This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft File: 13yGmob-yDN5Pu7azNSx98pEM-k.mft (raw, json) Hash identifier: BGH1ZpTpVsCe3+fxDJl8Q47EzDd29wOSa7WS9EnTvr0= Subject key identifier: 33:7B:92:3D:E6:35:70:5B:23:6F:6D:17:1C:FB:59:11:2D:09:A1:79 Authority key identifier: D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9 Certificate issuer: /CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9 Certificate serial: 019B3DFE44E0057591B36994ADDF64FD8442 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft Manifest number: 156F Signing time: Sat 20 Dec 2025 23:00:32 +0000 Manifest this update: Sat 20 Dec 2025 23:00:32 +0000 Manifest next update: Sun 21 Dec 2025 23:00:32 +0000 Files and hashes: 1: 13yGmob-yDN5Pu7azNSx98pEM-k.crl (hash: DgHPCm/UXjUbvbdpm6ombQGuwXF7tdNtAY6YFJuunik=) 2: Dcjqka0vRB55CJDqEWplWQ0em2k.roa (hash: QNtKb0wVTgOzXABHcHNsksEjhhvzQUkXJ+QzngWUeuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:44:e0:05:75:91:b3:69:94:ad:df:64:fd:84:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d77c869a86fec833793eeedaccd4b1f7ca4433e9 Validity Not Before: Dec 20 23:00:32 2025 GMT Not After : Dec 21 23:00:32 2025 GMT Subject: CN=337b923de635705b236f6d171cfb59112d09a179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:00:51:40:f1:a6:cc:5a:69:ff:7e:f4:9b:1e: a5:2b:40:a0:5a:ce:3c:01:3a:a5:40:7f:05:ad:b1: 72:2f:9c:a7:02:20:de:41:52:78:d4:db:04:34:be: 4d:f8:b9:4e:d6:4c:eb:2e:92:e4:29:c2:04:10:50: 6c:bb:3a:a7:c8:1b:5c:a1:92:0e:32:dc:41:c8:c4: d4:7f:77:53:30:37:32:79:2b:99:cb:a8:f3:a6:7e: 74:57:b4:e7:24:aa:66:e7:bb:17:2c:16:62:dc:f5: d3:97:7e:ec:56:4d:12:06:27:5f:26:4d:2b:8e:01: cb:89:df:a9:a9:db:57:91:00:57:d9:c3:52:93:33: 04:3b:6d:c6:51:31:d8:9a:25:39:5a:f2:eb:01:f0: d6:c6:7b:b5:81:25:b3:71:d2:f8:75:ce:86:e4:fa: 59:7e:c1:70:f2:40:2a:b0:0b:99:86:8b:b6:59:c1: 19:3f:f7:19:24:96:c7:35:e5:39:06:3b:5d:67:5a: 72:d8:b5:24:55:a0:ce:50:ff:4a:68:e0:4d:87:f8: ba:5f:75:40:17:f3:e0:e7:2d:59:6c:2e:7f:89:d2: 16:18:78:0c:87:1e:9b:ba:d3:47:e0:21:b5:87:6e: fb:a4:60:64:e8:17:71:23:f6:77:a8:d4:c0:eb:58: 29:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:7B:92:3D:E6:35:70:5B:23:6F:6D:17:1C:FB:59:11:2D:09:A1:79 X509v3 Authority Key Identifier: keyid:D7:7C:86:9A:86:FE:C8:33:79:3E:EE:DA:CC:D4:B1:F7:CA:44:33:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13yGmob-yDN5Pu7azNSx98pEM-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/58c87b-9aa8-48ea-85c3-06b163d359e0/1/13yGmob-yDN5Pu7azNSx98pEM-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ab:ac:b5:02:5b:44:32:67:21:8e:c1:6a:7f:1b:4e:70:5a: