This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft File: DYYRtReZGJkx4wrhvpWs2oHj4cw.mft (raw, json) Hash identifier: y14DQi/F39xVnzzoWPlpNRCE2KCgDCWPmPYlpsxtbIA= Subject key identifier: 7C:E5:E0:6E:27:3C:C2:C5:28:1E:55:65:7E:6F:CA:65:A1:D7:79:9F Authority key identifier: 0D:86:11:B5:17:99:18:99:31:E3:0A:E1:BE:95:AC:DA:81:E3:E1:CC Certificate issuer: /CN=0d8611b51799189931e30ae1be95acda81e3e1cc Certificate serial: 019AF12E24E048BC332AD598D0F7903AF53E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft Manifest number: 115B Signing time: Sat 06 Dec 2025 01:02:04 +0000 Manifest this update: Sat 06 Dec 2025 01:02:04 +0000 Manifest next update: Sun 07 Dec 2025 01:02:04 +0000 Files and hashes: 1: DYYRtReZGJkx4wrhvpWs2oHj4cw.crl (hash: dPxe/VfTIKgo7QJfowFWFrjJOyukuxr1j5jcpgQek7E=) 2: wD2g-VtZvqp7IY0550_PgDhJeD0.roa (hash: lT0qtpgd/Q3svueonVDRMVNhaFwZxKOMYzAHt0tWC5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:24:e0:48:bc:33:2a:d5:98:d0:f7:90:3a:f5:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d8611b51799189931e30ae1be95acda81e3e1cc Validity Not Before: Dec 6 01:02:04 2025 GMT Not After : Dec 7 01:02:04 2025 GMT Subject: CN=7ce5e06e273cc2c5281e55657e6fca65a1d7799f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d2:05:04:d8:29:43:04:5c:be:3d:7c:70:5d: e1:0c:47:45:b4:3c:e3:86:9e:43:34:53:4f:bb:15: 52:e6:bd:22:e9:41:79:a2:61:c7:87:b7:5a:b6:79: ff:be:4e:23:26:12:8f:a8:82:63:c8:1d:18:20:48: a3:a0:f5:d9:24:e1:c3:35:2e:ba:8f:2b:7a:2b:2a: 34:d7:eb:e6:f8:b1:56:22:5e:1a:43:fd:83:fc:b3: 13:fe:82:f9:de:d2:19:24:32:a5:ad:e0:47:0a:21: f4:63:38:be:31:6e:33:59:0b:26:29:1a:26:5b:3e: c7:23:87:0e:48:20:7c:30:dc:e6:b0:5a:9b:db:8d: 29:76:ec:51:e7:99:b8:6a:18:c5:b4:c1:e4:e8:e6: ae:51:73:af:a9:83:1f:9d:56:c8:d3:e8:bc:3a:be: c0:8f:af:01:98:5f:86:d7:73:be:6b:93:12:f7:c0: ae:30:5e:e9:e9:3d:72:e6:83:82:a2:26:ae:b5:c1: 07:e8:e3:23:be:72:a9:62:55:56:a6:3b:a8:2c:ce: 29:1c:98:b1:8e:e3:41:35:e7:ae:29:ca:b4:b5:32: 80:8f:d4:96:57:12:a0:41:43:c9:d6:06:6c:eb:77: 44:1d:f4:b3:68:f6:d6:78:04:5d:06:8a:2f:1e:fd: 76:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E5:E0:6E:27:3C:C2:C5:28:1E:55:65:7E:6F:CA:65:A1:D7:79:9F X509v3 Authority Key Identifier: keyid:0D:86:11:B5:17:99:18:99:31:E3:0A:E1:BE:95:AC:DA:81:E3:E1:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:64:bd:5b:22:e3:92:d7:cd:37:a9:8a:fd:55:2d:1c:f9:fc: 