This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft File: DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft (raw, json) Hash identifier: ORByTnFTKtEp4jp1XPLKKD3Wu/zXuNMfiIhHD/eiC7M= Subject key identifier: 7A:22:24:38:EF:DC:03:E8:A7:76:31:A2:D9:B7:CF:1A:BB:CD:50:3C Authority key identifier: 0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5 Certificate issuer: /CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5 Certificate serial: 019B3D90B3474169FDAC4AC94FEAF3E6BAED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft Manifest number: 171E Signing time: Sat 20 Dec 2025 21:00:51 +0000 Manifest this update: Sat 20 Dec 2025 21:00:51 +0000 Manifest next update: Sun 21 Dec 2025 21:00:51 +0000 Files and hashes: 1: DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl (hash: s1bpPkQ9h1QKSIl8cpfxit2l9f55X68l7CfPL1pla1M=) 2: KvpIDJeUQ3PjlBVGV8W3vX2yJrA.roa (hash: Hj3l47kt2nIv7SDXU84uufeP/5O2LYhvonXGlVlGdWo=) 3: LHzy93jejLfua__lp49Yht10cg4.roa (hash: +Pxk7BfXvDPKOZb+V9E2LwQFfxHHkQA8a+ipeBYUFC8=) 4: _I32ouhbcP7uIlgPiXnpN-afsyU.roa (hash: esu4xz3AO+6hl9m1YOif9vfWELQmZoJKQSaoLGoeI/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:b3:47:41:69:fd:ac:4a:c9:4f:ea:f3:e6:ba:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5 Validity Not Before: Dec 20 21:00:51 2025 GMT Not After : Dec 21 21:00:51 2025 GMT Subject: CN=7a222438efdc03e8a77631a2d9b7cf1abbcd503c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b2:c7:a8:17:9f:ed:59:90:8e:94:d1:04:bf: 75:0f:b8:ea:29:22:5c:29:34:f7:ea:44:71:98:7c: ce:68:de:d3:38:51:ec:04:a1:84:66:f8:57:0e:e6: 62:e5:a3:42:8b:cc:1a:3b:6b:5d:65:ec:42:a3:2a: 1a:3f:bb:e6:b9:6b:14:d6:28:1f:48:08:34:89:33: 46:5d:2a:da:01:45:7a:6f:73:a3:7f:61:4f:82:ba: 12:c6:62:f7:d1:f7:f1:c9:fb:97:6b:46:9a:c3:5b: 01:72:9a:71:6c:be:f7:7b:e3:a7:81:73:f8:d6:ba: 86:84:01:78:2d:55:40:8c:94:5f:8e:70:b2:78:18: 6b:c0:1c:72:a2:3a:5f:3f:a1:5b:7c:4f:7b:40:3b: 84:d0:ca:97:80:06:97:e2:61:f1:85:a7:0e:b8:32: 51:09:7c:ad:e2:e2:3a:33:02:48:51:56:74:78:d5: d6:b3:3d:21:bd:7f:0a:80:30:e7:93:14:c5:4c:0a: 8b:1e:3f:62:46:5a:dc:44:32:6d:76:60:11:72:45: a0:07:c8:e2:e3:85:73:89:d4:71:21:7d:f2:6e:70: 63:fc:d4:89:5b:96:b8:4f:f0:b5:56:56:bb:11:3a: d4:26:3b:b2:09:53:08:3d:dc:84:70:c8:5c:bc:74: 04:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:22:24:38:EF:DC:03:E8:A7:76:31:A2:D9:B7:CF:1A:BB:CD:50:3C X509v3 Authority Key Identifier: keyid:0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:57:b5:a7:0f:64:15:38:d8:f6:ac:1c:0f:55:e1:27:fc:52: e0:5a:66:e7:d3:ec:cf:7f:58:a9:52:ef:a4:e3:11:f2:03:66: 7f:2a:af:59:70:01:9f:6f:84:db:43:73:ef:42:9e:00:66:b8: da:51:76:e9:c2:da:a8:e0:6f:74:67:9d:ec:cd:ff:ea:1e:aa: 09:18:45:b7:45:c4:fe:76:09:47:4d:00:ce:4d:aa:36:ff:f1: 5d:90:31:d0:6e:89:dc:d8:f9:fd:a6:18:fe:aa:29:be:01:9e: e2:cc:4d:e7:e4:6b:20:7b:cd:c8:20:9a:45:68:ec:c3:08:31: 19:38:e2:c7:b1:5f:ec:aa:a3:58:93:e4:1b:85:0c:29:f9:68: f2:85:a9:50:cd:78:07:09:51:5d:c3:5a:63:32:0f:5e:37:3b: 3c:f0:9b:9a:29:c8:37:84:d5:d9:a7:8e:9c:ba:93:40:f5:de: d1:63:3f:2c:e0:d3:0e:ab:23:fe:b3:61:5a:27:b0:97:1f:84: fc:7d:4f:ba:a9:94:d3:d5:51:00:49:ff:94:d8:34:5e:f8:4b: 08:e6:eb:9a:71:1b:e7:f4:25:97:82:1e:72:73:63:ed:62:72: 33:00:59:ab:52:09:d2:0b:2b:44:26:78:21:03:15:c8:a0:de: 78:fa:6e:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kLNHQWn9rErJT+rz5rrtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMjFiNzhjZTk3YjBmNWZiM2Q4OGJmOTVjZmJiMDhiMmZi ZWE4ZTUwHhcNMjUxMjIwMjEwMDUxWhcNMjUxMjIxMjEwMDUxWjAzMTEwLwYDVQQD Eyg3YTIyMjQzOGVmZGMwM2U4YTc3NjMxYTJkOWI3Y2YxYWJiY2Q1MDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rLHqBef7VmQjpTRBL91D7jqKSJc KTT36kRxmHzOaN7TOFHsBKGEZvhXDuZi5aNCi8waO2tdZexCoyoaP7vmuWsU1igf SAg0iTNGXSraAUV6b3Ojf2FPgroSxmL30ffxyfuXa0aaw1sBcppxbL73e+OngXP4 1rqGhAF4LVVAjJRfjnCyeBhrwBxyojpfP6FbfE97QDuE0MqXgAaX4mHxhacOuDJR CXyt4uI6MwJIUVZ0eNXWsz0hvX8KgDDnkxTFTAqLHj9iRlrcRDJtdmARckWgB8ji 44VzidRxIX3ybnBj/NSJW5a4T/C1Vla7ETrUJjuyCVMIPdyEcMhcvHQEFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHoiJDjv3APop3Yxotm3zxq7zVA8MB8GA1UdIwQY MBaAFA8ht4zpew9fs9iL+Vz7sIsvvqjlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHlHM2pPbDdEMS16Mkl2NVhQdXdpeS0tcU9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8wZjc1OTQtZjA0OC00NzNkLWEzOWEt ZGRiOWU0ZGI5OGM2LzEvRHlHM2pPbDdEMS16Mkl2NVhQdXdpeS0tcU9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8wZjc1OTQtZjA0OC00NzNkLWEzOWEtZGRiOWU0ZGI5OGM2 LzEvRHlHM2pPbDdEMS16Mkl2NVhQdXdpeS0tcU9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiFe1pw9k FTjY9qwcD1XhJ/xS4Fpm59Psz39YqVLvpOMR8gNmfyqvWXABn2+E20Nz70KeAGa4 2lF26cLaqOBvdGed7M3/6h6qCRhFt0XE/nYJR00Azk2qNv/xXZAx0G6J3Nj5/aYY /qopvgGe4sxN5+RrIHvNyCCaRWjswwgxGTjix7Ff7KqjWJPkG4UMKflo8oWpUM14 BwlRXcNaYzIPXjc7PPCbminIN4TV2aeOnLqTQPXe0WM/LODTDqsj/rNhWiewlx+E /H1PuqmU09VRAEn/lNg0XvhLCObrmnEb5/Qll4IecnNj7WJyMwBZq1IJ0gsrRCZ4 IQMVyKDeePpuNg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:09:15 2025 by rpki-client