This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft File: DYifra578hBy-tsy4ep2OwwplI4.mft (raw, json) Hash identifier: o9jra6joEiV7C0um5Gxfl6KHcL/v3dQWJ+BrqIM+E48= Subject key identifier: 0B:94:84:9F:7A:BF:D1:94:65:9A:97:65:44:00:94:81:52:C4:42:00 Authority key identifier: 0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E Certificate issuer: /CN=0d889fadae7bf21072fadb32e1ea763b0c29948e Certificate serial: 019AF61C3F3A63CDEB5D49318492335CD745 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft Manifest number: 0E4B Signing time: Sun 07 Dec 2025 00:00:37 +0000 Manifest this update: Sun 07 Dec 2025 00:00:37 +0000 Manifest next update: Mon 08 Dec 2025 00:00:37 +0000 Files and hashes: 1: DYifra578hBy-tsy4ep2OwwplI4.crl (hash: uVfkPJFWn46k93LVX01463v4b8rAdK29U3mZpQ2kgTg=) 2: jUminXGzN3lBVv6Wl3PuROeq30E.roa (hash: 8aOqxPJWxG2Nidw4LwjQRZweH1vQbncR7avmcnmTTkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:3f:3a:63:cd:eb:5d:49:31:84:92:33:5c:d7:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d889fadae7bf21072fadb32e1ea763b0c29948e Validity Not Before: Dec 7 00:00:37 2025 GMT Not After : Dec 8 00:00:37 2025 GMT Subject: CN=0b94849f7abfd194659a97654400948152c44200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:6f:42:82:3f:43:c2:c0:92:56:a8:b3:07:28: 0a:4c:fd:70:2b:0d:3a:89:2d:fd:a0:47:46:ad:ea: ea:9a:c0:98:38:79:a7:d1:ea:54:fe:e5:0e:01:d0: 22:9a:c8:2b:d2:a7:a9:77:91:49:eb:bf:45:b7:93: d0:62:ea:55:86:43:e0:1b:82:7b:de:aa:c6:d1:1f: 5e:50:b7:18:61:a3:8a:15:d8:3e:03:63:6f:18:be: 70:b1:ad:d1:6d:66:dd:dd:08:0b:91:44:df:54:3b: c2:10:67:8e:72:81:85:21:ea:2a:7d:02:4d:c1:70: ad:78:9c:00:a8:fc:10:73:fd:53:fa:aa:66:95:bb: 03:b5:f4:a9:a0:a4:57:07:a2:8a:22:da:5d:10:8a: a2:05:f5:29:32:09:17:ad:4f:06:e1:ff:6e:a6:b4: 8f:3c:97:e1:71:25:a3:3e:56:be:5e:b1:d6:ae:31: 2b:22:50:7a:6a:35:48:08:91:8a:2c:12:ad:9f:b0: 8e:ab:14:71:67:6f:d6:f1:00:bc:85:4a:46:16:ad: ff:6a:e1:b2:00:9c:d6:64:e9:eb:84:a6:18:1e:0d: 4c:26:bb:c6:e7:5d:b9:7d:88:2b:c5:72:d8:41:a2: 5e:44:d8:e2:7e:4f:dd:c3:9a:fc:a4:98:68:4d:48: cd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:94:84:9F:7A:BF:D1:94:65:9A:97:65:44:00:94:81:52:C4:42:00 X509v3 Authority Key Identifier: keyid:0D:88:9F:AD:AE:7B:F2:10:72:FA:DB:32:E1:EA:76:3B:0C:29:94:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYifra578hBy-tsy4ep2OwwplI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6e4b78-ab94-449c-a4d5-abdb63ace7e7/1/DYifra578hBy-tsy4ep2OwwplI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:92:6b:37:4d:6b:41:e9:d4:f2:f5:81:45:a9:6e:95:84:93: 