This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft File: dYDRZWm7JKMo4ntH99dRZZcl3vs.mft (raw, json) Hash identifier: 680EyJZqo8/QF0juydVJ7Q5EtFgTV7R80mRXg1w5oEQ= Subject key identifier: 60:8B:D9:97:C6:E0:41:45:A5:55:0A:9A:5D:06:9E:A4:63:4D:CA:D8 Authority key identifier: 75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB Certificate issuer: /CN=7580d16569bb24a328e27b47f7d751659725defb Certificate serial: 019AF31C6FC0613366AE3B3113BB5C23E428 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:01:58 +0000 Manifest this update: Sat 06 Dec 2025 10:01:58 +0000 Manifest next update: Sun 07 Dec 2025 10:01:58 +0000 Files and hashes: 1: 1-xjgsfI902jNFD0m8-DZHtSyyIE.roa (hash: CsZOcJgPTxy7xIAOVt8lWaYqRyYDTFNbLjFpLqFoAHY=) 2: 8znWg7qZ9bI9AKat_qhyP26JqfY.roa (hash: Y2YmIOv3jVMh1xIJmeIZI13RLm2nx7Gd9VO4KN+O0Z4=) 3: dYDRZWm7JKMo4ntH99dRZZcl3vs.crl (hash: JNYIz1SPwnb5IjUx+sm5VW1EkoxMGJ0Ynm1hNBTWmLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:6f:c0:61:33:66:ae:3b:31:13:bb:5c:23:e4:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7580d16569bb24a328e27b47f7d751659725defb Validity Not Before: Dec 6 10:01:58 2025 GMT Not After : Dec 7 10:01:58 2025 GMT Subject: CN=608bd997c6e04145a5550a9a5d069ea4634dcad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ee:c6:7f:c5:5e:5b:f2:2e:a2:5f:e6:64:85: 34:15:a6:ae:5b:3b:cb:5a:2f:36:be:e7:96:dd:f3: 8a:86:a7:84:be:7a:55:cd:15:60:49:34:d8:08:6e: ed:21:05:ae:6f:75:f6:8c:23:70:5b:6a:ae:6c:90: 9a:e3:f5:34:97:38:27:33:ea:a5:37:52:d1:48:77: 57:25:c0:86:73:bd:b8:13:1c:52:d1:58:22:10:db: b9:39:58:b1:83:98:bb:f4:8a:11:88:4e:25:61:d5: c1:2f:62:90:25:9a:9f:09:50:b1:39:56:24:d1:ba: 55:7f:b0:e8:92:c4:7d:82:64:ed:e6:e3:f6:d5:cb: d0:f6:6f:47:39:94:dc:c4:d7:73:93:00:50:8c:00: 46:9e:4d:38:02:0c:ea:c2:cc:4a:17:0c:7e:a0:6c: cd:1d:25:4c:8b:40:cd:02:13:0f:dc:3b:b6:d1:81: ba:e5:63:0a:f6:d3:92:0d:ba:0c:a1:47:1e:ee:fa: ec:53:09:81:12:6c:43:7f:d9:4e:ff:4f:84:2e:3a: 57:c8:7a:88:7f:3a:92:32:d7:6c:f6:84:9e:43:fe: 7f:35:be:54:0c:d2:f0:19:d8:04:30:d3:13:08:c6: 4a:39:4e:e4:9e:32:bf:7b:0d:95:a1:30:85:fe:e8: b1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8B:D9:97:C6:E0:41:45:A5:55:0A:9A:5D:06:9E:A4:63:4D:CA:D8 X509v3 Authority Key Identifier: keyid:75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:ef:85:5a:9c:84:6d:20:e3:ba:6d:46:e9:a8:21:b3:83:09: 6e:79:27:df:59:84:ce:ca:f0:55:74:df:b1:bc:82:46:f6:be: 