This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft File: dYeQLOemozSk4Ntz5yGYkBXWSJs.mft (raw, json) Hash identifier: k2kBr19/pUMakGIyCA0vaPSxtO6/ZEUGCwwkpnmQ+Ww= Subject key identifier: 57:1F:81:B6:A5:C4:02:C2:A2:D9:79:25:BF:E4:39:B2:FC:4B:E7:49 Authority key identifier: 75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B Certificate issuer: /CN=7587902ce7a6a334a4e0db73e721989015d6489b Certificate serial: 019B21769BEA7FE9745E0FDF05617E3D5D3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft Manifest number: 15EF Signing time: Mon 15 Dec 2025 10:02:59 +0000 Manifest this update: Mon 15 Dec 2025 10:02:59 +0000 Manifest next update: Tue 16 Dec 2025 10:02:59 +0000 Files and hashes: 1: 1-p_3utwZJLFIY_hjsgzsQwTLbiI.roa (hash: zpk9gNBEbgG53UDNDLXhMv6FzOCjxm3OmxU6M/IVco8=) 2: dYeQLOemozSk4Ntz5yGYkBXWSJs.crl (hash: EnGmJO4EK6AcU7m8dO7z+WEovRT+bj6m2iTW9cgP+x8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:76:9b:ea:7f:e9:74:5e:0f:df:05:61:7e:3d:5d:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7587902ce7a6a334a4e0db73e721989015d6489b Validity Not Before: Dec 15 10:02:59 2025 GMT Not After : Dec 16 10:02:59 2025 GMT Subject: CN=571f81b6a5c402c2a2d97925bfe439b2fc4be749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:56:c6:6d:dc:ca:6a:27:e8:49:90:2f:39:b6: e5:b2:3d:53:95:7e:f9:43:c6:7d:2a:b8:7a:c9:71: fc:c3:10:34:ec:20:af:a1:f4:98:c0:4d:4e:6b:d6: 6a:e8:83:ee:46:e3:a0:7e:48:df:36:73:bb:d0:2a: e6:ef:b3:3f:ae:4c:24:e9:92:9e:3f:07:22:64:cc: 1d:0b:60:72:18:ed:a4:1b:a9:0d:f3:94:96:ff:97: 00:15:73:8f:c8:d1:46:bc:2a:cb:09:4e:f4:e9:ea: ad:4f:97:1e:f7:2a:a9:d3:46:39:22:04:33:bb:32: eb:82:3c:b3:26:49:3f:5b:35:e8:50:2f:fd:54:b7: 2d:48:26:cd:81:19:da:f6:81:2d:ad:a9:40:5a:95: 4c:d5:f4:a9:12:70:62:7a:1c:f6:84:e1:7d:f0:32: bc:a1:d1:15:cb:e3:fa:16:1c:0a:10:3e:ff:3e:04: 1e:e5:68:0c:e3:db:14:c1:ac:83:2a:df:07:b6:b6: 14:93:98:29:4c:f6:55:ad:13:eb:f7:1d:c7:b7:85: 9a:84:cb:35:f8:a2:4a:5a:84:2a:88:60:3e:ad:f7: f9:4b:1a:66:74:61:57:8c:a7:bd:5a:54:d5:ce:e3: 96:5f:d7:2b:a7:0b:c4:20:d8:28:83:86:68:a0:f0: ab:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1F:81:B6:A5:C4:02:C2:A2:D9:79:25:BF:E4:39:B2:FC:4B:E7:49 X509v3 Authority Key Identifier: keyid:75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:53:a9:c4:1a:06:5f:c1:80:e6:a0:06:f8:d1:cb:42:d6:12: b2:b7:88:49:26:3c:51:02:6a:9b:e1:26:69:2e:01:51:0c:75: 