This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft File: DyP3PWT22_gdUdNYBUgVaM3YGHU.mft (raw, json) Hash identifier: dosPPhtsD+ktdzOBgCdkNMUFz1yKnHdyir0ZYYRWgsw= Subject key identifier: 84:27:06:B6:43:A5:47:53:D8:33:C8:2D:25:0A:55:38:62:CC:FB:BA Authority key identifier: 0F:23:F7:3D:64:F6:DB:F8:1D:51:D3:58:05:48:15:68:CD:D8:18:75 Certificate issuer: /CN=0f23f73d64f6dbf81d51d35805481568cdd81875 Certificate serial: 019B3C0FE9D7FDFB2FCFC1E2896B3412B3B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft Manifest number: 0F51 Signing time: Sat 20 Dec 2025 14:00:34 +0000 Manifest this update: Sat 20 Dec 2025 14:00:34 +0000 Manifest next update: Sun 21 Dec 2025 14:00:34 +0000 Files and hashes: 1: DyP3PWT22_gdUdNYBUgVaM3YGHU.crl (hash: ipbatWmU0+SgcOU5AfUJ7Lj3x9N019yxlTx4Bh/FWhc=) 2: _mseEGqhmjk5DbDhY65kEG9l3Do.roa (hash: 4EKC+djlGJVTHQZoZJyp3llh1Qpa/Gw18st2TTUCkbA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:e9:d7:fd:fb:2f:cf:c1:e2:89:6b:34:12:b3:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f23f73d64f6dbf81d51d35805481568cdd81875 Validity Not Before: Dec 20 14:00:34 2025 GMT Not After : Dec 21 14:00:34 2025 GMT Subject: CN=842706b643a54753d833c82d250a553862ccfbba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:18:83:73:10:3f:e6:b1:04:c5:00:ee:73:8f: d0:69:79:8d:41:e7:30:11:17:87:27:9d:c6:7e:42: dc:6d:5e:6b:2d:8e:05:b1:2b:c6:a0:98:20:e0:6f: f2:83:fa:66:57:1e:a9:4d:5c:d6:52:db:55:4f:3c: c6:0a:60:26:ad:08:ed:e6:4d:f1:63:a0:63:6a:16: a0:23:6e:93:04:08:c4:a2:33:5a:24:e1:1f:51:8e: 64:92:5a:31:d1:44:70:3f:9a:ab:9e:6c:e2:14:5a: 2a:d0:bc:e7:53:0a:b9:d7:a6:df:74:ba:cb:03:97: ea:9a:23:8d:e7:57:4a:f9:fa:67:53:29:9d:77:da: ac:53:93:3f:28:cf:a2:c6:65:fb:ac:29:90:c8:6e: 59:1d:7e:d9:f8:51:88:64:c0:f9:81:e9:ba:20:0f: 2b:d9:d3:f3:fa:9b:91:a7:dc:9c:65:f8:c3:f4:af: bf:78:4d:9e:3c:a2:17:e2:e9:33:04:6a:68:e2:23: 6a:cb:f1:34:07:fc:ef:b1:10:ed:d3:12:b2:f2:a0: 49:73:42:d2:57:bb:1c:3c:d7:6b:0f:5a:56:6e:10: 43:b6:12:54:e6:49:b5:16:25:8f:d9:64:40:4a:b4: 2f:13:ee:89:08:33:35:f9:e3:f1:a0:90:be:df:7c: af:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:27:06:B6:43:A5:47:53:D8:33:C8:2D:25:0A:55:38:62:CC:FB:BA X509v3 Authority Key Identifier: keyid:0F:23:F7:3D:64:F6:DB:F8:1D:51:D3:58:05:48:15:68:CD:D8:18:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyP3PWT22_gdUdNYBUgVaM3YGHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/03477c-10a4-455b-be6b-b3a09430c665/1/DyP3PWT22_gdUdNYBUgVaM3YGHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:cb:07:76:cc:5a:56:95:53:29:18:ae:3d:27:3d:d5:94:d6: 