This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft File: dZBZSelj01d74HYybKC5H_MvloQ.mft (raw, json) Hash identifier: PRGIWCzoERsIvtkb+11TswhreZ7AeQj6QDmFpWl+Mk8= Subject key identifier: AD:5D:4D:A9:8D:E8:3B:46:37:D5:5C:38:60:B9:48:D6:07:88:E3:7A Authority key identifier: 75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84 Certificate issuer: /CN=75905949e963d3577be076326ca0b91ff32f9684 Certificate serial: 019AF1D2549E48A5D0EAAF463BD5B51C3EDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft Manifest number: 0886 Signing time: Sat 06 Dec 2025 04:01:24 +0000 Manifest this update: Sat 06 Dec 2025 04:01:24 +0000 Manifest next update: Sun 07 Dec 2025 04:01:24 +0000 Files and hashes: 1: 6DM2EcyU67ptxBh9GKlJrzks2YY.roa (hash: dGsT7/dH6GvyheXKVe0ZbgWrcxrzH7zYFhEqctDv4NQ=) 2: GsWSBNzv988JIATL2hLeFJWT77g.roa (hash: Ly0cVrt55lxuS7TrsXNQWpKEZ4VseFVE3p+bnlbkQgs=) 3: dZBZSelj01d74HYybKC5H_MvloQ.crl (hash: XNaap5m6CQGZAW3XeFAnlibTOQF79h43ZlnDs9luf+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:54:9e:48:a5:d0:ea:af:46:3b:d5:b5:1c:3e:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75905949e963d3577be076326ca0b91ff32f9684 Validity Not Before: Dec 6 04:01:24 2025 GMT Not After : Dec 7 04:01:24 2025 GMT Subject: CN=ad5d4da98de83b4637d55c3860b948d60788e37a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:46:60:8e:43:ad:4a:de:c4:31:75:2f:5e:66: 26:43:59:ac:c5:1f:3c:27:5c:75:e2:cf:5a:67:11: 06:fa:8d:e7:27:6c:3b:b7:a9:33:84:d4:ce:27:cb: c8:d0:59:e4:79:a7:37:94:c3:a1:fb:ac:ac:2d:c0: 6f:7a:d9:58:29:09:60:e2:d3:2b:f7:56:c1:51:43: 14:39:26:e2:2d:be:8b:51:35:15:9a:17:c4:06:fe: 42:0c:55:a5:35:be:ce:07:a7:ab:b8:f3:28:3b:9b: db:9d:2c:59:b0:5a:d8:5b:19:12:a9:f9:a5:24:7f: 36:65:35:e7:bf:d4:d6:35:7e:1b:e1:50:0f:03:ea: 46:43:18:d8:5c:b3:d7:eb:45:50:e2:89:aa:6a:24: e5:24:a2:ec:46:24:02:88:98:69:21:66:c4:0c:9c: c7:f1:48:b6:ad:e1:cf:ba:f9:68:cf:b4:5f:17:03: 38:6a:67:a7:3e:51:06:da:2a:76:a1:39:0c:eb:13: 25:a5:77:ed:1a:3a:90:2c:ea:bb:05:5b:7d:e8:4c: 04:78:8f:98:0a:0f:ad:8b:7d:06:7d:ee:ef:ab:51: 58:32:24:8a:59:02:bc:8d:d5:5e:63:c2:8e:5f:4f: 93:24:18:2b:23:7a:a2:bf:17:7b:91:bb:d1:4f:2d: 23:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5D:4D:A9:8D:E8:3B:46:37:D5:5C:38:60:B9:48:D6:07:88:E3:7A X509v3 Authority Key Identifier: keyid:75:90:59:49:E9:63:D3:57:7B:E0:76:32:6C:A0:B9:1F:F3:2F:96:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZBZSelj01d74HYybKC5H_MvloQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d61f73-ac0b-45bc-a5a4-1a8301b7e6de/1/dZBZSelj01d74HYybKC5H_MvloQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ab:30:ff:2e:e2:97:34:e4:e6:bb:ea:ba:83:2e:eb:9f:49: 