This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft File: dyktxjcY7rxwSrAC7LgdPVLU0cM.mft (raw, json) Hash identifier: 18rmAN+jU1R7MzMYJoSJAiFX4oxaUir/xnylrMpT4g8= Subject key identifier: 76:39:93:83:F1:8C:36:76:F7:60:D4:9A:B8:DF:8F:53:EA:57:F3:85 Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3 Certificate issuer: /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3 Certificate serial: 019B3A902AAD60A16C4731709471AD73DE32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft Manifest number: 171D Signing time: Sat 20 Dec 2025 07:01:25 +0000 Manifest this update: Sat 20 Dec 2025 07:01:25 +0000 Manifest next update: Sun 21 Dec 2025 07:01:25 +0000 Files and hashes: 1: NSXTzp-bcsK67axImvlm62j1gls.roa (hash: E1eYCntbOiVraxHatdviG57+mcIBSIgGI+IxJsKYH00=) 2: dyktxjcY7rxwSrAC7LgdPVLU0cM.crl (hash: 3O9tMFVvFdmLm/ETxE2GwAUOE6lKgQ1WUf+Lf7RwoWY=) 3: nRaH2rUmuv-AHY6EWLCQZkoxie8.roa (hash: 1A31dYhtBdU/C/TcM+RDwu8HFF6psikiN1Pz0/js/fM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:2a:ad:60:a1:6c:47:31:70:94:71:ad:73:de:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3 Validity Not Before: Dec 20 07:01:25 2025 GMT Not After : Dec 21 07:01:25 2025 GMT Subject: CN=76399383f18c3676f760d49ab8df8f53ea57f385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:12:96:bf:9a:90:36:62:ec:67:7f:7d:d1:c9: 42:c5:3f:33:d8:42:64:ad:c2:b3:58:4e:d3:2e:b3: 6f:d4:64:02:97:32:ec:a0:1d:6d:dd:81:9f:e0:17: a0:fa:55:07:04:eb:c6:5c:a8:2a:c0:07:cc:77:f5: 07:16:7e:2e:8e:3e:16:aa:1f:7d:64:81:7c:a6:d7: 71:fc:f4:09:9a:60:a6:98:f5:a3:d8:d5:97:0b:c6: 18:3e:d1:d7:72:17:30:d1:a4:ff:68:77:83:3c:47: 26:15:87:56:83:64:7e:c9:0b:fc:6d:13:84:1e:e0: f7:9d:b9:70:67:8f:c5:c6:3c:be:9a:78:2d:31:bd: d0:a7:54:77:2a:d3:ea:5e:a4:5b:50:2c:c3:f6:5a: 89:9a:34:e0:37:cd:5f:5e:3a:dc:65:28:83:48:29: de:bf:d7:51:9c:f8:ba:3b:1a:1f:47:d3:de:d4:0d: f3:27:31:b1:f8:cd:91:52:26:09:b0:a5:f2:90:05: 44:e8:59:f6:72:cd:ae:a6:8e:ad:21:4e:72:3a:d5: 4f:bf:47:ae:cb:57:cc:af:5f:40:bc:79:57:e3:c8: ed:b0:a8:7d:da:13:f5:8b:3c:89:d2:94:51:e8:10: ee:22:34:d2:ea:d0:3d:34:5d:c3:22:5b:58:b0:93: 36:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:39:93:83:F1:8C:36:76:F7:60:D4:9A:B8:DF:8F:53:EA:57:F3:85 X509v3 Authority Key Identifier: keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:1f:a8:89:65:46:42:36:b6:94:53:a1:10:9e:d6:44:36:05: 