This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft File: dgynIUsW9YyV1i3vAFkVhtvSPKo.mft (raw, json) Hash identifier: KQlcO3MHi1VzQz9X6Kn2coCxJQuGUJTmPutTGixC1Is= Subject key identifier: 81:6B:9D:68:F8:CC:A5:81:46:24:D9:00:CC:CD:2E:CE:FB:0A:11:1F Authority key identifier: 76:0C:A7:21:4B:16:F5:8C:95:D6:2D:EF:00:59:15:86:DB:D2:3C:AA Certificate issuer: /CN=760ca7214b16f58c95d62def00591586dbd23caa Certificate serial: 019B2741A8E012CCF987F9BC7583EAEABFB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft Manifest number: 09EF Signing time: Tue 16 Dec 2025 13:02:53 +0000 Manifest this update: Tue 16 Dec 2025 13:02:53 +0000 Manifest next update: Wed 17 Dec 2025 13:02:53 +0000 Files and hashes: 1: dgynIUsW9YyV1i3vAFkVhtvSPKo.crl (hash: /dcW/WTScAZrRXGXGFhTLM2X588xKXL1ikGVqZBv+tg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:41:a8:e0:12:cc:f9:87:f9:bc:75:83:ea:ea:bf:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=760ca7214b16f58c95d62def00591586dbd23caa Validity Not Before: Dec 16 13:02:53 2025 GMT Not After : Dec 17 13:02:53 2025 GMT Subject: CN=816b9d68f8cca5814624d900cccd2ecefb0a111f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:16:93:a0:7c:2f:42:c3:af:bd:8d:1b:d7:c7: db:77:cf:a8:20:15:f1:34:7d:d1:e3:0f:67:67:0c: 51:f5:9d:cc:25:ad:f0:86:2e:69:da:bd:3d:ce:e7: a2:82:84:0f:70:8b:8f:fc:27:67:9a:38:b8:9d:3c: 4e:bd:30:36:7f:7e:fb:b4:58:81:32:bd:e2:61:1a: 13:e9:5b:d5:be:3e:2c:18:a1:17:a9:58:f4:0c:e1: 18:78:bf:16:1b:98:05:4d:06:54:2c:4a:11:28:f1: bc:23:1c:c5:2c:10:ba:99:64:cf:b4:1a:ad:64:1f: b8:32:0a:f9:0e:24:f8:4d:7d:cb:59:02:f5:9b:69: ff:67:0f:18:97:de:e9:f0:a1:04:a2:32:8a:43:d9: d3:b3:60:e1:1a:83:f4:4a:8f:e5:8f:ae:17:4f:91: e7:11:fe:06:ac:85:ac:be:a6:6f:86:d6:07:24:8d: 4a:21:5a:c2:f3:ab:48:af:07:4a:b2:58:6a:e0:60: d6:4c:64:ca:1f:de:0e:fe:b2:50:9c:d6:62:cc:06: d4:41:d2:f7:f4:a6:82:74:d8:65:64:b2:ea:72:71: e6:52:fb:41:b7:66:c3:74:a5:73:c1:31:f2:db:8e: 30:4d:57:a8:e3:43:7b:df:b5:ca:c4:8c:82:5e:94: 3d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6B:9D:68:F8:CC:A5:81:46:24:D9:00:CC:CD:2E:CE:FB:0A:11:1F X509v3 Authority Key Identifier: keyid:76:0C:A7:21:4B:16:F5:8C:95:D6:2D:EF:00:59:15:86:DB:D2:3C:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dgynIUsW9YyV1i3vAFkVhtvSPKo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/364413-a6dd-4a37-889c-8aeb38751f12/1/dgynIUsW9YyV1i3vAFkVhtvSPKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:28:bd:57:d7:e3:b0:a5:c6:e9:b0:a8:2d:f1:e6:19:e2:d3: 