This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft File: dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft (raw, json) Hash identifier: LfPaW0RcLm4m09OY/ZGy6JRAltYrS3FV7O19v7mhExw= Subject key identifier: E2:1D:CF:C6:39:2D:FA:DA:6F:1A:E3:DB:B3:1B:EE:5E:EF:52:C3:4B Authority key identifier: 75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC Certificate issuer: /CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc Certificate serial: 019B2364BA7C7179546030087D33134160F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft Manifest number: 177F Signing time: Mon 15 Dec 2025 19:02:42 +0000 Manifest this update: Mon 15 Dec 2025 19:02:42 +0000 Manifest next update: Tue 16 Dec 2025 19:02:42 +0000 Files and hashes: 1: PKUF3H4nGREVMJD2dPtsZCb0xVA.roa (hash: bRtt/6wvb5BpNmugIhLVhjBbUyT5JnZDmpL0RvuD7vw=) 2: dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl (hash: uaZAqz35Xvqjjtd/SQEfDcdIEbbrqFwxXd9S55djM8o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 19:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:64:ba:7c:71:79:54:60:30:08:7d:33:13:41:60:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc Validity Not Before: Dec 15 19:02:42 2025 GMT Not After : Dec 16 19:02:42 2025 GMT Subject: CN=e21dcfc6392dfada6f1ae3dbb31bee5eef52c34b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6f:c9:ca:6c:07:58:9e:8a:bd:cc:19:9b:d0: 5c:f3:30:20:71:f0:fe:91:97:82:3c:3f:e6:83:25: 66:d6:85:cc:ac:41:30:8b:d5:76:14:b5:44:b8:e4: 39:09:bb:33:0b:a3:d3:f9:02:59:48:c7:9d:d8:54: b4:b1:a2:de:fc:1f:fd:9a:fa:39:0c:cb:40:cb:b7: ea:db:7c:9e:85:1e:5f:4c:b9:15:be:39:63:13:c4: 5f:90:8d:4d:ce:7b:fb:95:6b:6a:d7:20:5f:b1:ed: a1:25:86:80:5e:3c:dd:31:b4:32:c8:01:59:01:12: ce:bf:6e:25:d0:14:91:13:12:4b:44:5b:5e:06:08: 10:a4:62:6a:ef:1c:72:10:d9:2c:2f:4b:b6:8b:eb: 4e:3d:fb:75:10:61:c8:5f:4a:ad:e8:33:31:a7:7c: c4:5d:56:b5:32:f1:2a:e4:7e:cd:70:7e:91:58:cd: bf:e3:82:e0:f0:12:a3:b0:ae:c6:6e:5e:f6:ea:70: 53:cb:43:29:bb:9d:b0:13:08:c3:05:70:c2:e6:9b: cb:79:47:f3:d9:40:56:46:b0:41:3b:0b:5a:b9:06: 4b:5c:ed:f1:48:16:2a:70:85:7f:79:25:bf:50:78: 46:85:77:43:17:69:00:1e:3b:2b:ff:19:fd:93:1d: 90:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1D:CF:C6:39:2D:FA:DA:6F:1A:E3:DB:B3:1B:EE:5E:EF:52:C3:4B X509v3 Authority Key Identifier: keyid:75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:b9:bd:9e:3f:b7:fa:16:85:fb:d1:29:2c:08:25:d4:3d:c1: 