This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft File: dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft (raw, json) Hash identifier: wVFedTEvNtgstD9wBiphBE/vGOOdjuGclrmTcMkAqbQ= Subject key identifier: BB:2E:A4:3B:38:1B:FD:13:C3:EF:0C:27:39:C6:9D:CA:DB:B3:07:80 Authority key identifier: 75:3C:FF:43:0F:7F:17:51:E6:97:BB:30:F8:7F:EF:39:7C:C1:7F:A6 Certificate issuer: /CN=753cff430f7f1751e697bb30f87fef397cc17fa6 Certificate serial: 019AF509F584E1BE14726169B7C58A13C398 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 19:01:01 +0000 Manifest this update: Sat 06 Dec 2025 19:01:01 +0000 Manifest next update: Sun 07 Dec 2025 19:01:01 +0000 Files and hashes: 1: dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.crl (hash: a9rxZjmMrdZsEhwQKxAI8UVvCwtC9fEdbWUuvWpqM4M=) 2: dnhmPWmpRWX9rAh9nBMTSVjDqxs.roa (hash: fzOf1Or3/SM11VjxsfHMYPlVNvpYFDsl88MJ3GBj7FI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:f5:84:e1:be:14:72:61:69:b7:c5:8a:13:c3:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=753cff430f7f1751e697bb30f87fef397cc17fa6 Validity Not Before: Dec 6 19:01:01 2025 GMT Not After : Dec 7 19:01:01 2025 GMT Subject: CN=bb2ea43b381bfd13c3ef0c2739c69dcadbb30780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9f:1e:67:1e:39:54:b8:cb:10:ef:42:5c:23: d1:0a:2e:2d:bc:27:10:c3:a9:56:61:f8:f2:d6:dd: be:d4:19:d6:56:01:e5:98:a3:16:69:5d:9c:d3:d8: 0c:86:08:40:4a:28:5f:69:a7:5b:5f:1b:2d:2b:18: 53:ba:08:33:24:a1:61:08:19:52:b8:ad:4f:ec:af: 5b:1e:33:b3:55:34:6e:3c:c3:91:0d:19:34:bf:b1: 46:fb:d5:b0:5d:ae:e7:e0:3e:1e:9b:11:28:fa:25: 97:2d:69:f3:85:fd:2a:e4:83:bf:1a:2a:c1:cb:8c: 8d:1d:4b:7e:7d:df:ac:08:37:08:be:38:a8:6f:6b: 56:70:bf:0c:19:b1:a9:f7:38:ec:22:8d:e2:60:0b: 90:8f:6a:1d:30:f9:cf:3c:d8:ce:c8:6e:ed:5e:d5: 22:99:a8:55:9b:ac:19:40:17:9b:a1:03:d2:65:4b: fd:1a:0b:af:ae:09:a4:da:eb:74:83:7b:4f:73:9e: 32:13:01:4b:0c:24:d9:23:e4:08:38:19:42:9e:81: ea:ac:34:70:43:f4:9a:e1:cb:0c:47:36:c0:e6:90: d9:96:4f:d6:7f:76:34:29:c0:94:4c:a6:cb:5f:06: 69:78:4d:0f:f6:26:5f:b9:40:28:b7:c0:07:59:b0: 4f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:2E:A4:3B:38:1B:FD:13:C3:EF:0C:27:39:C6:9D:CA:DB:B3:07:80 X509v3 Authority Key Identifier: keyid:75:3C:FF:43:0F:7F:17:51:E6:97:BB:30:F8:7F:EF:39:7C:C1:7F:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/602bfe-7a40-4f5a-9ec9-37a5d9ca6558/1/dTz_Qw9_F1Hml7sw-H_vOXzBf6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:2b:63:c4:b2:06:a8:22:45:a2:fe:67:ea:c6:0e:99:de:60: 