66:b2:3c:93:93:2b:0c:4b:b8:f3:c6:15:51:be:f1:7f:4d:5e: 53:3c:cf:5d:45:96:36:dd:17:a6:59:d0:1d:7f:2d:8b:80:ac: 25:8e:5f:e5:d5:5f:22:cd:63:21:69:d3:8e:d7:98:31:c3:0d: 05:93:09:60:46:c6:e0:51:14:67:59:c8:79:fe:06:37:a3:63: 5f:a9:8e:00:c6:e9:26:4c:ed:9e:ff:5d:20:f6:be:1c:2c:a0: 3e:23:78:e6:91:84:ca:08:4d:ad:24:1a:51:a6:fe:ad:0e:78: a5:55:b2:f4:91:1f:7e:f1:75:46:5f:e9:9b:da:b9:54:f5:31: f7:59:ce:11:a7:ba:1b:98:92:da:a6:38:e1:bf:ba:06:b1:9a: 57:b5:0a:b8:3c:cf:ac:05:cc:52:a7:ad:53:8e:b6:f1:3b:5e: 9d:c7:ff:5d:66:5f:2c:6f:dd:48:e8:2f:ef:ef:bc:f4:ef:c5: 0d:9f:f0:d1:0f:c9:fe:21:f0:67:86:c6:5b:2b:73:49:9a:f1: 99:81:24:ce:0b:0a:06:d7:c8:64:15:1f:70:67:a4:7a:74:1e: b0:38:38:52:3f:5f:b4:fc:ed:dc:c7:c3:e7:11:ba:38:7c:30: 9c:02:9e:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HD86Y83rXUkxhJIzXNdFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkODg5ZmFkYWU3YmYyMTA3MmZhZGIzMmUxZWE3NjNiMGMy OTk0OGUwHhcNMjUxMjA3MDAwMDM3WhcNMjUxMjA4MDAwMDM3WjAzMTEwLwYDVQQD EygwYjk0ODQ5ZjdhYmZkMTk0NjU5YTk3NjU0NDAwOTQ4MTUyYzQ0MjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkm9Cgj9DwsCSVqizBygKTP1wKw06 iS39oEdGrerqmsCYOHmn0epU/uUOAdAimsgr0qepd5FJ679Ft5PQYupVhkPgG4J7 3qrG0R9eULcYYaOKFdg+A2NvGL5wsa3RbWbd3QgLkUTfVDvCEGeOcoGFIeoqfQJN wXCteJwAqPwQc/1T+qpmlbsDtfSpoKRXB6KKItpdEIqiBfUpMgkXrU8G4f9uprSP PJfhcSWjPla+XrHWrjErIlB6ajVICJGKLBKtn7COqxRxZ2/W8QC8hUpGFq3/auGy AJzWZOnrhKYYHg1MJrvG5125fYgrxXLYQaJeRNjifk/dw5r8pJhoTUjNUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAuUhJ96v9GUZZqXZUQAlIFSxEIAMB8GA1UdIwQY MBaAFA2In62ue/IQcvrbMuHqdjsMKZSOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFlpZnJhNTc4aEJ5LXRzeTRlcDJPd3dwbEk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82ZTRiNzgtYWI5NC00NDljLWE0ZDUt YWJkYjYzYWNlN2U3LzEvRFlpZnJhNTc4aEJ5LXRzeTRlcDJPd3dwbEk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC82ZTRiNzgtYWI5NC00NDljLWE0ZDUtYWJkYjYzYWNlN2U3 LzEvRFlpZnJhNTc4aEJ5LXRzeTRlcDJPd3dwbEk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJJrN01r QenU8vWBRalulYSTZrI8k5MrDEu488YVUb7xf01eUzzPXUWWNt0XplnQHX8ti4Cs JY5f5dVfIs1jIWnTjteYMcMNBZMJYEbG4FEUZ1nIef4GN6NjX6mOAMbpJkztnv9d IPa+HCygPiN45pGEyghNrSQaUab+rQ54pVWy9JEffvF1Rl/pm9q5VPUx91nOEae6 G5iS2qY44b+6BrGaV7UKuDzPrAXMUqetU4628Ttencf/XWZfLG/dSOgv7++89O/F DZ/w0Q/J/iHwZ4bGWytzSZrxmYEkzgsKBtfIZBUfcGekenQesDg4Uj9ftPzt3MfD 5xG6OHwwnAKenQ== -----END CERTIFICATE-----Generated at Sun Dec 7 04:56:00 2025 by rpki-client