This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft File: dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft (raw, json) Hash identifier: WW/UPCI609TnQxzPzCqRlD4Ues7kMg+RJf+32rJYjA0= Subject key identifier: E4:0F:A7:D7:09:44:C4:44:A5:A1:5B:12:60:22:12:F3:D2:D7:AC:99 Authority key identifier: 75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC Certificate issuer: /CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc Certificate serial: 019AF31B6CDDD4D16E664617529A8623F155 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 10:00:51 +0000 Manifest this update: Sat 06 Dec 2025 10:00:51 +0000 Manifest next update: Sun 07 Dec 2025 10:00:51 +0000 Files and hashes: 1: PKUF3H4nGREVMJD2dPtsZCb0xVA.roa (hash: bRtt/6wvb5BpNmugIhLVhjBbUyT5JnZDmpL0RvuD7vw=) 2: dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl (hash: f4ixWYQc0e0NRzr9oGeCPZqK/48u8y2eNw9fu9Kn+aM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:6c:dd:d4:d1:6e:66:46:17:52:9a:86:23:f1:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=758e823cf274d3810ce05c1d1bf5eef95cb211dc Validity Not Before: Dec 6 10:00:51 2025 GMT Not After : Dec 7 10:00:51 2025 GMT Subject: CN=e40fa7d70944c444a5a15b12602212f3d2d7ac99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ba:d8:45:61:76:de:c2:46:1a:5b:82:d1:8e: 17:98:d4:7a:93:2f:42:c6:db:45:ac:9e:08:f6:1e: 8e:45:97:79:95:45:88:40:b0:60:3e:f4:e3:16:d0: bd:c2:d9:d8:11:16:6a:e4:95:b3:50:84:73:25:e1: 07:91:3e:0d:bb:68:5a:d5:f3:7a:61:01:b0:c7:5f: a8:20:f6:8c:31:66:8d:8d:a8:f5:35:e3:f2:49:4b: d9:c0:42:c2:35:42:a6:1f:d5:c7:9b:83:f7:cb:ba: 37:bd:cf:f0:07:66:2a:1f:af:9f:3e:81:58:5b:c2: b6:a9:9c:25:1e:fe:82:05:f6:1b:22:92:d0:be:91: 10:7e:ad:82:37:07:5e:1b:60:57:17:e0:c0:da:ca: 8a:d7:71:14:d2:86:0c:b8:74:d8:c5:9f:a7:b4:2e: e0:73:5c:9c:7b:b7:6f:35:99:93:3c:29:2f:0e:84: 2d:85:f9:f9:e2:13:c3:b3:af:b6:fb:4d:ab:20:d2: 0c:b4:d8:cc:8c:ff:8b:59:f9:d9:66:b2:8a:47:a1: fd:5b:11:5b:19:ea:ed:d6:a6:b4:93:44:c9:45:75: 5b:7e:7e:8b:4d:d2:78:90:29:61:28:a4:ef:14:d9: b4:2c:00:a2:4b:e7:42:8c:a9:a8:84:5c:c3:1a:c2: 37:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:0F:A7:D7:09:44:C4:44:A5:A1:5B:12:60:22:12:F3:D2:D7:AC:99 X509v3 Authority Key Identifier: keyid:75:8E:82:3C:F2:74:D3:81:0C:E0:5C:1D:1B:F5:EE:F9:5C:B2:11:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dY6CPPJ004EM4FwdG_Xu-VyyEdw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/43d69e-b68d-4149-8b29-03db8b36d319/1/dY6CPPJ004EM4FwdG_Xu-VyyEdw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:2f:da:83:8c:6b:76:f1:6f:9c:1a:d0:75:80:4e:8c:de:52: 