This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft File: DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft (raw, json) Hash identifier: YfSuXOnYCuaTlszq7sfgWhrEuOUaq2zOFdzwKkkzmnU= Subject key identifier: BB:7F:03:3B:C9:A8:9E:A3:2E:E8:CF:E6:BB:93:F4:A0:8A:C2:1B:6D Authority key identifier: 0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E Certificate issuer: /CN=0f2913e31531019a4328190655b45dd96bdd2c9e Certificate serial: 019AF24034D499EFD11EF0FD304D5B3F69DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft Manifest number: 077B Signing time: Sat 06 Dec 2025 06:01:25 +0000 Manifest this update: Sat 06 Dec 2025 06:01:25 +0000 Manifest next update: Sun 07 Dec 2025 06:01:25 +0000 Files and hashes: 1: DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl (hash: PC6bqL2bAlSGg5Ormq6hL543UsSB0+A5GU4TQ9ZTeTc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:34:d4:99:ef:d1:1e:f0:fd:30:4d:5b:3f:69:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f2913e31531019a4328190655b45dd96bdd2c9e Validity Not Before: Dec 6 06:01:25 2025 GMT Not After : Dec 7 06:01:25 2025 GMT Subject: CN=bb7f033bc9a89ea32ee8cfe6bb93f4a08ac21b6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b2:29:89:20:0a:b6:0f:e5:32:56:0e:cb:c4: c8:60:f6:90:da:f8:06:1e:0b:8c:9e:96:1e:c2:ac: fd:86:ff:1e:14:12:00:13:32:70:09:b4:67:5f:39: ad:06:f5:42:bf:f3:cb:5b:98:5c:0b:0b:54:a4:e6: a0:a2:d8:12:40:a8:85:61:a2:a4:80:f5:25:03:50: e5:6b:7f:a4:e4:ba:7c:7f:e3:ba:f7:94:6e:3a:a6: b4:25:23:27:c4:0f:aa:77:7d:42:f1:90:18:2d:b1: 67:b9:c2:d3:16:ea:92:9f:16:53:97:57:31:e3:b0: c1:6e:2d:de:37:58:02:dd:f5:23:0d:49:ec:14:96: 35:b5:f6:b2:84:2f:3c:99:cb:05:6a:62:e4:24:83: bb:2d:24:7b:99:42:7d:cb:72:b6:89:0e:d2:f5:42: d0:59:f0:a3:52:82:70:b2:d5:47:f2:3e:a2:ab:35: 25:41:6c:89:2e:75:c9:85:0f:3a:78:84:26:ae:a6: ab:b7:64:e4:0d:5e:5d:03:ff:ea:3d:b4:be:5a:1b: f4:ea:0a:7d:08:17:5f:f8:66:2b:06:5e:e0:3d:04: 48:81:ec:5f:46:c3:53:fe:b3:8b:ad:f1:8f:a7:96: 74:87:d7:0e:6d:86:52:97:0f:81:68:09:9d:7d:c2: ad:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:7F:03:3B:C9:A8:9E:A3:2E:E8:CF:E6:BB:93:F4:A0:8A:C2:1B:6D X509v3 Authority Key Identifier: keyid:0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:b8:45:c2:b7:9f:01:a7:ab:31:84:ae:b6:38:aa:1b:74:6c: 0b:1b:c7:f9:ff:56:9a:8c:b5:34:56:d7:5c:9e:eb:5c:72:81: 74:18:bc:ed:c1:a5:08:f5:ff:70:2b:51:41:ff:80:48:ae:6a: 1a:ba:b1:1a:72:fc:f4:53:c9:5e:60:0a:2d:4e:14:c9:e3:53: ff:50:f8:84:f2:de:aa:72:04:24:23:42:0f:45:be:5c:a4:5e: 50:0c:e5:b4:92:b2:76:50:ed:e8:da:a4:b6:dc:43:88:33:10: 04:6c:d8:00:3d:3a:0d:ea:59:22:c5:ff:4f:ea:72:d6:80:be: 5d:cf:7a:c3:1f:a1:71:45:92:b4:fb:94:70:52:4d:21:ab:cf: 2c:8c:2e:5e:ba:d0:da:0b:9b:5d:f4:52:89:3a:78:70:91:ac: 93:3a:1a:97:ad:4b:2b:8c:ac:09:64:27:e5:7a:38:6f:7f:3c: 1e:90:af:8d:3b:1f:22:bb:43:0f:bc:6a:90:14:8d:d4:68:a0: c2:16:71:1c:a6:cc:80:46:81:1a:60:db:24:fb:e4:1b:4d:84: 2b:e0:ad:68:95:78:b6:83:ec:15:c8:f2:27:65:57:96:14:56: b4:37:5d:ab:bc:34:29:00:7f:74:2d:fe:e4:6b:8b:62:18:06: f2:a5:43:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQDTUme/RHvD9ME1bP2nfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMjkxM2UzMTUzMTAxOWE0MzI4MTkwNjU1YjQ1ZGQ5NmJk ZDJjOWUwHhcNMjUxMjA2MDYwMTI1WhcNMjUxMjA3MDYwMTI1WjAzMTEwLwYDVQQD EyhiYjdmMDMzYmM5YTg5ZWEzMmVlOGNmZTZiYjkzZjRhMDhhYzIxYjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbIpiSAKtg/lMlYOy8TIYPaQ2vgG HguMnpYewqz9hv8eFBIAEzJwCbRnXzmtBvVCv/PLW5hcCwtUpOagotgSQKiFYaKk gPUlA1Dla3+k5Lp8f+O695RuOqa0JSMnxA+qd31C8ZAYLbFnucLTFuqSnxZTl1cx 47DBbi3eN1gC3fUjDUnsFJY1tfayhC88mcsFamLkJIO7LSR7mUJ9y3K2iQ7S9ULQ WfCjUoJwstVH8j6iqzUlQWyJLnXJhQ86eIQmrqart2TkDV5dA//qPbS+Whv06gp9 CBdf+GYrBl7gPQRIgexfRsNT/rOLrfGPp5Z0h9cObYZSlw+BaAmdfcKtWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLt/AzvJqJ6jLujP5ruT9KCKwhttMB8GA1UdIwQY MBaAFA8pE+MVMQGaQygZBlW0Xdlr3SyeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHlrVDR4VXhBWnBES0JrR1ZiUmQyV3ZkTEo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wZDJjYTMtMDIzNC00ZGJmLTgxOTAt MTJkMjhkN2Q0MjIzLzEvRHlrVDR4VXhBWnBES0JrR1ZiUmQyV3ZkTEo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8wZDJjYTMtMDIzNC00ZGJmLTgxOTAtMTJkMjhkN2Q0MjIz LzEvRHlrVDR4VXhBWnBES0JrR1ZiUmQyV3ZkTEo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsbhFwref AaerMYSutjiqG3RsCxvH+f9Wmoy1NFbXXJ7rXHKBdBi87cGlCPX/cCtRQf+ASK5q GrqxGnL89FPJXmAKLU4UyeNT/1D4hPLeqnIEJCNCD0W+XKReUAzltJKydlDt6Nqk ttxDiDMQBGzYAD06DepZIsX/T+py1oC+Xc96wx+hcUWStPuUcFJNIavPLIwuXrrQ 2gubXfRSiTp4cJGskzoal61LK4ysCWQn5Xo4b388HpCvjTsfIrtDD7xqkBSN1Gig whZxHKbMgEaBGmDbJPvkG02EK+CtaJV4toPsFcjyJ2VXlhRWtDddq7w0KQB/dC3+ 5GuLYhgG8qVDKA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:20 2025 by rpki-client