This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft File: DyFSGnEnFX99rwrQkTlK1aHM53k.mft (raw, json) Hash identifier: G5qSq0fjipakab13sGkmyn9hY61AK7mM9s+7iGExab0= Subject key identifier: 87:C0:99:18:70:61:0C:E5:A8:DB:80:13:03:70:C0:5D:D6:76:0B:BE Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79 Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779 Certificate serial: 019AF1D188820AE4BDEB52CE0E7D42946340 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 04:00:32 +0000 Manifest this update: Sat 06 Dec 2025 04:00:32 +0000 Manifest next update: Sun 07 Dec 2025 04:00:32 +0000 Files and hashes: 1: 2ruUNINuI6uV8MYI78EZQWS_RIg.roa (hash: VHS2lsqC+IJ5oxkyfws5q9amIcBNw+9L6nwp+Qj/0vY=) 2: 8i1g8XKNJedNWFOzfSsVo0JxCqM.roa (hash: qcd7n9F8BEzZZvgBgE1cIJu2JRF1Xvz0rV08SZQkPQw=) 3: DyFSGnEnFX99rwrQkTlK1aHM53k.crl (hash: eC92mJ/krZvPQzFPC34X+LZthgKJsK4/FtRrBjKtTco=) 4: lXftion8-6bSPXb1hByWoZWZToE.roa (hash: SvWuwU45VoYUssTvSq8q7tUVCqlmbl2PlDyAIGIPVcs=) 5: m8rrUo6uiDcirMi6Sl7eYgFmoKs.roa (hash: ooZ40cwVnj6zMgLWzk/b928qzd5lbFKtSTI7ArxTES8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:88:82:0a:e4:bd:eb:52:ce:0e:7d:42:94:63:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779 Validity Not Before: Dec 6 04:00:32 2025 GMT Not After : Dec 7 04:00:32 2025 GMT Subject: CN=87c0991870610ce5a8db80130370c05dd6760bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9f:93:4a:c9:a1:13:71:b7:41:58:6c:09:81: 84:70:5c:9c:16:fe:47:53:b0:e0:01:25:f8:4e:e9: b7:94:cc:02:d7:60:d2:29:a6:e2:96:b4:df:34:39: 1d:c1:aa:b4:ce:7f:17:54:ea:38:f5:d4:24:09:2d: d5:8e:3a:8b:8b:92:02:75:3a:a4:d6:3e:a6:c2:a6: 9e:69:5c:33:0c:b1:b9:5e:81:81:26:12:71:a3:ca: 5c:d2:ab:23:c3:96:27:59:50:d0:89:bd:df:20:c4: f0:76:c0:a1:c7:19:68:41:74:16:21:6d:f4:15:cb: 34:75:28:19:a7:b6:ff:58:59:ff:04:7d:2c:b6:80: a5:4a:18:3d:61:cf:38:89:02:d7:75:e0:ba:ef:1f: 86:e6:33:96:f3:4b:61:46:c7:1a:f1:72:2e:db:b2: 6f:76:29:d0:8f:e6:84:8d:ca:cd:52:d7:48:e3:03: 8e:3e:d3:0a:2c:f6:27:8e:f5:07:9d:9c:cb:b5:4f: 88:f0:af:fd:44:ce:9c:03:5f:f4:52:3f:e7:3b:84: 07:c0:e3:e5:f0:0d:8c:a8:4c:d3:81:c0:16:e4:c9: 36:b1:a7:44:06:e9:57:c9:23:69:b0:03:8f:9b:57: 13:eb:6f:3e:f9:cf:c6:40:3e:6f:52:78:4e:01:67: 58:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C0:99:18:70:61:0C:E5:A8:DB:80:13:03:70:C0:5D:D6:76:0B:BE X509v3 Authority Key Identifier: keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ad:b8:7f:ce:03:54:b8:59:f7:ec:e2:f9:d8:21:26:7d:3f: 