This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft File: dYeQLOemozSk4Ntz5yGYkBXWSJs.mft (raw, json) Hash identifier: guIBPRJaeJ27gigUbNZsT2YYY2g6A6wMzvX+sZUUBKc= Subject key identifier: D6:34:BA:AF:34:1E:A9:34:CA:9C:D7:0C:01:EA:28:BC:6C:A8:46:70 Authority key identifier: 75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B Certificate issuer: /CN=7587902ce7a6a334a4e0db73e721989015d6489b Certificate serial: 019AF31C8D6293BEE47D2ADBCB281AEFDD90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft Manifest number: 15D7 Signing time: Sat 06 Dec 2025 10:02:05 +0000 Manifest this update: Sat 06 Dec 2025 10:02:05 +0000 Manifest next update: Sun 07 Dec 2025 10:02:05 +0000 Files and hashes: 1: 1-p_3utwZJLFIY_hjsgzsQwTLbiI.roa (hash: zpk9gNBEbgG53UDNDLXhMv6FzOCjxm3OmxU6M/IVco8=) 2: dYeQLOemozSk4Ntz5yGYkBXWSJs.crl (hash: XGfLKW2QK1ZrQ8o4LQBuXvl1UQVc5lvEwXKLtkqUrJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:8d:62:93:be:e4:7d:2a:db:cb:28:1a:ef:dd:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7587902ce7a6a334a4e0db73e721989015d6489b Validity Not Before: Dec 6 10:02:05 2025 GMT Not After : Dec 7 10:02:05 2025 GMT Subject: CN=d634baaf341ea934ca9cd70c01ea28bc6ca84670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:11:91:ec:81:d3:70:c5:5a:f6:ce:a4:09:16: c2:e6:73:dd:be:42:55:01:1c:ff:01:c0:5d:db:d8: 26:ed:ab:72:e3:31:ed:9b:b6:d7:14:07:00:51:88: 8b:5d:f8:16:04:5c:21:ba:6b:36:b9:fa:5e:9e:f5: 18:69:e3:79:f5:9b:47:f2:84:c4:4b:72:1c:2f:6c: 52:cf:af:99:e0:2a:bf:2c:e7:4b:cf:e1:16:d7:83: dc:56:ae:86:42:6b:6c:8c:7e:3a:60:86:f4:6f:d3: 2e:d0:a6:e8:03:90:25:e9:85:4c:d4:24:88:c2:0d: a9:57:c2:37:44:75:0e:d8:39:95:b4:2e:bf:52:5f: 15:ce:fc:08:32:d2:7a:f7:4f:58:64:7b:f7:99:27: e6:38:61:00:38:e1:c3:a5:45:d6:d8:20:ba:41:ef: d7:75:68:57:85:d8:21:e3:0e:ce:99:9e:ab:68:e0: 33:d6:28:08:10:eb:40:a0:3f:6a:2a:dd:88:64:cc: fd:5e:8d:36:27:70:e3:62:41:fd:1a:16:55:4e:23: 7d:51:fb:d2:0f:22:d7:ea:a6:9f:e8:95:75:96:9c: 02:7a:fa:ba:2a:be:f3:09:18:bf:6f:39:78:ba:a2: e5:9a:dc:87:ae:fa:d2:7c:ac:52:a1:24:fe:ea:39: 0c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:34:BA:AF:34:1E:A9:34:CA:9C:D7:0C:01:EA:28:BC:6C:A8:46:70 X509v3 Authority Key Identifier: keyid:75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:3b:c7:ad:23:a1:1a:05:5f:20:db:e2:f5:4f:8d:e8:00:1f: 48:77:53:0c:9b:d5:e5:bb:4a:32:22:fe:d2:81:61:50:c5:3e: 