This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft File: dYYhYjrGyrj2veVSbnopMdYm_ow.mft (raw, json) Hash identifier: OJtcaaxj+n0QbsTqfe2Edg9X9z0DVkPShS9kUN92PfU= Subject key identifier: B1:E7:65:09:A5:E6:3A:61:35:C9:26:E4:F0:E1:72:B3:B1:3B:04:4C Authority key identifier: 75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C Certificate issuer: /CN=758621623ac6cab8f6bde5526e7a2931d626fe8c Certificate serial: 019B45821120C9D822DDB8F41C22082955F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft Manifest number: 1720 Signing time: Mon 22 Dec 2025 10:01:50 +0000 Manifest this update: Mon 22 Dec 2025 10:01:50 +0000 Manifest next update: Tue 23 Dec 2025 10:01:50 +0000 Files and hashes: 1: dYYhYjrGyrj2veVSbnopMdYm_ow.crl (hash: w9HTe91TbOue2ahakPNvNi4DE5zw2MdqARDQlhJ4CUg=) 2: hD0ar_tHc7p3YZ1QwpI7BJcBiok.roa (hash: wT7KNqysLUSBZ2MK1PEYcvNRcVleye9t9OdQ04Vtz2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:82:11:20:c9:d8:22:dd:b8:f4:1c:22:08:29:55:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=758621623ac6cab8f6bde5526e7a2931d626fe8c Validity Not Before: Dec 22 10:01:50 2025 GMT Not After : Dec 23 10:01:50 2025 GMT Subject: CN=b1e76509a5e63a6135c926e4f0e172b3b13b044c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b0:02:11:c7:06:f9:ac:00:24:06:ea:cf:a6: f4:6b:c1:88:9e:25:65:4b:72:bc:35:b0:1d:68:9f: 0a:17:85:1e:51:39:eb:2a:67:63:f8:9e:bf:dd:a0: dd:cf:d4:22:80:11:4e:f9:af:23:c9:65:d0:43:fc: 8d:f5:0c:62:f9:99:42:33:fd:26:c0:4d:90:bf:20: 09:32:e6:cd:6f:91:f0:3c:75:a2:cc:6c:01:e1:71: c5:cd:e1:c3:38:1f:bc:6a:7f:eb:5c:55:23:f6:a1: f9:06:5c:3c:fe:29:d1:5d:3f:c9:02:f8:2b:06:37: 42:b4:25:b1:1b:97:25:75:59:7d:8e:86:0c:d0:86: fb:52:38:32:48:f5:a0:c5:86:54:c9:8c:93:6a:d0: 0f:c6:51:7f:74:89:9a:51:fe:6d:c7:77:08:ae:99: fb:18:c8:8c:39:34:eb:78:09:79:bc:0a:41:1c:b5: f3:a7:7c:80:a9:b1:2e:4d:4b:5f:d3:46:54:e1:66: b5:25:cd:c1:41:a8:1f:4b:54:52:ef:44:a8:b6:13: 38:99:61:9c:5c:18:cf:0d:84:ef:33:12:96:93:21: 1c:d7:32:8c:15:1d:a4:82:2c:9c:b2:21:1d:46:23: 50:09:d4:c0:5d:cb:45:f3:67:0f:dd:30:b3:5b:14: 91:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E7:65:09:A5:E6:3A:61:35:C9:26:E4:F0:E1:72:B3:B1:3B:04:4C X509v3 Authority Key Identifier: keyid:75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:47:42:3f:ab:78:7c:49:e9:0d:9d:01:0c:d0:aa:31:b1:fc: 45:33:a1:8a:f2:e0:2c:57:3a:33:0d:1d:2a:c2:79:52:fc:9c: 