3d:dd:c2:65:ab:bb:30:fc:67:18:d5:87:2f:c4:d7:79:da:5d: 9f:c3:a4:9b:23:d9:c6:c8:30:04:2a:ae:e7:3e:84:2c:c0:ac: 9c:46:6a:eb:07:29:00:4b:3e:4b:c2:b1:cd:d2:13:83:cf:1f: dd:ac:3b:e6:6c:40:a9:a9:40:f1:04:37:09:c6:ee:07:61:46: 33:cf:bc:a0:8a:2c:ee:78:f7:41:99:d9:e1:39:65:9a:4c:14: 23:46:a1:91:ca:9b:c8:99:ce:a2:e4:7a:10:5c:cf:ff:8e:c5: 81:83:67:cc:1d:37:51:7d:c9:03:75:cc:a2:52:88:30:bf:73: 2f:16:65:7e:c5:7a:5d:f7:ed:10:a7:de:38:90:86:dc:04:e3: 0c:53:a5:50:0e:73:7f:34:13:18:51:80:44:98:49:82:6c:a7: a1:39:9d:23:5a:74:42:a2:fd:d3:bf:eb:f0:af:5e:e7:0f:cf: 8c:34:3f:d6:fc:05:ee:e4:1f:7c:e4:49:87:c2:79:3e:03:90: 13:e5:0e:39:68:af:89:d8:4e:00:05:ee:2b:7e:b2:f6:a6:92: 39:b5:68:5c:21:8a:bb:87:4d:ca:5c:19:02:24:e9:7c:6a:b8: 8a:d3:8a:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kCqtYKFsRzFwlHGtc94yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MjkyZGM2MzcxOGVlYmM3MDRhYjAwMmVjYjgxZDNkNTJk NGQxYzMwHhcNMjUxMjIwMDcwMTI1WhcNMjUxMjIxMDcwMTI1WjAzMTEwLwYDVQQD Eyg3NjM5OTM4M2YxOGMzNjc2Zjc2MGQ0OWFiOGRmOGY1M2VhNTdmMzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxKWv5qQNmLsZ3990clCxT8z2EJk rcKzWE7TLrNv1GQClzLsoB1t3YGf4Beg+lUHBOvGXKgqwAfMd/UHFn4ujj4Wqh99 ZIF8ptdx/PQJmmCmmPWj2NWXC8YYPtHXchcw0aT/aHeDPEcmFYdWg2R+yQv8bROE HuD3nblwZ4/Fxjy+mngtMb3Qp1R3KtPqXqRbUCzD9lqJmjTgN81fXjrcZSiDSCne v9dRnPi6OxofR9Pe1A3zJzGx+M2RUiYJsKXykAVE6Fn2cs2upo6tIU5yOtVPv0eu y1fMr19AvHlX48jtsKh92hP1izyJ0pRR6BDuIjTS6tA9NF3DIltYsJM2tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHY5k4PxjDZ292DUmrjfj1PqV/OFMB8GA1UdIwQY MBaAFHcpLcY3GO68cEqwAuy4HT1S1NHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82NTc2NGEtZGQ4ZS00MDFiLWI3MzEt ZDljNWQyNjQxOWIyLzEvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS82NTc2NGEtZGQ4ZS00MDFiLWI3MzEtZDljNWQyNjQxOWIy LzEvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuR+oiWVG Qja2lFOhEJ7WRDYFPd3CZau7MPxnGNWHL8TXedpdn8OkmyPZxsgwBCqu5z6ELMCs nEZq6wcpAEs+S8KxzdITg88f3aw75mxAqalA8QQ3CcbuB2FGM8+8oIos7nj3QZnZ 4TllmkwUI0ahkcqbyJnOouR6EFzP/47FgYNnzB03UX3JA3XMolKIML9zLxZlfsV6 XfftEKfeOJCG3ATjDFOlUA5zfzQTGFGARJhJgmynoTmdI1p0QqL907/r8K9e5w/P jDQ/1vwF7uQffORJh8J5PgOQE+UOOWividhOAAXuK36y9qaSObVoXCGKu4dNylwZ AiTpfGq4itOKfg== -----END CERTIFICATE-----Generated at Sat Dec 20 17:14:03 2025 by rpki-client