This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft File: dPYRYnGtLREZYKLZYaqcFi-VgKY.mft (raw, json) Hash identifier: RzftxhjD9mXF6NLuaAhJU0xfHZDCq2Jz6D9/QXVWoWk= Subject key identifier: 9B:8E:45:BA:FD:04:50:48:8B:A5:18:6B:14:E3:5E:C3:33:6C:01:ED Authority key identifier: 74:F6:11:62:71:AD:2D:11:19:60:A2:D9:61:AA:9C:16:2F:95:80:A6 Certificate issuer: /CN=74f6116271ad2d111960a2d961aa9c162f9580a6 Certificate serial: 019AF12E60AB1A03A79820F487C3C6A28334 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft Manifest number: 1159 Signing time: Sat 06 Dec 2025 01:02:19 +0000 Manifest this update: Sat 06 Dec 2025 01:02:19 +0000 Manifest next update: Sun 07 Dec 2025 01:02:19 +0000 Files and hashes: 1: dPYRYnGtLREZYKLZYaqcFi-VgKY.crl (hash: KgHGZdvJS5q4VtVpNMjF5T9nHhXNUCDPw+VxVSze1j4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.crl rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft rsync://rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:60:ab:1a:03:a7:98:20:f4:87:c3:c6:a2:83:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74f6116271ad2d111960a2d961aa9c162f9580a6 Validity Not Before: Dec 6 01:02:19 2025 GMT Not After : Dec 7 01:02:19 2025 GMT Subject: CN=9b8e45bafd0450488ba5186b14e35ec3336c01ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:96:2b:ec:0b:bb:44:7c:b0:62:93:6f:4f:dd: e4:15:cc:af:77:06:2f:20:20:bd:74:9b:d6:ed:a3: 16:fd:a0:5f:b1:79:6b:a2:8b:58:b5:4d:b3:45:b0: 99:51:ac:ee:10:63:01:69:a5:c2:c9:c7:65:82:51: 4e:c1:ce:e0:94:12:31:a4:2c:1d:d8:81:23:8f:93: df:68:e7:24:75:3b:a6:33:02:2e:46:4f:38:e7:92: 5e:15:c7:4f:97:77:63:7f:e8:09:29:63:73:65:ac: 19:f8:07:ac:1b:68:7f:4a:be:36:ea:61:f7:fe:a8: fb:64:b9:db:cd:9b:5a:af:bc:08:af:2d:70:79:e9: 00:b6:04:97:92:68:be:82:2e:cb:43:1c:f3:d0:ab: bc:76:53:1c:0a:0b:fb:80:86:0a:10:12:82:b1:e7: ee:1f:e3:84:0b:00:56:7f:e8:65:cc:35:16:54:d6: a0:9a:eb:ff:03:9a:0b:51:25:e9:91:c8:95:6e:dd: 31:a1:a1:28:96:e3:06:06:4d:b1:b4:20:41:9b:43: 43:bb:7c:3f:68:db:a2:74:44:8a:c0:2f:a5:b9:4c: 1a:fa:53:cd:1f:57:64:f1:97:97:20:cd:5a:8a:6d: e2:a6:ca:04:58:68:3f:ec:6d:8e:c0:46:30:b0:7c: d7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8E:45:BA:FD:04:50:48:8B:A5:18:6B:14:E3:5E:C3:33:6C:01:ED X509v3 Authority Key Identifier: keyid:74:F6:11:62:71:AD:2D:11:19:60:A2:D9:61:AA:9C:16:2F:95:80:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ed:42:cd:77:4d:95:3d:c7:1a:50:4c:28:35:2c:db:81:44: 