1b:42:25:b2:25:61:6d:23:a3:8c:11:d9:3e:74:81:88:ed:f8: 0f:7d:c0:b3:fa:d6:f2:15:a1:ec:57:40:fb:8f:cb:6c:64:2a: 6e:a3:88:7b:41:ae:77:97:03:9d:3c:8e:b5:48:7e:5c:49:f3: 48:8d:7c:94:c1:eb:a5:af:ac:58:98:f8:3f:54:9e:73:e9:7d: 13:79:42:69:b2:23:7b:ad:4d:83:76:cc:2d:98:ee:29:38:6e: 80:c5:2e:f1:32:83:04:7f:32:f1:ec:d5:1b:ce:37:1c:b2:06: 65:93:63:3f:8d:c9:fe:e8:b2:4f:24:1d:38:56:4e:e5:5f:87: dd:10:8c:9b:f7:d3:56:9c:6f:f6:30:0e:cb:ff:6d:cd:22:07: a7:e3:6a:05:b2:15:2b:61:de:f0:57:a2:cb:b2:b7:55:85:f1: cb:0a:89:22:54:f1:72:cd:ce:6f:cc:1e:5a:d5:b2:df:8d:98: 7a:22:3f:ab:16:7f:aa:7c:fe:da:aa:5f:a3:78:45:75:b9:71: 3d:aa:92:ff:f4:fb:bd:25:37:d3:97:45:be:fa:f2:f2:59:57: 45:d3:ff:82:20:f1:98:fc:80:4f:b5:64:e2:c1:4c:5c:1f:53: dd:20:7b:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLiTgSLwzKtWY0PeQOvU+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkODYxMWI1MTc5OTE4OTkzMWUzMGFlMWJlOTVhY2RhODFl M2UxY2MwHhcNMjUxMjA2MDEwMjA0WhcNMjUxMjA3MDEwMjA0WjAzMTEwLwYDVQQD Eyg3Y2U1ZTA2ZTI3M2NjMmM1MjgxZTU1NjU3ZTZmY2E2NWExZDc3OTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdIFBNgpQwRcvj18cF3hDEdFtDzj hp5DNFNPuxVS5r0i6UF5omHHh7datnn/vk4jJhKPqIJjyB0YIEijoPXZJOHDNS66 jyt6Kyo01+vm+LFWIl4aQ/2D/LMT/oL53tIZJDKlreBHCiH0Yzi+MW4zWQsmKRom Wz7HI4cOSCB8MNzmsFqb240pduxR55m4ahjFtMHk6OauUXOvqYMfnVbI0+i8Or7A j68BmF+G13O+a5MS98CuMF7p6T1y5oOCoiautcEH6OMjvnKpYlVWpjuoLM4pHJix juNBNeeuKcq0tTKAj9SWVxKgQUPJ1gZs63dEHfSzaPbWeARdBoovHv12xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzl4G4nPMLFKB5VZX5vymWh13mfMB8GA1UdIwQY MBaAFA2GEbUXmRiZMeMK4b6VrNqB4+HMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFlZUnRSZVpHSmt4NHdyaHZwV3Myb0hqNGN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9hMmIyYjgtY2YxYy00M2UzLWIwZDMt ZmQzMWUxZTNmNWI5LzEvRFlZUnRSZVpHSmt4NHdyaHZwV3Myb0hqNGN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9hMmIyYjgtY2YxYy00M2UzLWIwZDMtZmQzMWUxZTNmNWI5 LzEvRFlZUnRSZVpHSmt4NHdyaHZwV3Myb0hqNGN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2S9WyLj ktfNN6mK/VUtHPn8G0IlsiVhbSOjjBHZPnSBiO34D33As/rW8hWh7FdA+4/LbGQq bqOIe0Gud5cDnTyOtUh+XEnzSI18lMHrpa+sWJj4P1Sec+l9E3lCabIje61Ng3bM LZjuKThugMUu8TKDBH8y8ezVG843HLIGZZNjP43J/uiyTyQdOFZO5V+H3RCMm/fT Vpxv9jAOy/9tzSIHp+NqBbIVK2He8Feiy7K3VYXxywqJIlTxcs3Ob8weWtWy342Y eiI/qxZ/qnz+2qpfo3hFdblxPaqS//T7vSU305dFvvry8llXRdP/giDxmPyAT7Vk 4sFMXB9T3SB7MQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:30 2025 by rpki-client