3d:29:ff:04:4b:a8:1b:bc:88:21:6d:01:0b:0d:9c:f2:a9:e4: 83:92:8d:86:7f:6d:9b:52:66:17:6b:55:68:ce:d3:e4:5b:f4: 27:b4:72:4a:84:84:3c:a7:f3:71:26:94:7a:cf:10:7c:83:2d: 48:31:ee:5a:32:aa:ce:87:c4:4e:f0:b7:53:3f:d3:48:56:1b: ce:6d:1c:4c:3f:c6:10:ee:3b:7e:0a:4a:03:2f:04:17:d6:36: 03:24:30:b3:67:28:b3:a2:0f:98:12:b7:0e:53:b6:2e:10:1d: bd:ea:ac:0a:19:c8:96:1e:b3:26:c9:6d:02:c8:c0:9a:24:58: c9:c6:43:5f:d1:40:93:cf:b2:7e:58:29:86:e6:49:b2:a1:ad: e8:15:79:a8:f4:64:29:7c:6d:34:bd:01:21:15:50:9b:76:b4: 85:e3:48:d2:de:02:26:87:32:cd:8e:6b:e7:b2:4a:4d:cb:af: 3c:f0:55:5d:ce:e1:b2:cf:a6:23:7d:a0:f8:60:f9:88:48:30: ca:39:d8:a7:1e:ba:df:b7:63:bc:07:49:a5:73:17:19:3e:29: f6:fb:b1:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHI1ik77kfSrbyyga792QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ODc5MDJjZTdhNmEzMzRhNGUwZGI3M2U3MjE5ODkwMTVk NjQ4OWIwHhcNMjUxMjA2MTAwMjA1WhcNMjUxMjA3MTAwMjA1WjAzMTEwLwYDVQQD EyhkNjM0YmFhZjM0MWVhOTM0Y2E5Y2Q3MGMwMWVhMjhiYzZjYTg0NjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxGR7IHTcMVa9s6kCRbC5nPdvkJV ARz/AcBd29gm7aty4zHtm7bXFAcAUYiLXfgWBFwhums2ufpenvUYaeN59ZtH8oTE S3IcL2xSz6+Z4Cq/LOdLz+EW14PcVq6GQmtsjH46YIb0b9Mu0KboA5Al6YVM1CSI wg2pV8I3RHUO2DmVtC6/Ul8VzvwIMtJ6909YZHv3mSfmOGEAOOHDpUXW2CC6Qe/X dWhXhdgh4w7OmZ6raOAz1igIEOtAoD9qKt2IZMz9Xo02J3DjYkH9GhZVTiN9UfvS DyLX6qaf6JV1lpwCevq6Kr7zCRi/bzl4uqLlmtyHrvrSfKxSoST+6jkM9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNY0uq80Hqk0ypzXDAHqKLxsqEZwMB8GA1UdIwQY MBaAFHWHkCznpqM0pODbc+chmJAV1kibMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFllUUxPZW1velNrNE50ejV5R1lrQlhXU0pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy80ZGU5YmEtMGE2Yi00N2Y4LTk3NzAt ZjkyMDE5Mzc1YmM4LzEvZFllUUxPZW1velNrNE50ejV5R1lrQlhXU0pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy80ZGU5YmEtMGE2Yi00N2Y4LTk3NzAtZjkyMDE5Mzc1YmM4 LzEvZFllUUxPZW1velNrNE50ejV5R1lrQlhXU0pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxjvHrSOh GgVfINvi9U+N6AAfSHdTDJvV5btKMiL+0oFhUMU+PSn/BEuoG7yIIW0BCw2c8qnk g5KNhn9tm1JmF2tVaM7T5Fv0J7RySoSEPKfzcSaUes8QfIMtSDHuWjKqzofETvC3 Uz/TSFYbzm0cTD/GEO47fgpKAy8EF9Y2AyQws2cos6IPmBK3DlO2LhAdveqsChnI lh6zJsltAsjAmiRYycZDX9FAk8+yflgphuZJsqGt6BV5qPRkKXxtNL0BIRVQm3a0 heNI0t4CJocyzY5r57JKTcuvPPBVXc7hss+mI32g+GD5iEgwyjnYpx6637djvAdJ pXMXGT4p9vuxYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:36:36 2025 by rpki-client