This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft File: dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft (raw, json) Hash identifier: QofLh0YAQ42lGoEPbN1RUwFrHMS2uqJfFNlTcYbJEGU= Subject key identifier: E6:04:9E:8D:7C:7B:3E:CA:1E:5D:78:5E:C6:01:09:3F:6E:28:B0:83 Authority key identifier: 75:92:3E:C5:46:DF:37:1D:09:E6:8C:6B:06:02:5E:A3:12:61:23:4A Certificate issuer: /CN=75923ec546df371d09e68c6b06025ea31261234a Certificate serial: 019AF50A9E15CCF26C6138C35CCC0D20E38D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 19:01:45 +0000 Manifest this update: Sat 06 Dec 2025 19:01:45 +0000 Manifest next update: Sun 07 Dec 2025 19:01:45 +0000 Files and hashes: 1: dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl (hash: 2B3o+DkrSOq3/AzCklWL8T7a5lUpcRJORG5Pdz9P080=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:9e:15:cc:f2:6c:61:38:c3:5c:cc:0d:20:e3:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75923ec546df371d09e68c6b06025ea31261234a Validity Not Before: Dec 6 19:01:45 2025 GMT Not After : Dec 7 19:01:45 2025 GMT Subject: CN=e6049e8d7c7b3eca1e5d785ec601093f6e28b083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bd:60:17:01:fd:4c:c8:08:1d:47:ca:d8:ba: 68:3e:6e:a1:b4:2e:73:c4:ac:bb:2c:62:d6:f0:5b: 2f:08:12:ea:23:ef:27:dd:37:34:01:c2:2a:6e:2d: fe:66:ca:09:a1:3a:c0:5d:1b:26:83:17:f8:ae:57: 14:e8:01:ef:1f:6c:2b:84:1c:5f:3d:f6:df:57:74: 09:48:9a:30:4f:ea:05:96:dc:b1:2e:7a:ff:f5:31: 80:47:bc:bb:9b:ee:a5:56:aa:66:1c:0b:08:22:4a: ec:af:03:1e:ad:7f:d7:26:31:82:32:c3:ff:3d:45: 9b:5b:1d:53:62:76:72:81:1a:43:4b:34:e1:90:53: bf:23:c7:9e:e1:4a:56:b0:ea:e1:e0:77:ff:71:70: c6:11:99:ca:e7:c8:08:ab:0e:b4:df:de:65:85:47: 2e:b9:4b:36:7c:a3:33:a4:e7:d2:e7:f0:16:c8:a7: ea:b6:34:da:cc:c1:f1:93:81:81:30:75:6e:23:14: d3:c5:8c:79:49:6c:67:18:55:49:69:11:a8:a4:7d: fb:0f:c5:69:5a:d2:4a:08:1a:8b:33:b8:b2:41:3d: 22:84:82:d2:43:39:b4:91:8c:3f:c6:63:df:f4:6d: 1d:17:1b:98:a1:bc:7d:cd:83:e0:bb:00:6f:7a:62: ef:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:04:9E:8D:7C:7B:3E:CA:1E:5D:78:5E:C6:01:09:3F:6E:28:B0:83 X509v3 Authority Key Identifier: keyid:75:92:3E:C5:46:DF:37:1D:09:E6:8C:6B:06:02:5E:A3:12:61:23:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZI-xUbfNx0J5oxrBgJeoxJhI0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/26c68c-0482-4b62-b2af-4855366edfef/1/dZI-xUbfNx0J5oxrBgJeoxJhI0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:58:c5:7c:68:d0:bf:56:30:4e:30:cd:9e:f7:8f:b3:06:32: 