This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft File: DYYRtReZGJkx4wrhvpWs2oHj4cw.mft (raw, json) Hash identifier: GCcAQhOJdCvGePsgz0aPZG6qGaVk7QzroSXruacOm3k= Subject key identifier: 7A:75:5C:6B:20:5D:43:4A:06:40:93:14:BF:92:35:4E:51:BD:AF:A7 Authority key identifier: 0D:86:11:B5:17:99:18:99:31:E3:0A:E1:BE:95:AC:DA:81:E3:E1:CC Certificate issuer: /CN=0d8611b51799189931e30ae1be95acda81e3e1cc Certificate serial: 019B255231E671E1E51D7DF3C6B3BAAE43F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft Manifest number: 1176 Signing time: Tue 16 Dec 2025 04:01:42 +0000 Manifest this update: Tue 16 Dec 2025 04:01:42 +0000 Manifest next update: Wed 17 Dec 2025 04:01:42 +0000 Files and hashes: 1: DYYRtReZGJkx4wrhvpWs2oHj4cw.crl (hash: la06etC60qJ616kHKgUf9MoM0kvzl4Jyx2S7EHIutsI=) 2: wD2g-VtZvqp7IY0550_PgDhJeD0.roa (hash: lT0qtpgd/Q3svueonVDRMVNhaFwZxKOMYzAHt0tWC5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:31:e6:71:e1:e5:1d:7d:f3:c6:b3:ba:ae:43:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d8611b51799189931e30ae1be95acda81e3e1cc Validity Not Before: Dec 16 04:01:42 2025 GMT Not After : Dec 17 04:01:42 2025 GMT Subject: CN=7a755c6b205d434a06409314bf92354e51bdafa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0c:86:b4:7c:25:c1:b7:b7:bf:1b:07:86:e2: 07:d0:8e:64:f7:09:74:a1:fe:13:28:60:28:ac:96: 7a:ba:5c:8f:3e:8f:61:d9:ca:6f:23:08:e3:cb:9b: b4:55:e9:25:fa:e8:03:05:86:41:f8:99:b3:4f:53: de:11:61:1c:2e:48:5d:3a:39:65:fe:9e:04:97:f3: 98:4a:a0:f0:27:0d:b0:92:04:9d:ce:3a:04:e7:ed: 84:9b:df:e9:eb:97:c8:ed:ba:99:26:4a:a1:a0:f9: 64:71:cf:d4:75:72:b6:53:ba:65:3c:7c:1c:9f:1d: cf:12:f4:34:f0:76:2b:20:9d:bd:22:56:7c:49:2f: e3:1a:3d:f7:12:0a:2f:ca:30:2b:aa:e0:cb:76:ca: 20:53:93:1b:37:88:48:5a:c7:db:2e:13:fb:c0:a3: e0:d1:a7:52:bd:9f:d2:2b:31:99:ba:e2:10:fb:fd: b4:b2:d1:71:d9:32:e4:6d:5f:41:e9:df:61:45:44: 44:1a:a8:ec:e4:48:cd:25:ec:36:98:07:9a:a1:cd: db:b2:db:11:ec:fc:14:cf:da:0f:ff:c8:e4:1e:61: 58:c1:ce:3e:05:e1:3e:ca:52:ee:db:70:a1:fe:ef: b6:fa:e3:4e:a4:7d:4d:ea:c2:85:3e:a6:15:03:83: 95:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:75:5C:6B:20:5D:43:4A:06:40:93:14:BF:92:35:4E:51:BD:AF:A7 X509v3 Authority Key Identifier: keyid:0D:86:11:B5:17:99:18:99:31:E3:0A:E1:BE:95:AC:DA:81:E3:E1:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:1d:2f:ab:3f:a1:f7:16:85:6c:75:dc:fb:e5:a5:41:2b:4e: