This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft File: DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft (raw, json) Hash identifier: ww8LMLBG5w5a7gikyECBVqUy8vizCYwzd8DDioTIxrw= Subject key identifier: C3:47:7D:F6:4B:BF:79:5B:24:91:FE:D0:C7:18:AD:A1:1B:58:99:D8 Authority key identifier: 0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45 Certificate issuer: /CN=0d814a5f08fb47711d7160b027f996dfb612f045 Certificate serial: 019AF277089BC871840C35F09D4285371447 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft Manifest number: 16A6 Signing time: Sat 06 Dec 2025 07:01:18 +0000 Manifest this update: Sat 06 Dec 2025 07:01:18 +0000 Manifest next update: Sun 07 Dec 2025 07:01:18 +0000 Files and hashes: 1: DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl (hash: f6AR4KUVNT4JSTLDz45cDmIX7MZfxmjmy8nAfAf3O20=) 2: WodU5gDNw3cjAmLp67NGPeKWzm4.roa (hash: YXZKSjPXGmgzYL0wl21TgIMvnXm5A4XUDZj4O/e7fR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:08:9b:c8:71:84:0c:35:f0:9d:42:85:37:14:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d814a5f08fb47711d7160b027f996dfb612f045 Validity Not Before: Dec 6 07:01:18 2025 GMT Not After : Dec 7 07:01:18 2025 GMT Subject: CN=c3477df64bbf795b2491fed0c718ada11b5899d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bc:08:65:dc:06:3c:15:51:29:78:e2:00:2e: 9e:4b:4f:bd:8e:10:48:db:4c:75:19:19:f5:48:d5: c8:f6:b0:84:a1:99:fc:40:33:60:f8:4f:82:71:2e: 6c:b5:f8:ef:1a:fa:05:b8:c0:32:de:ca:7c:d7:41: e7:e9:9a:32:89:1c:8f:24:09:d0:4e:a8:c8:c1:51: c7:b7:5f:af:2d:45:f6:c6:97:0a:e4:24:23:e1:c8: e0:16:99:25:24:79:54:eb:bf:82:7b:09:aa:f4:b0: 34:e0:b1:1c:5a:3b:1d:64:d7:b1:3d:43:7b:d3:e3: 43:e9:c5:a4:3a:33:12:1f:d5:cd:1e:80:8f:d9:4d: 6c:44:4c:27:7a:28:d0:46:a4:96:53:61:eb:81:25: cc:38:ae:cb:df:79:f8:1e:2c:e4:e9:e2:06:97:21: 6c:43:ad:62:2c:33:6c:9a:c8:63:86:7c:42:2a:16: 61:44:43:7d:ee:0a:d6:92:3a:ae:9a:e0:91:49:88: 41:45:7e:40:da:e9:c9:37:98:ef:b2:16:3b:e1:e9: 71:8f:59:6c:89:d9:12:31:64:96:bf:4b:77:75:07: 5f:e5:ef:06:d0:a1:2b:18:f2:98:6a:17:66:ce:e5: a9:50:e0:bd:86:58:59:1d:b3:a7:4b:2d:f5:16:7b: 71:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:47:7D:F6:4B:BF:79:5B:24:91:FE:D0:C7:18:AD:A1:1B:58:99:D8 X509v3 Authority Key Identifier: keyid:0D:81:4A:5F:08:FB:47:71:1D:71:60:B0:27:F9:96:DF:B6:12:F0:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYFKXwj7R3EdcWCwJ_mW37YS8EU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8a684b-0375-40e5-b726-ce7985b56093/1/DYFKXwj7R3EdcWCwJ_mW37YS8EU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:7d:7f:27:88:11:78:f9:2b:08:9f:c6:e8:26:a7:d9:64:7c: 