This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft File: dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft (raw, json) Hash identifier: qw+EJLJZTv0wqVNTJuM0BCDzyFC0LNp2rzfVINeUWxo= Subject key identifier: A2:E9:33:70:27:25:D3:CF:AA:1F:54:B5:2B:9B:39:10:AD:94:66:1E Authority key identifier: 75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63 Certificate issuer: /CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63 Certificate serial: 019AF31C511D71A14819B4039738F1A8EB3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 10:01:50 +0000 Manifest this update: Sat 06 Dec 2025 10:01:50 +0000 Manifest next update: Sun 07 Dec 2025 10:01:50 +0000 Files and hashes: 1: 8lBoSilDtW0ItY1m1FNkzFR9g7g.roa (hash: eMaeIeeNpB0IKHLHfs7pADlpK9Gp8r9cF63rKmEO7/4=) 2: dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl (hash: DGOoWQqLf6C37kkicW9XDzkfuHYvDMHlV/D5Szr8X1I=) 3: vijarIUYgiNYSjUBEIP4lkhLgNI.roa (hash: 2GV5AIMYaF2M+jJbsLpgLW6R69LfUwGZ1/GjUEqVegk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:51:1d:71:a1:48:19:b4:03:97:38:f1:a8:eb:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63 Validity Not Before: Dec 6 10:01:50 2025 GMT Not After : Dec 7 10:01:50 2025 GMT Subject: CN=a2e933702725d3cfaa1f54b52b9b3910ad94661e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:de:e6:eb:f9:d9:c4:a3:f9:d6:98:0a:71:bb: 33:95:23:ad:8d:cc:17:00:91:e8:e6:38:c2:4c:f3: 9d:d8:84:42:b2:81:17:2b:39:63:bc:db:2b:6b:b0: 4f:63:f8:70:da:ee:04:ab:77:23:2f:d2:fb:9c:e3: 94:0a:0c:d1:d7:19:35:42:40:86:7a:f0:e9:a2:d5: 01:25:64:f4:7f:48:0a:0d:e1:72:05:8c:55:7b:db: cd:da:95:f5:59:37:3d:3d:15:90:31:a5:0a:1a:00: 44:ab:7d:05:fd:9d:61:5d:9e:42:a8:82:d2:f7:cc: a2:01:1f:61:81:0b:6a:e3:a6:c0:95:62:f5:31:60: 77:64:d4:80:22:3e:88:b5:8f:29:a8:d8:1d:8f:22: 95:ca:c3:f1:f8:44:23:b1:eb:18:2c:e4:5b:ca:c8: e4:50:6c:8c:e0:20:91:c1:6f:4d:5a:c4:8c:84:cb: 55:c9:33:b8:90:52:95:06:ae:b2:d4:88:d9:5c:20: 23:0b:bf:5e:e1:bb:a7:c3:5e:2e:7c:08:fb:79:6c: 54:ac:98:a8:da:de:f8:58:1a:2d:d3:75:56:8f:08: 96:b0:6e:24:ca:bf:54:45:01:fb:f7:86:58:5f:7f: 7f:ec:35:38:09:08:5a:db:9e:f5:bb:74:69:92:51: b5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E9:33:70:27:25:D3:CF:AA:1F:54:B5:2B:9B:39:10:AD:94:66:1E X509v3 Authority Key Identifier: keyid:75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:81:03:70:10:32:81:e6:eb:5b:19:5a:59:9b:e4:15:2c:91: 