This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft File: DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft (raw, json) Hash identifier: 6/POVCMXywoHED0VO/4FUWWHYJ/X446MvhRBKDmwJeE= Subject key identifier: 45:B4:BB:FA:99:81:98:BE:25:10:9E:66:AB:89:98:76:49:09:06:2E Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3 Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3 Certificate serial: 019B405B092D87247C2290274F9D0559DFEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 10:01:06 +0000 Manifest this update: Sun 21 Dec 2025 10:01:06 +0000 Manifest next update: Mon 22 Dec 2025 10:01:06 +0000 Files and hashes: 1: DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl (hash: Pi0IKxUaaKrXgdOr+BZKKEuICYhJGvmE9binBfom+Sc=) 2: rGd99voSzroleDeVrTNABeoU6Jg.roa (hash: UJYK4rx2XvhMh0V5UdV9K0pusDUwS3V+qxXywUzqr98=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:09:2d:87:24:7c:22:90:27:4f:9d:05:59:df:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3 Validity Not Before: Dec 21 10:01:06 2025 GMT Not After : Dec 22 10:01:06 2025 GMT Subject: CN=45b4bbfa998198be25109e66ab8998764909062e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3d:70:3a:b5:bf:01:59:51:32:81:9a:a3:c6: fa:55:3b:67:46:ce:e1:f6:b1:87:20:cc:05:d1:10: e5:0e:0e:29:d4:48:72:90:ad:13:f8:0f:9d:1b:14: 51:02:48:6f:a6:37:ee:28:80:f0:ae:42:ff:26:80: a1:6e:0d:04:6c:2d:3a:19:74:f1:49:15:13:04:70: 8f:59:62:df:88:e5:ad:f2:f8:b6:38:60:3e:06:8c: 0c:26:c8:18:7d:98:89:8b:aa:a1:f1:3a:af:63:3b: f8:5d:ed:6a:40:48:f7:b0:a1:f4:a9:12:a0:1b:3a: 00:36:2d:bd:cf:4a:e2:25:f3:ca:1d:3f:2d:e3:c5: 7f:77:d5:d4:0b:59:61:74:53:57:2e:00:22:e1:07: fc:44:c1:f9:d4:23:78:0b:7b:37:a4:8a:57:10:14: a8:78:14:27:d4:2d:2c:f6:ca:6e:05:b0:5e:ce:f9: 75:ea:c7:ae:eb:35:f9:ae:a4:2c:35:a2:b1:ba:dc: 0a:e2:ee:24:88:b3:f7:10:6d:72:32:cb:93:a1:db: 69:55:fb:5d:72:63:73:11:64:15:47:aa:82:15:50: c4:cc:a3:46:cd:f7:be:00:a9:d0:7c:91:85:3d:a2: 4b:11:16:80:b2:b1:0d:e1:51:5b:3c:6f:da:8c:e1: b0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B4:BB:FA:99:81:98:BE:25:10:9E:66:AB:89:98:76:49:09:06:2E X509v3 Authority Key Identifier: keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:f6:bc:23:5d:28:df:1f:db:f3:b9:51:d3:33:66:ba:3b:21: 2c:22:31:c5:aa:f5:5f:e6:68:ea:d3:86:ff:81:aa:c8:a9:65: dd:dd:81:0d:4b:2b:43:f8:22:21:ad:e9:c4:64:be:93:df:88: 6c:37:6d:64:ae:b3:7f:b3:61:23:eb:41:b0:13:a5:7d:7f:bd: a9:76:ae:6e:d0:85:95:a8:95:3f:d6:ab:b5:6b:24:c4:fd:8e: 75:b2:cc:7d:96:5f:3b:16:87:ce:32:9b:73:ad:c1:23:e6:78: b1:f8:06:7b:8e:54:cd:a4:05:bc:58:e9:90:f9:c7:8f:74:de: 06:1c:b2:66:4a:d7:49:76:86:93:0d:a2:6e:6c:ee:91:36:72: f0:7d:70:51:f1:a5:39:b6:a0:b1:bf:4d:a4:3d:7b:3f:3e:ce: d5:7d:10:d4:d6:fd:24:84:74:aa:09:fd:0c:95:01:20:29:f9: b8:0a:91:3c:cc:ad:2b:bf:53:19:38:89:56:bd:2c:83:e3:f3: 04:0f:74:3a:09:3f:1a:69:39:03:1b:3d:c7:f2:99:9f:80:85: 99:9d:56:93:1e:fc:61:99:22:b5:a6:0b:6c:04:4f:60:8b:5d: 25:63:28:bb:7f:ec:89:5c:76:3c:02:a1:4f:9b:15:cf:be:f2: ca:8c:09:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWwkthyR8IpAnT50FWd/sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjYyNWJkZmZhOTQzN2RjMmI5NmQ4YWUwMjMxMDBiYzg4 ZTZmZTMwHhcNMjUxMjIxMTAwMTA2WhcNMjUxMjIyMTAwMTA2WjAzMTEwLwYDVQQD Eyg0NWI0YmJmYTk5ODE5OGJlMjUxMDllNjZhYjg5OTg3NjQ5MDkwNjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj1wOrW/AVlRMoGao8b6VTtnRs7h 9rGHIMwF0RDlDg4p1EhykK0T+A+dGxRRAkhvpjfuKIDwrkL/JoChbg0EbC06GXTx SRUTBHCPWWLfiOWt8vi2OGA+BowMJsgYfZiJi6qh8TqvYzv4Xe1qQEj3sKH0qRKg GzoANi29z0riJfPKHT8t48V/d9XUC1lhdFNXLgAi4Qf8RMH51CN4C3s3pIpXEBSo eBQn1C0s9spuBbBezvl16seu6zX5rqQsNaKxutwK4u4kiLP3EG1yMsuTodtpVftd cmNzEWQVR6qCFVDEzKNGzfe+AKnQfJGFPaJLERaAsrEN4VFbPG/ajOGw0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEW0u/qZgZi+JRCeZquJmHZJCQYuMB8GA1UdIwQY MBaAFAwmJb3/qUN9wrltiuAjEAvIjm/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENZbHZmLXBRMzNDdVcySzRDTVFDOGlPYi1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC85Yzc4YjktZGEzOS00NTBmLWJiOTYt MDc4MDRhZmY0OTBmLzEvRENZbHZmLXBRMzNDdVcySzRDTVFDOGlPYi1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC85Yzc4YjktZGEzOS00NTBmLWJiOTYtMDc4MDRhZmY0OTBm LzEvRENZbHZmLXBRMzNDdVcySzRDTVFDOGlPYi1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFfa8I10o 3x/b87lR0zNmujshLCIxxar1X+Zo6tOG/4GqyKll3d2BDUsrQ/giIa3pxGS+k9+I bDdtZK6zf7NhI+tBsBOlfX+9qXaubtCFlaiVP9artWskxP2OdbLMfZZfOxaHzjKb c63BI+Z4sfgGe45UzaQFvFjpkPnHj3TeBhyyZkrXSXaGkw2ibmzukTZy8H1wUfGl Obagsb9NpD17Pz7O1X0Q1Nb9JIR0qgn9DJUBICn5uAqRPMytK79TGTiJVr0sg+Pz BA90Ogk/Gmk5Axs9x/KZn4CFmZ1Wkx78YZkitaYLbARPYItdJWMou3/siVx2PAKh T5sVz77yyowJIw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:01:01 2025 by rpki-client