60:25:81:12:81:2e:e0:fe:11:ea:81:45:09:b1:10:6c:aa:91: 7d:9b:e2:ec:7a:95:0d:14:3c:78:d5:6a:29:28:f8:8e:ff:08: 66:33:da:68:ab:5f:1d:fe:0c:d7:6e:07:0d:c1:31:a6:3c:65: 18:af:a1:ce:18:69:64:02:1e:de:d5:31:ef:38:2f:20:81:46: 2a:53:f6:73:4f:2e:40:85:a0:99:69:5a:da:51:17:62:23:89: 6b:55:1e:d5:fb:00:e5:c6:b3:c0:e4:09:68:c9:9e:1f:9b:f1: 75:f6:00:cf:c3:a8:20:1b:bf:bf:7a:8c:4e:bc:1e:06:f0:d6: 91:eb:d4:44:85:c5:63:96:58:3a:b9:a5:d4:5f:30:b9:86:65: 3f:80:91:af:d8:8d:8b:3d:2f:9e:10:c7:5c:6d:3d:46:14:df: 96:4b:25:32:07:43:6e:d5:eb:ce:b7:a6:bb:28:2e:ca:77:d5: 35:7e:b7:84:8a:9e:78:b0:fc:d9:72:f9:58:90:b8:1e:c9:94: b3:3c:08:65:89:2b:2d:20:00:6c:03:9c:8a:2e:f0:a1:61:17: 65:de:a7:cd:38:89:9c:9b:d3:16:10:62:76:2f:3f:e5:ac:74: 45:ee:a2:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG2zd1NFuZkYXUpqGI/FVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1OGU4MjNjZjI3NGQzODEwY2UwNWMxZDFiZjVlZWY5NWNi MjExZGMwHhcNMjUxMjA2MTAwMDUxWhcNMjUxMjA3MTAwMDUxWjAzMTEwLwYDVQQD EyhlNDBmYTdkNzA5NDRjNDQ0YTVhMTViMTI2MDIyMTJmM2QyZDdhYzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrrYRWF23sJGGluC0Y4XmNR6ky9C xttFrJ4I9h6ORZd5lUWIQLBgPvTjFtC9wtnYERZq5JWzUIRzJeEHkT4Nu2ha1fN6 YQGwx1+oIPaMMWaNjaj1NePySUvZwELCNUKmH9XHm4P3y7o3vc/wB2YqH6+fPoFY W8K2qZwlHv6CBfYbIpLQvpEQfq2CNwdeG2BXF+DA2sqK13EU0oYMuHTYxZ+ntC7g c1yce7dvNZmTPCkvDoQthfn54hPDs6+2+02rINIMtNjMjP+LWfnZZrKKR6H9WxFb Gert1qa0k0TJRXVbfn6LTdJ4kClhKKTvFNm0LACiS+dCjKmohFzDGsI35wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQPp9cJRMREpaFbEmAiEvPS16yZMB8GA1UdIwQY MBaAFHWOgjzydNOBDOBcHRv17vlcshHcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFk2Q1BQSjAwNEVNNEZ3ZEdfWHUtVnl5RWR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80M2Q2OWUtYjY4ZC00MTQ5LThiMjkt MDNkYjhiMzZkMzE5LzEvZFk2Q1BQSjAwNEVNNEZ3ZEdfWHUtVnl5RWR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy80M2Q2OWUtYjY4ZC00MTQ5LThiMjktMDNkYjhiMzZkMzE5 LzEvZFk2Q1BQSjAwNEVNNEZ3ZEdfWHUtVnl5RWR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoy/ag4xr dvFvnBrQdYBOjN5SYCWBEoEu4P4R6oFFCbEQbKqRfZvi7HqVDRQ8eNVqKSj4jv8I ZjPaaKtfHf4M124HDcExpjxlGK+hzhhpZAIe3tUx7zgvIIFGKlP2c08uQIWgmWla 2lEXYiOJa1Ue1fsA5cazwOQJaMmeH5vxdfYAz8OoIBu/v3qMTrweBvDWkevURIXF Y5ZYOrml1F8wuYZlP4CRr9iNiz0vnhDHXG09RhTflkslMgdDbtXrzremuyguynfV NX63hIqeeLD82XL5WJC4HsmUszwIZYkrLSAAbAOcii7woWEXZd6nzTiJnJvTFhBi di8/5ax0Re6img== -----END CERTIFICATE-----Generated at Sat Dec 6 14:41:30 2025 by rpki-client