c4:4c:03:83:91:3a:57:7d:3b:88:f4:cc:77:c4:0f:83:96:be: 81:36:88:ea:56:8b:07:c3:69:4d:52:6d:9e:0a:8b:5b:4f:81: 09:8b:44:31:b7:c0:ab:87:79:e3:cc:2e:53:6c:d2:15:bf:74: 09:47:fc:4f:e0:21:c7:d1:56:16:a8:a7:16:91:42:8f:39:8a: c8:7c:3d:c7:19:ab:cb:19:ae:a8:3f:8a:8f:51:c9:97:f7:1d: 2e:6a:da:7f:c7:5a:5f:78:db:11:5f:8b:bb:7e:3a:c1:cd:0b: b4:25:45:61:1f:a3:cc:28:bd:db:54:6d:ba:ff:55:6d:40:4d: 65:48:6a:46:90:dd:c3:ee:be:43:03:fe:15:ac:a2:21:83:cb: de:6d:42:e8:c2:a9:52:c1:99:ae:90:10:22:4b:52:57:48:4a: b5:1d:36:95:80:a0:95:e4:9c:62:a3:90:c0:5f:22:69:12:00: 7a:81:2d:f1:7a:6e:b4:12:49:27:56:85:74:c7:16:11:da:8e: 99:84:fe:a9:3d:67:a0:84:a3:78:37:b6:28:7d:9c:fa:17:d2: a1:c8:6b:6c:47:76:c9:37:52:cf:5e:87:45:7d:33:04:c1:79: be:6a:78:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/kTgBXWRs2mUrd9k/YRCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3N2M4NjlhODZmZWM4MzM3OTNlZWVkYWNjZDRiMWY3Y2E0 NDMzZTkwHhcNMjUxMjIwMjMwMDMyWhcNMjUxMjIxMjMwMDMyWjAzMTEwLwYDVQQD EygzMzdiOTIzZGU2MzU3MDViMjM2ZjZkMTcxY2ZiNTkxMTJkMDlhMTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmABRQPGmzFpp/370mx6lK0CgWs48 ATqlQH8FrbFyL5ynAiDeQVJ41NsENL5N+LlO1kzrLpLkKcIEEFBsuzqnyBtcoZIO MtxByMTUf3dTMDcyeSuZy6jzpn50V7TnJKpm57sXLBZi3PXTl37sVk0SBidfJk0r jgHLid+pqdtXkQBX2cNSkzMEO23GUTHYmiU5WvLrAfDWxnu1gSWzcdL4dc6G5PpZ fsFw8kAqsAuZhou2WcEZP/cZJJbHNeU5BjtdZ1py2LUkVaDOUP9KaOBNh/i6X3VA F/Pg5y1ZbC5/idIWGHgMhx6butNH4CG1h277pGBk6BdxI/Z3qNTA61gpFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDN7kj3mNXBbI29tFxz7WREtCaF5MB8GA1UdIwQY MBaAFNd8hpqG/sgzeT7u2szUsffKRDPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTN5R21vYi15RE41UHU3YXpOU3g5OHBFTS1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81OGM4N2ItOWFhOC00OGVhLTg1YzMt MDZiMTYzZDM1OWUwLzEvMTN5R21vYi15RE41UHU3YXpOU3g5OHBFTS1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy81OGM4N2ItOWFhOC00OGVhLTg1YzMtMDZiMTYzZDM1OWUw LzEvMTN5R21vYi15RE41UHU3YXpOU3g5OHBFTS1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6ustQJb RDJnIY7Ban8bTnBaxEwDg5E6V307iPTMd8QPg5a+gTaI6laLB8NpTVJtngqLW0+B CYtEMbfAq4d548wuU2zSFb90CUf8T+Ahx9FWFqinFpFCjzmKyHw9xxmryxmuqD+K j1HJl/cdLmraf8daX3jbEV+Lu346wc0LtCVFYR+jzCi921Rtuv9VbUBNZUhqRpDd w+6+QwP+FayiIYPL3m1C6MKpUsGZrpAQIktSV0hKtR02lYCgleScYqOQwF8iaRIA eoEt8XputBJJJ1aFdMcWEdqOmYT+qT1noISjeDe2KH2c+hfSochrbEd2yTdSz16H RX0zBMF5vmp4kQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:22:08 2025 by rpki-client