81:2e:f0:b0:93:0d:23:91:a5:05:04:9b:1c:66:9c:3f:51:53: df:37:f7:78:11:92:04:5f:e4:56:e8:2e:3f:27:3f:76:58:93: 16:0b:c3:5f:df:f9:93:67:11:96:ce:ba:03:bd:2e:ec:d6:7a: 11:7e:02:4a:14:02:b6:2c:bd:82:3d:96:13:bd:02:7b:2d:6f: 25:ae:18:cb:d4:92:97:9b:bc:f5:8d:47:89:4a:0b:2f:17:60: e7:80:41:c3:f8:26:90:23:28:41:2f:98:fc:89:d6:a7:ca:c2: 57:0e:bc:a9:e7:49:c7:66:bc:bd:fc:18:98:20:b9:c1:a6:c2: 90:d8:dd:8b:2f:c9:5d:e3:d8:3b:4f:6c:42:24:f3:2b:05:41: a5:69:89:c6:fb:5c:0c:19:19:33:68:9b:bd:cb:07:84:2d:2f: 3d:1b:c8:8f:42:a6:4f:9e:7c:7b:c3:3b:cf:49:39:35:50:7e: 29:eb:ca:ad:6b:23:a0:92:4d:4e:e1:a4:00:7d:b8:a5:ed:c8: 52:d4:33:55:54:51:45:34:cd:9d:52:12:60:fd:ad:d1:64:6d: ba:78:06:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHG/AYTNmrjsxE7tcI+QoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ODBkMTY1NjliYjI0YTMyOGUyN2I0N2Y3ZDc1MTY1OTcy NWRlZmIwHhcNMjUxMjA2MTAwMTU4WhcNMjUxMjA3MTAwMTU4WjAzMTEwLwYDVQQD Eyg2MDhiZDk5N2M2ZTA0MTQ1YTU1NTBhOWE1ZDA2OWVhNDYzNGRjYWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAze7Gf8VeW/Iuol/mZIU0FaauWzvL Wi82vueW3fOKhqeEvnpVzRVgSTTYCG7tIQWub3X2jCNwW2qubJCa4/U0lzgnM+ql N1LRSHdXJcCGc724ExxS0VgiENu5OVixg5i79IoRiE4lYdXBL2KQJZqfCVCxOVYk 0bpVf7DoksR9gmTt5uP21cvQ9m9HOZTcxNdzkwBQjABGnk04AgzqwsxKFwx+oGzN HSVMi0DNAhMP3Du20YG65WMK9tOSDboMoUce7vrsUwmBEmxDf9lO/0+ELjpXyHqI fzqSMtds9oSeQ/5/Nb5UDNLwGdgEMNMTCMZKOU7knjK/ew2VoTCF/uixywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCL2ZfG4EFFpVUKml0GnqRjTcrYMB8GA1UdIwQY MBaAFHWA0WVpuySjKOJ7R/fXUWWXJd77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFlEUlpXbTdKS01vNG50SDk5ZFJaWmNsM3ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xYTE4ZGUtZWZiZC00MWI1LWIzMzYt NzlmYmQzODVhNTUwLzEvZFlEUlpXbTdKS01vNG50SDk5ZFJaWmNsM3ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8xYTE4ZGUtZWZiZC00MWI1LWIzMzYtNzlmYmQzODVhNTUw LzEvZFlEUlpXbTdKS01vNG50SDk5ZFJaWmNsM3ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiu+FWpyE bSDjum1G6aghs4MJbnkn31mEzsrwVXTfsbyCRva+gS7wsJMNI5GlBQSbHGacP1FT 3zf3eBGSBF/kVuguPyc/dliTFgvDX9/5k2cRls66A70u7NZ6EX4CShQCtiy9gj2W E70Cey1vJa4Yy9SSl5u89Y1HiUoLLxdg54BBw/gmkCMoQS+Y/InWp8rCVw68qedJ x2a8vfwYmCC5wabCkNjdiy/JXePYO09sQiTzKwVBpWmJxvtcDBkZM2ibvcsHhC0v PRvIj0KmT558e8M7z0k5NVB+KevKrWsjoJJNTuGkAH24pe3IUtQzVVRRRTTNnVIS YP2t0WRtungG8w== -----END CERTIFICATE-----Generated at Sat Dec 6 16:31:49 2025 by rpki-client