This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft File: dyDGcENNpRAiYQmdoQHyXdP3qto.mft (raw, json) Hash identifier: 89V7Ll5eZoxyBMDTIbtKmmkegi9D9myopG1k7O8mfgw= Subject key identifier: 04:EA:0F:5A:EB:CD:94:2A:60:FE:8A:5A:A4:0B:CF:4A:06:F7:B6:B6 Authority key identifier: 77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA Certificate issuer: /CN=7720c670434da5102261099da101f25dd3f7aada Certificate serial: 019AF20916C25C5139DCFA41972E7D2C3C6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft Manifest number: 0FA4 Signing time: Sat 06 Dec 2025 05:01:13 +0000 Manifest this update: Sat 06 Dec 2025 05:01:13 +0000 Manifest next update: Sun 07 Dec 2025 05:01:13 +0000 Files and hashes: 1: dyDGcENNpRAiYQmdoQHyXdP3qto.crl (hash: 7A0ELOMiGAw4x6I3utPHhtWGj2S6fDnpY6YojHZzlX8=) 2: s7pdPnsOB8imHTQwb8o3CB7JIMI.roa (hash: lFvR0bEMv7k9KIxJ6Wc08171+rqM84YXRxLTrqtVpQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.crl rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:16:c2:5c:51:39:dc:fa:41:97:2e:7d:2c:3c:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7720c670434da5102261099da101f25dd3f7aada Validity Not Before: Dec 6 05:01:13 2025 GMT Not After : Dec 7 05:01:13 2025 GMT Subject: CN=04ea0f5aebcd942a60fe8a5aa40bcf4a06f7b6b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1f:41:d7:73:ac:f6:b0:d2:9c:1f:ca:6f:da: dd:20:34:5e:bf:fe:3a:50:08:06:2a:b5:c3:6e:f2: d2:74:36:93:68:81:cc:05:fe:24:66:76:9b:7a:e3: 7d:35:56:5b:f7:b9:bb:fe:3f:67:08:cc:0a:db:fc: 6d:34:45:f4:79:69:34:92:d8:8d:29:46:2c:10:43: 3e:d5:83:fb:da:15:13:8e:f1:88:5e:91:09:f9:6c: 62:c8:59:ab:cb:e9:92:d7:cd:a6:28:17:8c:af:4d: 32:bc:1a:d9:50:6f:40:14:78:82:1c:10:d3:3a:5b: cf:ed:34:d2:f5:52:8f:0d:1a:e6:4a:13:2f:a2:ed: 3d:85:d6:ee:08:8e:4b:75:e0:aa:ec:0b:37:87:de: db:cf:2a:21:9d:ad:7c:84:73:e1:e4:39:7f:5e:86: d0:0e:ad:36:72:30:42:d9:ce:eb:a0:5c:80:78:c8: d8:7f:65:46:60:2f:cc:85:a6:33:9a:78:8f:3c:4d: dd:1a:99:b5:15:dc:eb:ed:af:3d:09:a7:57:5d:99: fa:06:02:03:fa:c0:93:ac:a3:a2:66:bb:35:84:77: 5a:b1:aa:6c:b7:20:e5:dd:43:e4:e7:99:3d:f9:20: 46:be:13:52:8f:3e:10:96:95:77:d2:19:7e:3b:a8: 02:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:EA:0F:5A:EB:CD:94:2A:60:FE:8A:5A:A4:0B:CF:4A:06:F7:B6:B6 X509v3 Authority Key Identifier: keyid:77:20:C6:70:43:4D:A5:10:22:61:09:9D:A1:01:F2:5D:D3:F7:AA:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyDGcENNpRAiYQmdoQHyXdP3qto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/cf753f-7781-4dfe-a38e-d845995991ac/1/dyDGcENNpRAiYQmdoQHyXdP3qto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:bd:73:45:97:f0:16:22:cd:ae:c9:36:6f:7b:b9:b1:8a:78: 