96:bb:be:26:8d:4e:22:24:55:db:20:51:33:6f:7c:25:99:cd: 47:62:93:eb:2c:78:04:c1:42:4a:6d:83:67:42:30:f9:5b:a6: 6c:96:9f:d3:6c:83:2d:f0:b7:13:74:ea:22:9d:67:ea:01:17: 23:c2:14:7c:e2:81:f2:81:64:73:90:4a:11:78:eb:d5:db:60: 7b:6c:0d:e8:e9:29:b3:2c:ce:35:36:11:45:05:dd:8b:7f:b1: e3:7f:46:c3:0a:8a:8c:00:f9:8d:93:94:56:36:fd:7e:89:8e: 9e:18:a6:e0:c5:d4:6e:64:26:7c:a2:73:27:35:8b:b1:0f:a3: 81:7e:b2:23:76:f0:bb:d5:c2:36:2b:b1:47:10:95:c2:1b:4b: 7e:32:db:aa:50:60:14:6a:f0:0e:21:73:5c:d1:df:9a:17:3c: f9:1c:8a:e2:11:8f:55:05:a7:e4:b7:0f:27:86:83:58:53:7c: 76:ce:4e:56:d2:0b:65:2a:6d:11:69:39:72:5d:8e:89:da:f6: 8f:69:4e:5e:b0:26:c1:b0:63:cf:4e:18:7c:2c:87:d5:58:61: 06:68:3d:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFghEgydgi3bj0HCIIKVX5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ODYyMTYyM2FjNmNhYjhmNmJkZTU1MjZlN2EyOTMxZDYy NmZlOGMwHhcNMjUxMjIyMTAwMTUwWhcNMjUxMjIzMTAwMTUwWjAzMTEwLwYDVQQD EyhiMWU3NjUwOWE1ZTYzYTYxMzVjOTI2ZTRmMGUxNzJiM2IxM2IwNDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbACEccG+awAJAbqz6b0a8GIniVl S3K8NbAdaJ8KF4UeUTnrKmdj+J6/3aDdz9QigBFO+a8jyWXQQ/yN9Qxi+ZlCM/0m wE2QvyAJMubNb5HwPHWizGwB4XHFzeHDOB+8an/rXFUj9qH5Blw8/inRXT/JAvgr BjdCtCWxG5cldVl9joYM0Ib7UjgySPWgxYZUyYyTatAPxlF/dImaUf5tx3cIrpn7 GMiMOTTreAl5vApBHLXzp3yAqbEuTUtf00ZU4Wa1Jc3BQagfS1RS70SothM4mWGc XBjPDYTvMxKWkyEc1zKMFR2kgiycsiEdRiNQCdTAXctF82cP3TCzWxSRYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHnZQml5jphNckm5PDhcrOxOwRMMB8GA1UdIwQY MBaAFHWGIWI6xsq49r3lUm56KTHWJv6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFlZaFlqckd5cmoydmVWU2Jub3BNZFltX293LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zNjcwOGItZDY2Yi00MDdmLTk1NDct ZjAyMTE2MjI2YTg4LzEvZFlZaFlqckd5cmoydmVWU2Jub3BNZFltX293Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8zNjcwOGItZDY2Yi00MDdmLTk1NDctZjAyMTE2MjI2YTg4 LzEvZFlZaFlqckd5cmoydmVWU2Jub3BNZFltX293LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACEdCP6t4 fEnpDZ0BDNCqMbH8RTOhivLgLFc6Mw0dKsJ5Uvyclru+Jo1OIiRV2yBRM298JZnN R2KT6yx4BMFCSm2DZ0Iw+VumbJaf02yDLfC3E3TqIp1n6gEXI8IUfOKB8oFkc5BK EXjr1dtge2wN6OkpsyzONTYRRQXdi3+x439GwwqKjAD5jZOUVjb9fomOnhim4MXU bmQmfKJzJzWLsQ+jgX6yI3bwu9XCNiuxRxCVwhtLfjLbqlBgFGrwDiFzXNHfmhc8 +RyK4hGPVQWn5LcPJ4aDWFN8ds5OVtILZSptEWk5cl2Oidr2j2lOXrAmwbBjz04Y fCyH1VhhBmg9iQ== -----END CERTIFICATE-----Generated at Mon Dec 22 11:31:49 2025 by rpki-client