This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft File: dzvnzzJSpol11eIkWJjAPE-2Ddo.mft (raw, json) Hash identifier: vg1begU1NSBEis5vPk16J6au0ehSaRWPnAGRJ8WBoWA= Subject key identifier: 0E:56:38:42:F1:41:B1:B9:45:75:06:91:49:57:53:B6:C0:4E:7E:10 Authority key identifier: 77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA Certificate issuer: /CN=773be7cf3252a68975d5e2245898c03c4fb60dda Certificate serial: 019AF42E5E46BA29AE606FA9F22BD99B3B5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 15:01:10 +0000 Manifest this update: Sat 06 Dec 2025 15:01:10 +0000 Manifest next update: Sun 07 Dec 2025 15:01:10 +0000 Files and hashes: 1: _ImNSv6eqpMmc8LhLdIjg50bCa8.roa (hash: 5CDnviEmi+ap5BPLLzbSLbS6bZVBFFpeZ3xoO+CFdbk=) 2: dzvnzzJSpol11eIkWJjAPE-2Ddo.crl (hash: 7JT5kfjnCEACyzEFVKkM9ZGhLgwdEbgXQY8/Z2XtvK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:5e:46:ba:29:ae:60:6f:a9:f2:2b:d9:9b:3b:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=773be7cf3252a68975d5e2245898c03c4fb60dda Validity Not Before: Dec 6 15:01:10 2025 GMT Not After : Dec 7 15:01:10 2025 GMT Subject: CN=0e563842f141b1b945750691495753b6c04e7e10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ba:9a:96:51:ac:d5:33:db:b2:78:5f:f2:55: 8a:91:87:ce:87:5d:7f:aa:b2:b5:47:ae:98:13:3d: 69:1f:2a:0f:78:3a:e9:5b:27:63:a5:82:7c:b2:f9: f4:1a:18:6e:ed:78:24:8d:91:90:85:d7:1a:d2:f1: a6:e3:a4:85:1f:8c:54:a8:38:1e:0b:0e:fc:c9:0c: f1:65:ed:9d:4f:90:9d:bb:d6:de:73:3a:43:e6:26: f2:05:a3:8d:2e:28:bf:d3:d1:68:51:94:ea:eb:e2: 86:94:19:bb:cc:c4:88:ea:e2:b1:ae:9e:ad:4c:a1: ad:cc:22:e6:57:92:3f:cf:ba:0f:3d:63:26:9c:2a: 22:95:5a:72:ad:48:23:fb:f3:01:2e:c7:c0:fe:ca: a8:a5:4c:2d:6f:5f:13:07:0d:eb:ba:5b:b5:55:9e: b1:50:ca:41:b8:4f:f2:3e:fa:a8:8b:3b:96:43:8d: 3e:0a:75:0e:86:72:e8:20:0a:b3:c8:f1:74:65:cd: 7d:b6:da:43:f7:13:58:b6:90:6d:b2:22:d8:c5:21: ba:83:f1:20:22:c9:ea:03:3e:02:79:fe:88:86:aa: 7a:12:af:ad:fc:d6:b6:c5:d0:8b:ba:94:18:d4:4d: 5d:aa:43:cd:ae:dd:34:1d:0a:fd:1c:ae:c9:0e:aa: 27:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:56:38:42:F1:41:B1:B9:45:75:06:91:49:57:53:B6:C0:4E:7E:10 X509v3 Authority Key Identifier: keyid:77:3B:E7:CF:32:52:A6:89:75:D5:E2:24:58:98:C0:3C:4F:B6:0D:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzvnzzJSpol11eIkWJjAPE-2Ddo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/dzvnzzJSpol11eIkWJjAPE-2Ddo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:73:41:1c:1c:4c:23:2b:1f:72:d4:e7:f8:e9:3b:c8:94:42: 