47:31:e3:fe:e2:d2:7b:ff:aa:ab:c5:68:07:1d:29:cc:3e:95: ce:06:b4:93:39:f2:b2:f2:05:5f:72:8e:a3:2c:5b:6e:ad:bb: 85:9e:69:b8:a4:42:0d:d6:43:64:d3:91:bc:f2:7c:20:ef:65: 29:04:b2:76:cc:a4:69:64:83:ca:97:e1:8f:7b:0a:29:06:8d: 5e:51:d7:72:26:55:eb:86:01:e8:53:75:22:65:65:94:43:6a: c0:28:38:cb:63:2d:a2:92:d5:64:fd:89:c2:99:81:a7:2d:ac: eb:e1:51:68:25:e1:a3:39:81:76:ba:d7:2d:80:af:3c:93:c4: 29:64:a3:0d:b1:9a:f5:0d:39:ed:e3:8b:cc:9d:9a:a4:16:2f: c6:1e:84:9c:81:82:8f:5a:8c:c2:c8:1d:df:12:c0:30:a5:d9: 63:50:5e:a8:65:9a:33:d4:89:01:5f:9b:e4:ed:c4:07:79:5f: 81:ef:2a:a1:e2:7b:89:a3:71:8c:64:25:28:82:35:39:4d:b9: 56:1e:62:d9:fa:df:63:66:0e:64:00:2f:61:71:e6:de:c5:59: 12:5c:40:43:5d:e3:41:7e:23:f3:55:fa:2d:ad:37:92:77:c6: 53:dc:e8:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCRbCXFE53PpBly59LDxqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MjBjNjcwNDM0ZGE1MTAyMjYxMDk5ZGExMDFmMjVkZDNm N2FhZGEwHhcNMjUxMjA2MDUwMTEzWhcNMjUxMjA3MDUwMTEzWjAzMTEwLwYDVQQD EygwNGVhMGY1YWViY2Q5NDJhNjBmZThhNWFhNDBiY2Y0YTA2ZjdiNmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx9B13Os9rDSnB/Kb9rdIDRev/46 UAgGKrXDbvLSdDaTaIHMBf4kZnabeuN9NVZb97m7/j9nCMwK2/xtNEX0eWk0ktiN KUYsEEM+1YP72hUTjvGIXpEJ+WxiyFmry+mS182mKBeMr00yvBrZUG9AFHiCHBDT OlvP7TTS9VKPDRrmShMvou09hdbuCI5LdeCq7As3h97bzyohna18hHPh5Dl/XobQ Dq02cjBC2c7roFyAeMjYf2VGYC/MhaYzmniPPE3dGpm1Fdzr7a89CadXXZn6BgID +sCTrKOiZrs1hHdasapstyDl3UPk55k9+SBGvhNSjz4QlpV30hl+O6gCWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATqD1rrzZQqYP6KWqQLz0oG97a2MB8GA1UdIwQY MBaAFHcgxnBDTaUQImEJnaEB8l3T96raMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHlER2NFTk5wUkFpWVFtZG9RSHlYZFAzcXRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9jZjc1M2YtNzc4MS00ZGZlLWEzOGUt ZDg0NTk5NTk5MWFjLzEvZHlER2NFTk5wUkFpWVFtZG9RSHlYZFAzcXRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9jZjc1M2YtNzc4MS00ZGZlLWEzOGUtZDg0NTk5NTk5MWFj LzEvZHlER2NFTk5wUkFpWVFtZG9RSHlYZFAzcXRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArr1zRZfw FiLNrsk2b3u5sYp4RzHj/uLSe/+qq8VoBx0pzD6Vzga0kznysvIFX3KOoyxbbq27 hZ5puKRCDdZDZNORvPJ8IO9lKQSydsykaWSDypfhj3sKKQaNXlHXciZV64YB6FN1 ImVllENqwCg4y2MtopLVZP2JwpmBpy2s6+FRaCXhozmBdrrXLYCvPJPEKWSjDbGa 9Q057eOLzJ2apBYvxh6EnIGCj1qMwsgd3xLAMKXZY1BeqGWaM9SJAV+b5O3EB3lf ge8qoeJ7iaNxjGQlKII1OU25Vh5i2frfY2YOZAAvYXHm3sVZElxAQ13jQX4j81X6 La03knfGU9zo6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:41:34 2025 by rpki-client