This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft File: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft (raw, json) Hash identifier: qufFgx2RnB1HFaDEeZroh6JJyhUEFQV4vLPFBo8et+0= Subject key identifier: 3E:13:14:86:FC:36:9F:C6:84:31:14:D5:26:77:29:D1:71:5E:DD:3F Authority key identifier: 0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4 Certificate issuer: /CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4 Certificate serial: 019AF1D1F1A86174BAD9E6DF17E49CF04393 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 04:00:59 +0000 Manifest this update: Sat 06 Dec 2025 04:00:59 +0000 Manifest next update: Sun 07 Dec 2025 04:00:59 +0000 Files and hashes: 1: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl (hash: gcWv0QKY0b/vXpL2i0eE9fM0bLmUuWDfeWwISFkIi0I=) 2: ayJmzYBNfcdq3NPJ8M3cFOVfzCs.roa (hash: 0bZlkgsn21QwI80X8EQdx07gNzwAcET4bz9RvPxajWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f1:a8:61:74:ba:d9:e6:df:17:e4:9c:f0:43:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4 Validity Not Before: Dec 6 04:00:59 2025 GMT Not After : Dec 7 04:00:59 2025 GMT Subject: CN=3e131486fc369fc6843114d5267729d1715edd3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5c:b5:bd:3e:9f:27:77:6f:14:e1:c8:45:ac: 1e:7e:88:13:d5:77:9e:75:b6:7d:1b:c7:21:6a:d9: 05:8f:b2:7b:5e:3e:f3:64:b3:66:59:88:55:60:43: 13:3a:f2:4d:de:f1:86:4f:d9:a1:be:83:b3:af:f3: 2e:dd:77:d2:ce:74:21:56:71:b2:20:3c:96:f5:4e: 8c:49:6e:fc:61:f6:60:09:54:e6:2b:4b:63:e1:5f: fe:53:47:08:8c:ee:e6:0c:31:fe:0c:35:5f:46:9f: a1:23:5f:6a:44:bd:0f:e0:0a:20:62:7f:c6:2a:bf: f4:67:ff:2f:11:d3:d6:24:8f:1f:54:52:b2:ed:78: 4f:f4:b7:f0:63:c9:71:5f:2e:91:e0:f1:9a:c8:82: 95:82:1f:f5:7d:a1:40:8b:a3:f0:fc:0d:2e:fd:da: 19:49:48:06:9e:11:66:4c:e8:d8:53:79:76:88:ee: ac:21:70:76:67:2a:b3:b9:7e:a0:e1:a6:b6:cc:4f: a0:95:e6:63:35:cb:93:55:27:59:85:f3:81:68:fe: b4:82:bf:0c:03:97:86:75:db:c7:1a:ef:58:74:a5: 92:a3:84:1d:87:1c:ad:59:b7:1c:47:7a:72:dc:37: 85:eb:d9:34:a9:16:10:ac:a3:7d:8e:f4:42:61:3f: e5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:13:14:86:FC:36:9F:C6:84:31:14:D5:26:77:29:D1:71:5E:DD:3F X509v3 Authority Key Identifier: keyid:0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:05:e5:2c:7a:01:75:4f:aa:6c:cc:5d:69:e5:44:29:cc:cf: 6b:82:a5:c2:1a:a4:bc:51:38:83:3c:b4:a9:f9:f9:e4:2c:b3: ca:ec:88:af:c9:37:10:e5:3d:b4:f7:23:99:a9:d1:3a:e4:d8: ac:3a:73:25:31:93:8f:a2:74:f5:e8:1c:95:aa:52:ee:17:1a: 4b:43:d0:42:9a:27:32:24:02:12:a7:eb:d1:05:74:31:04:14: 97:e8:5f:4d:ea:e3:fe:6b:c0:66:7f:f1:28:39:ef:4c:6a:e3: f3:6b:76:1d:45:88:0d:b5:54:3f:f8:dc:b1:43:2f:be:38:8e: e9:c9:7d:9e:84:8c:ed:fa:50:22:4e:af:9c:fd:ec:e5:3f:09: 98:88:1d:c4:61:a9:f2:b7:89:2f:51:10:b8:39:c9:db:ba:54: f4:ac:0b:f9:6d:7d:1f:dc:02:00:25:75:0f:25:b0:6f:92:6b: e0:41:0a:6d:3c:90:6c:1a:97:52:76:8e:47:b6:fb:82:20:2b: 0b:43:0a:4e:f5:12:a1:c6:b6:67:fe:a6:75:66:b6:a3:c7:ce: 1d:6d:44:b8:e9:16:1e:b2:cd:15:90:62:f3:a2:b1:07:c5:ba: de:27:b0:df:df:20:42:0f:e5:3f:43:4e:9e:b8:46:74:86:14: 64:01:dd:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fGoYXS62ebfF+Sc8EOTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMzczOTdkOGI2Yzg3M2UyOWJlNmUwOTlkZTdiNzQ2ZWFm ZDBlYjQwHhcNMjUxMjA2MDQwMDU5WhcNMjUxMjA3MDQwMDU5WjAzMTEwLwYDVQQD EygzZTEzMTQ4NmZjMzY5ZmM2ODQzMTE0ZDUyNjc3MjlkMTcxNWVkZDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVy1vT6fJ3dvFOHIRawefogT1Xee dbZ9G8chatkFj7J7Xj7zZLNmWYhVYEMTOvJN3vGGT9mhvoOzr/Mu3XfSznQhVnGy IDyW9U6MSW78YfZgCVTmK0tj4V/+U0cIjO7mDDH+DDVfRp+hI19qRL0P4AogYn/G Kr/0Z/8vEdPWJI8fVFKy7XhP9LfwY8lxXy6R4PGayIKVgh/1faFAi6Pw/A0u/doZ SUgGnhFmTOjYU3l2iO6sIXB2ZyqzuX6g4aa2zE+gleZjNcuTVSdZhfOBaP60gr8M A5eGddvHGu9YdKWSo4QdhxytWbccR3py3DeF69k0qRYQrKN9jvRCYT/l6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4TFIb8Np/GhDEU1SZ3KdFxXt0/MB8GA1UdIwQY MBaAFA83OX2LbIc+Kb5uCZ3nt0bq/Q60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHpjNWZZdHNoejRwdm00Sm5lZTNSdXI5RHJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yMWJhODMtZjk0ZS00NTVhLWEyYjct YTYyNTU2ZDI1NDQ3LzEvRHpjNWZZdHNoejRwdm00Sm5lZTNSdXI5RHJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8yMWJhODMtZjk0ZS00NTVhLWEyYjctYTYyNTU2ZDI1NDQ3 LzEvRHpjNWZZdHNoejRwdm00Sm5lZTNSdXI5RHJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEAXlLHoB dU+qbMxdaeVEKczPa4KlwhqkvFE4gzy0qfn55CyzyuyIr8k3EOU9tPcjmanROuTY rDpzJTGTj6J09egclapS7hcaS0PQQponMiQCEqfr0QV0MQQUl+hfTerj/mvAZn/x KDnvTGrj82t2HUWIDbVUP/jcsUMvvjiO6cl9noSM7fpQIk6vnP3s5T8JmIgdxGGp 8reJL1EQuDnJ27pU9KwL+W19H9wCACV1DyWwb5Jr4EEKbTyQbBqXUnaOR7b7giAr C0MKTvUSoca2Z/6mdWa2o8fOHW1EuOkWHrLNFZBi86KxB8W63iew398gQg/lP0NO nrhGdIYUZAHdOA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:54:36 2025 by rpki-client