This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft File: dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft (raw, json) Hash identifier: ZVP3ejtemFc2QEDKQto274yF4zYGaz/3kHBYIiIdXSE= Subject key identifier: 7E:CF:ED:3F:A3:B8:10:35:EE:20:77:95:A1:C0:16:8E:C4:A0:AE:36 Authority key identifier: 76:96:23:B8:B3:7F:C8:C5:74:5D:57:5C:09:EF:C4:CE:A8:B6:DA:09 Certificate issuer: /CN=769623b8b37fc8c5745d575c09efc4cea8b6da09 Certificate serial: 019AF509ED3B0014BB4BD0E4D254B0479F66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dpYjuLN_yMV0XVdcCe_Ezqi22gk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft Manifest number: 0E9A Signing time: Sat 06 Dec 2025 19:00:59 +0000 Manifest this update: Sat 06 Dec 2025 19:00:59 +0000 Manifest next update: Sun 07 Dec 2025 19:00:59 +0000 Files and hashes: 1: dpYjuLN_yMV0XVdcCe_Ezqi22gk.crl (hash: uVmAecQ8KDWM5cJYdAi9XmjvP3ZzL8tXqTEGsi7Qp0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.crl rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft rsync://rpki.ripe.net/repository/DEFAULT/dpYjuLN_yMV0XVdcCe_Ezqi22gk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:ed:3b:00:14:bb:4b:d0:e4:d2:54:b0:47:9f:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=769623b8b37fc8c5745d575c09efc4cea8b6da09 Validity Not Before: Dec 6 19:00:59 2025 GMT Not After : Dec 7 19:00:59 2025 GMT Subject: CN=7ecfed3fa3b81035ee207795a1c0168ec4a0ae36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8d:ce:4b:b8:ea:79:d1:d6:68:28:eb:cf:3a: a3:d5:3b:82:1e:b2:5c:69:6f:d0:54:d4:5e:aa:dc: eb:47:89:b1:cc:8b:bd:47:18:c3:81:af:1b:44:ab: 7e:c0:25:5c:30:91:89:95:7c:3d:bc:02:08:1f:39: 39:16:cf:56:82:03:ec:78:e0:c9:8b:8f:e7:2c:c0: 4f:85:d9:e7:e4:a8:9a:9f:c8:9e:ea:c4:2c:7b:cc: 92:93:d9:5b:cf:14:a3:5e:1c:c4:e8:56:42:e7:23: 72:d5:99:a2:ed:ef:62:54:ef:e7:3b:ec:03:e0:69: 44:f5:16:bf:c5:ba:9a:a6:41:9a:a4:bf:73:1d:ad: fb:b8:e6:c5:04:52:04:7f:51:29:ab:9d:25:2a:aa: 86:00:de:db:58:e3:68:38:ea:35:3f:6a:25:d5:f0: d9:e8:1a:39:90:a6:5b:46:ad:0c:58:f1:a0:90:4b: 4e:4f:2a:84:d8:45:0c:0e:1a:87:8e:3d:b2:f2:5d: 4a:66:e5:f1:35:fd:fb:d8:cd:63:15:de:e8:47:e0: 1b:29:a2:f2:65:98:11:81:2e:3a:f4:1e:75:f3:66: 4b:bb:91:bb:9b:14:6e:34:ae:5a:c7:bc:da:38:de: 2c:0a:5f:7b:40:19:9a:c6:25:c1:34:ef:d3:87:a4: db:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CF:ED:3F:A3:B8:10:35:EE:20:77:95:A1:C0:16:8E:C4:A0:AE:36 X509v3 Authority Key Identifier: keyid:76:96:23:B8:B3:7F:C8:C5:74:5D:57:5C:09:EF:C4:CE:A8:B6:DA:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpYjuLN_yMV0XVdcCe_Ezqi22gk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ddff53-d6aa-4956-ba60-b43665e5dad6/1/dpYjuLN_yMV0XVdcCe_Ezqi22gk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:95:0e:18:1b:e7:90:46:c5:2b:d0:67:3d:f6:41:1c:18:ae: 