This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft File: dzR-Fo1pZYVFN05qC2jSS5f80AY.mft (raw, json) Hash identifier: 0DVM0P9t2xTzXBfkQ0Mqnz5Xyhx37YW0o4xCv/WNGOg= Subject key identifier: 86:87:2E:AE:AA:08:40:D6:E3:C8:46:3D:9D:03:36:84:91:32:A5:03 Authority key identifier: 77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06 Certificate issuer: /CN=77347e168d69658545374e6a0b68d24b97fcd006 Certificate serial: 019AF31B5C2143A2B4FF70C223A5D9E050DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft Manifest number: 089A Signing time: Sat 06 Dec 2025 10:00:47 +0000 Manifest this update: Sat 06 Dec 2025 10:00:47 +0000 Manifest next update: Sun 07 Dec 2025 10:00:47 +0000 Files and hashes: 1: Dtmeeo2Ahqu20IUfCd65FxwTl2k.roa (hash: I+vjjlJcdrLb3KMRUhvwUitmKXx1JxbgC5EfsL3L6hI=) 2: MA5FazDAuWizu2sArINAiZDNSkk.roa (hash: RRjoWKPkJksBjTPCtL+V2nNMKG6oIx2+O6vH374Aw7I=) 3: dzR-Fo1pZYVFN05qC2jSS5f80AY.crl (hash: wricsp/CjM45LolSyLZWZw4jOknV4sZxNLsFU8wl4rM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:5c:21:43:a2:b4:ff:70:c2:23:a5:d9:e0:50:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77347e168d69658545374e6a0b68d24b97fcd006 Validity Not Before: Dec 6 10:00:47 2025 GMT Not After : Dec 7 10:00:47 2025 GMT Subject: CN=86872eaeaa0840d6e3c8463d9d0336849132a503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bd:08:65:bb:8b:02:0f:0c:a1:ff:7b:8a:76: 40:3b:f8:e6:43:36:02:e4:38:ea:b0:f8:01:de:a3: 78:23:2e:bf:62:97:ec:f6:84:41:d6:b8:72:d1:2f: b1:d4:d7:06:28:a4:32:10:28:d4:d9:78:ad:f3:62: 83:ac:76:ac:f5:b6:d1:c2:31:ac:d3:31:36:ba:68: aa:23:3c:da:b8:1c:1b:62:ca:28:14:0e:36:4c:ad: 02:14:ba:b5:5f:98:1c:dd:1e:d7:db:be:34:40:85: 8f:98:ee:70:9c:d5:99:fb:df:3c:95:4c:57:0c:87: 66:d5:3c:65:9a:6c:b5:31:2f:a8:65:36:7a:a9:4b: ba:ae:4b:f3:2d:03:e4:62:13:79:11:80:8d:07:65: 19:f6:18:e2:d8:8a:f1:23:d1:f5:00:f2:ee:c7:08: b8:20:6b:4b:96:5a:c5:6b:2e:f3:fa:54:f7:1e:10: 7b:e1:b3:9e:13:3c:82:a7:de:80:97:bd:a6:95:5f: 6f:b3:79:33:c1:45:d7:09:7b:c8:78:0e:0a:a2:50: 64:06:06:e1:50:a0:77:1e:d0:19:b9:51:58:80:40: 14:1d:95:bf:37:24:39:a8:6d:da:63:ce:3e:62:75: 2b:6a:d4:44:59:40:c9:96:07:72:89:de:1b:e1:8d: 5b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:87:2E:AE:AA:08:40:D6:E3:C8:46:3D:9D:03:36:84:91:32:A5:03 X509v3 Authority Key Identifier: keyid:77:34:7E:16:8D:69:65:85:45:37:4E:6A:0B:68:D2:4B:97:FC:D0:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzR-Fo1pZYVFN05qC2jSS5f80AY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26a0a3-22f1-4ca1-a6cd-67ebbc8c6862/1/dzR-Fo1pZYVFN05qC2jSS5f80AY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:69:0d:53:73:b7:4d:7d:b5:c7:a0:a9:d4:0e:a6:2b:3f:1f: 62:69:c6:62:13:74:d5:3c:d2:fa:62:91:a9:d5:bc:27:ca:04: 3b:d9:48:b3:b2:0d:4c:93:80:88:f9:7d:5b:5e:59:b0:88:57: c9:d8:44:ff:fe:a4:6f:81:0c:45:70:4c:b1:df:06:32:f7:80: 93:27:0c:54:5f:2b:e1:b1:1d:d2:4c:69:6f:96:57:7a:b3:b1: 11:a1:bc:bb:28:f4:b0:ac:aa:24:5b:ba:59:04:60:ed:71:3e: 7d:f8:7e:2e:f0:a5:90:ae:69:47:d6:7b:17:b7:6f:0b:24:a0: 05:b2:8e:6b:d0:37:e6:82:19:0f:c1:0d:30:9c:13:ca:2c:09: 6b:29:4b:ad:6f:9b:83:09:39:5c:ab:06:13:a0:8d:f7:23:ca: b4:4d:d2:b4:3e:58:43:59:bd:b7:c4:e5:96:b1:2e:c9:10:ea: f9:78:38:19:4f:ad:aa:76:ba:93:9b:c7:ae:af:9c:7a:b7:f4: 67:a4:bd:70:75:aa:de:c2:15:90:8d:e0:82:2b:b0:91:23:93: 59:df:1b:3c:3f:39:03:61:d1:74:6f:aa:a9:34:4c:39:7d:e8: b1:f0:73:69:1b:fe:38:e0:be:5b:98:14:08:d3:74:ac:a6:bf: 24:21:34:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG1whQ6K0/3DCI6XZ4FDdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MzQ3ZTE2OGQ2OTY1ODU0NTM3NGU2YTBiNjhkMjRiOTdm Y2QwMDYwHhcNMjUxMjA2MTAwMDQ3WhcNMjUxMjA3MTAwMDQ3WjAzMTEwLwYDVQQD Eyg4Njg3MmVhZWFhMDg0MGQ2ZTNjODQ2M2Q5ZDAzMzY4NDkxMzJhNTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL0IZbuLAg8Mof97inZAO/jmQzYC 5DjqsPgB3qN4Iy6/Ypfs9oRB1rhy0S+x1NcGKKQyECjU2Xit82KDrHas9bbRwjGs 0zE2umiqIzzauBwbYsooFA42TK0CFLq1X5gc3R7X2740QIWPmO5wnNWZ+988lUxX DIdm1Txlmmy1MS+oZTZ6qUu6rkvzLQPkYhN5EYCNB2UZ9hji2IrxI9H1APLuxwi4 IGtLllrFay7z+lT3HhB74bOeEzyCp96Al72mlV9vs3kzwUXXCXvIeA4KolBkBgbh UKB3HtAZuVFYgEAUHZW/NyQ5qG3aY84+YnUratREWUDJlgdyid4b4Y1bOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIaHLq6qCEDW48hGPZ0DNoSRMqUDMB8GA1UdIwQY MBaAFHc0fhaNaWWFRTdOagto0kuX/NAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8yNmEwYTMtMjJmMS00Y2ExLWE2Y2Qt NjdlYmJjOGM2ODYyLzEvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8yNmEwYTMtMjJmMS00Y2ExLWE2Y2QtNjdlYmJjOGM2ODYy LzEvZHpSLUZvMXBaWVZGTjA1cUMyalNTNWY4MEFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGkNU3O3 TX21x6Cp1A6mKz8fYmnGYhN01TzS+mKRqdW8J8oEO9lIs7INTJOAiPl9W15ZsIhX ydhE//6kb4EMRXBMsd8GMveAkycMVF8r4bEd0kxpb5ZXerOxEaG8uyj0sKyqJFu6 WQRg7XE+ffh+LvClkK5pR9Z7F7dvCySgBbKOa9A35oIZD8ENMJwTyiwJaylLrW+b gwk5XKsGE6CN9yPKtE3StD5YQ1m9t8TllrEuyRDq+Xg4GU+tqna6k5vHrq+cerf0 Z6S9cHWq3sIVkI3ggiuwkSOTWd8bPD85A2HRdG+qqTRMOX3osfBzaRv+OOC+W5gU CNN0rKa/JCE0XQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:52:24 2025 by rpki-client