This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft File: DYifra578hBy-tsy4ep2OwwplI4.mft (raw, json) Hash identifier: IrX2h4f/CPLJN48YjHfycFsLUtaDiEU5OL3e61G46Q8= Subject key identifier: 6A:C0:79:FC:4C:93:15:8F:4A:49:5E:E0:ED:2C:3E:CE:76:BC:AC:C6 Authority key identifier: 0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E Certificate issuer: /CN=0d889fadae7bf21072fadb32e1ea763b0c29948e Certificate serial: 019B3F7EDADD0260BBBAD02C50F285330AD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft Manifest number: 0E71 Signing time: Sun 21 Dec 2025 06:00:36 +0000 Manifest this update: Sun 21 Dec 2025 06:00:36 +0000 Manifest next update: Mon 22 Dec 2025 06:00:36 +0000 Files and hashes: 1: DYifra578hBy-tsy4ep2OwwplI4.crl (hash: ljew+cB248x6u5xbphkgjJi/4TBGrANV3v/BcWui4M4=) 2: jUminXGzN3lBVv6Wl3PuROeq30E.roa (hash: 8aOqxPJWxG2Nidw4LwjQRZweH1vQbncR7avmcnmTTkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:da:dd:02:60:bb:ba:d0:2c:50:f2:85:33:0a:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d889fadae7bf21072fadb32e1ea763b0c29948e Validity Not Before: Dec 21 06:00:36 2025 GMT Not After : Dec 22 06:00:36 2025 GMT Subject: CN=6ac079fc4c93158f4a495ee0ed2c3ece76bcacc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:50:54:e9:1a:fa:b3:34:4d:94:ed:1d:24:27: d2:e2:da:03:2b:b1:ea:47:e3:2e:96:4b:c8:81:a8: ae:4f:0e:e8:48:31:f8:32:ef:35:42:1f:0d:00:14: d7:f4:d6:46:70:2c:ba:ef:b8:79:7f:9e:1f:d7:18: 53:64:2a:d5:fb:fe:f7:13:3e:91:a2:77:18:54:36: d4:a8:77:3d:83:34:15:0d:fc:26:e5:a3:9b:99:5f: 2b:71:63:79:ab:24:f7:55:4b:7e:1d:15:fc:ea:1e: 31:91:ab:4b:17:73:7d:ca:55:3a:7b:13:f8:b3:53: 2b:ef:37:89:b6:a3:3e:51:f5:24:be:00:c8:6e:c3: 3c:db:90:ee:c4:68:9b:2c:5d:74:e5:ea:9d:78:73: 27:3f:78:52:2c:2d:f9:35:c6:9e:9f:06:9a:fa:d2: 68:05:00:b7:67:c2:1e:07:66:00:2e:22:df:0e:e7: be:53:67:a0:bf:76:f2:de:36:18:db:cb:91:89:6f: 8e:33:87:d2:aa:ce:64:64:4f:bf:a3:89:32:5f:61: 3f:47:32:88:a9:16:da:21:a0:45:da:08:7b:26:fe: 0d:64:b7:a6:39:13:16:a7:11:70:20:d6:94:3c:28: 85:4d:f3:63:c3:98:6a:1b:8b:15:97:9f:95:c6:86: 7a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C0:79:FC:4C:93:15:8F:4A:49:5E:E0:ED:2C:3E:CE:76:BC:AC:C6 X509v3 Authority Key Identifier: keyid:0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:6c:b0:d5:e9:fb:84:9d:ef:05:20:73:a9:0a:83:bf:fc:91: 4c:13:3d:aa:a1:ea:9a:3b:b4:6b:dc:95:88:81:ff:a9:b0:2a: 