This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft File: 0dyvv2n_2nKwgna9sRGTVkrtj5c.mft (raw, json) Hash identifier: Sz6yj76QQacgk5N73/fnVlbaI0/unK6D+AcBl8mZyDI= Subject key identifier: 34:17:22:2E:10:FE:D7:B7:83:4B:E8:B8:7C:B3:3B:7C:7A:71:2C:7E Authority key identifier: D1:DC:AF:BF:69:FF:DA:72:B0:82:76:BD:B1:11:93:56:4A:ED:8F:97 Certificate issuer: /CN=d1dcafbf69ffda72b08276bdb11193564aed8f97 Certificate serial: 019AF31B827403172C64A38D95D57BE3631E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0dyvv2n_2nKwgna9sRGTVkrtj5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 10:00:57 +0000 Manifest this update: Sat 06 Dec 2025 10:00:57 +0000 Manifest next update: Sun 07 Dec 2025 10:00:57 +0000 Files and hashes: 1: 0dyvv2n_2nKwgna9sRGTVkrtj5c.crl (hash: VotOBDWYJEzEgqkWx1gzMDl5lOY237+RXGl6yRI5WSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.crl rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft rsync://rpki.ripe.net/repository/DEFAULT/0dyvv2n_2nKwgna9sRGTVkrtj5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:82:74:03:17:2c:64:a3:8d:95:d5:7b:e3:63:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1dcafbf69ffda72b08276bdb11193564aed8f97 Validity Not Before: Dec 6 10:00:57 2025 GMT Not After : Dec 7 10:00:57 2025 GMT Subject: CN=3417222e10fed7b7834be8b87cb33b7c7a712c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:78:e9:af:75:d1:1a:4c:c1:4c:a2:47:f7:fa: 36:58:9a:6b:3b:fe:05:25:2f:6d:ab:a9:44:19:c0: ab:ce:a6:14:e1:b0:66:31:c1:df:e7:fd:e8:27:12: a1:94:5d:61:6d:aa:72:cd:09:fb:6b:7b:85:ac:f5: 41:77:f2:30:1b:31:fe:b1:9d:07:94:1b:e5:95:88: e7:c9:38:3d:6f:a4:4b:76:de:8d:e2:d5:e3:ea:35: cc:e9:c0:a2:61:73:c1:fc:2b:6f:3e:46:1c:6d:50: c0:25:d1:73:75:56:31:1a:9d:17:6c:aa:5f:40:b9: 6b:52:40:a9:8d:57:0e:e6:ea:9c:57:63:26:9e:5e: 0c:47:06:a6:4e:eb:c6:6b:26:14:77:69:e0:41:6c: bf:a9:4c:78:0c:5f:2a:2c:f9:ee:b4:6c:e0:a5:e4: 46:cf:f9:76:58:38:61:4e:6c:d4:20:84:cd:7c:93: bf:67:61:10:b1:d1:cb:59:a4:ca:64:09:89:de:64: 1c:c8:f3:06:2f:1e:2d:6e:63:79:02:50:c5:3c:06: 1d:a8:0a:da:11:f9:8c:7b:38:5b:93:52:af:6a:98: ba:6c:c8:0b:eb:56:8d:bf:a9:14:42:1b:fa:87:85: aa:ff:46:b8:88:a8:db:d9:cf:4e:6d:d6:81:1e:af: 07:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:17:22:2E:10:FE:D7:B7:83:4B:E8:B8:7C:B3:3B:7C:7A:71:2C:7E X509v3 Authority Key Identifier: keyid:D1:DC:AF:BF:69:FF:DA:72:B0:82:76:BD:B1:11:93:56:4A:ED:8F:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dyvv2n_2nKwgna9sRGTVkrtj5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:e7:f1:de:f9:18:b6:c8:aa:3a:f8:7f:c0:9a:63:30:a9:9b: 