This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft File: DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft (raw, json) Hash identifier: UNIBQGOqDtohKOTmbqRRv+881ftzxXeS90vE6f+vEQ0= Subject key identifier: 21:19:D4:12:AD:EB:9D:0D:2A:3E:F0:F7:4E:42:BB:20:F8:94:47:ED Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3 Certificate issuer: /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3 Certificate serial: 019AF509C7598C7EB93CC67241BF3FEE2BEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 19:00:49 +0000 Manifest this update: Sat 06 Dec 2025 19:00:49 +0000 Manifest next update: Sun 07 Dec 2025 19:00:49 +0000 Files and hashes: 1: DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl (hash: k27FWTZITNTt6PrwqQ3q5qhssgtKp80JF+hwpSuV+y8=) 2: rGd99voSzroleDeVrTNABeoU6Jg.roa (hash: UJYK4rx2XvhMh0V5UdV9K0pusDUwS3V+qxXywUzqr98=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:c7:59:8c:7e:b9:3c:c6:72:41:bf:3f:ee:2b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3 Validity Not Before: Dec 6 19:00:49 2025 GMT Not After : Dec 7 19:00:49 2025 GMT Subject: CN=2119d412adeb9d0d2a3ef0f74e42bb20f89447ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0f:73:8a:17:ea:f8:31:a2:2d:8e:5c:8b:10: 82:bf:cb:8b:fd:7d:1d:e3:b9:0c:67:2d:ed:cd:dc: 06:19:a9:85:ef:de:60:46:d1:c0:d8:5a:5d:1d:7c: f1:2e:6d:74:21:b4:6d:18:fe:34:e2:18:92:f8:c2: dd:ab:54:60:1b:3f:ac:ba:0d:18:61:cc:eb:5b:73: 7b:84:ea:26:cf:73:cb:78:64:2c:1f:2c:b7:17:44: 32:32:30:3f:19:4c:3f:37:69:4d:22:4d:1e:73:55: 17:03:c5:93:55:a8:13:34:a2:c8:59:97:be:4d:8e: 18:2f:d3:ae:fd:41:7f:8e:95:75:b2:1d:01:23:cf: 16:bf:88:8b:1c:a0:a2:d9:d4:5e:3c:42:32:ca:a9: 93:03:f3:fb:ea:d5:f4:ff:7f:1f:d4:85:47:07:37: 01:ed:b9:3a:67:10:fa:a6:02:99:2d:55:3d:05:4c: 36:e8:9a:f7:b3:69:80:ba:90:a8:71:e9:cb:63:bf: 7f:b1:be:17:4d:f0:8c:a4:40:01:6c:9c:7b:75:74: 12:e3:7e:52:2c:47:42:2d:af:7e:42:7d:1b:76:b5: c6:f1:85:e2:c4:46:32:de:aa:d0:9c:f4:d3:d3:b0: 89:3f:6a:f9:5e:5d:b4:15:e5:87:d5:3c:d2:e1:ee: 1c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:19:D4:12:AD:EB:9D:0D:2A:3E:F0:F7:4E:42:BB:20:F8:94:47:ED X509v3 Authority Key Identifier: keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:e8:49:18:e1:8d:0a:fb:9b:69:1c:c1:27:54:5a:a3:be:ff: ac:e1:84:24:14:9e:e9:74:30:08:d5:e5:1f:ff:a6:ef:ee:30: 15:05:68:4d:af:c7:f5:a7:06:66:ca:cf:02:cb:7f:37:f8:9f: 54:c1:e4:02:71:83:c4:34:13:87:82:d0:52:46:65:60:d9:c4: 7a:78:67:e0:93:34:ff:4d:70:6a:3e:b2:33:4b:68:b3:07:e0: 71:f8:8a:36:ec:80:c3:2e:85:8a:a8:4c:c8:12:b4:85:52:6a: 88:9d:0a:29:f7:c3:f8:a6:f2:18:83:9b:de:50:8c:8b:9b:8d: 2e:05:7d:5b:79:47:88:33:e2:81:e8:c0:d9:17:28:5a:2e:51: 6d:42:02:ed:9f:30:18:d9:27:1f:49:ac:10:a1:9e:71:85:ad: 74:45:22:24:b9:d4:e1:bc:65:16:33:ee:db:7a:b1:63:c9:72: d9:8b:7a:da:f7:cd:7d:94:45:53:ed:4e:c8:03:50:a0:82:50: 88:1d:bf:4a:45:6f:47:62:4d:ec:23:93:2d:0e:2b:53:08:17: 81:f2:a6:84:32:55:27:64:78:48:7b:f7:e1:4f:44:6d:84:56: d6:3d:75:9d:fb:44:ce:31:a6:40:81:d3:33:dc:66:2f:6d:38: a5:a3:2a:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CcdZjH65PMZyQb8/7ivqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjYyNWJkZmZhOTQzN2RjMmI5NmQ4YWUwMjMxMDBiYzg4 ZTZmZTMwHhcNMjUxMjA2MTkwMDQ5WhcNMjUxMjA3MTkwMDQ5WjAzMTEwLwYDVQQD EygyMTE5ZDQxMmFkZWI5ZDBkMmEzZWYwZjc0ZTQyYmIyMGY4OTQ0N2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQ9zihfq+DGiLY5cixCCv8uL/X0d 47kMZy3tzdwGGamF795gRtHA2FpdHXzxLm10IbRtGP404hiS+MLdq1RgGz+sug0Y YczrW3N7hOomz3PLeGQsHyy3F0QyMjA/GUw/N2lNIk0ec1UXA8WTVagTNKLIWZe+ TY4YL9Ou/UF/jpV1sh0BI88Wv4iLHKCi2dRePEIyyqmTA/P76tX0/38f1IVHBzcB 7bk6ZxD6pgKZLVU9BUw26Jr3s2mAupCocenLY79/sb4XTfCMpEABbJx7dXQS435S LEdCLa9+Qn0bdrXG8YXixEYy3qrQnPTT07CJP2r5Xl20FeWH1TzS4e4cwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEZ1BKt650NKj7w905CuyD4lEftMB8GA1UdIwQY MBaAFAwmJb3/qUN9wrltiuAjEAvIjm/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENZbHZmLXBRMzNDdVcySzRDTVFDOGlPYi1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC85Yzc4YjktZGEzOS00NTBmLWJiOTYt MDc4MDRhZmY0OTBmLzEvRENZbHZmLXBRMzNDdVcySzRDTVFDOGlPYi1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC85Yzc4YjktZGEzOS00NTBmLWJiOTYtMDc4MDRhZmY0OTBm LzEvRENZbHZmLXBRMzNDdVcySzRDTVFDOGlPYi1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOhJGOGN CvubaRzBJ1Rao77/rOGEJBSe6XQwCNXlH/+m7+4wFQVoTa/H9acGZsrPAst/N/if VMHkAnGDxDQTh4LQUkZlYNnEenhn4JM0/01waj6yM0toswfgcfiKNuyAwy6FiqhM yBK0hVJqiJ0KKffD+KbyGIOb3lCMi5uNLgV9W3lHiDPigejA2RcoWi5RbUIC7Z8w GNknH0msEKGecYWtdEUiJLnU4bxlFjPu23qxY8ly2Yt62vfNfZRFU+1OyANQoIJQ iB2/SkVvR2JN7COTLQ4rUwgXgfKmhDJVJ2R4SHv34U9EbYRW1j11nftEzjGmQIHT M9xmL204paMqyg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:54:41 2025 by rpki-client