This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft File: dygVWFa4zk2F-NpPbTWwVbMNvTw.mft (raw, json) Hash identifier: ysUXTrsBRrrYQRL0a+o5S+kFpo6ErFXVROug+o15TaE= Subject key identifier: 68:BB:62:71:4C:D0:83:10:8F:94:ED:6A:7E:C4:52:45:FD:F8:24:E2 Authority key identifier: 77:28:15:58:56:B8:CE:4D:85:F8:DA:4F:6D:35:B0:55:B3:0D:BD:3C Certificate issuer: /CN=7728155856b8ce4d85f8da4f6d35b055b30dbd3c Certificate serial: 019B39463C9B12A51331F3349C52240DBF78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft Manifest number: 30 Signing time: Sat 20 Dec 2025 01:01:02 +0000 Manifest this update: Sat 20 Dec 2025 01:01:02 +0000 Manifest next update: Sun 21 Dec 2025 01:01:02 +0000 Files and hashes: 1: cA6lNEEcIDbZuEOTgnHTiqfxfx4.roa (hash: 8f71F0XboBesdGjMZ637fgl0ngKhSWlMfo5XT1YncCs=) 2: dygVWFa4zk2F-NpPbTWwVbMNvTw.crl (hash: Olb1a3jn0dLpLkIZxFWoNmlp25+V5s2j5LLnum6/Pe4=) 3: zXGgJ8ssCd1Pph38Z1ItWHwU6EA.roa (hash: P8aEqGdzKsgNRTrQcaeiKThPpzfIrclMSZ/T32RFslc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:3c:9b:12:a5:13:31:f3:34:9c:52:24:0d:bf:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7728155856b8ce4d85f8da4f6d35b055b30dbd3c Validity Not Before: Dec 20 01:01:02 2025 GMT Not After : Dec 21 01:01:02 2025 GMT Subject: CN=68bb62714cd083108f94ed6a7ec45245fdf824e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:81:04:08:16:19:21:ea:b7:6a:eb:c0:ac:71: fd:a7:cd:2b:8e:87:7a:b3:6b:ce:19:78:37:bc:63: b5:c5:4f:b0:8a:b2:d8:35:aa:b8:f1:92:1b:e2:1e: b3:24:4b:7c:9c:ed:74:36:32:6e:e7:b6:e0:65:6a: 3d:6c:b9:52:e4:b2:9f:ca:b2:bc:4d:65:a6:32:41: ec:e7:11:59:bd:28:f1:1e:80:b9:e5:1d:fe:13:8c: 39:c4:ec:29:8f:9e:57:3d:27:ad:e4:1c:59:06:f5: 0a:61:14:13:11:00:2d:c9:f3:ec:87:32:6b:2f:42: 53:3d:74:28:f9:3c:3c:84:11:35:32:46:1f:7e:cb: 95:a5:ca:5b:49:f2:ed:1e:e9:98:eb:e7:34:6e:0b: fd:5e:a2:4b:9c:2c:b1:e0:7c:c8:bb:0f:47:b2:49: 67:f9:b0:7f:6f:c7:7a:ef:37:fe:30:4f:d3:40:2c: 87:30:37:e3:2b:63:6b:8c:55:cb:f1:d3:b8:24:dc: 12:70:41:25:39:24:54:01:4b:a1:04:bf:7a:c6:30: 2d:d1:05:9a:c3:98:9d:3f:99:29:d8:01:53:20:5a: f3:cf:a4:2c:07:4d:7d:5f:45:a0:6d:0b:59:e2:a9: b1:a9:d5:27:90:18:8c:0f:91:81:15:6e:42:c6:af: 7f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BB:62:71:4C:D0:83:10:8F:94:ED:6A:7E:C4:52:45:FD:F8:24:E2 X509v3 Authority Key Identifier: keyid:77:28:15:58:56:B8:CE:4D:85:F8:DA:4F:6D:35:B0:55:B3:0D:BD:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:f3:97:51:4e:49:3b:72:b0:b8:06:42:21:30:f2:27:83:79: f1:4e:a1:34:da:3c:67:d5:8a:8f:ce:a8:3b:fa:e9:92:0f:98: 70:39:35:44:35:ee:39:11:53:c4:a9:e9:4b:65:43:87:4b:c5: db:84:63:31:95:1e:8d:14:d7:35:1f:5e:a1:a2:cf:ea:91:c0: af:42:23:11:a2:89:14:7e:e8:76:ce:a5:52:45:40:d9:08:06: 12:72:1e:66:e1:bc:fa:80:5f:8c:8f:d3:81:68:e0:c9:a2:00: 5e:bd:95:fd:38:02:31:da:c0:80:b0:1c:0d:7d:2b:d5:de:07: 2b:72:3a:fc:b3:fe:3e:9c:98:a7:b7:65:26:c2:cd:20:1d:20: 2f:bd:16:3d:ad:ae:9d:b2:36:c8:82:ad:08:aa:a4:ff:fb:df: 21:21:68:a6:ba:16:63:67:bc:e6:f5:7d:9a:c6:bd:9f:c9:00: cf:16:06:9d:31:65:07:37:cf:48:09:d5:db:df:c4:97:bc:dd: 0a:28:29:e2:36:05:01:35:49:d7:4e:14:0c:87:9d:e8:4c:e8: d0:a3:71:0b:b5:bf:bf:88:fd:d6:1e:5e:b2:69:d4:08:13:73: a0:08:1a:f9:b7:2a:b7:4b:c5:96:9a:bf:56:fa:52:f3:4c:5c: 17:90:75:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RjybEqUTMfM0nFIkDb94MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MjgxNTU4NTZiOGNlNGQ4NWY4ZGE0ZjZkMzViMDU1YjMw ZGJkM2MwHhcNMjUxMjIwMDEwMTAyWhcNMjUxMjIxMDEwMTAyWjAzMTEwLwYDVQQD Eyg2OGJiNjI3MTRjZDA4MzEwOGY5NGVkNmE3ZWM0NTI0NWZkZjgyNGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YEECBYZIeq3auvArHH9p80rjod6 s2vOGXg3vGO1xU+wirLYNaq48ZIb4h6zJEt8nO10NjJu57bgZWo9bLlS5LKfyrK8 TWWmMkHs5xFZvSjxHoC55R3+E4w5xOwpj55XPSet5BxZBvUKYRQTEQAtyfPshzJr L0JTPXQo+Tw8hBE1MkYffsuVpcpbSfLtHumY6+c0bgv9XqJLnCyx4HzIuw9Hskln +bB/b8d67zf+ME/TQCyHMDfjK2NrjFXL8dO4JNwScEElOSRUAUuhBL96xjAt0QWa w5idP5kp2AFTIFrzz6QsB019X0WgbQtZ4qmxqdUnkBiMD5GBFW5Cxq9/hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGi7YnFM0IMQj5Ttan7EUkX9+CTiMB8GA1UdIwQY MBaAFHcoFVhWuM5NhfjaT201sFWzDb08MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHlnVldGYTR6azJGLU5wUGJUV3dWYk1OdlR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zZGNjNGItOTM1Mi00MTFkLTkyNWEt Y2M3ZDQ2M2M4MjBiLzEvZHlnVldGYTR6azJGLU5wUGJUV3dWYk1OdlR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8zZGNjNGItOTM1Mi00MTFkLTkyNWEtY2M3ZDQ2M2M4MjBi LzEvZHlnVldGYTR6azJGLU5wUGJUV3dWYk1OdlR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb/OXUU5J O3KwuAZCITDyJ4N58U6hNNo8Z9WKj86oO/rpkg+YcDk1RDXuORFTxKnpS2VDh0vF 24RjMZUejRTXNR9eoaLP6pHAr0IjEaKJFH7ods6lUkVA2QgGEnIeZuG8+oBfjI/T gWjgyaIAXr2V/TgCMdrAgLAcDX0r1d4HK3I6/LP+PpyYp7dlJsLNIB0gL70WPa2u nbI2yIKtCKqk//vfISFoproWY2e85vV9msa9n8kAzxYGnTFlBzfPSAnV29/El7zd Cigp4jYFATVJ104UDIed6Ezo0KNxC7W/v4j91h5esmnUCBNzoAga+bcqt0vFlpq/ VvpS80xcF5B1eQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:29:11 2025 by rpki-client