This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft File: DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft (raw, json) Hash identifier: Vqtjj8zlykeXkY6ey7hwgeVAlIwTCENDoPdmtk9QAWU= Subject key identifier: 0C:EC:01:0D:FF:14:71:C7:F5:CA:E5:E8:D5:A5:81:05:F6:42:C0:56 Authority key identifier: 0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68 Certificate issuer: /CN=0f34477aa0f0123138c0472f5b3528e4d2193e68 Certificate serial: 019B3231C10EA6161CC6657D444B53217502 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 16:01:19 +0000 Manifest this update: Thu 18 Dec 2025 16:01:19 +0000 Manifest next update: Fri 19 Dec 2025 16:01:19 +0000 Files and hashes: 1: DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl (hash: tVRhOuY8M9z5xbGOyliaFLru8iNZcdsAKOMvCQZo/6s=) 2: oiZHTdtEDz6aP8WgUPcMGh6h5wQ.roa (hash: ewlicz9ndLYefeC/+lwNbWi0WIXINkEHOt0Ubc6GHQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:c1:0e:a6:16:1c:c6:65:7d:44:4b:53:21:75:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f34477aa0f0123138c0472f5b3528e4d2193e68 Validity Not Before: Dec 18 16:01:19 2025 GMT Not After : Dec 19 16:01:19 2025 GMT Subject: CN=0cec010dff1471c7f5cae5e8d5a58105f642c056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:71:c4:d9:d3:d5:5b:de:8a:ec:aa:63:d4:f3: 87:37:a6:7c:fd:08:57:3b:1c:8c:5b:1d:83:a7:e0: 28:84:ae:ca:5c:4d:46:04:82:84:02:44:83:4e:1c: ca:76:50:d1:18:af:47:9e:65:14:b5:b6:d0:b1:bc: b6:40:97:cb:42:7f:90:8b:7e:4e:41:53:c2:24:0c: a4:ba:03:0f:32:f6:13:d0:8b:81:9c:d5:0b:dc:78: d9:1a:05:81:cf:51:c2:d4:a3:61:4c:da:aa:a8:43: be:68:3b:0a:bc:b8:cf:c7:3b:e3:31:23:08:80:50: 7f:f4:2d:36:4e:69:a3:6f:52:c2:7a:af:f8:88:b9: e0:ae:78:68:18:27:01:82:3d:c4:aa:5c:31:b2:5c: bb:33:b2:82:a8:26:f9:ad:0e:29:b0:8a:f0:a3:76: 8b:9f:fe:f1:c0:f6:0a:7e:67:f2:9f:1a:ea:7a:12: 7f:69:4f:0b:9a:0c:34:4c:51:df:5c:d7:27:05:61: b2:63:79:f2:0f:21:8e:db:b5:1a:ca:1d:dc:1e:8a: c1:41:22:f5:9e:79:c3:ac:0b:97:5a:a5:69:92:50: ed:a8:71:99:1e:3a:ee:e0:4b:ee:d4:f4:79:2c:2b: 78:2e:01:d9:63:b2:22:a3:d6:33:01:54:9d:37:55: f6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EC:01:0D:FF:14:71:C7:F5:CA:E5:E8:D5:A5:81:05:F6:42:C0:56 X509v3 Authority Key Identifier: keyid:0F:34:47:7A:A0:F0:12:31:38:C0:47:2F:5B:35:28:E4:D2:19:3E:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DzRHeqDwEjE4wEcvWzUo5NIZPmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/9d4bef-8ebd-4fdb-aaf0-e09bc4eae189/1/DzRHeqDwEjE4wEcvWzUo5NIZPmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:58:53:0c:22:b2:4b:47:3e:63:66:87:3e:d4:1b:a6:84:93: a8:a2:e6:bd:76:2f:bf:97:88:83:89:56:f2:76:1a:7e:da:be: 33:bf:4d:64:34:3b:74:62:45:3e:d3:25:9a:63:be:6d:0f:28: 3e:bd:8d:08:36:3e:88:75:83:56:fb:35:44:45:4e:37:10:8c: 32:70:68:00:8c:d9:92:04:23:da:f2:95:53:d4:1a:3f:51:cf: 11:46:ae:20:f5:85:eb:36:59:69:56:10:cf:b7:d9:ed:d8:56: 97:e9:b2:ca:aa:e2:c1:ac:d2:35:74:7a:27:ea:2a:da:96:98: b6:a4:bf:51:80:1d:f7:1a:35:52:32:33:23:6c:97:6e:50:5b: 99:6c:46:77:cd:c1:dd:fd:6b:15:5e:6b:11:d1:7a:73:d5:5b: 36:62:12:d1:86:6e:4e:f3:d6:a8:fb:b0:fd:5a:2a:bc:db:8d: ee:a8:81:53:3f:59:de:15:df:9d:c9:84:23:82:05:62:40:d8: f2:a3:ad:2c:ae:4d:d5:e4:62:cf:3a:a5:fe:89:22:70:7e:4e: 35:f5:76:c2:10:69:7d:ba:c1:8e:8a:17:b2:8a:82:82:05:8b: 69:c2:12:1e:b1:fe:99:68:c1:b8:c2:33:f2:54:03:78:c7:2d: 11:32:7d:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMcEOphYcxmV9REtTIXUCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMzQ0NzdhYTBmMDEyMzEzOGMwNDcyZjViMzUyOGU0ZDIx OTNlNjgwHhcNMjUxMjE4MTYwMTE5WhcNMjUxMjE5MTYwMTE5WjAzMTEwLwYDVQQD EygwY2VjMDEwZGZmMTQ3MWM3ZjVjYWU1ZThkNWE1ODEwNWY2NDJjMDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXHE2dPVW96K7Kpj1POHN6Z8/QhX OxyMWx2Dp+AohK7KXE1GBIKEAkSDThzKdlDRGK9HnmUUtbbQsby2QJfLQn+Qi35O QVPCJAykugMPMvYT0IuBnNUL3HjZGgWBz1HC1KNhTNqqqEO+aDsKvLjPxzvjMSMI gFB/9C02Tmmjb1LCeq/4iLngrnhoGCcBgj3Eqlwxsly7M7KCqCb5rQ4psIrwo3aL n/7xwPYKfmfynxrqehJ/aU8Lmgw0TFHfXNcnBWGyY3nyDyGO27Uayh3cHorBQSL1 nnnDrAuXWqVpklDtqHGZHjru4Evu1PR5LCt4LgHZY7Iio9YzAVSdN1X2KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzsAQ3/FHHH9crl6NWlgQX2QsBWMB8GA1UdIwQY MBaAFA80R3qg8BIxOMBHL1s1KOTSGT5oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHpSSGVxRHdFakU0d0Vjdld6VW81TklaUG1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85ZDRiZWYtOGViZC00ZmRiLWFhZjAt ZTA5YmM0ZWFlMTg5LzEvRHpSSGVxRHdFakU0d0Vjdld6VW81TklaUG1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi85ZDRiZWYtOGViZC00ZmRiLWFhZjAtZTA5YmM0ZWFlMTg5 LzEvRHpSSGVxRHdFakU0d0Vjdld6VW81TklaUG1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1hTDCKy S0c+Y2aHPtQbpoSTqKLmvXYvv5eIg4lW8nYaftq+M79NZDQ7dGJFPtMlmmO+bQ8o Pr2NCDY+iHWDVvs1REVONxCMMnBoAIzZkgQj2vKVU9QaP1HPEUauIPWF6zZZaVYQ z7fZ7dhWl+myyqriwazSNXR6J+oq2paYtqS/UYAd9xo1UjIzI2yXblBbmWxGd83B 3f1rFV5rEdF6c9VbNmIS0YZuTvPWqPuw/VoqvNuN7qiBUz9Z3hXfncmEI4IFYkDY 8qOtLK5N1eRizzql/okicH5ONfV2whBpfbrBjooXsoqCggWLacISHrH+mWjBuMIz 8lQDeMctETJ9bw== -----END CERTIFICATE-----Generated at Thu Dec 18 18:52:19 2025 by rpki-client