This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft File: DycDq41ZdUqyeopRaFRZG_sPLbc.mft (raw, json) Hash identifier: vkw5n5gKJ6pgbWbfY4vT1rpWS5dKkPTpcdMEIVCJKJE= Subject key identifier: E7:9F:E3:B4:AB:1D:97:60:6E:6F:C5:3D:60:90:69:1E:01:8E:3C:8C Authority key identifier: 0F:27:03:AB:8D:59:75:4A:B2:7A:8A:51:68:54:59:1B:FB:0F:2D:B7 Certificate issuer: /CN=0f2703ab8d59754ab27a8a516854591bfb0f2db7 Certificate serial: 019B3344A5BDBB9DC230838945D7E5C0E421 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DycDq41ZdUqyeopRaFRZG_sPLbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft Manifest number: 0193 Signing time: Thu 18 Dec 2025 21:01:35 +0000 Manifest this update: Thu 18 Dec 2025 21:01:35 +0000 Manifest next update: Fri 19 Dec 2025 21:01:35 +0000 Files and hashes: 1: DycDq41ZdUqyeopRaFRZG_sPLbc.crl (hash: BZV3ZrsoHa1/0EZZ5it/cae0RGeqqa5PeeEg5zPtBEU=) 2: EvvE5cYylw_MjstUmUy-jk4YLrA.roa (hash: gBE8rDGiUuVhCkWL45jKVIjPxTgyeFG4wEdX18IeEVI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.crl rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft rsync://rpki.ripe.net/repository/DEFAULT/DycDq41ZdUqyeopRaFRZG_sPLbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:a5:bd:bb:9d:c2:30:83:89:45:d7:e5:c0:e4:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f2703ab8d59754ab27a8a516854591bfb0f2db7 Validity Not Before: Dec 18 21:01:35 2025 GMT Not After : Dec 19 21:01:35 2025 GMT Subject: CN=e79fe3b4ab1d97606e6fc53d6090691e018e3c8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:51:97:6a:4e:38:46:95:85:b8:e4:79:d4:d2: 25:b6:75:9d:df:d2:42:6b:53:54:07:c8:00:91:c7: 45:44:60:c8:ff:5f:0d:d7:be:2b:9c:50:95:bf:f4: d4:96:cd:87:14:7d:3d:91:f5:6e:9a:07:15:b7:c8: b6:89:9f:c3:1f:54:d2:29:9a:36:a3:c5:eb:40:b0: 22:23:d1:51:2a:58:d0:75:7e:eb:74:97:25:35:2e: a2:fb:61:7a:56:ce:49:66:92:aa:16:65:e1:e4:90: e4:51:41:46:62:09:26:59:55:18:a0:3d:ba:8d:21: 2a:3c:e5:34:1b:28:85:ec:57:05:04:93:e7:13:7b: 06:d5:e9:7a:50:fc:98:be:a2:10:82:90:10:42:e7: ff:ff:21:50:dc:e5:4b:a9:a5:92:50:97:00:63:5c: c8:fe:f9:5d:6b:b2:6b:86:1b:a8:10:75:c7:a0:f8: f2:0a:3f:7d:a3:73:b1:84:e5:0d:80:05:7c:2a:7d: c4:f2:99:d4:e6:af:b0:65:67:03:33:de:50:4b:69: 9f:b8:41:58:f0:1d:b1:95:55:58:10:c1:55:0a:68: 1d:78:70:6a:84:e9:a2:a8:3e:4d:4e:87:97:78:d4: ca:6e:8e:10:ad:1b:9a:a7:21:75:f0:c3:28:87:71: f4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:9F:E3:B4:AB:1D:97:60:6E:6F:C5:3D:60:90:69:1E:01:8E:3C:8C X509v3 Authority Key Identifier: keyid:0F:27:03:AB:8D:59:75:4A:B2:7A:8A:51:68:54:59:1B:FB:0F:2D:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DycDq41ZdUqyeopRaFRZG_sPLbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78374f-8c02-4a74-be96-9f47f9c5b923/1/DycDq41ZdUqyeopRaFRZG_sPLbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:61:14:97:c2:54:67:df:81:64:ad:8b:aa:22:6f:34:7f:fa: 1d:2d:b1:08:0d:1c:17:f1:e0:68:d5:54:bb:ab:c8:b1:37:63: 1d:d6:e0:52:81:47:ff:9b:57:13:e0:4a:11:12:4e:83:02:5d: f5:8f:51:12:9f:0f:9d:68:29:a6:1a:e2:e6:47:51:60:6d:34: 59:8a:52:13:1d:67:1e:63:71:4c:99:0d:35:e0:ce:dc:a5:5b: e1:7f:a6:67:23:69:01:03:b4:6e:41:4b:8a:f1:1a:9c:dd:b9: 2c:3b:b0:a7:5f:e6:d2:12:1a:93:68:5c:a5:b0:1a:46:32:bd: ad:99:9b:01:a7:22:5e:b4:ec:43:2c:61:0f:95:85:b0:dc:5f: 3d:72:da:1b:13:f8:b3:cd:6e:cc:be:d3:69:07:b2:06:be:a1: f2:54:8e:75:b9:2c:1a:d9:46:21:09:e5:c9:9b:44:d9:05:d0: 1c:25:30:7f:c5:f6:3a:f2:89:12:f2:20:a6:49:ff:20:7d:10: ba:ce:a8:05:48:ef:d0:99:3d:c3:38:a1:3a:32:14:09:d7:ba: 02:17:9a:14:0e:51:5a:b7:6a:77:72:4e:02:29:b2:24:e6:04: a2:99:e7:f9:b5:1a:c0:d2:10:28:ee:58:46:28:79:aa:e5:c7: 30:a7:fa:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRKW9u53CMIOJRdflwOQhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMjcwM2FiOGQ1OTc1NGFiMjdhOGE1MTY4NTQ1OTFiZmIw ZjJkYjcwHhcNMjUxMjE4MjEwMTM1WhcNMjUxMjE5MjEwMTM1WjAzMTEwLwYDVQQD EyhlNzlmZTNiNGFiMWQ5NzYwNmU2ZmM1M2Q2MDkwNjkxZTAxOGUzYzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1GXak44RpWFuOR51NIltnWd39JC a1NUB8gAkcdFRGDI/18N174rnFCVv/TUls2HFH09kfVumgcVt8i2iZ/DH1TSKZo2 o8XrQLAiI9FRKljQdX7rdJclNS6i+2F6Vs5JZpKqFmXh5JDkUUFGYgkmWVUYoD26 jSEqPOU0GyiF7FcFBJPnE3sG1el6UPyYvqIQgpAQQuf//yFQ3OVLqaWSUJcAY1zI /vlda7JrhhuoEHXHoPjyCj99o3OxhOUNgAV8Kn3E8pnU5q+wZWcDM95QS2mfuEFY 8B2xlVVYEMFVCmgdeHBqhOmiqD5NToeXeNTKbo4QrRuapyF18MMoh3H04QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOef47SrHZdgbm/FPWCQaR4BjjyMMB8GA1UdIwQY MBaAFA8nA6uNWXVKsnqKUWhUWRv7Dy23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHljRHE0MVpkVXF5ZW9wUmFGUlpHX3NQTGJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83ODM3NGYtOGMwMi00YTc0LWJlOTYt OWY0N2Y5YzViOTIzLzEvRHljRHE0MVpkVXF5ZW9wUmFGUlpHX3NQTGJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi83ODM3NGYtOGMwMi00YTc0LWJlOTYtOWY0N2Y5YzViOTIz LzEvRHljRHE0MVpkVXF5ZW9wUmFGUlpHX3NQTGJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2EUl8JU Z9+BZK2LqiJvNH/6HS2xCA0cF/HgaNVUu6vIsTdjHdbgUoFH/5tXE+BKERJOgwJd 9Y9REp8PnWgpphri5kdRYG00WYpSEx1nHmNxTJkNNeDO3KVb4X+mZyNpAQO0bkFL ivEanN25LDuwp1/m0hIak2hcpbAaRjK9rZmbAaciXrTsQyxhD5WFsNxfPXLaGxP4 s81uzL7TaQeyBr6h8lSOdbksGtlGIQnlyZtE2QXQHCUwf8X2OvKJEvIgpkn/IH0Q us6oBUjv0Jk9wzihOjIUCde6AheaFA5RWrdqd3JOAimyJOYEopnn+bUawNIQKO5Y Rih5quXHMKf6mQ== -----END CERTIFICATE-----Generated at Fri Dec 19 00:33:26 2025 by rpki-client