1f:22:2e:45:47:12:47:f2:10:21:64:9d:ec:42:e4:c7:b7:7c: dc:10:e5:f7:a2:1c:2a:8e:81:e8:b7:97:1b:3d:7f:7e:97:f6: a5:29:aa:2c:9c:93:4c:01:5e:c6:66:cf:fd:0e:d7:3e:90:a8: a0:e5:fa:13:6e:f3:43:0f:e8:9a:6d:a9:6b:46:f9:da:32:62: 2d:16:56:c5:7d:03:99:92:98:7d:43:48:e4:0f:2c:2c:5a:34: 8d:06:ec:ba:c6:8d:4f:e5:fb:b8:39:46:d7:08:1b:e2:99:97: b9:1f:6f:ef:2e:5e:bf:48:01:0e:c6:af:49:96:b9:72:59:37: 34:62:d6:d7:8e:28:d7:f4:bf:67:cd:68:3d:10:3a:56:de:8a: 57:43:3b:56:bc:84:ce:70:c8:c2:21:63:49:e3:5e:c2:84:ad: 88:f5:ff:68:a1:e9:0a:8f:24:d7:52:5a:e1:f9:40:cf:5c:48: b2:12:d4:93:ea:4f:01:19:9e:f0:75:83:aa:1d:51:01:41:53: 53:9b:bb:20:f2:0e:61:8a:dd:f9:d6:60:f0:3e:a9:75:a6:02: 4b:6d:0c:f0:db:96:5c:e5:53:2e:ac:63:80:6c:69:c8:a9:10: 4a:dc:75:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CfWE4b4UcmFpt8WKE8OYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1M2NmZjQzMGY3ZjE3NTFlNjk3YmIzMGY4N2ZlZjM5N2Nj MTdmYTYwHhcNMjUxMjA2MTkwMTAxWhcNMjUxMjA3MTkwMTAxWjAzMTEwLwYDVQQD EyhiYjJlYTQzYjM4MWJmZDEzYzNlZjBjMjczOWM2OWRjYWRiYjMwNzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsp8eZx45VLjLEO9CXCPRCi4tvCcQ w6lWYfjy1t2+1BnWVgHlmKMWaV2c09gMhghASihfaadbXxstKxhTuggzJKFhCBlS uK1P7K9bHjOzVTRuPMORDRk0v7FG+9WwXa7n4D4emxEo+iWXLWnzhf0q5IO/GirB y4yNHUt+fd+sCDcIvjiob2tWcL8MGbGp9zjsIo3iYAuQj2odMPnPPNjOyG7tXtUi mahVm6wZQBeboQPSZUv9Gguvrgmk2ut0g3tPc54yEwFLDCTZI+QIOBlCnoHqrDRw Q/Sa4csMRzbA5pDZlk/Wf3Y0KcCUTKbLXwZpeE0P9iZfuUAot8AHWbBP/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsupDs4G/0Tw+8MJznGncrbsweAMB8GA1UdIwQY MBaAFHU8/0MPfxdR5pe7MPh/7zl8wX+mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFR6X1F3OV9GMUhtbDdzdy1IX3ZPWHpCZjZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82MDJiZmUtN2E0MC00ZjVhLTllYzkt MzdhNWQ5Y2E2NTU4LzEvZFR6X1F3OV9GMUhtbDdzdy1IX3ZPWHpCZjZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS82MDJiZmUtN2E0MC00ZjVhLTllYzktMzdhNWQ5Y2E2NTU4 LzEvZFR6X1F3OV9GMUhtbDdzdy1IX3ZPWHpCZjZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHitjxLIG qCJFov5n6sYOmd5gHyIuRUcSR/IQIWSd7ELkx7d83BDl96IcKo6B6LeXGz1/fpf2 pSmqLJyTTAFexmbP/Q7XPpCooOX6E27zQw/omm2pa0b52jJiLRZWxX0DmZKYfUNI 5A8sLFo0jQbsusaNT+X7uDlG1wgb4pmXuR9v7y5ev0gBDsavSZa5clk3NGLW144o 1/S/Z81oPRA6Vt6KV0M7VryEznDIwiFjSeNewoStiPX/aKHpCo8k11Ja4flAz1xI shLUk+pPARme8HWDqh1RAUFTU5u7IPIOYYrd+dZg8D6pdaYCS20M8NuWXOVTLqxj gGxpyKkQStx1NQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:50:26 2025 by rpki-client