1c:0d:71:fd:c9:cc:9a:dd:f6:1c:09:79:86:e0:59:5a:6e:13: 34:5b:af:79:02:90:26:3f:a3:59:5a:96:70:e1:01:f6:cb:f4: 34:c7:7a:03:65:5e:10:e2:d7:7d:61:c1:d7:6c:5b:b0:60:14: 7c:39:9e:23:b9:41:da:41:66:6f:96:30:8c:84:aa:96:10:75: 6d:c0:c9:75:d3:9b:f0:08:3f:71:78:28:3e:ed:56:e7:5e:e1: 9d:ca:62:72:e9:bd:f2:6d:a9:60:78:8f:cd:a9:19:cf:87:4a: 9e:20:f5:7b:24:0a:a5:37:5a:0a:03:51:c5:ad:29:89:6e:28: c7:7c:05:f9:fd:87:4a:01:7e:60:2b:b9:67:f9:5d:41:c0:be: e8:e4:e4:18:77:96:44:83:46:a4:c6:be:f9:c9:79:a8:41:72: 0b:2b:ff:7e:4d:7f:51:ac:6c:2c:48:d4:aa:ff:ba:50:3b:48: 4c:7b:29:cb:38:48:8a:aa:08:0f:fd:27:fb:31:15:00:dc:27: 6a:19:6d:f7:46:7e:ca:6d:24:2e:40:c4:8b:18:f3:f1:a7:4a: aa:4b:4e:71:b8:dd:29:66:af:59:88:68:94:42:7a:b3:11:b2: c2:26:f3:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLmCrGgOnmCD0h8PGooM0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZjYxMTYyNzFhZDJkMTExOTYwYTJkOTYxYWE5YzE2MmY5 NTgwYTYwHhcNMjUxMjA2MDEwMjE5WhcNMjUxMjA3MDEwMjE5WjAzMTEwLwYDVQQD Eyg5YjhlNDViYWZkMDQ1MDQ4OGJhNTE4NmIxNGUzNWVjMzMzNmMwMWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpYr7Au7RHywYpNvT93kFcyvdwYv ICC9dJvW7aMW/aBfsXlrootYtU2zRbCZUazuEGMBaaXCycdlglFOwc7glBIxpCwd 2IEjj5PfaOckdTumMwIuRk8455JeFcdPl3djf+gJKWNzZawZ+AesG2h/Sr426mH3 /qj7ZLnbzZtar7wIry1weekAtgSXkmi+gi7LQxzz0Ku8dlMcCgv7gIYKEBKCsefu H+OECwBWf+hlzDUWVNagmuv/A5oLUSXpkciVbt0xoaEoluMGBk2xtCBBm0NDu3w/ aNuidESKwC+luUwa+lPNH1dk8ZeXIM1aim3ipsoEWGg/7G2OwEYwsHzXGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuORbr9BFBIi6UYaxTjXsMzbAHtMB8GA1UdIwQY MBaAFHT2EWJxrS0RGWCi2WGqnBYvlYCmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFBZUlluR3RMUkVaWUtMWllhcWNGaS1WZ0tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni81NmM4YTctNTYyYi00OGM4LThhOGYt NWEwNWI5MWIyYjhjLzEvZFBZUlluR3RMUkVaWUtMWllhcWNGaS1WZ0tZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni81NmM4YTctNTYyYi00OGM4LThhOGYtNWEwNWI5MWIyYjhj LzEvZFBZUlluR3RMUkVaWUtMWllhcWNGaS1WZ0tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+1CzXdN lT3HGlBMKDUs24FEHA1x/cnMmt32HAl5huBZWm4TNFuveQKQJj+jWVqWcOEB9sv0 NMd6A2VeEOLXfWHB12xbsGAUfDmeI7lB2kFmb5YwjISqlhB1bcDJddOb8Ag/cXgo Pu1W517hncpicum98m2pYHiPzakZz4dKniD1eyQKpTdaCgNRxa0piW4ox3wF+f2H SgF+YCu5Z/ldQcC+6OTkGHeWRINGpMa++cl5qEFyCyv/fk1/UaxsLEjUqv+6UDtI THspyzhIiqoID/0n+zEVANwnahlt90Z+ym0kLkDEixjz8adKqktOcbjdKWavWYho lEJ6sxGywibziw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:06 2025 by rpki-client