69:42:02:17:fb:a4:47:51:ad:a4:d7:16:39:ec:e3:2a:5d:27: 1c:c1:46:2e:af:68:ba:16:8c:9f:c8:34:95:74:06:60:02:5d: 83:c4:de:8f:01:8d:08:cf:41:a1:52:06:ce:17:f6:6a:0e:0f: ac:8b:26:7b:9c:89:06:ab:b6:0c:b3:9c:21:41:43:f9:cc:94: 3d:56:60:98:78:8d:9b:b9:09:7d:d5:9b:d0:74:1e:d0:9d:62: aa:21:cd:05:e1:94:a7:f3:c8:2e:e0:d3:ab:9e:e2:8d:8b:07: 46:57:7e:ad:ac:51:ba:42:41:c0:bc:1a:80:e6:b9:e5:ec:13: 74:02:a7:f9:86:8c:0e:9f:65:54:7e:9d:86:ee:1d:19:da:42: d3:2c:b4:bb:9f:bd:b9:71:25:fe:f1:e7:27:71:c0:b2:db:66: 1c:db:ca:e5:b5:15:56:a7:e9:5b:f5:ae:2e:10:32:fa:85:27: 28:71:f8:0b:ff:ff:96:b4:b4:36:02:3e:79:a7:f9:d3:7a:5a: e6:2a:4f:d5:bc:a3:b0:fa:2e:e1:9a:a7:63:8d:24:8b:41:d7: 39:87:24:44:13:50:f4:6f:25:67:82:d1:9b:34:4f:39:a3:54: be:7b:00:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cp4VzPJsYTjDXMwNIOONMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1OTIzZWM1NDZkZjM3MWQwOWU2OGM2YjA2MDI1ZWEzMTI2 MTIzNGEwHhcNMjUxMjA2MTkwMTQ1WhcNMjUxMjA3MTkwMTQ1WjAzMTEwLwYDVQQD EyhlNjA0OWU4ZDdjN2IzZWNhMWU1ZDc4NWVjNjAxMDkzZjZlMjhiMDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr1gFwH9TMgIHUfK2LpoPm6htC5z xKy7LGLW8FsvCBLqI+8n3Tc0AcIqbi3+ZsoJoTrAXRsmgxf4rlcU6AHvH2wrhBxf PfbfV3QJSJowT+oFltyxLnr/9TGAR7y7m+6lVqpmHAsIIkrsrwMerX/XJjGCMsP/ PUWbWx1TYnZygRpDSzThkFO/I8ee4UpWsOrh4Hf/cXDGEZnK58gIqw60395lhUcu uUs2fKMzpOfS5/AWyKfqtjTazMHxk4GBMHVuIxTTxYx5SWxnGFVJaRGopH37D8Vp WtJKCBqLM7iyQT0ihILSQzm0kYw/xmPf9G0dFxuYobx9zYPguwBvemLvqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYEno18ez7KHl14XsYBCT9uKLCDMB8GA1UdIwQY MBaAFHWSPsVG3zcdCeaMawYCXqMSYSNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFpJLXhVYmZOeDBKNW94ckJnSmVveEpoSTBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yNmM2OGMtMDQ4Mi00YjYyLWIyYWYt NDg1NTM2NmVkZmVmLzEvZFpJLXhVYmZOeDBKNW94ckJnSmVveEpoSTBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8yNmM2OGMtMDQ4Mi00YjYyLWIyYWYtNDg1NTM2NmVkZmVm LzEvZFpJLXhVYmZOeDBKNW94ckJnSmVveEpoSTBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALljFfGjQ v1YwTjDNnvePswYyaUICF/ukR1GtpNcWOezjKl0nHMFGLq9ouhaMn8g0lXQGYAJd g8TejwGNCM9BoVIGzhf2ag4PrIsme5yJBqu2DLOcIUFD+cyUPVZgmHiNm7kJfdWb 0HQe0J1iqiHNBeGUp/PILuDTq57ijYsHRld+raxRukJBwLwagOa55ewTdAKn+YaM Dp9lVH6dhu4dGdpC0yy0u5+9uXEl/vHnJ3HAsttmHNvK5bUVVqfpW/WuLhAy+oUn KHH4C///lrS0NgI+eaf503pa5ipP1byjsPou4ZqnY40ki0HXOYckRBNQ9G8lZ4LR mzRPOaNUvnsADw== -----END CERTIFICATE-----Generated at Sun Dec 7 04:43:34 2025 by rpki-client