This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft File: dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft (raw, json) Hash identifier: d8CWiV556xJ5HavF5T7OQeilLGBMo9OC8hG+20EI84M= Subject key identifier: 2F:D7:AE:90:1A:9E:D0:E3:A8:C9:50:22:62:A0:51:9F:A3:11:50:96 Authority key identifier: 76:16:24:DD:DC:5C:02:79:C7:F8:C9:FF:12:88:A4:D3:04:4C:08:47 Certificate issuer: /CN=761624dddc5c0279c7f8c9ff1288a4d3044c0847 Certificate serial: 019AF23F9B9C81807AB7979179DF13F0BB59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft Manifest number: 03CF Signing time: Sat 06 Dec 2025 06:00:46 +0000 Manifest this update: Sat 06 Dec 2025 06:00:46 +0000 Manifest next update: Sun 07 Dec 2025 06:00:46 +0000 Files and hashes: 1: dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl (hash: pnToR7AgIChJYUsq5Jelx3+nEXItyODmdNwMDcx9yF8=) 2: uMFOgPoc2NWCSxPiOG6b1D8E-ZI.roa (hash: R/unw2gN5aPMxs/UeuzYe+LHJKBGKVUf8WbT/53nntg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:9b:9c:81:80:7a:b7:97:91:79:df:13:f0:bb:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=761624dddc5c0279c7f8c9ff1288a4d3044c0847 Validity Not Before: Dec 6 06:00:46 2025 GMT Not After : Dec 7 06:00:46 2025 GMT Subject: CN=2fd7ae901a9ed0e3a8c9502262a0519fa3115096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2d:91:f9:21:94:f3:20:4a:2d:d2:47:b9:6f: b6:7f:39:85:8b:05:32:73:da:fc:a9:79:51:83:2a: d0:69:6a:8c:02:b8:bc:9c:de:59:a6:82:fa:b1:ae: 15:bb:6e:e0:1a:57:6c:ab:b8:b2:37:a3:de:eb:a0: af:f8:d6:2a:ff:7e:4c:3d:cc:58:e8:c8:6a:02:5b: ab:42:e8:8a:07:77:08:70:99:9d:f1:8f:b9:ee:c9: 1e:b0:56:ec:ee:b9:6e:68:d0:41:a1:bd:c7:f2:d1: 95:95:a2:ab:71:00:9d:35:13:da:39:71:f0:a9:96: fb:1c:39:66:2c:99:f9:17:c5:b1:d7:e8:a2:32:ea: fb:6e:6f:03:9c:24:80:1a:2c:bf:72:d8:22:f6:1b: 4d:9c:cf:22:60:50:df:4f:f6:ae:5e:8a:4c:97:75: 5f:ca:fe:51:f2:34:7f:b2:7a:be:cb:35:5d:0b:ef: 2c:51:e8:95:3b:99:16:b6:59:27:45:1f:63:cc:0d: 28:29:0a:fb:53:fb:e4:bd:76:b3:19:0a:a4:9b:27: 1f:79:48:53:ae:15:ae:9a:70:ca:10:83:67:dc:fd: fe:c2:4a:2d:79:00:b8:6c:e4:7e:e5:91:7b:f1:76: 6e:a8:a1:b3:8d:09:df:60:17:06:fa:54:57:c5:41: 61:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D7:AE:90:1A:9E:D0:E3:A8:C9:50:22:62:A0:51:9F:A3:11:50:96 X509v3 Authority Key Identifier: keyid:76:16:24:DD:DC:5C:02:79:C7:F8:C9:FF:12:88:A4:D3:04:4C:08:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:73:ec:39:32:91:6d:d3:bb:57:6a:a1:4b:05:26:3e:d4:1e: b8:24:a5:9d:0b:b9:45:d5:d8:52:9f:f9:8d:5a:8b:23:44:24: 4d:3c:a6:35:03:1f:e2:9d:89:c7:da:4c:6a:8a:ff:ca:0d:c5: 06:85:29:3f:7c:70:06:21:b6:54:b8:84:4d:47:8c:19:49:e5: 4f:04:f4:21:1b:f6:d0:3c:40:6a:0a:a9:b4:79:40:a7:b4:16: bc:90:a5:08:c8:9b:03:e5:8b:19:13:89:74:61:96:34:ef:33: b0:34:52:5d:e6:a4:c1:1a:75:6c:e6:37:2f:96:87:1d:25:38: 8e:88:63:51:ac:21:b2:63:10:ec:d2:90:0a:c0:5f:b7:f2:56: 98:7d:c0:49:ee:1c:d6:86:d1:03:72:e0:03:44:a0:90:a0:cc: ed:72:1d:6c:f6:71:35:7b:9e:bb:a1:56:b2:72:1e:38:4e:0e: 99:76:79:60:72:ea:2e:d6:fc:9e:c3:3d:2b:72:f7:28:f4:7d: 03:79:6a:1f:f5:7a:97:63:4d:99:c3:b9:59:77:7f:c9:ed:ec: 78:5a:e5:05:d3:ba:59:49:7b:86:3e:a3:77:21:7e:e1:2b:64: fc:24:6b:3c:13:96:d7:ac:cd:ed:37:a1:b4:40:fb:c1:92:bc: 9d:3e:5c:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5ucgYB6t5eRed8T8LtZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MTYyNGRkZGM1YzAyNzljN2Y4YzlmZjEyODhhNGQzMDQ0 YzA4NDcwHhcNMjUxMjA2MDYwMDQ2WhcNMjUxMjA3MDYwMDQ2WjAzMTEwLwYDVQQD EygyZmQ3YWU5MDFhOWVkMGUzYThjOTUwMjI2MmEwNTE5ZmEzMTE1MDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAni2R+SGU8yBKLdJHuW+2fzmFiwUy c9r8qXlRgyrQaWqMAri8nN5ZpoL6sa4Vu27gGldsq7iyN6Pe66Cv+NYq/35MPcxY 6MhqAlurQuiKB3cIcJmd8Y+57skesFbs7rluaNBBob3H8tGVlaKrcQCdNRPaOXHw qZb7HDlmLJn5F8Wx1+iiMur7bm8DnCSAGiy/ctgi9htNnM8iYFDfT/auXopMl3Vf yv5R8jR/snq+yzVdC+8sUeiVO5kWtlknRR9jzA0oKQr7U/vkvXazGQqkmycfeUhT rhWumnDKEINn3P3+wkoteQC4bOR+5ZF78XZuqKGzjQnfYBcG+lRXxUFhZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/XrpAantDjqMlQImKgUZ+jEVCWMB8GA1UdIwQY MBaAFHYWJN3cXAJ5x/jJ/xKIpNMETAhHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGhZazNkeGNBbm5ILU1uX0VvaWswd1JNQ0VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81ODk3NjEtYzY2Mi00ZjEzLTg3MGEt MTNlODgwMTYyOGY1LzEvZGhZazNkeGNBbm5ILU1uX0VvaWswd1JNQ0VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC81ODk3NjEtYzY2Mi00ZjEzLTg3MGEtMTNlODgwMTYyOGY1 LzEvZGhZazNkeGNBbm5ILU1uX0VvaWswd1JNQ0VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiHPsOTKR bdO7V2qhSwUmPtQeuCSlnQu5RdXYUp/5jVqLI0QkTTymNQMf4p2Jx9pMaor/yg3F BoUpP3xwBiG2VLiETUeMGUnlTwT0IRv20DxAagqptHlAp7QWvJClCMibA+WLGROJ dGGWNO8zsDRSXeakwRp1bOY3L5aHHSU4johjUawhsmMQ7NKQCsBft/JWmH3ASe4c 1obRA3LgA0SgkKDM7XIdbPZxNXueu6FWsnIeOE4OmXZ5YHLqLtb8nsM9K3L3KPR9 A3lqH/V6l2NNmcO5WXd/ye3seFrlBdO6WUl7hj6jdyF+4Stk/CRrPBOW16zN7Teh tED7wZK8nT5c2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:41:22 2025 by rpki-client