54:28:d7:22:14:a7:30:45:39:b8:cb:2c:0e:45:b2:e6:29:16: 75:b1:7e:75:77:e3:41:d6:23:47:16:5b:b8:c5:63:58:af:2c: 08:b6:22:63:0d:9e:85:48:62:db:5d:12:a6:78:39:a4:3e:bc: 79:ac:33:29:fe:0f:b3:3c:40:e7:72:fe:01:0c:0b:88:aa:b6: 98:ae:07:8f:81:41:1d:76:fe:15:08:95:86:ee:06:64:05:00: c3:bb:6e:1a:d0:b3:5f:31:80:b4:79:da:19:b1:e8:05:5f:aa: 83:e7:87:85:58:25:19:65:85:2c:cb:97:78:92:08:74:78:de: ff:bb:3f:a8:c6:2c:02:16:f2:f0:40:ea:d7:88:95:16:e7:3e: 1b:c4:4d:62:09:ef:5f:39:df:6c:0e:dc:83:32:ba:30:d2:78: af:e3:7c:d5:ab:1e:81:a6:18:ea:0e:52:a4:9a:59:40:bc:d9: 7c:06:e4:86:55:c7:93:4d:f6:bf:18:95:bb:be:65:e6:ab:80: ea:9e:45:f5:1b:bc:c5:0f:0f:54:11:7f:e1:51:4f:5d:16:33: ea:a6:bd:f5:bc:30:28:f5:d7:a6:df:53:62:e3:c9:01:76:e4: e7:37:51:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lSeSKXQ6q9GO9W1HD7dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1OTA1OTQ5ZTk2M2QzNTc3YmUwNzYzMjZjYTBiOTFmZjMy Zjk2ODQwHhcNMjUxMjA2MDQwMTI0WhcNMjUxMjA3MDQwMTI0WjAzMTEwLwYDVQQD EyhhZDVkNGRhOThkZTgzYjQ2MzdkNTVjMzg2MGI5NDhkNjA3ODhlMzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0ZgjkOtSt7EMXUvXmYmQ1msxR88 J1x14s9aZxEG+o3nJ2w7t6kzhNTOJ8vI0Fnkeac3lMOh+6ysLcBvetlYKQlg4tMr 91bBUUMUOSbiLb6LUTUVmhfEBv5CDFWlNb7OB6eruPMoO5vbnSxZsFrYWxkSqfml JH82ZTXnv9TWNX4b4VAPA+pGQxjYXLPX60VQ4omqaiTlJKLsRiQCiJhpIWbEDJzH 8Ui2reHPuvloz7RfFwM4amenPlEG2ip2oTkM6xMlpXftGjqQLOq7BVt96EwEeI+Y Cg+ti30Gfe7vq1FYMiSKWQK8jdVeY8KOX0+TJBgrI3qivxd7kbvRTy0jqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1dTamN6DtGN9VcOGC5SNYHiON6MB8GA1UdIwQY MBaAFHWQWUnpY9NXe+B2MmyguR/zL5aEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFpCWlNlbGowMWQ3NEhZeWJLQzVIX012bG9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kNjFmNzMtYWMwYi00NWJjLWE1YTQt MWE4MzAxYjdlNmRlLzEvZFpCWlNlbGowMWQ3NEhZeWJLQzVIX012bG9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9kNjFmNzMtYWMwYi00NWJjLWE1YTQtMWE4MzAxYjdlNmRl LzEvZFpCWlNlbGowMWQ3NEhZeWJLQzVIX012bG9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfasw/y7i lzTk5rvquoMu659JVCjXIhSnMEU5uMssDkWy5ikWdbF+dXfjQdYjRxZbuMVjWK8s CLYiYw2ehUhi210Spng5pD68eawzKf4PszxA53L+AQwLiKq2mK4Hj4FBHXb+FQiV hu4GZAUAw7tuGtCzXzGAtHnaGbHoBV+qg+eHhVglGWWFLMuXeJIIdHje/7s/qMYs Ahby8EDq14iVFuc+G8RNYgnvXznfbA7cgzK6MNJ4r+N81asegaYY6g5SpJpZQLzZ fAbkhlXHk032vxiVu75l5quA6p5F9Ru8xQ8PVBF/4VFPXRYz6qa99bwwKPXXpt9T YuPJAXbk5zdRGw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:53 2025 by rpki-client