This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft File: dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft (raw, json) Hash identifier: dy6123EH0N1FdK28h+e0eeDzCDaeH6P+N276b5kFu/o= Subject key identifier: 27:1B:26:69:94:1F:BF:3D:B1:00:EA:0A:ED:0C:9C:28:E2:21:EC:51 Authority key identifier: 75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69 Certificate issuer: /CN=759d27ce072ca336d3afaab8879f94ec63455669 Certificate serial: 019AF31C8DF8F2C09703F3F0EC650FD087B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft Manifest number: 0823 Signing time: Sat 06 Dec 2025 10:02:05 +0000 Manifest this update: Sat 06 Dec 2025 10:02:05 +0000 Manifest next update: Sun 07 Dec 2025 10:02:05 +0000 Files and hashes: 1: dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl (hash: 63BFXUFqBJrur3TQtb73tJdvEh62buoFJejvKyw6Z3A=) 2: mbPOWtU-NBbIGZZNzzLtOWcmxj8.roa (hash: qn4MOETPNEkOlTCM8W+7rEv5tZsC1gxAMBahRUzoOCw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:8d:f8:f2:c0:97:03:f3:f0:ec:65:0f:d0:87:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=759d27ce072ca336d3afaab8879f94ec63455669 Validity Not Before: Dec 6 10:02:05 2025 GMT Not After : Dec 7 10:02:05 2025 GMT Subject: CN=271b2669941fbf3db100ea0aed0c9c28e221ec51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:07:ad:31:d0:bf:30:bd:4b:63:93:73:ba:fc: 69:60:69:45:1d:af:e7:d0:9e:5c:52:df:ea:7e:67: b2:cb:5a:dd:95:f1:d5:9e:83:0d:9a:15:42:d4:07: c0:48:b9:d0:35:fd:56:0b:0a:0f:de:48:eb:ec:f8: 7c:d0:51:fa:20:06:c5:d2:75:4f:1a:db:95:5b:b2: da:44:03:95:45:c3:58:d4:62:85:76:c3:1d:16:b8: 3b:b4:9a:db:fa:6b:eb:b9:cd:63:8e:4b:3a:30:fc: 34:6e:91:66:e2:28:20:2c:96:e8:86:9b:e9:75:ee: e7:d8:c2:62:02:b7:3f:e7:ab:06:76:c8:8c:b2:46: f5:3f:cb:f9:f0:24:55:02:6b:2d:81:52:74:21:38: 77:74:77:85:94:7f:ef:da:be:20:f9:b6:60:52:84: 52:f0:3e:71:00:a7:cb:6f:9e:46:c4:17:3e:e9:43: 86:a4:ea:87:bf:a7:2a:11:09:f4:27:18:84:f0:ec: cc:2f:db:8d:2b:12:00:10:cf:b9:7e:0e:63:47:24: 85:6f:60:2e:b5:5a:1e:8c:1b:f7:e9:f6:65:1e:ea: 44:58:cc:cb:60:12:5b:ff:33:6e:ae:78:a1:80:a3: 15:6a:2a:44:45:63:b5:99:63:cf:38:76:98:ac:46: 01:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1B:26:69:94:1F:BF:3D:B1:00:EA:0A:ED:0C:9C:28:E2:21:EC:51 X509v3 Authority Key Identifier: keyid:75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:cd:99:23:99:49:a2:33:c1:86:4d:48:91:09:a0:08:85:96: d0:70:00:b7:16:df:1f:b7:a2:8b:04:e7:7a:f3:e2:75:d5:3d: c5:ce:5e:53:4c:f9:8b:e0:4c:95:09:6e:52:29:81:7c:d7:50: 42:4e:64:47:d1:ce:69:aa:85:ce:31:1e:29:a8:a8:93:e5:5a: 83:6d:55:79:94:65:06:72:30:39:2a:ab:3d:31:13:60:8c:8a: de:cd:08:00:d3:41:40:35:31:00:42:77:27:4e:a8:93:f6:27: b4:89:ea:dc:4b:c9:e3:37:1f:20:b8:41:f6:24:92:55:79:12: 3a:8b:7a:cd:63:11:e3:f6:1f:22:a5:fa:92:7e:e9:32:f8:d4: 78:ad:db:d5:a8:42:c7:f8:15:f2:af:4e:48:86:c4:df:f2:e6: bb:f7:1d:6a:3d:58:4d:b8:f0:9c:3c:75:b7:e2:20:87:11:90: ef:f3:62:7a:3b:4a:17:54:89:1f:d3:13:c4:f5:5b:a6:9f:3e: 31:67:f4:76:7e:49:41:fa:ac:49:e2:67:68:61:dc:1f:1a:64: 95:50:55:2c:da:12:4e:29:1a:23:12:b3:46:e3:c5:bb:c3:d3: 24:94:58:2f:26:43:12:78:60:19:36:4c:af:6f:b5:d3:6d:a7: b7:20:96:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHI348sCXA/Pw7GUP0IeyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1OWQyN2NlMDcyY2EzMzZkM2FmYWFiODg3OWY5NGVjNjM0 NTU2NjkwHhcNMjUxMjA2MTAwMjA1WhcNMjUxMjA3MTAwMjA1WjAzMTEwLwYDVQQD EygyNzFiMjY2OTk0MWZiZjNkYjEwMGVhMGFlZDBjOWMyOGUyMjFlYzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgetMdC/ML1LY5NzuvxpYGlFHa/n 0J5cUt/qfmeyy1rdlfHVnoMNmhVC1AfASLnQNf1WCwoP3kjr7Ph80FH6IAbF0nVP GtuVW7LaRAOVRcNY1GKFdsMdFrg7tJrb+mvruc1jjks6MPw0bpFm4iggLJbohpvp de7n2MJiArc/56sGdsiMskb1P8v58CRVAmstgVJ0ITh3dHeFlH/v2r4g+bZgUoRS 8D5xAKfLb55GxBc+6UOGpOqHv6cqEQn0JxiE8OzML9uNKxIAEM+5fg5jRySFb2Au tVoejBv36fZlHupEWMzLYBJb/zNurnihgKMVaipERWO1mWPPOHaYrEYBVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCcbJmmUH789sQDqCu0MnCjiIexRMB8GA1UdIwQY MBaAFHWdJ84HLKM206+quIeflOxjRVZpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFowbnpnY3NvemJUcjZxNGg1LVU3R05GVm1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mMTdhMjctNDU5OS00NWI1LWE2NmUt NzAxMjNmNDk1MTEwLzEvZFowbnpnY3NvemJUcjZxNGg1LVU3R05GVm1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9mMTdhMjctNDU5OS00NWI1LWE2NmUtNzAxMjNmNDk1MTEw LzEvZFowbnpnY3NvemJUcjZxNGg1LVU3R05GVm1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs82ZI5lJ ojPBhk1IkQmgCIWW0HAAtxbfH7eiiwTnevPiddU9xc5eU0z5i+BMlQluUimBfNdQ Qk5kR9HOaaqFzjEeKaiok+Vag21VeZRlBnIwOSqrPTETYIyK3s0IANNBQDUxAEJ3 J06ok/YntInq3EvJ4zcfILhB9iSSVXkSOot6zWMR4/YfIqX6kn7pMvjUeK3b1ahC x/gV8q9OSIbE3/Lmu/cdaj1YTbjwnDx1t+IghxGQ7/NiejtKF1SJH9MTxPVbpp8+ MWf0dn5JQfqsSeJnaGHcHxpklVBVLNoSTikaIxKzRuPFu8PTJJRYLyZDEnhgGTZM r2+1022ntyCWKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:13:39 2025 by rpki-client