Thu 18 Dec 2025 13:00:46 +0000 Manifest next update: Fri 19 Dec 2025 13:00:46 +0000 Files and hashes: 1: 6DM2EcyU67ptxBh9GKlJrzks2YY.roa (hash: dGsT7/dH6GvyheXKVe0ZbgWrcxrzH7zYFhEqctDv4NQ=) 2: GsWSBNzv988JIATL2hLeFJWT77g.roa (hash: Ly0cVrt55lxuS7TrsXNQWpKEZ4VseFVE3p+bnlbkQgs=) 3: dZBZSelj01d74HYybKC5H_MvloQ.crl (hash: lgcBij/K2a9lOibZWwQbGjTZu0PTwE6HHMRCC6aGZQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:73:99:93:83:77:c7:ba:6a:31:e4:b5:2e:55:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75905949e963d3577be076326ca0b91ff32f9684 Validity Not Before: Dec 18 13:00:46 2025 GMT Not After : Dec 19 13:00:46 2025 GMT Subject: CN=c42e641f4f72e6ff519d0f5f5a8f0c710c8cf8e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:42:63:f6:07:ca:c1:e6:26:22:9a:f6:74:84: 11:46:3b:c4:22:f2:d8:ba:e8:8f:08:0e:d0:d9:ee: 28:2a:4e:d4:aa:bd:8e:7b:e6:bb:b5:01:07:d7:71: 22:da:02:46:e2:4f:61:00:0a:5b:11:b1:c6:37:ba: af:9c:55:fa:dc:9b:07:66:d9:8f:f0:99:65:11:b9: 5e:6e:71:bf:82:84:8d:4e:ae:3e:29:9c:f1:13:f7: 44:0f:62:ee:9d:8b:88:2a:15:a2:fe:22:30:bb:ee: b9:f2:75:44:75:1d:6e:65:20:a1:71:df:36:23:21: c7:60:ae:e1:24:95:2a:87:b7:98:d5:ba:4d:ce:27: 77:8c:96:7c:1e:a6:21:69:e6:f8:76:3d:b7:a0:0b: 0b:23:18:d6:a8:3a:d3:32:dd:fa:84:12:04:59:26: c0:81:b8:8b:ac:c2:79:f4:2b:f7:3d:4f:a5:5c:64: ad:a1:42:ee:be:19:01:4e:c8:cd:50:d2:f9:3a:e5: e4:c3:62:b9:16:d5:14:fe:02:09:79:9e:02:12:d6: dd:08:c9:5c:d6:14:8e:0a:3f:d4:60:5e:c8:36:ac: a7:8d:72:80:bb:16:90:18:a0:50:59:cb:3f:cf:38: 0b:94:0e:7e:76:8a:90:19:5a:16:3c:e4:2a:83:b3: 86:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:2E:64:1F:4F:72:E6:FF:51:9D:0F:5F:5A:8F:0C:71:0C:8C:F8:E1 X509v3 Authority Key Identifier: keyid:75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:87:83:b7:3b:f0:fb:4c:67:ff:78:a5:4c:ef:34:56:17:2c: 58:14:e7:03:ce:e5:8d:cd:b0:4f:e1:75:61:87:f8:66:e4:2f: 7b:8f:91:98:f3:09:f2:df:dc:00:4b:f4:4d:4b:0f:5b:7e:6f: 8e:24:a6:91:13:23:f9:69:6c:4a:fc:bc:36:3d:cc:bf:03:7c: 86:3a:62:4c:c9:66:dd:b8:ea:73:8b:02:0d:f1:97:f9:f1:95: 7f:5c:76:2c:b7:95:67:fb:1f:56:b1:82:72:c3:4b:e9:b6:ca: 12:cf:d8:54:22:d0:1a:ef:3a:bc:8f:3e:50:e7:60:10:53:1d: 0f:31:83:6c:8c:fe:00:82:4b:21:cc:ca:7c:4f:23:89:a2:41: 30:e1:48:f4:1b:fa:3d:d7:06:d4:b5:ef:26:5d:c2:ce:47:74: 72:1d:35:25:ab:33:9b:81:20:19:dc:c6:91:9a:35:ef:9b:ad: 8a:05:d3:9f:ef:94:22:fd:8c:9d:95:5d:28:b6:69:45:07:e9: ea:0a:65:d2:11:55:b5:26:3f:e4:eb:ab:ac:2b:67:50:11:d9: 48:69:3f:69:6a:74:87:6b:b2:74:d4:30:cc:b6:f0:10:a9:26: b9:5d:6e:62:99:3c:85:42:13:7e:f8:a4:2a:68:94:41:a6:09: bd:d1:3a:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjHOZk4N3x7pqMeS1LlWbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1OTA1OTQ5ZTk2M2QzNTc3YmUwNzYzMjZjYTBiOTFmZjMy Zjk2ODQwHhcNMjUxMjE4MTMwMDQ2WhcNMjUxMjE5MTMwMDQ2WjAzMTEwLwYDVQQD EyhjNDJlNjQxZjRmNzJlNmZmNTE5ZDBmNWY1YThmMGM3MTBjOGNmOGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUJj9gfKweYmIpr2dIQRRjvEIvLY uuiPCA7Q2e4oKk7Uqr2Oe+a7tQEH13Ei2gJG4k9hAApbEbHGN7qvnFX63JsHZtmP 8JllEblebnG/goSNTq4+KZzxE/dED2LunYuIKhWi/iIwu+658nVEdR1uZSChcd82 IyHHYK7hJJUqh7eY1bpNzid3jJZ8HqYhaeb4dj23oAsLIxjWqDrTMt36hBIEWSbA gbiLrMJ59Cv3PU+lXGStoULuvhkBTsjNUNL5OuXkw2K5FtUU/gIJeZ4CEtbdCMlc 1hSOCj/UYF7INqynjXKAuxaQGKBQWcs/zzgLlA5+doqQGVoWPOQqg7OGbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQuZB9Pcub/UZ0PX1qPDHEMjPjhMB8GA1UdIwQY MBaAFHWQWUnpY9NXe+B2MmyguR/zL5aEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFpCWlNlbGowMWQ3NEhZeWJLQzVIX012bG9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kNjFmNzMtYWMwYi00NWJjLWE1YTQt MWE4MzAxYjdlNmRlLzEvZFpCWlNlbGowMWQ3NEhZeWJLQzVIX012bG9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9kNjFmNzMtYWMwYi00NWJjLWE1YTQtMWE4MzAxYjdlNmRl LzEvZFpCWlNlbGowMWQ3NEhZeWJLQzVIX012bG9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYeDtzvw +0xn/3ilTO80VhcsWBTnA87ljc2wT+F1YYf4ZuQve4+RmPMJ8t/cAEv0TUsPW35v jiSmkRMj+WlsSvy8Nj3MvwN8hjpiTMlm3bjqc4sCDfGX+fGVf1x2LLeVZ/sfVrGC csNL6bbKEs/YVCLQGu86vI8+UOdgEFMdDzGDbIz+AIJLIczKfE8jiaJBMOFI9Bv6 PdcG1LXvJl3Czkd0ch01Jaszm4EgGdzGkZo175utigXTn++UIv2MnZVdKLZpRQfp 6gpl0hFVtSY/5OurrCtnUBHZSGk/aWp0h2uydNQwzLbwEKkmuV1uYpk8hUITfvik KmiUQaYJvdE6Cg== -----END CERTIFICATE-----Generated at Thu Dec 18 19:05:33 2025 by rpki-client