99:30:50:d0:3e:a0:84:f2:30:c8:ae:19:06:2b:8f:e3:bc:7e: cd:ed:b5:96:29:56:b0:16:86:00:e1:79:94:cc:94:73:8f:a0: bf:f8:2a:bc:ed:9c:4d:59:bc:3d:83:7c:92:76:90:92:dc:00: 49:c7:a8:1a:ff:17:c6:8b:10:48:24:21:06:ce:19:fe:ec:fa: e5:50:00:29:c0:17:75:25:5f:cb:e7:c9:36:e4:4c:d6:12:17: 10:52:61:3a:a4:da:6b:16:1a:2f:90:98:96:10:64:cc:33:e9: 1b:54:c8:fe:5d:4a:fc:99:d8:18:04:1e:56:ae:e4:3b:70:36: cd:2a:c3:cc:96:31:37:85:af:76:e7:04:0d:04:ed:c6:87:bd: 44:29:d0:13:06:b8:6c:f9:5d:85:69:f9:a9:01:80:3a:a0:d4: a8:02:3f:65:f2:a9:7c:ef:aa:43:68:e1:7b:36:87:c1:b6:27: 89:8b:39:0c:0d:0e:a0:21:16:08:95:53:cd:b0:a5:f5:2b:b2: 47:05:dd:d8:22:c2:c5:4f:56:2b:d6:ad:f9:07:84:83:da:04: 71:9e:7a:87:26:e8:ea:2e:60:d8:c2:56:b1:3c:fc:7c:b2:5d: de:c2:6b:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHFEdcaFIGbQDlzjxqOs8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1OWQ2YWZiOGRkZjhmOGMwZGQ2NjA3OTBlZGNiYTFmM2Iz NzBjNjMwHhcNMjUxMjA2MTAwMTUwWhcNMjUxMjA3MTAwMTUwWjAzMTEwLwYDVQQD EyhhMmU5MzM3MDI3MjVkM2NmYWExZjU0YjUyYjliMzkxMGFkOTQ2NjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN7m6/nZxKP51pgKcbszlSOtjcwX AJHo5jjCTPOd2IRCsoEXKzljvNsra7BPY/hw2u4Eq3cjL9L7nOOUCgzR1xk1QkCG evDpotUBJWT0f0gKDeFyBYxVe9vN2pX1WTc9PRWQMaUKGgBEq30F/Z1hXZ5CqILS 98yiAR9hgQtq46bAlWL1MWB3ZNSAIj6ItY8pqNgdjyKVysPx+EQjsesYLORbysjk UGyM4CCRwW9NWsSMhMtVyTO4kFKVBq6y1IjZXCAjC79e4bunw14ufAj7eWxUrJio 2t74WBot03VWjwiWsG4kyr9URQH794ZYX39/7DU4CQha2571u3RpklG1YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLpM3AnJdPPqh9UtSubORCtlGYeMB8GA1UdIwQY MBaAFHWdavuN34+MDdZgeQ7cuh87NwxjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFoxcS00M2ZqNHdOMW1CNUR0eTZIenMzREdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xNmI3ZjQtZmExNS00N2E2LTlmYzUt MjU0YmNiY2VjMDM3LzEvZFoxcS00M2ZqNHdOMW1CNUR0eTZIenMzREdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xNmI3ZjQtZmExNS00N2E2LTlmYzUtMjU0YmNiY2VjMDM3 LzEvZFoxcS00M2ZqNHdOMW1CNUR0eTZIenMzREdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4EDcBAy gebrWxlaWZvkFSyRmTBQ0D6ghPIwyK4ZBiuP47x+ze21lilWsBaGAOF5lMyUc4+g v/gqvO2cTVm8PYN8knaQktwASceoGv8XxosQSCQhBs4Z/uz65VAAKcAXdSVfy+fJ NuRM1hIXEFJhOqTaaxYaL5CYlhBkzDPpG1TI/l1K/JnYGAQeVq7kO3A2zSrDzJYx N4WvducEDQTtxoe9RCnQEwa4bPldhWn5qQGAOqDUqAI/ZfKpfO+qQ2jhezaHwbYn iYs5DA0OoCEWCJVTzbCl9SuyRwXd2CLCxU9WK9at+QeEg9oEcZ56hybo6i5g2MJW sTz8fLJd3sJrHw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:47:33 2025 by rpki-client