42:20:0b:7a:90:1a:d2:69:3f:ae:8d:b8:09:30:8e:49:be:6f: 76:81:cc:99:f0:0f:e3:50:ab:a8:d1:6f:7b:87:95:6d:e5:ca: 00:67:e1:04:1f:35:6a:8f:55:2f:ff:02:7b:87:f2:ed:fc:10: a5:89:80:22:7c:f2:f9:9b:ca:03:9b:82:8f:0f:ab:d3:be:da: da:72:50:07:34:c6:a7:52:c6:16:d6:45:a3:51:59:e5:b5:34: aa:a9:00:b7:50:d7:5f:9b:37:66:2f:13:4a:89:e8:4e:04:75: 43:82:7f:1b:d0:75:43:ff:3b:03:fe:33:21:cb:b4:87:a2:7b: 89:1b:f8:03:11:36:58:47:7b:60:2b:58:3e:c8:17:cb:53:25: 89:36:09:62:d2:cf:f8:3d:8a:a9:99:a7:5c:e9:4d:8c:ad:0a: 94:0a:fc:25:00:04:02:ee:2e:66:65:30:24:72:0d:8d:6c:2e: df:19:77:6c:30:0f:39:80:6d:ba:09:e0:c7:35:ab:d1:09:fa: 05:22:eb:89:5a:f1:b5:09:88:92:97:b1:a4:95:73:97:d9:ac: a1:54:3b:75:93:56:f5:c5:a4:35:8e:98:98:5f:39:44:87:97: 5c:30:6c:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Ce07ABS7S9Dk0lSwR59mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2OTYyM2I4YjM3ZmM4YzU3NDVkNTc1YzA5ZWZjNGNlYThi NmRhMDkwHhcNMjUxMjA2MTkwMDU5WhcNMjUxMjA3MTkwMDU5WjAzMTEwLwYDVQQD Eyg3ZWNmZWQzZmEzYjgxMDM1ZWUyMDc3OTVhMWMwMTY4ZWM0YTBhZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo3OS7jqedHWaCjrzzqj1TuCHrJc aW/QVNReqtzrR4mxzIu9RxjDga8bRKt+wCVcMJGJlXw9vAIIHzk5Fs9WggPseODJ i4/nLMBPhdnn5Kian8ie6sQse8ySk9lbzxSjXhzE6FZC5yNy1Zmi7e9iVO/nO+wD 4GlE9Ra/xbqapkGapL9zHa37uObFBFIEf1Epq50lKqqGAN7bWONoOOo1P2ol1fDZ 6Bo5kKZbRq0MWPGgkEtOTyqE2EUMDhqHjj2y8l1KZuXxNf372M1jFd7oR+AbKaLy ZZgRgS469B5182ZLu5G7mxRuNK5ax7zaON4sCl97QBmaxiXBNO/Th6TbtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7P7T+juBA17iB3laHAFo7EoK42MB8GA1UdIwQY MBaAFHaWI7izf8jFdF1XXAnvxM6ottoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHBZanVMTl95TVYwWFZkY0NlX0V6cWkyMmdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kZGZmNTMtZDZhYS00OTU2LWJhNjAt YjQzNjY1ZTVkYWQ2LzEvZHBZanVMTl95TVYwWFZkY0NlX0V6cWkyMmdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9kZGZmNTMtZDZhYS00OTU2LWJhNjAtYjQzNjY1ZTVkYWQ2 LzEvZHBZanVMTl95TVYwWFZkY0NlX0V6cWkyMmdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACZUOGBvn kEbFK9BnPfZBHBiuQiALepAa0mk/ro24CTCOSb5vdoHMmfAP41CrqNFve4eVbeXK AGfhBB81ao9VL/8Ce4fy7fwQpYmAInzy+ZvKA5uCjw+r077a2nJQBzTGp1LGFtZF o1FZ5bU0qqkAt1DXX5s3Zi8TSonoTgR1Q4J/G9B1Q/87A/4zIcu0h6J7iRv4AxE2 WEd7YCtYPsgXy1MliTYJYtLP+D2KqZmnXOlNjK0KlAr8JQAEAu4uZmUwJHINjWwu 3xl3bDAPOYBtugngxzWr0Qn6BSLriVrxtQmIkpexpJVzl9msoVQ7dZNW9cWkNY6Y mF85RIeXXDBsVQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:54:59 2025 by rpki-client