This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft File: dygVWFa4zk2F-NpPbTWwVbMNvTw.mft (raw, json) Hash identifier: GTlEr6qKbE2ruszAoLtbdGxWHppxm3+za6eO9s21eHo= Subject key identifier: B2:E9:C5:FE:F7:74:13:66:0F:47:9C:0C:4E:9E:12:99:40:4F:B6:90 Authority key identifier: 77:28:15:58:56:B8:CE:4D:85:F8:DA:4F:6D:35:B0:55:B3:0D:BD:3C Certificate issuer: /CN=7728155856b8ce4d85f8da4f6d35b055b30dbd3c Certificate serial: 019AF1D25084A6C64B23E4AC113A143DB327 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft Manifest number: 0B Signing time: Sat 06 Dec 2025 04:01:23 +0000 Manifest this update: Sat 06 Dec 2025 04:01:23 +0000 Manifest next update: Sun 07 Dec 2025 04:01:23 +0000 Files and hashes: 1: cA6lNEEcIDbZuEOTgnHTiqfxfx4.roa (hash: 8f71F0XboBesdGjMZ637fgl0ngKhSWlMfo5XT1YncCs=) 2: dygVWFa4zk2F-NpPbTWwVbMNvTw.crl (hash: 8nZ2Lev82d77muS1cLyHcLH8UzSbQDCZCkQPz7KL390=) 3: zXGgJ8ssCd1Pph38Z1ItWHwU6EA.roa (hash: P8aEqGdzKsgNRTrQcaeiKThPpzfIrclMSZ/T32RFslc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:50:84:a6:c6:4b:23:e4:ac:11:3a:14:3d:b3:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7728155856b8ce4d85f8da4f6d35b055b30dbd3c Validity Not Before: Dec 6 04:01:23 2025 GMT Not After : Dec 7 04:01:23 2025 GMT Subject: CN=b2e9c5fef77413660f479c0c4e9e1299404fb690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:98:25:35:78:a4:77:95:dc:59:8d:cf:e1:1b: f7:4f:b0:08:06:bd:a5:73:d6:a0:38:e8:8e:b9:d2: df:f4:40:77:35:99:71:ab:45:47:f3:b9:8b:45:4c: f3:a8:98:22:7c:9d:31:ee:4a:54:14:50:35:2a:93: dc:58:2b:1c:29:eb:4c:94:44:10:21:91:cb:a6:ca: 67:52:39:3e:98:15:60:4b:02:16:4c:eb:77:10:42: 2a:c3:ab:37:30:cf:36:04:f1:99:bf:5d:4f:90:75: a3:9c:40:d2:75:6a:a7:3b:81:fe:ce:3f:32:d5:1d: c7:21:1b:b0:d1:7a:20:dd:bd:05:b1:20:23:de:1d: 44:da:6f:7d:55:77:da:86:b5:9e:d3:3b:1f:0a:cb: 86:14:39:08:2a:aa:78:97:78:e1:25:5d:23:f0:2c: 41:8c:42:f7:51:61:7b:f1:48:c6:e1:30:6e:24:5e: 45:cb:42:f1:2d:ab:c8:40:76:63:a7:b6:27:50:63: cd:b9:e9:01:7c:88:4d:db:54:cc:52:73:d0:e6:97: 0b:d3:b9:e7:5e:c7:d6:84:a2:af:c7:ba:f9:95:02: 71:75:61:7c:f4:cc:1c:fc:7c:7f:48:4b:74:67:c7: 29:35:3a:34:21:3b:1a:2d:b3:45:98:4c:ff:f2:98: cd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E9:C5:FE:F7:74:13:66:0F:47:9C:0C:4E:9E:12:99:40:4F:B6:90 X509v3 Authority Key Identifier: keyid:77:28:15:58:56:B8:CE:4D:85:F8:DA:4F:6D:35:B0:55:B3:0D:BD:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dygVWFa4zk2F-NpPbTWwVbMNvTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3dcc4b-9352-411d-925a-cc7d463c820b/1/dygVWFa4zk2F-NpPbTWwVbMNvTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:2b:50:fc:1e:fa:c4:00:1e:cc:eb:ae:ab:d7:f1:27:22:58: e9:d6:ba:68:3d:0f:4b:ec:2a:db:f0:be:78:61:aa:01:02:b0: 62:3f:b4:4a:a3:a1:f4:75:cb:53:54:d2:b4:51:9d:cc:cf:3e: cb:16:4c:fb:cd:55:58:5c:3a:d8:d1:9d:a9:25:e4:96:1b:fa: 65:bd:ae:06:ec:9e:8b:7b:23:45:6c:70:96:8c:5f:53:7c:4f: b7:25:11:44:85:af:5f:30:a5:de:2f:c0:72:6b:14:fa:ff:d1: a8:14:56:2a:a5:fa:e9:ca:56:33:11:3b:a5:78:26:49:39:83: 51:71:29:c7:ac:5f:fe:0e:59:52:a0:c1:86:7f:9f:cb:4d:4f: 35:8d:50:b2:7b:1f:6a:77:03:2e:d7:97:1b:0a:f3:a2:13:82: 65:df:da:6c:29:2f:9f:e5:fe:55:77:75:84:79:bd:2d:5b:b1: e1:93:2f:a4:60:5a:9d:65:ab:5e:50:66:5b:79:c1:61:db:b3: ce:f6:6e:76:3e:2e:30:16:83:13:a7:66:e2:0c:92:ab:68:14: 02:ab:79:63:b0:c5:4e:76:88:dd:2f:5b:a7:4d:cb:a9:52:db: 55:5b:ab:0c:81:6b:68:d8:42:ba:02:e9:72:ba:17:43:e3:55: 7e:e9:63:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lCEpsZLI+SsEToUPbMnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MjgxNTU4NTZiOGNlNGQ4NWY4ZGE0ZjZkMzViMDU1YjMw ZGJkM2MwHhcNMjUxMjA2MDQwMTIzWhcNMjUxMjA3MDQwMTIzWjAzMTEwLwYDVQQD EyhiMmU5YzVmZWY3NzQxMzY2MGY0NzljMGM0ZTllMTI5OTQwNGZiNjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJglNXikd5XcWY3P4Rv3T7AIBr2l c9agOOiOudLf9EB3NZlxq0VH87mLRUzzqJgifJ0x7kpUFFA1KpPcWCscKetMlEQQ IZHLpspnUjk+mBVgSwIWTOt3EEIqw6s3MM82BPGZv11PkHWjnEDSdWqnO4H+zj8y 1R3HIRuw0Xog3b0FsSAj3h1E2m99VXfahrWe0zsfCsuGFDkIKqp4l3jhJV0j8CxB jEL3UWF78UjG4TBuJF5Fy0LxLavIQHZjp7YnUGPNuekBfIhN21TMUnPQ5pcL07nn XsfWhKKvx7r5lQJxdWF89Mwc/Hx/SEt0Z8cpNTo0ITsaLbNFmEz/8pjNvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLpxf73dBNmD0ecDE6eEplAT7aQMB8GA1UdIwQY MBaAFHcoFVhWuM5NhfjaT201sFWzDb08MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHlnVldGYTR6azJGLU5wUGJUV3dWYk1OdlR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zZGNjNGItOTM1Mi00MTFkLTkyNWEt Y2M3ZDQ2M2M4MjBiLzEvZHlnVldGYTR6azJGLU5wUGJUV3dWYk1OdlR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8zZGNjNGItOTM1Mi00MTFkLTkyNWEtY2M3ZDQ2M2M4MjBi LzEvZHlnVldGYTR6azJGLU5wUGJUV3dWYk1OdlR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeitQ/B76 xAAezOuuq9fxJyJY6da6aD0PS+wq2/C+eGGqAQKwYj+0SqOh9HXLU1TStFGdzM8+ yxZM+81VWFw62NGdqSXklhv6Zb2uBuyei3sjRWxwloxfU3xPtyURRIWvXzCl3i/A cmsU+v/RqBRWKqX66cpWMxE7pXgmSTmDUXEpx6xf/g5ZUqDBhn+fy01PNY1Qsnsf ancDLteXGwrzohOCZd/abCkvn+X+VXd1hHm9LVux4ZMvpGBanWWrXlBmW3nBYduz zvZudj4uMBaDE6dm4gySq2gUAqt5Y7DFTnaI3S9bp03LqVLbVVurDIFraNhCugLp croXQ+NVfuljUA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:31 2025 by rpki-client