1d:65:28:f1:d0:ab:3f:af:25:e0:99:19:60:b6:64:6a:fc:c1: 40:af:74:36:78:a3:04:e2:18:db:e7:6b:7e:bc:e5:03:79:95: b7:65:7e:2b:02:b0:8f:08:1c:73:84:f6:7c:99:7f:13:5c:c8: 47:7b:83:1c:71:64:6b:e6:6e:e8:eb:69:a7:58:5a:82:5d:da: 4a:91:f9:83:3f:a5:55:63:85:37:70:30:4d:fb:05:f5:be:d9: 5d:46:7e:7a:a0:df:14:cd:13:80:48:12:a3:98:16:cd:47:1e: 2e:6d:62:1b:ff:41:fc:fa:39:97:f5:97:ab:24:19:00:97:99: 9c:09:b8:7a:03:62:9a:70:3e:56:35:75:82:22:99:f0:79:95: 71:ff:01:51:60:c6:8c:4f:e8:10:b8:92:f7:50:aa:57:61:03: 39:2c:0b:a8:5b:72:83:5e:c0:71:64:51:6c:33:16:ef:d3:90: 8c:e9:37:a1:75:e7:c0:74:d8:fd:f2:7f:a5:56:4d:fc:cc:9a: 66:7d:40:80:56:0b:8a:47:d7:b7:a3:c0:ce:96:7b:71:84:1d: 8b:64:ef:72:81:fb:f0:b9:b3:69:33:4d:98:3f:8a:a6:16:04: 64:5d:30:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwibyHGEDDXwnUKFNxRHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkODE0YTVmMDhmYjQ3NzExZDcxNjBiMDI3Zjk5NmRmYjYx MmYwNDUwHhcNMjUxMjA2MDcwMTE4WhcNMjUxMjA3MDcwMTE4WjAzMTEwLwYDVQQD EyhjMzQ3N2RmNjRiYmY3OTViMjQ5MWZlZDBjNzE4YWRhMTFiNTg5OWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7wIZdwGPBVRKXjiAC6eS0+9jhBI 20x1GRn1SNXI9rCEoZn8QDNg+E+CcS5stfjvGvoFuMAy3sp810Hn6ZoyiRyPJAnQ TqjIwVHHt1+vLUX2xpcK5CQj4cjgFpklJHlU67+Cewmq9LA04LEcWjsdZNexPUN7 0+ND6cWkOjMSH9XNHoCP2U1sREwneijQRqSWU2HrgSXMOK7L33n4Hizk6eIGlyFs Q61iLDNsmshjhnxCKhZhREN97grWkjqumuCRSYhBRX5A2unJN5jvshY74elxj1ls idkSMWSWv0t3dQdf5e8G0KErGPKYahdmzuWpUOC9hlhZHbOnSy31FntxgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNHffZLv3lbJJH+0McYraEbWJnYMB8GA1UdIwQY MBaAFA2BSl8I+0dxHXFgsCf5lt+2EvBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFlGS1h3ajdSM0VkY1dDd0pfbVczN1lTOEVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84YTY4NGItMDM3NS00MGU1LWI3MjYt Y2U3OTg1YjU2MDkzLzEvRFlGS1h3ajdSM0VkY1dDd0pfbVczN1lTOEVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC84YTY4NGItMDM3NS00MGU1LWI3MjYtY2U3OTg1YjU2MDkz LzEvRFlGS1h3ajdSM0VkY1dDd0pfbVczN1lTOEVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ31/J4gR ePkrCJ/G6Can2WR8HWUo8dCrP68l4JkZYLZkavzBQK90NnijBOIY2+drfrzlA3mV t2V+KwKwjwgcc4T2fJl/E1zIR3uDHHFka+Zu6Otpp1hagl3aSpH5gz+lVWOFN3Aw TfsF9b7ZXUZ+eqDfFM0TgEgSo5gWzUceLm1iG/9B/Po5l/WXqyQZAJeZnAm4egNi mnA+VjV1giKZ8HmVcf8BUWDGjE/oELiS91CqV2EDOSwLqFtyg17AcWRRbDMW79OQ jOk3oXXnwHTY/fJ/pVZN/MyaZn1AgFYLikfXt6PAzpZ7cYQdi2TvcoH78LmzaTNN mD+KphYEZF0w3A== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:49 2025 by rpki-client