This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft File: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft (raw, json) Hash identifier: 8MyXYFaL5EDn7i6nRG+SvQss+flJUl14BHoD1+GBIIA= Subject key identifier: FF:39:83:11:D3:8D:88:D0:74:5C:16:61:23:AB:E7:D6:AB:73:63:BE Authority key identifier: 77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96 Certificate issuer: /CN=772f8e257843732ec5ed0f61a13acabee6090a96 Certificate serial: 019AF19B5EC893C7239725F727474705AD43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 03:01:22 +0000 Manifest this update: Sat 06 Dec 2025 03:01:22 +0000 Manifest next update: Sun 07 Dec 2025 03:01:22 +0000 Files and hashes: 1: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl (hash: Pn8fQy0BZFWsaSs6ZSlVNdO07OpQGAoslQnBMqYddPY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:5e:c8:93:c7:23:97:25:f7:27:47:47:05:ad:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=772f8e257843732ec5ed0f61a13acabee6090a96 Validity Not Before: Dec 6 03:01:22 2025 GMT Not After : Dec 7 03:01:22 2025 GMT Subject: CN=ff398311d38d88d0745c166123abe7d6ab7363be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:11:f8:be:0a:4c:33:6c:74:1a:4b:2b:5a:ea: ea:38:ed:d5:1d:2a:43:fb:1b:f9:cd:49:15:df:6a: d4:f7:6d:b8:37:89:0a:6e:dd:90:24:42:fd:21:cc: e4:64:65:0f:e6:76:97:21:16:21:4f:db:b9:a1:d2: 6b:7c:b8:b9:e9:88:1e:ca:24:39:75:85:ef:75:0b: 0f:af:fd:39:d1:15:dc:6d:b3:2c:92:20:14:7a:e2: b8:38:0a:71:87:57:49:3e:48:3b:f1:a6:8c:16:e7: 41:a7:af:08:a4:98:b3:00:d7:30:49:45:ba:fa:0c: b7:7e:47:a5:1d:98:38:e1:97:c3:3e:8c:79:65:b0: ea:71:96:20:f1:69:41:52:d6:13:54:a9:46:68:ab: f7:38:a5:5c:69:e4:71:2b:64:d3:92:01:4b:a2:09: e8:e3:23:61:fe:e3:ea:ec:7f:75:f6:5c:c4:72:66: cf:c0:c0:6c:63:6f:c7:c6:02:4b:d6:da:90:33:3d: f0:66:7d:0f:ea:91:52:10:04:5f:6a:6c:09:6f:57: 21:af:d6:8b:e8:15:a2:a9:13:99:c9:6d:ad:ab:df: 80:8b:38:8d:64:b4:5f:67:d1:b5:13:78:47:f5:d4: 50:df:8b:79:a6:2a:9e:4c:27:c3:db:e1:40:e6:84: 5e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:39:83:11:D3:8D:88:D0:74:5C:16:61:23:AB:E7:D6:AB:73:63:BE X509v3 Authority Key Identifier: keyid:77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:4e:90:4b:a3:cb:ed:39:8f:06:ef:70:41:9c:30:45:e9:9e: 6f:6c:47:e0:09:f7:a5:fb:76:3a:77:11:c2:92:01:03:82:9b: 64:a5:dd:3d:6f:da:30:a3:27:f0:aa:8b:5e:cc:75:7d:80:18: 91:49:72:08:3d:d5:8a:46:b9:8e:30:be:ab:9a:23:41:35:29: 07:08:28:a0:40:80:5b:fb:9c:21:0d:7c:09:e1:80:98:7c:9d: 40:ee:50:82:38:81:c7:e2:b6:d3:0a:78:23:f7:0a:11:cd:af: c0:4f:3d:88:55:4f:65:16:30:91:76:fe:85:ab:1d:1f:92:d7: 2f:4f:b8:8b:18:43:60:54:53:44:61:7d:7c:a7:bf:06:f8:d8: 36:d1:ff:aa:9e:1c:9c:ee:bd:25:7b:26:8d:35:cb:ef:73:03: e6:04:86:70:9b:60:2c:b7:80:b7:e9:9d:42:a5:d6:48:43:52: 1e:cb:6c:73:ee:62:76:7f:4c:9c:c2:e2:08:f3:6d:9d:75:38: e7:ce:a8:3f:f8:61:c7:8e:d6:15:52:51:92:f2:9d:09:34:bb: 43:02:9e:74:6f:75:7c:b9:07:00:1d:4c:49:e7:72:55:db:ec: 5b:95:d3:4e:6a:3c:8e:6b:8f:dc:65:70:32:07:c7:ab:7c:4c: f0:ba:59:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm17Ik8cjlyX3J0dHBa1DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MmY4ZTI1Nzg0MzczMmVjNWVkMGY2MWExM2FjYWJlZTYw OTBhOTYwHhcNMjUxMjA2MDMwMTIyWhcNMjUxMjA3MDMwMTIyWjAzMTEwLwYDVQQD EyhmZjM5ODMxMWQzOGQ4OGQwNzQ1YzE2NjEyM2FiZTdkNmFiNzM2M2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRH4vgpMM2x0GksrWurqOO3VHSpD +xv5zUkV32rU9224N4kKbt2QJEL9IczkZGUP5naXIRYhT9u5odJrfLi56YgeyiQ5 dYXvdQsPr/050RXcbbMskiAUeuK4OApxh1dJPkg78aaMFudBp68IpJizANcwSUW6 +gy3fkelHZg44ZfDPox5ZbDqcZYg8WlBUtYTVKlGaKv3OKVcaeRxK2TTkgFLogno 4yNh/uPq7H919lzEcmbPwMBsY2/HxgJL1tqQMz3wZn0P6pFSEARfamwJb1chr9aL 6BWiqROZyW2tq9+AiziNZLRfZ9G1E3hH9dRQ34t5piqeTCfD2+FA5oReNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP85gxHTjYjQdFwWYSOr59arc2O+MB8GA1UdIwQY MBaAFHcvjiV4Q3Muxe0PYaE6yr7mCQqWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHktT0pYaERjeTdGN1E5aG9Uckt2dVlKQ3BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mNzQxMTEtNTQxMy00MDQ4LTlhYjkt OTZjYWM3ODc1ODJiLzEvZHktT0pYaERjeTdGN1E5aG9Uckt2dVlKQ3BZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9mNzQxMTEtNTQxMy00MDQ4LTlhYjktOTZjYWM3ODc1ODJi LzEvZHktT0pYaERjeTdGN1E5aG9Uckt2dVlKQ3BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARE6QS6PL 7TmPBu9wQZwwRemeb2xH4An3pft2OncRwpIBA4KbZKXdPW/aMKMn8KqLXsx1fYAY kUlyCD3Vika5jjC+q5ojQTUpBwgooECAW/ucIQ18CeGAmHydQO5QgjiBx+K20wp4 I/cKEc2vwE89iFVPZRYwkXb+hasdH5LXL0+4ixhDYFRTRGF9fKe/BvjYNtH/qp4c nO69JXsmjTXL73MD5gSGcJtgLLeAt+mdQqXWSENSHstsc+5idn9MnMLiCPNtnXU4 586oP/hhx47WFVJRkvKdCTS7QwKedG91fLkHAB1MSedyVdvsW5XTTmo8jmuP3GVw MgfHq3xM8LpZNg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:29:38 2025 by rpki-client