1b:bb:32:cf:7c:f2:ff:a8:1e:d9:9b:85:0d:e4:40:67:f4:70: eb:69:cc:2a:1d:d6:1c:5b:26:5f:d5:c7:3f:bf:48:b1:db:e8: a9:48:42:97:8d:e8:a2:e3:43:ec:e2:7e:f7:46:b3:f8:71:9a: 84:38:78:24:6a:6e:00:4b:be:a4:2d:6e:46:80:e3:d9:04:62: ba:c5:f4:12:15:88:02:27:5a:a8:a9:62:a0:00:81:da:38:f2: 4e:3d:1e:0f:33:97:40:4b:de:fd:09:4b:f5:31:f5:83:45:de: c2:00:81:cc:e6:eb:59:ae:0c:85:ac:f0:fd:f5:09:04:aa:26: f0:1b:81:96:1b:de:f0:fd:56:2d:2e:85:ea:c7:4a:77:08:30: 33:6c:cd:82:da:c9:26:39:c7:27:d2:f8:5a:73:24:70:1e:43: da:f2:89:ac:29:00:df:92:48:b4:ee:9e:b6:c7:47:a2:f8:23: d8:4c:4d:d1:03:a4:b0:2c:a7:7f:a3:7d:7e:9b:4c:16:db:1f: 99:ee:ad:a0:80:30:28:0a:40:f0:13:f0:55:02:41:25:86:32: d1:14:41:3d:ea:9a:11:cf:a7:3f:06:84:8e:c8:e7:8e:d7:ee: a8:13:32:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjZLp8cXlUYDAIfTMTQWD4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1OGU4MjNjZjI3NGQzODEwY2UwNWMxZDFiZjVlZWY5NWNi MjExZGMwHhcNMjUxMjE1MTkwMjQyWhcNMjUxMjE2MTkwMjQyWjAzMTEwLwYDVQQD EyhlMjFkY2ZjNjM5MmRmYWRhNmYxYWUzZGJiMzFiZWU1ZWVmNTJjMzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG/JymwHWJ6KvcwZm9Bc8zAgcfD+ kZeCPD/mgyVm1oXMrEEwi9V2FLVEuOQ5CbszC6PT+QJZSMed2FS0saLe/B/9mvo5 DMtAy7fq23yehR5fTLkVvjljE8RfkI1Nznv7lWtq1yBfse2hJYaAXjzdMbQyyAFZ ARLOv24l0BSRExJLRFteBggQpGJq7xxyENksL0u2i+tOPft1EGHIX0qt6DMxp3zE XVa1MvEq5H7NcH6RWM2/44Lg8BKjsK7Gbl726nBTy0Mpu52wEwjDBXDC5pvLeUfz 2UBWRrBBOwtauQZLXO3xSBYqcIV/eSW/UHhGhXdDF2kAHjsr/xn9kx2QowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIdz8Y5Lfrabxrj27Mb7l7vUsNLMB8GA1UdIwQY MBaAFHWOgjzydNOBDOBcHRv17vlcshHcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFk2Q1BQSjAwNEVNNEZ3ZEdfWHUtVnl5RWR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80M2Q2OWUtYjY4ZC00MTQ5LThiMjkt MDNkYjhiMzZkMzE5LzEvZFk2Q1BQSjAwNEVNNEZ3ZEdfWHUtVnl5RWR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy80M2Q2OWUtYjY4ZC00MTQ5LThiMjktMDNkYjhiMzZkMzE5 LzEvZFk2Q1BQSjAwNEVNNEZ3ZEdfWHUtVnl5RWR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyLm9nj+3 +haF+9EpLAgl1D3BG7syz3zy/6ge2ZuFDeRAZ/Rw62nMKh3WHFsmX9XHP79Isdvo qUhCl43oouND7OJ+90az+HGahDh4JGpuAEu+pC1uRoDj2QRiusX0EhWIAidaqKli oACB2jjyTj0eDzOXQEve/QlL9TH1g0XewgCBzObrWa4Mhazw/fUJBKom8BuBlhve 8P1WLS6F6sdKdwgwM2zNgtrJJjnHJ9L4WnMkcB5D2vKJrCkA35JItO6etsdHovgj 2ExN0QOksCynf6N9fptMFtsfme6toIAwKApA8BPwVQJBJYYy0RRBPeqaEc+nPwaE jsjnjtfuqBMyrw== -----END CERTIFICATE-----Generated at Tue Dec 16 04:37:01 2025 by rpki-client