This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft File: DyFSGnEnFX99rwrQkTlK1aHM53k.mft (raw, json) Hash identifier: acy5J9quLOjhCibUDFLZpR26rB4eZt937l2ovPc/rQ0= Subject key identifier: E2:BA:78:AF:F8:93:2F:E7:69:96:DF:D1:72:01:88:EA:75:EF:24:48 Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79 Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779 Certificate serial: 019B3B3472354900E5CEC84B285BB82B2ED1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft Manifest number: 178F Signing time: Sat 20 Dec 2025 10:00:51 +0000 Manifest this update: Sat 20 Dec 2025 10:00:51 +0000 Manifest next update: Sun 21 Dec 2025 10:00:51 +0000 Files and hashes: 1: 2ruUNINuI6uV8MYI78EZQWS_RIg.roa (hash: VHS2lsqC+IJ5oxkyfws5q9amIcBNw+9L6nwp+Qj/0vY=) 2: 8i1g8XKNJedNWFOzfSsVo0JxCqM.roa (hash: qcd7n9F8BEzZZvgBgE1cIJu2JRF1Xvz0rV08SZQkPQw=) 3: DyFSGnEnFX99rwrQkTlK1aHM53k.crl (hash: nFZWfdakh0Pu99D08HYET1U1YjTJpKOLfq+HdCLNMpA=) 4: lXftion8-6bSPXb1hByWoZWZToE.roa (hash: SvWuwU45VoYUssTvSq8q7tUVCqlmbl2PlDyAIGIPVcs=) 5: m8rrUo6uiDcirMi6Sl7eYgFmoKs.roa (hash: ooZ40cwVnj6zMgLWzk/b928qzd5lbFKtSTI7ArxTES8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:72:35:49:00:e5:ce:c8:4b:28:5b:b8:2b:2e:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779 Validity Not Before: Dec 20 10:00:51 2025 GMT Not After : Dec 21 10:00:51 2025 GMT Subject: CN=e2ba78aff8932fe76996dfd1720188ea75ef2448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2d:8a:3d:fe:f0:ea:2a:32:be:bf:05:53:c7: 6d:27:40:89:ef:07:62:a6:e5:f0:53:98:19:28:84: fe:6d:c4:8b:31:b4:4c:47:cb:93:5d:b6:ea:02:3f: a4:73:83:0b:a4:18:1e:98:fb:66:29:9c:37:16:c7: c0:b4:7e:5c:59:c2:58:e2:33:c1:4b:03:10:aa:1d: 7a:45:ee:4d:b0:a1:8b:a6:14:df:0a:cf:43:1c:99: 9b:7c:93:76:a5:ca:63:7f:85:74:5e:6a:ea:eb:2d: 78:a4:91:74:48:2a:c5:c0:7d:72:09:86:b6:1a:01: db:4a:70:77:2f:39:ec:ab:98:68:7e:b5:a1:d7:40: 40:1a:e3:61:c4:28:b9:47:4a:61:9c:7f:90:89:14: 8c:ef:df:35:45:88:2e:21:65:44:cd:3a:d7:ff:68: b1:13:88:b6:d9:39:ab:4a:bc:1f:ce:8c:ed:8f:ce: 1c:b3:e4:96:e4:ea:5d:b7:7d:42:01:1a:31:cb:fa: 1e:aa:ba:a5:c6:00:f1:75:aa:98:fa:39:d1:92:1e: b5:62:ba:04:2c:d9:bf:ed:04:ad:ed:f2:73:d6:1a: 2f:70:81:f3:46:3d:99:7f:30:aa:3c:52:56:bb:dc: 0f:05:9f:59:85:ff:7c:0b:94:df:93:36:24:b9:af: 17:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:BA:78:AF:F8:93:2F:E7:69:96:DF:D1:72:01:88:EA:75:EF:24:48 X509v3 Authority Key Identifier: keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:aa:89:50:77:3c:80:36:e5:e5:07:9d:4b:a0:50:c1:a9:19: 