This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft File: DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft (raw, json) Hash identifier: LYh3CanmkWMFVGK06SryeNavEvcC4st4dP/EEiIx3Rk= Subject key identifier: 36:F8:62:0E:DE:8D:BF:92:6D:C5:96:41:33:ED:35:57:DE:7E:79:B2 Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3 Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3 Certificate serial: 019B7290E65C72D1D7964724F53603E23F74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft Manifest number: 17A7 Signing time: Wed 31 Dec 2025 04:00:57 +0000 Manifest this update: Wed 31 Dec 2025 04:00:57 +0000 Manifest next update: Thu 01 Jan 2026 04:00:57 +0000 Files and hashes: 1: DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl (hash: YJ5BvnpQtoXYfYsv/qMhpASd+xYErPhCJP39TWe9Lvk=) 2: rGd99voSzroleDeVrTNABeoU6Jg.roa (hash: UJYK4rx2XvhMh0V5UdV9K0pusDUwS3V+qxXywUzqr98=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:90:e6:5c:72:d1:d7:96:47:24:f5:36:03:e2:3f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3 Validity Not Before: Dec 31 04:00:57 2025 GMT Not After : Jan 1 04:00:57 2026 GMT Subject: CN=36f8620ede8dbf926dc5964133ed3557de7e79b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f5:db:0a:c0:a8:d1:a6:8e:32:95:1f:fc:b6: b1:30:a5:03:b9:da:be:1d:d4:32:66:1e:cf:33:a3: 0e:28:a7:0b:b3:65:29:23:85:20:85:69:7b:7d:88: 0d:f8:c9:c4:23:5b:8a:2c:eb:19:86:e8:22:13:60: a6:97:2d:75:d5:f9:a0:2f:72:b6:8d:9c:57:3a:5f: c3:14:48:63:45:08:a8:c6:35:f1:76:bf:2a:e3:f4: 3d:36:07:84:bf:90:cd:21:c2:83:f5:ec:5a:5c:24: 6f:b5:95:4e:43:3d:fd:22:56:d8:0b:d4:99:86:c5: d2:80:04:dd:50:fd:3c:c4:7d:e2:a7:d3:c3:d8:82: 6b:a7:7d:49:23:ca:d5:3d:a4:23:d9:33:0f:c1:c7: 07:eb:42:17:31:95:5a:bc:3e:c1:a2:38:38:b0:90: 4b:79:a7:ad:ef:8f:09:72:28:62:3d:cf:b3:7b:6b: 0a:3b:de:85:c7:06:b0:ac:8a:2a:a8:d7:21:e6:d1: db:5c:f2:fb:e7:13:2b:84:20:5c:f8:26:8a:3e:7f: 52:4a:30:5d:34:07:d9:f8:09:84:5e:d0:10:76:98: 67:47:bb:e8:62:c5:d4:be:82:df:da:64:70:07:57: f1:dc:71:74:6f:a7:3c:e5:da:c7:1e:e3:41:1b:fa: 12:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F8:62:0E:DE:8D:BF:92:6D:C5:96:41:33:ED:35:57:DE:7E:79:B2 X509v3 Authority Key Identifier: keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:dd:d6:b7:e6:75:81:cc:ae:60:d5:54:5d:27:dc:60:b3:e6: 83:a8:65:f6:52:a7:da:d9:be:fa:e0:c1:17:80:42:88:a7:1f: a9:70:a6:de:9e:42:b4:ba:99:a9:94:0d:29:cc:a8:46:b0:d3: 2e:ad:36:e1:70:05:6e:85:a3:dc:c6:cc:f3:69:ee:bb:67:7f: e8:2b:1a:eb:8d:85:71:e1:c6:c5:f4:ba:88:9c:a7:1f:27:59: c4:7c:b9:1a:8a:4f:0a:3b:51:85:81:e2:ce:02:a1:db:88:fe: 70:73:66:7d:1a:70:45:46:13:36:33:ba:0d:ae:6b:e1:bf:94: 80:6b:cb:c5:c4:5f:33:c8:a2:36:35:a3:e6:c3:18:08:37:95: 51:9e:72:b2:22:26:ab:e4:34:02:eb:e8:69:57:42:54:52:fa: 5b:01:3b:86:f5:d5:c3:9b:cc:c3:11:c9:68:12:01:07:3f:b1: 42:3d:cd:2c:e3:0f:a8:22:9f:da:26:8b:f6:0e:98:d8:54:25: 5f:bc:44:0c:89:a2:08:f6:94:05:5a:42:e3:8e:87:1f:19:ca: a0:31:c1:f3:94:8d:9c:f7:f0:c4:cc:b6:62:23:95:f0:bd:18: c1:09:02:33:70:72:88:2b:28:f2:ab:26:3f:0a:7b:d5:b3:5a: 9a:6c:ef:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtykOZcctHXlkck9TYD4j90MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjYyNWJkZmZhOTQzN2RjMmI5NmQ4YWUwMjMxMDBiYzg4 ZTZmZTMwHhcNMjUxMjMxMDQwMDU3WhcNMjYwMTAxMDQwMDU3WjAzMTEwLwYDVQQD EygzNmY4NjIwZWRlOGRiZjkyNmRjNTk2NDEzM2VkMzU1N2RlN2U3OWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPXbCsCo0aaOMpUf/LaxMKUDudq+ HdQyZh7PM6MOKKcLs2UpI4UghWl7fYgN+MnEI1uKLOsZhugiE2Cmly111fmgL3K2 jZxXOl/DFEhjRQioxjXxdr8q4/Q9NgeEv5DNIcKD9exaXCRvtZVOQz39IlbYC9SZ hsXSgATdUP08xH3ip9PD2IJrp31JI8rVPaQj2TMPwccH60IXMZVavD7Bojg4sJBL eaet748JcihiPc+ze2sKO96FxwawrIoqqNch5tHbXPL75xMrhCBc+CaKPn9SSjBd NAfZ+AmEXtAQdphnR7voYsXUvoLf2mRwB1fx3HF0b6c85drHHuNBG/oSHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDb4Yg7ejb+SbcWWQTPtNVfefnmyMB8GA1UdIwQY MBaAFAwmJb3/qUN9wrltiuAjEAvIjm/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENZbHZmLXBRMzNDdVcySzRDTVFDOGlPYi1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC85Yzc4YjktZGEzOS00NTBmLWJiOTYt MDc4MDRhZmY0OTBmLzEvRENZbHZmLXBRMzNDdVcySzRDTVFDOGlPYi1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC85Yzc4YjktZGEzOS00NTBmLWJiOTYtMDc4MDRhZmY0OTBm LzEvRENZbHZmLXBRMzNDdVcySzRDTVFDOGlPYi1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMd3Wt+Z1 gcyuYNVUXSfcYLPmg6hl9lKn2tm++uDBF4BCiKcfqXCm3p5CtLqZqZQNKcyoRrDT Lq024XAFboWj3MbM82nuu2d/6Csa642FceHGxfS6iJynHydZxHy5GopPCjtRhYHi zgKh24j+cHNmfRpwRUYTNjO6Da5r4b+UgGvLxcRfM8iiNjWj5sMYCDeVUZ5ysiIm q+Q0AuvoaVdCVFL6WwE7hvXVw5vMwxHJaBIBBz+xQj3NLOMPqCKf2iaL9g6Y2FQl X7xEDImiCPaUBVpC446HHxnKoDHB85SNnPfwxMy2YiOV8L0YwQkCM3ByiCso8qsm Pwp71bNammzvnA== -----END CERTIFICATE-----Generated at Wed Dec 31 07:58:26 2025 by rpki-client