This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft File: DYGcnS5S2Ereot5MLeZLd4mFjrI.mft (raw, json) Hash identifier: D1NBxhaweL/ihfpBcyVD+bMmQHoJnRnqI9sTKkcWQlE= Subject key identifier: 39:29:2B:30:3B:26:40:EF:B7:9F:15:41:C0:0B:D3:07:3A:2B:B2:BD Authority key identifier: 0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2 Certificate issuer: /CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2 Certificate serial: 019B5305FB67C1C434E335FB7D982535BA81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft Manifest number: 0AF0 Signing time: Thu 25 Dec 2025 01:00:59 +0000 Manifest this update: Thu 25 Dec 2025 01:00:59 +0000 Manifest next update: Fri 26 Dec 2025 01:00:59 +0000 Files and hashes: 1: 7g9WDnfwGC695A3gUF6F3XaKlmY.roa (hash: TzzYrMCZOYqgatk0txvOXfw1Un0jwLj7jZ0x8AM5wkA=) 2: DYGcnS5S2Ereot5MLeZLd4mFjrI.crl (hash: jgxxZT4IARkr5lUzzokOA7Kr9+txLdOhnaqVRGRbjm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:05:fb:67:c1:c4:34:e3:35:fb:7d:98:25:35:ba:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2 Validity Not Before: Dec 25 01:00:59 2025 GMT Not After : Dec 26 01:00:59 2025 GMT Subject: CN=39292b303b2640efb79f1541c00bd3073a2bb2bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ad:c9:67:df:e2:f7:eb:f5:67:b8:3d:6b:f7: 8f:99:0f:b9:cc:0a:4a:8c:b0:45:8d:2d:21:2e:f8: b8:59:94:2d:31:7a:ea:94:85:01:22:c5:8d:38:31: 85:17:88:d9:df:13:3d:c5:10:d8:e6:d4:f3:ae:af: 10:61:28:35:f0:f1:32:52:6e:de:17:d2:dc:3c:27: ca:2c:53:e4:17:78:c2:ee:ce:08:25:d3:9c:bc:6c: 09:33:bf:29:ad:75:2a:0d:a8:a1:3a:9f:cb:83:ad: ea:79:7e:22:f7:14:3b:f9:3e:d6:59:7b:94:e7:15: 65:a1:43:10:c1:17:89:bd:85:98:c9:8d:1e:51:ce: 46:e4:8d:cf:e1:7e:3e:14:f8:57:d5:71:3f:4e:3e: 6a:79:3f:dc:35:b0:ac:88:10:9e:78:2c:2b:82:30: f6:c9:51:f7:50:39:f4:63:c8:7b:69:8d:c7:7e:fc: 4f:eb:b1:9f:83:91:11:03:04:1b:7d:5c:ef:bb:0a: be:00:d7:3f:72:76:b4:5a:8f:24:bc:5f:dc:76:78: 82:d0:52:5f:fb:83:2f:dd:03:e9:4b:97:00:78:a5: ab:5e:96:b3:64:0e:2a:c5:a6:5c:1d:7d:c6:8a:8e: 2b:b9:10:04:22:59:f0:b0:6b:84:66:69:c3:e0:74: 56:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:29:2B:30:3B:26:40:EF:B7:9F:15:41:C0:0B:D3:07:3A:2B:B2:BD X509v3 Authority Key Identifier: keyid:0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:3a:2c:9a:07:6c:89:b4:ac:c9:85:04:80:6c:d5:2a:90:27: 7e:b0:2d:53:89:a9:d8:14:85:50:08:f0:7f:d5:44:9a:eb:db: 