56:7f:62:d3:d1:73:1e:f5:12:92:c9:a4:a8:3b:52:df:4b:71: bb:ef:66:38:9a:b5:d4:e6:f6:98:a7:74:33:64:fb:31:73:5a: 19:96:b5:5c:c2:36:52:54:41:63:6e:3f:e0:36:64:04:91:18: 2f:15:76:f6:d3:c3:60:4f:e8:41:4d:5f:d9:ec:96:a7:84:d5: 61:4a:36:84:48:67:16:ee:d6:06:6b:55:d5:ec:d0:6b:04:5b: 6f:e1:da:39:67:f8:6d:eb:6d:23:e0:da:c9:8b:fb:ea:af:b2: 3c:72:f3:ac:13:8d:d2:01:8e:03:e8:22:45:a5:91:11:4b:83: 6e:53:98:bf:33:20:37:91:42:39:8d:13:f6:f6:29:9d:4d:06: 01:a4:92:86:c1:25:89:74:ed:3b:e2:49:d7:7d:f8:97:ff:dd: 96:b5:52:c4:a6:2c:83:22:a4:37:39:d8:81:16:3f:36:9f:22: 8e:96:1c:4a:0b:2e:30:2c:3d:da:9d:a2:97:94:30:e0:8a:e3: e8:ec:b2:aa:b7:ad:1a:7e:ca:9c:be:3d:d3:aa:08:47:fb:0c: c2:ff:f3:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ftrdAmC7utAsUPKFMwrTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkODg5ZmFkYWU3YmYyMTA3MmZhZGIzMmUxZWE3NjNiMGMy OTk0OGUwHhcNMjUxMjIxMDYwMDM2WhcNMjUxMjIyMDYwMDM2WjAzMTEwLwYDVQQD Eyg2YWMwNzlmYzRjOTMxNThmNGE0OTVlZTBlZDJjM2VjZTc2YmNhY2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFBU6Rr6szRNlO0dJCfS4toDK7Hq R+MulkvIgaiuTw7oSDH4Mu81Qh8NABTX9NZGcCy677h5f54f1xhTZCrV+/73Ez6R oncYVDbUqHc9gzQVDfwm5aObmV8rcWN5qyT3VUt+HRX86h4xkatLF3N9ylU6exP4 s1Mr7zeJtqM+UfUkvgDIbsM825DuxGibLF105eqdeHMnP3hSLC35Ncaenwaa+tJo BQC3Z8IeB2YALiLfDue+U2egv3by3jYY28uRiW+OM4fSqs5kZE+/o4kyX2E/RzKI qRbaIaBF2gh7Jv4NZLemORMWpxFwINaUPCiFTfNjw5hqG4sVl5+VxoZ6ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrAefxMkxWPSkle4O0sPs52vKzGMB8GA1UdIwQY MBaAFA2In62ue/IQcvrbMuHqdjsMKZSOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFlpZnJhNTc4aEJ5LXRzeTRlcDJPd3dwbEk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82ZTRiNzgtYWI5NC00NDljLWE0ZDUt YWJkYjYzYWNlN2U3LzEvRFlpZnJhNTc4aEJ5LXRzeTRlcDJPd3dwbEk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC82ZTRiNzgtYWI5NC00NDljLWE0ZDUtYWJkYjYzYWNlN2U3 LzEvRFlpZnJhNTc4aEJ5LXRzeTRlcDJPd3dwbEk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0Gyw1en7 hJ3vBSBzqQqDv/yRTBM9qqHqmju0a9yViIH/qbAqVn9i09FzHvUSksmkqDtS30tx u+9mOJq11Ob2mKd0M2T7MXNaGZa1XMI2UlRBY24/4DZkBJEYLxV29tPDYE/oQU1f 2eyWp4TVYUo2hEhnFu7WBmtV1ezQawRbb+HaOWf4bettI+DayYv76q+yPHLzrBON 0gGOA+giRaWREUuDblOYvzMgN5FCOY0T9vYpnU0GAaSShsEliXTtO+JJ1334l//d lrVSxKYsgyKkNznYgRY/Np8ijpYcSgsuMCw92p2il5Qw4Irj6OyyqretGn7KnL49 06oIR/sMwv/zow== -----END CERTIFICATE-----Generated at Sun Dec 21 07:43:09 2025 by rpki-client