50:11:00:e2:33:76:ee:1f:7a:8c:0e:58:04:2f:c4:39:a0:0f: 7b:e8:82:a4:c7:cb:67:00:be:32:bc:dc:5c:e7:9a:a4:06:ac: 26:93:57:34:8b:01:20:d5:d8:68:91:ec:17:5a:b0:d6:d6:c5: 96:10:f1:eb:49:a9:ad:46:61:9c:c4:c9:a6:f5:c4:02:90:f6: 05:c4:f9:64:44:7f:7a:2a:c9:67:78:b1:17:3e:d2:37:d9:13: 31:e8:31:60:9b:35:b1:93:96:4e:8b:82:72:3c:f1:f3:fd:84: ec:ef:90:4f:a2:6b:64:a5:6b:3e:2b:0c:ba:56:eb:2b:a0:98: be:bc:1b:a0:4f:33:12:53:db:8d:cd:d1:5f:1b:f9:0b:e7:0f: 12:43:5e:7e:a7:8b:7a:ff:e3:a8:b9:50:93:09:dd:1c:73:d9: 80:95:e1:c4:31:be:25:68:38:fc:cf:c8:0c:fa:74:42:9f:cb: 99:52:f6:8c:c1:ae:18:d1:6d:c4:9b:27:86:6f:ef:bb:0e:94: 58:23:d3:17:c2:11:39:24:7a:b6:7c:3b:77:32:63:df:be:3e: e9:2c:d3:a0:97:9c:e1:05:9b:b7:38:0c:ec:64:0f:03:9a:fd: 58:36:33:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YiCCuS961LODn1ClGNAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMjE1MjFhNzEyNzE1N2Y3ZGFmMGFkMDkxMzk0YWQ1YTFj Y2U3NzkwHhcNMjUxMjA2MDQwMDMyWhcNMjUxMjA3MDQwMDMyWjAzMTEwLwYDVQQD Eyg4N2MwOTkxODcwNjEwY2U1YThkYjgwMTMwMzcwYzA1ZGQ2NzYwYmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ+TSsmhE3G3QVhsCYGEcFycFv5H U7DgASX4Tum3lMwC12DSKabilrTfNDkdwaq0zn8XVOo49dQkCS3VjjqLi5ICdTqk 1j6mwqaeaVwzDLG5XoGBJhJxo8pc0qsjw5YnWVDQib3fIMTwdsChxxloQXQWIW30 Fcs0dSgZp7b/WFn/BH0stoClShg9Yc84iQLXdeC67x+G5jOW80thRsca8XIu27Jv dinQj+aEjcrNUtdI4wOOPtMKLPYnjvUHnZzLtU+I8K/9RM6cA1/0Uj/nO4QHwOPl 8A2MqEzTgcAW5Mk2sadEBulXySNpsAOPm1cT628++c/GQD5vUnhOAWdYkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfAmRhwYQzlqNuAEwNwwF3Wdgu+MB8GA1UdIwQY MBaAFA8hUhpxJxV/fa8K0JE5StWhzOd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHlGU0duRW5GWDk5cndyUWtUbEsxYUhNNTNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lODMxYjEtOWVjMC00NmYyLTg2MGQt ZmFkNWZkNzk3MGJhLzEvRHlGU0duRW5GWDk5cndyUWtUbEsxYUhNNTNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9lODMxYjEtOWVjMC00NmYyLTg2MGQtZmFkNWZkNzk3MGJh LzEvRHlGU0duRW5GWDk5cndyUWtUbEsxYUhNNTNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALK24f84D VLhZ9+zi+dghJn0/UBEA4jN27h96jA5YBC/EOaAPe+iCpMfLZwC+MrzcXOeapAas JpNXNIsBINXYaJHsF1qw1tbFlhDx60mprUZhnMTJpvXEApD2BcT5ZER/eirJZ3ix Fz7SN9kTMegxYJs1sZOWTouCcjzx8/2E7O+QT6JrZKVrPisMulbrK6CYvrwboE8z ElPbjc3RXxv5C+cPEkNefqeLev/jqLlQkwndHHPZgJXhxDG+JWg4/M/IDPp0Qp/L mVL2jMGuGNFtxJsnhm/vuw6UWCPTF8IROSR6tnw7dzJj374+6SzToJec4QWbtzgM 7GQPA5r9WDYzzg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:04 2025 by rpki-client