3d:31:b1:d6:a8:fe:a8:84:93:e4:c6:2f:b7:e4:f6:19:13:a1: be:98:0f:05:d0:e6:59:87:f2:ba:cd:6a:54:16:13:58:75:42: ce:f0:0e:d4:4b:e1:81:7c:92:e7:d0:0a:54:23:99:cd:de:19: ac:e1:dd:84:3a:7f:9e:90:79:d1:57:ae:cd:4b:c8:2c:22:15: b3:78:0d:46:74:77:d5:75:b4:ec:54:2a:c1:25:66:a1:04:89: 2c:5d:25:5b:86:90:ec:d1:cc:d5:cf:72:32:8d:ad:57:66:15: a9:62:d6:00:33:e9:46:d2:55:53:cc:e7:3d:22:99:65:99:b5: 35:ae:8a:e6:f7:ce:0f:f3:d0:06:0b:ac:f0:34:8a:2c:a1:bd: 50:c1:cc:47:47:41:6b:dc:20:66:a1:32:4c:7c:54:24:f1:01: 66:27:c9:19:2d:da:24:d3:da:d6:c8:27:ea:cb:4d:ac:1a:bb: 03:04:0c:84:77:b9:93:6f:b6:8a:4e:af:24:e7:d5:dd:87:cb: f9:94:a3:51:e7:c8:de:43:40:5b:6b:97:63:36:f6:04:2b:d2: a1:7c:d6:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBftnwcQ04zX7fZglNbqBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkODE5YzlkMmU1MmQ4NGFkZWEyZGU0YzJkZTY0Yjc3ODk4 NThlYjIwHhcNMjUxMjI1MDEwMDU5WhcNMjUxMjI2MDEwMDU5WjAzMTEwLwYDVQQD EygzOTI5MmIzMDNiMjY0MGVmYjc5ZjE1NDFjMDBiZDMwNzNhMmJiMmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq3JZ9/i9+v1Z7g9a/ePmQ+5zApK jLBFjS0hLvi4WZQtMXrqlIUBIsWNODGFF4jZ3xM9xRDY5tTzrq8QYSg18PEyUm7e F9LcPCfKLFPkF3jC7s4IJdOcvGwJM78prXUqDaihOp/Lg63qeX4i9xQ7+T7WWXuU 5xVloUMQwReJvYWYyY0eUc5G5I3P4X4+FPhX1XE/Tj5qeT/cNbCsiBCeeCwrgjD2 yVH3UDn0Y8h7aY3HfvxP67Gfg5ERAwQbfVzvuwq+ANc/cna0Wo8kvF/cdniC0FJf +4Mv3QPpS5cAeKWrXpazZA4qxaZcHX3Gio4ruRAEIlnwsGuEZmnD4HRW4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkpKzA7JkDvt58VQcAL0wc6K7K9MB8GA1UdIwQY MBaAFA2BnJ0uUthK3qLeTC3mS3eJhY6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFlHY25TNVMyRXJlb3Q1TUxlWkxkNG1GanJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS84NzczNDItNzM0Yy00NzFiLWIzZjkt MDJjMzdmZWI4YTllLzEvRFlHY25TNVMyRXJlb3Q1TUxlWkxkNG1GanJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS84NzczNDItNzM0Yy00NzFiLWIzZjktMDJjMzdmZWI4YTll LzEvRFlHY25TNVMyRXJlb3Q1TUxlWkxkNG1GanJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwzosmgds ibSsyYUEgGzVKpAnfrAtU4mp2BSFUAjwf9VEmuvbPTGx1qj+qIST5MYvt+T2GROh vpgPBdDmWYfyus1qVBYTWHVCzvAO1EvhgXyS59AKVCOZzd4ZrOHdhDp/npB50Veu zUvILCIVs3gNRnR31XW07FQqwSVmoQSJLF0lW4aQ7NHM1c9yMo2tV2YVqWLWADPp RtJVU8znPSKZZZm1Na6K5vfOD/PQBgus8DSKLKG9UMHMR0dBa9wgZqEyTHxUJPEB ZifJGS3aJNPa1sgn6stNrBq7AwQMhHe5k2+2ik6vJOfV3YfL+ZSjUefI3kNAW2uX Yzb2BCvSoXzWlg== -----END CERTIFICATE-----Generated at Thu Dec 25 03:30:36 2025 by rpki-client