36:34:33:35:c4:6d:f1:60:80:db:3a:2f:e3:13:ab:f5:ea:fd: 00:af:63:00:7a:d6:4d:f9:ac:bc:43:e1:81:58:ad:9c:27:26: 86:5d:4d:29:61:95:33:41:2a:a2:5a:28:28:8f:42:76:5e:6f: 1a:c6:d3:ba:89:e0:06:21:21:15:fa:73:1b:82:bf:5d:d8:6d: 59:52:64:76:93:2a:a2:33:e8:bd:79:43:18:76:90:72:e3:d2: 21:04:39:13:7e:da:ec:3c:40:ee:7c:34:07:3e:d8:2e:4a:d7: 25:1c:b4:eb:ac:e7:42:2f:3b:64:e9:2e:ef:31:32:bd:43:04: 55:c8:52:69:38:a3:e6:53:38:ce:19:53:89:97:d0:51:68:e1: 58:c4:50:f8:e2:8e:00:0a:e7:15:7f:0c:bc:28:06:2c:6d:0f: ff:4d:70:c7:41:15:39:24:7a:9d:c9:dc:fb:c7:d7:97:d0:bf: 8f:33:a7:90:49:a5:55:8f:90:a4:69:62:c1:f7:b2:3e:89:f3: 76:bc:37:d2:bd:6e:aa:ab:f3:9e:32:57:a3:9b:6e:c3:01:4a: 0b:43:01:35:ff:7f:e5:d3:b8:2f:22:0c:83:ed:44:77:a9:ea: 33:3c:54:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Ll5GuimuYG+p8ivZmztdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3M2JlN2NmMzI1MmE2ODk3NWQ1ZTIyNDU4OThjMDNjNGZi NjBkZGEwHhcNMjUxMjA2MTUwMTEwWhcNMjUxMjA3MTUwMTEwWjAzMTEwLwYDVQQD EygwZTU2Mzg0MmYxNDFiMWI5NDU3NTA2OTE0OTU3NTNiNmMwNGU3ZTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7qallGs1TPbsnhf8lWKkYfOh11/ qrK1R66YEz1pHyoPeDrpWydjpYJ8svn0Ghhu7XgkjZGQhdca0vGm46SFH4xUqDge Cw78yQzxZe2dT5Cdu9beczpD5ibyBaONLii/09FoUZTq6+KGlBm7zMSI6uKxrp6t TKGtzCLmV5I/z7oPPWMmnCoilVpyrUgj+/MBLsfA/sqopUwtb18TBw3rulu1VZ6x UMpBuE/yPvqoizuWQ40+CnUOhnLoIAqzyPF0Zc19ttpD9xNYtpBtsiLYxSG6g/Eg IsnqAz4Cef6Ihqp6Eq+t/Na2xdCLupQY1E1dqkPNrt00HQr9HK7JDqonbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA5WOELxQbG5RXUGkUlXU7bATn4QMB8GA1UdIwQY MBaAFHc7588yUqaJddXiJFiYwDxPtg3aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHp2bnp6SlNwb2wxMWVJa1dKakFQRS0yRGRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jYmEwZDMtNTk0NC00NzQ3LTg4MzUt YmVkMDU2N2VmYTZiLzEvZHp2bnp6SlNwb2wxMWVJa1dKakFQRS0yRGRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9jYmEwZDMtNTk0NC00NzQ3LTg4MzUtYmVkMDU2N2VmYTZi LzEvZHp2bnp6SlNwb2wxMWVJa1dKakFQRS0yRGRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3NBHBxM IysfctTn+Ok7yJRCNjQzNcRt8WCA2zov4xOr9er9AK9jAHrWTfmsvEPhgVitnCcm hl1NKWGVM0EqolooKI9Cdl5vGsbTuongBiEhFfpzG4K/XdhtWVJkdpMqojPovXlD GHaQcuPSIQQ5E37a7DxA7nw0Bz7YLkrXJRy066znQi87ZOku7zEyvUMEVchSaTij 5lM4zhlTiZfQUWjhWMRQ+OKOAArnFX8MvCgGLG0P/01wx0EVOSR6ncnc+8fXl9C/ jzOnkEmlVY+QpGliwfeyPonzdrw30r1uqqvznjJXo5tuwwFKC0MBNf9/5dO4LyIM g+1Ed6nqMzxUTg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:28:23 2025 by rpki-client