27:0d:d4:62:9e:32:d3:f6:ea:c4:74:89:5d:71:e4:03:19:56: 1e:6a:35:76:f1:6b:46:c4:bd:53:26:c6:2c:8e:25:01:10:8f: f1:b6:2f:82:26:89:99:03:26:85:cb:23:5b:99:1c:50:f1:3f: d7:ff:d5:e3:4c:a3:51:8b:7f:d5:33:34:41:20:b5:f5:30:43: f0:fe:e3:8d:e9:05:bc:81:9a:87:2d:bd:34:84:fd:6f:0a:fc: dd:86:75:ab:6f:39:d8:28:f4:a6:22:b2:e2:b3:7f:9f:0d:a5: 3b:4b:ba:4a:8e:df:75:4f:02:f9:df:d1:2d:f7:0d:b2:eb:e9: d1:3f:d9:7c:60:ef:be:20:09:85:fb:a9:5b:70:63:ff:4b:45: 97:bf:58:e1:b2:ed:d7:30:9e:3c:24:77:cb:53:b0:d9:a6:64: 3e:ee:40:d1:10:e7:5a:30:6d:55:e9:38:c6:c4:45:e1:6c:f3: c2:dd:d8:1f:18:94:c3:84:5d:b4:e4:3c:03:79:0a:35:7b:4d: 60:1a:fe:bf:39:84:a0:36:01:67:fb:c1:16:5f:73:38:8e:b6: 6c:29:e9:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdpvqf+l0Xg/fBWF+PV0/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ODc5MDJjZTdhNmEzMzRhNGUwZGI3M2U3MjE5ODkwMTVk NjQ4OWIwHhcNMjUxMjE1MTAwMjU5WhcNMjUxMjE2MTAwMjU5WjAzMTEwLwYDVQQD Eyg1NzFmODFiNmE1YzQwMmMyYTJkOTc5MjViZmU0MzliMmZjNGJlNzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01bGbdzKaifoSZAvObblsj1TlX75 Q8Z9Krh6yXH8wxA07CCvofSYwE1Oa9Zq6IPuRuOgfkjfNnO70Crm77M/rkwk6ZKe PwciZMwdC2ByGO2kG6kN85SW/5cAFXOPyNFGvCrLCU706eqtT5ce9yqp00Y5IgQz uzLrgjyzJkk/WzXoUC/9VLctSCbNgRna9oEtralAWpVM1fSpEnBiehz2hOF98DK8 odEVy+P6FhwKED7/PgQe5WgM49sUwayDKt8HtrYUk5gpTPZVrRPr9x3Ht4WahMs1 +KJKWoQqiGA+rff5SxpmdGFXjKe9WlTVzuOWX9crpwvEINgog4ZooPCr5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcfgbalxALCotl5Jb/kObL8S+dJMB8GA1UdIwQY MBaAFHWHkCznpqM0pODbc+chmJAV1kibMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFllUUxPZW1velNrNE50ejV5R1lrQlhXU0pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy80ZGU5YmEtMGE2Yi00N2Y4LTk3NzAt ZjkyMDE5Mzc1YmM4LzEvZFllUUxPZW1velNrNE50ejV5R1lrQlhXU0pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy80ZGU5YmEtMGE2Yi00N2Y4LTk3NzAtZjkyMDE5Mzc1YmM4 LzEvZFllUUxPZW1velNrNE50ejV5R1lrQlhXU0pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABFOpxBoG X8GA5qAG+NHLQtYSsreISSY8UQJqm+EmaS4BUQx1Jw3UYp4y0/bqxHSJXXHkAxlW Hmo1dvFrRsS9UybGLI4lARCP8bYvgiaJmQMmhcsjW5kcUPE/1//V40yjUYt/1TM0 QSC19TBD8P7jjekFvIGahy29NIT9bwr83YZ1q2852Cj0piKy4rN/nw2lO0u6So7f dU8C+d/RLfcNsuvp0T/ZfGDvviAJhfupW3Bj/0tFl79Y4bLt1zCePCR3y1Ow2aZk Pu5A0RDnWjBtVek4xsRF4Wzzwt3YHxiUw4RdtOQ8A3kKNXtNYBr+vzmEoDYBZ/vB Fl9zOI62bCnp5A== -----END CERTIFICATE-----Generated at Mon Dec 15 20:16:04 2025 by rpki-client