d7:a7:9c:4a:09:20:2d:22:85:0b:c1:e4:04:db:b0:f6:28:00: df:fc:80:38:bf:78:ce:39:b9:62:2a:e4:2d:38:22:58:f3:2e: 42:52:66:8d:9a:a2:f5:9a:bb:42:67:8c:08:b6:2e:f9:42:fe: f1:62:fd:e9:09:a8:9a:46:a2:36:4e:c9:2d:c1:1d:e6:f5:13: 81:97:12:9c:7a:30:d6:0b:b8:90:08:e9:be:8f:7d:d6:22:9b: 03:64:7e:45:e3:ce:28:9d:8d:a9:59:92:fb:db:7b:52:0c:29: cc:a2:65:fb:f5:1b:4d:ca:88:de:5d:f6:60:10:ec:6b:c6:83: cd:dc:85:39:7b:e6:eb:1a:c0:d5:21:08:cf:99:20:a9:30:b4: 68:6a:b6:79:ef:de:37:f4:43:d4:9e:b1:21:72:5b:60:cf:83: 40:97:2f:14:e2:91:b2:e0:2b:fd:cc:66:52:6d:11:05:d4:a6: bb:f8:7c:cf:d6:6d:c3:ae:ce:8a:d6:81:cd:21:1e:cd:c6:26: 1c:29:76:45:a5:74:4a:19:10:15:2a:d0:d9:7e:53:be:51:79: b1:f2:34:8a:08:b8:dd:81:ff:16:c9:e7:5a:74:bd:ac:a3:17: c1:47:fb:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUjHmceHlHX3zxrO6rkP3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkODYxMWI1MTc5OTE4OTkzMWUzMGFlMWJlOTVhY2RhODFl M2UxY2MwHhcNMjUxMjE2MDQwMTQyWhcNMjUxMjE3MDQwMTQyWjAzMTEwLwYDVQQD Eyg3YTc1NWM2YjIwNWQ0MzRhMDY0MDkzMTRiZjkyMzU0ZTUxYmRhZmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwyGtHwlwbe3vxsHhuIH0I5k9wl0 of4TKGAorJZ6ulyPPo9h2cpvIwjjy5u0Vekl+ugDBYZB+JmzT1PeEWEcLkhdOjll /p4El/OYSqDwJw2wkgSdzjoE5+2Em9/p65fI7bqZJkqhoPlkcc/UdXK2U7plPHwc nx3PEvQ08HYrIJ29IlZ8SS/jGj33EgovyjArquDLdsogU5MbN4hIWsfbLhP7wKPg 0adSvZ/SKzGZuuIQ+/20stFx2TLkbV9B6d9hRUREGqjs5EjNJew2mAeaoc3bstsR 7PwUz9oP/8jkHmFYwc4+BeE+ylLu23Ch/u+2+uNOpH1N6sKFPqYVA4OVlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHp1XGsgXUNKBkCTFL+SNU5Rva+nMB8GA1UdIwQY MBaAFA2GEbUXmRiZMeMK4b6VrNqB4+HMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFlZUnRSZVpHSmt4NHdyaHZwV3Myb0hqNGN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9hMmIyYjgtY2YxYy00M2UzLWIwZDMt ZmQzMWUxZTNmNWI5LzEvRFlZUnRSZVpHSmt4NHdyaHZwV3Myb0hqNGN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9hMmIyYjgtY2YxYy00M2UzLWIwZDMtZmQzMWUxZTNmNWI5 LzEvRFlZUnRSZVpHSmt4NHdyaHZwV3Myb0hqNGN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXh0vqz+h 9xaFbHXc++WlQStO16ecSgkgLSKFC8HkBNuw9igA3/yAOL94zjm5YirkLTgiWPMu QlJmjZqi9Zq7QmeMCLYu+UL+8WL96QmomkaiNk7JLcEd5vUTgZcSnHow1gu4kAjp vo991iKbA2R+RePOKJ2NqVmS+9t7UgwpzKJl+/UbTcqI3l32YBDsa8aDzdyFOXvm 6xrA1SEIz5kgqTC0aGq2ee/eN/RD1J6xIXJbYM+DQJcvFOKRsuAr/cxmUm0RBdSm u/h8z9Ztw67OitaBzSEezcYmHCl2RaV0ShkQFSrQ2X5TvlF5sfI0igi43YH/Fsnn WnS9rKMXwUf7Ig== -----END CERTIFICATE-----Generated at Tue Dec 16 07:01:38 2025 by rpki-client