51:0b:8e:94:8f:d8:7a:7a:60:61:c2:b6:21:dd:78:ac:28:f2: 74:6e:c0:a4:66:56:c3:31:0f:9e:1c:af:4b:71:35:c7:2a:13: 85:5c:e6:e7:f3:a4:42:b3:d5:0c:0a:58:24:9a:46:c3:66:82: 5e:1c:a6:7d:a4:2f:b6:42:bf:aa:19:e3:c1:ef:42:0c:98:7f: 15:59:3b:19:34:7c:21:12:21:6f:40:dd:7c:72:9b:bd:4f:7c: 28:0f:44:6b:4b:38:29:b3:8b:64:ac:86:be:8c:e7:2e:ca:61: 07:13:a3:8f:93:96:2d:eb:da:f2:77:41:a7:0b:d4:5f:80:41: 7d:2a:3a:77:42:96:87:ee:6e:b8:74:1f:b8:86:d5:3b:6d:27: 64:ef:37:75:6f:24:45:26:6b:5d:48:9d:30:88:ae:08:e7:a1: 1b:e7:6f:c5:42:9b:08:c9:1b:ed:ab:a4:ea:2d:79:88:83:ee: 45:fc:f6:e1:8c:40:d9:11:1b:74:b0:d7:1c:a0:1f:0d:5e:11: e9:b3:6f:6b:54:63:0e:20:20:c6:90:04:dc:62:ce:f8:79:1d: e6:db:bb:20:76:dc:6a:b3:b6:f4:f5:83:1b:33:4b:a6:97:ee: 13:71:11:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D+nX/fsvz8HiiWs0ErO4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMjNmNzNkNjRmNmRiZjgxZDUxZDM1ODA1NDgxNTY4Y2Rk ODE4NzUwHhcNMjUxMjIwMTQwMDM0WhcNMjUxMjIxMTQwMDM0WjAzMTEwLwYDVQQD Eyg4NDI3MDZiNjQzYTU0NzUzZDgzM2M4MmQyNTBhNTUzODYyY2NmYmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8BiDcxA/5rEExQDuc4/QaXmNQecw EReHJ53GfkLcbV5rLY4FsSvGoJgg4G/yg/pmVx6pTVzWUttVTzzGCmAmrQjt5k3x Y6BjahagI26TBAjEojNaJOEfUY5kklox0URwP5qrnmziFFoq0LznUwq516bfdLrL A5fqmiON51dK+fpnUymdd9qsU5M/KM+ixmX7rCmQyG5ZHX7Z+FGIZMD5gem6IA8r 2dPz+puRp9ycZfjD9K+/eE2ePKIX4ukzBGpo4iNqy/E0B/zvsRDt0xKy8qBJc0LS V7scPNdrD1pWbhBDthJU5km1FiWP2WRASrQvE+6JCDM1+ePxoJC+33yvcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQnBrZDpUdT2DPILSUKVThizPu6MB8GA1UdIwQY MBaAFA8j9z1k9tv4HVHTWAVIFWjN2Bh1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHlQM1BXVDIyX2dkVWROWUJVZ1ZhTTNZR0hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wMzQ3N2MtMTBhNC00NTViLWJlNmIt YjNhMDk0MzBjNjY1LzEvRHlQM1BXVDIyX2dkVWROWUJVZ1ZhTTNZR0hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8wMzQ3N2MtMTBhNC00NTViLWJlNmItYjNhMDk0MzBjNjY1 LzEvRHlQM1BXVDIyX2dkVWROWUJVZ1ZhTTNZR0hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADcsHdsxa VpVTKRiuPSc91ZTWUQuOlI/YenpgYcK2Id14rCjydG7ApGZWwzEPnhyvS3E1xyoT hVzm5/OkQrPVDApYJJpGw2aCXhymfaQvtkK/qhnjwe9CDJh/FVk7GTR8IRIhb0Dd fHKbvU98KA9Ea0s4KbOLZKyGvoznLsphBxOjj5OWLeva8ndBpwvUX4BBfSo6d0KW h+5uuHQfuIbVO20nZO83dW8kRSZrXUidMIiuCOehG+dvxUKbCMkb7auk6i15iIPu Rfz24YxA2REbdLDXHKAfDV4R6bNva1RjDiAgxpAE3GLO+Hkd5tu7IHbcarO29PWD GzNLppfuE3ERbA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:34:25 2025 by rpki-client