66:6a:15:7f:7c:ec:a4:81:09:1c:d3:7f:b4:a8:ab:6a:93:a2: ea:02:c1:bd:3b:e0:b6:55:b4:95:92:41:a4:06:11:78:2e:24: 10:82:95:36:ce:01:aa:58:60:40:eb:9a:7d:c0:fb:9d:79:ec: 27:28:c1:6d:12:e7:b7:f1:38:4e:af:07:0a:d4:67:e3:98:9d: 51:23:87:d4:8a:ea:ea:9f:e8:fe:41:4b:ae:31:c3:6f:07:b5: 8d:ba:9c:62:12:36:94:0d:25:b5:c9:6b:7f:8a:86:1c:37:e8: 82:f1:ed:2e:0c:75:10:5a:4e:5a:7e:0d:00:0a:41:1e:bf:72: ba:cb:14:99:51:16:7a:32:85:7e:0f:b5:4a:3b:a5:f7:af:7a: 3d:bd:75:ed:a9:a4:40:13:36:f3:83:28:4e:86:43:86:fb:71: 4b:e7:5b:20:5c:f6:a7:c1:0c:ba:00:bb:fd:a4:29:27:18:d8: 23:f1:1f:f3:ae:5c:7f:78:22:86:96:5f:a9:b0:1e:04:45:a2: c9:7e:d0:a3:2f:fd:17:f9:9a:73:ba:90:72:f7:9f:38:f2:5a: eb:36:fd:5d:be:61:a6:56:95:60:d7:16:22:81:09:36:c3:91: bc:e4:3d:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG4J0AxcsZKONldV742MeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZGNhZmJmNjlmZmRhNzJiMDgyNzZiZGIxMTE5MzU2NGFl ZDhmOTcwHhcNMjUxMjA2MTAwMDU3WhcNMjUxMjA3MTAwMDU3WjAzMTEwLwYDVQQD EygzNDE3MjIyZTEwZmVkN2I3ODM0YmU4Yjg3Y2IzM2I3YzdhNzEyYzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHjpr3XRGkzBTKJH9/o2WJprO/4F JS9tq6lEGcCrzqYU4bBmMcHf5/3oJxKhlF1hbapyzQn7a3uFrPVBd/IwGzH+sZ0H lBvllYjnyTg9b6RLdt6N4tXj6jXM6cCiYXPB/CtvPkYcbVDAJdFzdVYxGp0XbKpf QLlrUkCpjVcO5uqcV2Mmnl4MRwamTuvGayYUd2ngQWy/qUx4DF8qLPnutGzgpeRG z/l2WDhhTmzUIITNfJO/Z2EQsdHLWaTKZAmJ3mQcyPMGLx4tbmN5AlDFPAYdqAra EfmMezhbk1Kvapi6bMgL61aNv6kUQhv6h4Wq/0a4iKjb2c9ObdaBHq8HAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQXIi4Q/te3g0vouHyzO3x6cSx+MB8GA1UdIwQY MBaAFNHcr79p/9pysIJ2vbERk1ZK7Y+XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGR5dnYybl8ybkt3Z25hOXNSR1RWa3J0ajVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82ZTY5N2UtMDg1OC00NmY1LTg4YTUt NWU2YzhkNDczYTU5LzEvMGR5dnYybl8ybkt3Z25hOXNSR1RWa3J0ajVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My82ZTY5N2UtMDg1OC00NmY1LTg4YTUtNWU2YzhkNDczYTU5 LzEvMGR5dnYybl8ybkt3Z25hOXNSR1RWa3J0ajVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOefx3vkY tsiqOvh/wJpjMKmbZmoVf3zspIEJHNN/tKirapOi6gLBvTvgtlW0lZJBpAYReC4k EIKVNs4BqlhgQOuafcD7nXnsJyjBbRLnt/E4Tq8HCtRn45idUSOH1Irq6p/o/kFL rjHDbwe1jbqcYhI2lA0ltclrf4qGHDfogvHtLgx1EFpOWn4NAApBHr9yussUmVEW ejKFfg+1Sjul9696Pb117amkQBM284MoToZDhvtxS+dbIFz2p8EMugC7/aQpJxjY I/Ef865cf3gihpZfqbAeBEWiyX7Qoy/9F/mac7qQcvefOPJa6zb9Xb5hplaVYNcW IoEJNsORvOQ9Hw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:05:36 2025 by rpki-client