This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft File: DY_I34T78qtAQS5tSt_3wbhKWy8.mft (raw, json) Hash identifier: PiMayEI/5SFRKmpMwChxeBl3Oaafqk23lhFgHgXJmS0= Subject key identifier: BA:11:B7:D1:EF:EF:5C:C1:09:4B:5C:63:81:B4:D7:49:0E:13:F8:8D Authority key identifier: 0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F Certificate issuer: /CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f Certificate serial: 019B3EA398BA9441915F02D04040EB0EB27B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft Manifest number: 0F62 Signing time: Sun 21 Dec 2025 02:01:07 +0000 Manifest this update: Sun 21 Dec 2025 02:01:07 +0000 Manifest next update: Mon 22 Dec 2025 02:01:07 +0000 Files and hashes: 1: DY_I34T78qtAQS5tSt_3wbhKWy8.crl (hash: bvm3EN1SzsolOpoVgDtnuaylsSOvWMIk+7CxAYlXpzc=) 2: WLSJNsKtp7tRpU1OJgVstTs_lJ8.roa (hash: HTWALMbF2cmOkLXiJznP+o3iPW0wZUQzmHPHS3MTUp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 02:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:98:ba:94:41:91:5f:02:d0:40:40:eb:0e:b2:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f Validity Not Before: Dec 21 02:01:07 2025 GMT Not After : Dec 22 02:01:07 2025 GMT Subject: CN=ba11b7d1efef5cc1094b5c6381b4d7490e13f88d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:90:6e:7d:3b:35:5b:3a:42:36:4d:2c:05:e7: 39:b5:a9:6a:11:57:4e:4f:db:1c:02:02:c9:3b:16: 07:ff:fb:0b:d3:93:8d:18:a9:14:a7:7a:a3:c5:bc: 56:5d:03:53:fb:d1:f2:ae:9e:34:ca:22:43:ab:a4: b5:a4:2b:e8:57:57:92:69:6b:67:b3:a7:08:ee:fe: d6:b9:22:73:9e:9f:bd:73:6d:d1:83:3f:2d:14:20: a8:6f:83:5c:ec:be:7d:6a:75:b4:d1:fe:02:87:1e: 4d:44:83:df:b6:26:89:a3:2f:66:df:f5:6b:99:2a: 16:45:80:92:a5:dc:00:f1:8d:93:2e:37:41:58:84: da:10:a9:81:23:0b:d9:1b:d5:31:ab:8b:7c:9f:b2: 9b:8a:7b:3c:e0:2d:28:6c:c3:63:c5:12:5c:81:97: 93:7c:db:d4:1d:63:da:09:32:b2:e9:95:8b:61:2e: d8:f3:5f:53:9b:17:27:b9:42:96:0b:08:0d:02:e9: 95:58:5f:97:5a:ad:63:23:f3:d6:c3:7a:1e:e1:3f: 8e:bd:5a:a1:13:60:5f:cb:56:4e:ff:41:0f:f1:e9: 80:5e:da:fe:1a:e9:9f:42:6b:71:30:4d:aa:3f:0d: 95:ea:98:b7:38:44:e1:4d:35:b8:36:ee:4a:8f:bc: 8e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:11:B7:D1:EF:EF:5C:C1:09:4B:5C:63:81:B4:D7:49:0E:13:F8:8D X509v3 Authority Key Identifier: keyid:0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:94:5c:11:b0:eb:05:f8:e5:a5:37:ef:28:d4:b8:da:08:8b: 62:1b:ea:20:91:92:e6:0e:02:50:cd:00:4b:ba:e3:ff:25:f2: 7a:64:49:8b:ba:31:bf:be:51:34:d4:eb:c2:0b:d4:06:7c:48: f8:71:a1:4d:bd:24:a1:1f:03:50:29:f9:a0:45:31:71:a8:15: 7e:51:d8:87:a2:f9:7b:76:98:1c:32:ae:e8:18:c9:c5:8d:32: 4c:73:17:a2:c8:eb:35:66:97:84:24:b6:d5:dc:02:ab:92:92: 6f:6a:ca:07:01:30:fb:d5:0a:d3:a3:ad:1e:e3:55:9b:11:8f: cd:ab:d8:f7:3b:70:85:3b:45:6e:dd:ff:a0:a4:b0:40:44:01: ef:e2:5d:34:e3:cc:97:89:b5:03:ff:65:de:3b:5e:c1:49:e4: dd:01:3a:ae:77:1a:ab:e1:56:07:8f:52:78:bb:02:77:e6:b0: 2b:d4:e9:81:dd:f3:31:ab:0d:67:33:da:44:57:7a:e2:ee:1d: d6:19:8a:b4:c9:5e:9c:d2:bc:5d:75:ac:91:d4:5b:f1:9c:b6: df:9b:ce:61:a2:d9:50:ce:59:ce:9e:3d:1b:ef:7f:38:0b:d6: c9:d9:5e:f2:e0:1e:f4:7d:c4:4c:0d:7c:4f:58:13:62:03:3e: 18:01:bb:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o5i6lEGRXwLQQEDrDrJ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkOGZjOGRmODRmYmYyYWI0MDQxMmU2ZDRhZGZmN2MxYjg0 YTViMmYwHhcNMjUxMjIxMDIwMTA3WhcNMjUxMjIyMDIwMTA3WjAzMTEwLwYDVQQD EyhiYTExYjdkMWVmZWY1Y2MxMDk0YjVjNjM4MWI0ZDc0OTBlMTNmODhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJBufTs1WzpCNk0sBec5talqEVdO T9scAgLJOxYH//sL05ONGKkUp3qjxbxWXQNT+9Hyrp40yiJDq6S1pCvoV1eSaWtn s6cI7v7WuSJznp+9c23Rgz8tFCCob4Nc7L59anW00f4Chx5NRIPftiaJoy9m3/Vr mSoWRYCSpdwA8Y2TLjdBWITaEKmBIwvZG9Uxq4t8n7Kbins84C0obMNjxRJcgZeT fNvUHWPaCTKy6ZWLYS7Y819TmxcnuUKWCwgNAumVWF+XWq1jI/PWw3oe4T+OvVqh E2Bfy1ZO/0EP8emAXtr+GumfQmtxME2qPw2V6pi3OEThTTW4Nu5Kj7yOnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLoRt9Hv71zBCUtcY4G010kOE/iNMB8GA1UdIwQY MBaAFA2PyN+E+/KrQEEubUrf98G4SlsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lY2UyZWItODNmYS00NzZiLWFiOTgt Njg4NzYyYmI5ODVlLzEvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9lY2UyZWItODNmYS00NzZiLWFiOTgtNjg4NzYyYmI5ODVl LzEvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJRcEbDr BfjlpTfvKNS42giLYhvqIJGS5g4CUM0AS7rj/yXyemRJi7oxv75RNNTrwgvUBnxI +HGhTb0koR8DUCn5oEUxcagVflHYh6L5e3aYHDKu6BjJxY0yTHMXosjrNWaXhCS2 1dwCq5KSb2rKBwEw+9UK06OtHuNVmxGPzavY9ztwhTtFbt3/oKSwQEQB7+JdNOPM l4m1A/9l3jtewUnk3QE6rncaq+FWB49SeLsCd+awK9Tpgd3zMasNZzPaRFd64u4d 1hmKtMlenNK8XXWskdRb8Zy235vOYaLZUM5Zzp49G+9/OAvWydle8uAe9H3ETA18 T1gTYgM+GAG7zA== -----END CERTIFICATE-----Generated at Sun Dec 21 11:59:59 2025 by rpki-client