7f:12:52:a4:8c:82:df:fc:68:ad:16:76:3c:06:7a:62:2b:da: 26:6c:a2:68:26:0c:db:ee:73:02:0a:54:e3:eb:37:73:2b:3e: 06:34:ac:e0:c6:69:47:69:5e:82:db:f2:28:e2:eb:bf:de:67: 35:26:66:f3:14:8a:6a:94:da:fa:00:f7:f1:64:b7:c3:02:70: 36:6f:cc:5b:6c:53:67:3c:d7:7c:9a:ec:20:1b:6b:83:5d:e1: 19:1c:9a:a4:1e:fd:e9:ee:e6:ea:fa:bf:07:97:ad:8a:31:6f: ea:4b:b3:9c:af:36:5f:00:23:d5:f2:08:3e:9c:9c:af:11:40: c6:bd:21:32:84:81:4c:7f:77:ff:3d:4a:7d:63:33:bb:f6:d5: a4:a9:a0:71:02:65:36:72:4f:d3:c5:95:08:9c:dd:dd:0a:e5: d5:85:50:b8:13:38:cc:57:8e:97:b0:be:5b:d7:50:4a:25:3e: 06:b2:f5:bc:3b:37:2a:66:bf:4d:0c:ce:d4:26:78:b8:ad:31: 47:f6:44:2e:33:28:6a:58:1e:c8:c9:30:86:17:c3:73:e5:ee: 87:d1:39:07:c5:83:b7:28:5f:03:39:18:dc:ea:3b:71:b0:db: 14:9d:b6:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQajgEsz5h/m8dYPq6r+5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MGNhNzIxNGIxNmY1OGM5NWQ2MmRlZjAwNTkxNTg2ZGJk MjNjYWEwHhcNMjUxMjE2MTMwMjUzWhcNMjUxMjE3MTMwMjUzWjAzMTEwLwYDVQQD Eyg4MTZiOWQ2OGY4Y2NhNTgxNDYyNGQ5MDBjY2NkMmVjZWZiMGExMTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRaToHwvQsOvvY0b18fbd8+oIBXx NH3R4w9nZwxR9Z3MJa3whi5p2r09zueigoQPcIuP/Cdnmji4nTxOvTA2f377tFiB Mr3iYRoT6VvVvj4sGKEXqVj0DOEYeL8WG5gFTQZULEoRKPG8IxzFLBC6mWTPtBqt ZB+4Mgr5DiT4TX3LWQL1m2n/Zw8Yl97p8KEEojKKQ9nTs2DhGoP0So/lj64XT5Hn Ef4GrIWsvqZvhtYHJI1KIVrC86tIrwdKslhq4GDWTGTKH94O/rJQnNZizAbUQdL3 9KaCdNhlZLLqcnHmUvtBt2bDdKVzwTHy244wTVeo40N737XKxIyCXpQ9rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIFrnWj4zKWBRiTZAMzNLs77ChEfMB8GA1UdIwQY MBaAFHYMpyFLFvWMldYt7wBZFYbb0jyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGd5bklVc1c5WXlWMWkzdkFGa1ZodHZTUEtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zNjQ0MTMtYTZkZC00YTM3LTg4OWMt OGFlYjM4NzUxZjEyLzEvZGd5bklVc1c5WXlWMWkzdkFGa1ZodHZTUEtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8zNjQ0MTMtYTZkZC00YTM3LTg4OWMtOGFlYjM4NzUxZjEy LzEvZGd5bklVc1c5WXlWMWkzdkFGa1ZodHZTUEtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgii9V9fj sKXG6bCoLfHmGeLTfxJSpIyC3/xorRZ2PAZ6YivaJmyiaCYM2+5zAgpU4+s3cys+ BjSs4MZpR2legtvyKOLrv95nNSZm8xSKapTa+gD38WS3wwJwNm/MW2xTZzzXfJrs IBtrg13hGRyapB796e7m6vq/B5etijFv6kuznK82XwAj1fIIPpycrxFAxr0hMoSB TH93/z1KfWMzu/bVpKmgcQJlNnJP08WVCJzd3Qrl1YVQuBM4zFeOl7C+W9dQSiU+ BrL1vDs3Kma/TQzO1CZ4uK0xR/ZELjMoalgeyMkwhhfDc+Xuh9E5B8WDtyhfAzkY 3Oo7cbDbFJ221w== -----END CERTIFICATE-----Generated at Tue Dec 16 17:58:44 2025 by rpki-client