This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft File: DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft (raw, json) Hash identifier: QOslIKnJ43eghZyHU+P8Z0Y//EcVz5EZr4WFG1PuchI= Subject key identifier: 0B:9C:78:A3:19:1B:4C:DE:17:C5:B7:BD:CA:2B:34:92:99:8F:B0:0F Authority key identifier: 0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5 Certificate issuer: /CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5 Certificate serial: 019B3BA21FAF1609E59315A6BA8ED7190487 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft Manifest number: 171D Signing time: Sat 20 Dec 2025 12:00:39 +0000 Manifest this update: Sat 20 Dec 2025 12:00:39 +0000 Manifest next update: Sun 21 Dec 2025 12:00:39 +0000 Files and hashes: 1: DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl (hash: iGF6VSLTTZIZq23+mzVWSOXsSsbuStD85XEVtwX/uwQ=) 2: KvpIDJeUQ3PjlBVGV8W3vX2yJrA.roa (hash: Hj3l47kt2nIv7SDXU84uufeP/5O2LYhvonXGlVlGdWo=) 3: LHzy93jejLfua__lp49Yht10cg4.roa (hash: +Pxk7BfXvDPKOZb+V9E2LwQFfxHHkQA8a+ipeBYUFC8=) 4: _I32ouhbcP7uIlgPiXnpN-afsyU.roa (hash: esu4xz3AO+6hl9m1YOif9vfWELQmZoJKQSaoLGoeI/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:1f:af:16:09:e5:93:15:a6:ba:8e:d7:19:04:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5 Validity Not Before: Dec 20 12:00:39 2025 GMT Not After : Dec 21 12:00:39 2025 GMT Subject: CN=0b9c78a3191b4cde17c5b7bdca2b3492998fb00f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ef:61:d8:81:58:b7:09:04:8c:98:94:36:8a: 5f:c2:2b:74:bf:50:21:13:15:e8:07:c7:f8:d8:21: 92:c5:80:7c:ef:b8:4a:d8:59:f8:3f:89:00:c7:04: ac:cc:e2:ba:91:a3:9c:6c:f5:5e:53:eb:64:df:08: f9:46:ce:a9:93:c8:e6:83:96:e7:8f:f5:9a:93:96: 2a:e9:db:59:a0:fd:f6:ca:43:ae:b6:02:ad:05:69: 06:68:f3:81:ae:c3:44:e6:f9:04:6f:b6:71:a5:6a: b2:ea:69:b9:b9:06:90:aa:5d:ed:7a:c1:26:0e:86: 14:ed:9e:b0:30:45:ca:bc:ad:12:c8:02:2b:90:30: a3:77:40:ff:e2:fd:48:a6:85:2f:b1:49:be:a8:58: 42:b7:f0:fd:d3:d2:1d:69:df:aa:5e:7a:91:f9:45: af:df:61:00:cd:10:b9:96:0c:96:0f:7e:f8:ee:c6: 46:42:1a:fb:7f:f5:1c:53:61:15:d3:b3:6f:54:bf: 53:48:8a:1f:bf:2f:ae:82:df:fa:fe:02:3f:ee:45: c2:68:cd:7a:37:7d:d4:b5:47:80:65:a9:de:71:31: 6c:d3:ba:d4:32:9c:f3:c2:42:a9:9d:87:ef:48:91: d0:8b:c1:4b:84:67:9a:1f:0b:16:6f:ba:bc:12:af: b0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:9C:78:A3:19:1B:4C:DE:17:C5:B7:BD:CA:2B:34:92:99:8F:B0:0F X509v3 Authority Key Identifier: keyid:0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:bd:75:5d:81:80:a7:b9:42:2b:2c:19:4c:ea:55:d2:b3:e2: 