This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft File: dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft (raw, json) Hash identifier: G1cEGnqOOFSBQi6K/74NN59fHmxdbT+83Ui2AAynG9c= Subject key identifier: 02:93:2B:BD:25:4C:1D:3A:1E:A9:71:4C:68:75:DB:85:6A:1E:FB:84 Authority key identifier: 76:16:24:DD:DC:5C:02:79:C7:F8:C9:FF:12:88:A4:D3:04:4C:08:47 Certificate issuer: /CN=761624dddc5c0279c7f8c9ff1288a4d3044c0847 Certificate serial: 019B3D90A0BE343E821C10876593076DC8D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft Manifest number: 03F6 Signing time: Sat 20 Dec 2025 21:00:46 +0000 Manifest this update: Sat 20 Dec 2025 21:00:46 +0000 Manifest next update: Sun 21 Dec 2025 21:00:46 +0000 Files and hashes: 1: dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl (hash: e+oL333nLKUsZhWYS3BRPBd/u5ymYs330NlNRFvYx30=) 2: uMFOgPoc2NWCSxPiOG6b1D8E-ZI.roa (hash: R/unw2gN5aPMxs/UeuzYe+LHJKBGKVUf8WbT/53nntg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:a0:be:34:3e:82:1c:10:87:65:93:07:6d:c8:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=761624dddc5c0279c7f8c9ff1288a4d3044c0847 Validity Not Before: Dec 20 21:00:46 2025 GMT Not After : Dec 21 21:00:46 2025 GMT Subject: CN=02932bbd254c1d3a1ea9714c6875db856a1efb84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ba:32:54:f9:07:cc:f3:9d:1e:d9:74:f5:ca: 8f:f5:36:06:f1:de:89:9e:6b:2b:ee:31:39:dd:aa: 2e:fd:ef:1a:05:b5:88:e9:33:5f:85:34:11:df:b9: 50:dc:cb:b1:a7:e8:77:2e:a5:26:c9:70:64:a8:8a: 53:19:a5:bb:41:f3:67:48:d3:51:f8:14:69:5e:d2: 8d:82:25:48:f0:79:0f:17:e5:20:d3:1b:27:44:4e: 24:e2:10:f0:90:b0:41:0d:72:18:45:07:60:97:d2: 2b:46:7d:42:5e:96:5a:cc:66:7a:5d:59:23:32:c3: 46:1f:00:0f:1f:8f:48:4e:13:33:68:25:6d:49:a8: 63:55:24:66:b4:22:0d:3b:d2:55:f3:24:48:b6:02: 3b:34:10:0f:bc:cf:3e:72:c6:46:19:4e:65:ef:e4: ae:55:8b:f9:30:98:9c:c6:f0:76:2a:46:ff:5a:b9: 86:6e:3d:de:d7:a0:6c:7c:0f:45:92:37:3f:81:ad: 51:b4:e6:c6:09:85:0b:11:61:87:22:fc:ce:73:de: f2:44:fd:3c:f5:68:1c:e8:b1:cd:d6:bc:8b:cb:fb: b3:32:94:e4:df:d1:95:18:e2:7e:58:da:60:56:ea: 85:64:f0:83:75:1e:d6:c5:62:a7:2f:ca:0e:96:47: b5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:93:2B:BD:25:4C:1D:3A:1E:A9:71:4C:68:75:DB:85:6A:1E:FB:84 X509v3 Authority Key Identifier: keyid:76:16:24:DD:DC:5C:02:79:C7:F8:C9:FF:12:88:A4:D3:04:4C:08:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:91:09:ab:71:42:fd:47:91:8f:6e:53:07:ba:f1:0e:27:e2: b7:f1:fb:b8:f6:0a:33:94:0b:78:23:71:39:b7:8a:d6:d7:43: 7a:a6:28:43:71:b9:4e:10:fb:1e:f8:62:ff:7e:43:e9:1e:bc: 6d:45:a2:cb:c4:49:7f:09:2b:c2:ad:77:ee:84:41:e7:27:9c: 00:28:8c:fa:50:f5:2f:79:39:a4:21:59:cc:03:63:ea:64:7d: 9f:f0:df:93:05:2f:c6:b2:e6:d2:3b:53:66:e5:67:a6:74:b2: ce:1f:1b:62:9e:cd:b8:a3:47:5c:da:3b:c8:f2:90:96:06:48: 66:a4:74:13:96:4a:49:bf:92:df:6b:ee:6b:4d:db:a0:e0:33: 95:18:86:c9:8b:47:3c:a4:0b:18:a9:08:a2:2e:db:62:82:4e: f3:6b:df:57:52:fa:51:b2:f4:1f:6c:0f:6f:e5:4b:a8:ff:5a: 02:1f:f0:e0:8a:0b:d4:b3:00:2b:6b:76:91:1d:3c:3b:ff:5b: 27:a5:e7:5c:bf:80:78:9a:03:1a:b6:5b:b4:b7:c6:7b:57:6d: f1:a3:d1:9b:e8:f8:af:ee:9d:19:fb:81:7d:4b:6b:48:88:fe: 46:08:08:88:d5:0f:5f:9c:85:79:83:8c:2e:54:05:e6:3e:ed: 08:36:1f:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kKC+ND6CHBCHZZMHbcjVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MTYyNGRkZGM1YzAyNzljN2Y4YzlmZjEyODhhNGQzMDQ0 YzA4NDcwHhcNMjUxMjIwMjEwMDQ2WhcNMjUxMjIxMjEwMDQ2WjAzMTEwLwYDVQQD EygwMjkzMmJiZDI1NGMxZDNhMWVhOTcxNGM2ODc1ZGI4NTZhMWVmYjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLoyVPkHzPOdHtl09cqP9TYG8d6J nmsr7jE53aou/e8aBbWI6TNfhTQR37lQ3Muxp+h3LqUmyXBkqIpTGaW7QfNnSNNR +BRpXtKNgiVI8HkPF+Ug0xsnRE4k4hDwkLBBDXIYRQdgl9IrRn1CXpZazGZ6XVkj MsNGHwAPH49IThMzaCVtSahjVSRmtCINO9JV8yRItgI7NBAPvM8+csZGGU5l7+Su VYv5MJicxvB2Kkb/WrmGbj3e16BsfA9Fkjc/ga1RtObGCYULEWGHIvzOc97yRP08 9Wgc6LHN1ryLy/uzMpTk39GVGOJ+WNpgVuqFZPCDdR7WxWKnL8oOlke1JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKTK70lTB06HqlxTGh124VqHvuEMB8GA1UdIwQY MBaAFHYWJN3cXAJ5x/jJ/xKIpNMETAhHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGhZazNkeGNBbm5ILU1uX0VvaWswd1JNQ0VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81ODk3NjEtYzY2Mi00ZjEzLTg3MGEt MTNlODgwMTYyOGY1LzEvZGhZazNkeGNBbm5ILU1uX0VvaWswd1JNQ0VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC81ODk3NjEtYzY2Mi00ZjEzLTg3MGEtMTNlODgwMTYyOGY1 LzEvZGhZazNkeGNBbm5ILU1uX0VvaWswd1JNQ0VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJEJq3FC /UeRj25TB7rxDifit/H7uPYKM5QLeCNxObeK1tdDeqYoQ3G5ThD7Hvhi/35D6R68 bUWiy8RJfwkrwq137oRB5yecACiM+lD1L3k5pCFZzANj6mR9n/DfkwUvxrLm0jtT ZuVnpnSyzh8bYp7NuKNHXNo7yPKQlgZIZqR0E5ZKSb+S32vua03boOAzlRiGyYtH PKQLGKkIoi7bYoJO82vfV1L6UbL0H2wPb+VLqP9aAh/w4IoL1LMAK2t2kR08O/9b J6XnXL+AeJoDGrZbtLfGe1dt8aPRm+j4r+6dGfuBfUtrSIj+RggIiNUPX5yFeYOM LlQF5j7tCDYf4w== -----END CERTIFICATE-----Generated at Sun Dec 21 04:23:34 2025 by rpki-client