20:4f:64:c1:9e:5c:00:f1:dc:61:42:49:fc:67:18:0f:d3:b8: f3:04:f1:a9:de:ab:28:cc:5d:41:16:cb:a6:87:7e:b6:3a:e5: da:bf:7f:30:38:b6:7e:71:1d:fa:91:53:86:2c:05:48:c0:1f: 9b:8d:52:f7:96:53:14:ca:fe:35:2b:73:d9:a8:04:e6:84:26: 6d:27:08:99:60:48:78:56:0a:91:76:c1:60:7d:00:74:a1:29: 80:b6:d8:78:2e:8a:e0:f4:72:ad:f1:54:e7:86:44:89:9c:91: d4:37:5b:a6:05:75:70:29:88:ca:68:5d:32:8a:0a:77:59:c6: 62:30:d6:fc:b0:c6:9f:6f:cc:6a:e5:a6:fd:37:69:3e:f5:51: cf:f2:71:ca:d2:cd:28:11:ae:c7:92:83:06:45:b0:b0:39:b7: 2c:5c:f5:1c:db:ce:ce:4e:f8:d0:0f:a0:a4:ae:31:56:cf:0b: e4:03:3b:17:6b:31:f7:e2:95:26:08:93:78:27:50:0c:07:c8: 60:dd:70:12:c2:b9:c8:23:5a:cf:5f:68:0a:d5:8f:6c:e7:49: 0d:7c:22:78:5d:b8:41:1c:74:60:5d:fa:7e:98:a2:1c:29:89: 4f:96:91:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NHI1SQDlzshLKFu4Ky7RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMjE1MjFhNzEyNzE1N2Y3ZGFmMGFkMDkxMzk0YWQ1YTFj Y2U3NzkwHhcNMjUxMjIwMTAwMDUxWhcNMjUxMjIxMTAwMDUxWjAzMTEwLwYDVQQD EyhlMmJhNzhhZmY4OTMyZmU3Njk5NmRmZDE3MjAxODhlYTc1ZWYyNDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry2KPf7w6ioyvr8FU8dtJ0CJ7wdi puXwU5gZKIT+bcSLMbRMR8uTXbbqAj+kc4MLpBgemPtmKZw3FsfAtH5cWcJY4jPB SwMQqh16Re5NsKGLphTfCs9DHJmbfJN2pcpjf4V0Xmrq6y14pJF0SCrFwH1yCYa2 GgHbSnB3Lznsq5hofrWh10BAGuNhxCi5R0phnH+QiRSM7981RYguIWVEzTrX/2ix E4i22TmrSrwfzoztj84cs+SW5Opdt31CARoxy/oeqrqlxgDxdaqY+jnRkh61YroE LNm/7QSt7fJz1hovcIHzRj2ZfzCqPFJWu9wPBZ9Zhf98C5TfkzYkua8XmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOK6eK/4ky/naZbf0XIBiOp17yRIMB8GA1UdIwQY MBaAFA8hUhpxJxV/fa8K0JE5StWhzOd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHlGU0duRW5GWDk5cndyUWtUbEsxYUhNNTNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lODMxYjEtOWVjMC00NmYyLTg2MGQt ZmFkNWZkNzk3MGJhLzEvRHlGU0duRW5GWDk5cndyUWtUbEsxYUhNNTNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9lODMxYjEtOWVjMC00NmYyLTg2MGQtZmFkNWZkNzk3MGJh LzEvRHlGU0duRW5GWDk5cndyUWtUbEsxYUhNNTNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJaqJUHc8 gDbl5QedS6BQwakZIE9kwZ5cAPHcYUJJ/GcYD9O48wTxqd6rKMxdQRbLpod+tjrl 2r9/MDi2fnEd+pFThiwFSMAfm41S95ZTFMr+NStz2agE5oQmbScImWBIeFYKkXbB YH0AdKEpgLbYeC6K4PRyrfFU54ZEiZyR1DdbpgV1cCmIymhdMooKd1nGYjDW/LDG n2/MauWm/TdpPvVRz/JxytLNKBGux5KDBkWwsDm3LFz1HNvOzk740A+gpK4xVs8L 5AM7F2sx9+KVJgiTeCdQDAfIYN1wEsK5yCNaz19oCtWPbOdJDXwieF24QRx0YF36 fpiiHCmJT5aR0A== -----END CERTIFICATE-----Generated at Sat Dec 20 15:13:15 2025 by rpki-client