40:99:02:f8:e9:72:8b:3b:cc:94:bb:ec:79:42:77:b6:ea:3a: 7e:5a:78:28:60:29:eb:df:c7:a3:d1:24:43:52:cc:d6:06:3b: 33:94:5b:b2:5f:32:b5:c2:10:62:7b:bd:cb:9f:0c:40:2d:cb: d8:01:17:72:20:ea:c4:3c:ba:fb:40:ba:57:ae:51:32:a0:21: 40:a3:00:5c:19:be:fe:cf:e7:0f:93:4c:66:4b:7a:f6:b2:da: be:33:60:36:c2:62:95:fa:42:71:fe:ab:35:5d:66:04:c3:19: cd:5f:f3:91:6d:80:38:4a:77:e8:06:c2:71:e5:48:cc:1d:1e: c1:39:5d:d2:e6:e8:55:77:3c:12:1f:ec:8f:a5:71:9e:8b:d0: 44:d5:cf:3b:f4:3e:0a:f8:00:1c:7c:c7:26:f3:b0:8b:27:0f: f6:ce:43:2d:b9:1b:7b:b6:cb:b7:87:ac:51:25:76:9a:d5:bd: 1e:2e:33:3e:8e:6e:f6:22:6b:27:db:06:36:3d:66:03:7f:dd: e0:14:37:0c:e0:41:34:0c:ba:3f:7c:e0:d3:90:f8:01:4c:b7: 37:79:78:a9:13:b5:e9:96:9c:04:d6:54:e0:bc:e7:8a:08:56: 09:f8:72:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oh+vFgnlkxWmuo7XGQSHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMjFiNzhjZTk3YjBmNWZiM2Q4OGJmOTVjZmJiMDhiMmZi ZWE4ZTUwHhcNMjUxMjIwMTIwMDM5WhcNMjUxMjIxMTIwMDM5WjAzMTEwLwYDVQQD EygwYjljNzhhMzE5MWI0Y2RlMTdjNWI3YmRjYTJiMzQ5Mjk5OGZiMDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2e9h2IFYtwkEjJiUNopfwit0v1Ah ExXoB8f42CGSxYB877hK2Fn4P4kAxwSszOK6kaOcbPVeU+tk3wj5Rs6pk8jmg5bn j/Wak5Yq6dtZoP32ykOutgKtBWkGaPOBrsNE5vkEb7ZxpWqy6mm5uQaQql3tesEm DoYU7Z6wMEXKvK0SyAIrkDCjd0D/4v1IpoUvsUm+qFhCt/D909Idad+qXnqR+UWv 32EAzRC5lgyWD3747sZGQhr7f/UcU2EV07NvVL9TSIofvy+ugt/6/gI/7kXCaM16 N33UtUeAZanecTFs07rUMpzzwkKpnYfvSJHQi8FLhGeaHwsWb7q8Eq+wiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAuceKMZG0zeF8W3vcorNJKZj7APMB8GA1UdIwQY MBaAFA8ht4zpew9fs9iL+Vz7sIsvvqjlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHlHM2pPbDdEMS16Mkl2NVhQdXdpeS0tcU9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8wZjc1OTQtZjA0OC00NzNkLWEzOWEt ZGRiOWU0ZGI5OGM2LzEvRHlHM2pPbDdEMS16Mkl2NVhQdXdpeS0tcU9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8wZjc1OTQtZjA0OC00NzNkLWEzOWEtZGRiOWU0ZGI5OGM2 LzEvRHlHM2pPbDdEMS16Mkl2NVhQdXdpeS0tcU9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFb11XYGA p7lCKywZTOpV0rPiQJkC+OlyizvMlLvseUJ3tuo6flp4KGAp69/Ho9EkQ1LM1gY7 M5Rbsl8ytcIQYnu9y58MQC3L2AEXciDqxDy6+0C6V65RMqAhQKMAXBm+/s/nD5NM Zkt69rLavjNgNsJilfpCcf6rNV1mBMMZzV/zkW2AOEp36AbCceVIzB0ewTld0ubo VXc8Eh/sj6VxnovQRNXPO/Q+CvgAHHzHJvOwiycP9s5DLbkbe7bLt4esUSV2mtW9 Hi4zPo5u9iJrJ9sGNj1mA3/d4BQ3DOBBNAy6P3zg05D4AUy3N3l4qRO16ZacBNZU 4LznighWCfhygg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:46:22 2025 by rpki-client