This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft File: dy9i9-iZgXRBGAk19CuCo5mAotw.mft (raw, json) Hash identifier: ezqqpKT2jRQlOGVG36DqMa9hW70PX3nHx4kxHeaqgsE= Subject key identifier: 05:57:EC:95:44:D0:29:69:BF:00:18:ED:10:E1:66:DB:BA:C4:CA:0F Authority key identifier: 77:2F:62:F7:E8:99:81:74:41:18:09:35:F4:2B:82:A3:99:80:A2:DC Certificate issuer: /CN=772f62f7e899817441180935f42b82a39980a2dc Certificate serial: 019AF163D4E6A927D5BD5940AB16B051E699 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft Manifest number: 060B Signing time: Sat 06 Dec 2025 02:00:42 +0000 Manifest this update: Sat 06 Dec 2025 02:00:42 +0000 Manifest next update: Sun 07 Dec 2025 02:00:42 +0000 Files and hashes: 1: dy9i9-iZgXRBGAk19CuCo5mAotw.crl (hash: UjpEiHDbk/d9WHEUZYDsOgbIxR9a1YdO1R+EapuBx4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:d4:e6:a9:27:d5:bd:59:40:ab:16:b0:51:e6:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=772f62f7e899817441180935f42b82a39980a2dc Validity Not Before: Dec 6 02:00:42 2025 GMT Not After : Dec 7 02:00:42 2025 GMT Subject: CN=0557ec9544d02969bf0018ed10e166dbbac4ca0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e4:ad:db:11:0b:bb:d2:4a:76:6a:00:be:7f: c2:b7:ad:68:a3:70:79:24:b9:f4:ac:a4:d9:0e:29: a7:ed:f2:2d:5e:44:6c:a7:38:cb:0c:8e:eb:61:3d: 45:2d:9f:3e:5a:34:78:4a:e5:4c:20:c0:c7:ac:4b: f9:f0:7f:8a:9b:65:7b:87:ae:02:b6:e9:b8:47:97: 1b:27:18:5e:0f:1f:51:0e:40:8f:52:b0:79:81:bd: 78:1e:b6:fd:b3:03:83:b4:e4:c4:13:bf:10:c4:7d: ab:86:c8:9d:94:41:7b:f5:c0:91:43:5f:3e:f6:d0: 23:0f:d6:8a:4b:5d:da:90:d0:b1:7f:fb:6b:35:39: 64:5d:9b:25:a8:39:90:ef:b9:f0:b2:ff:a4:70:02: d1:72:fd:67:0c:7f:65:e4:77:fd:95:a3:24:c0:74: 31:02:1d:d1:57:e5:a3:8a:3e:94:9a:6c:a5:10:8d: 14:8c:28:0d:c8:e0:84:33:db:f7:55:91:50:4e:d6: bb:cc:2b:1c:fa:d6:b7:24:97:0c:2a:db:67:09:df: b8:e5:8f:9e:1c:36:5c:5f:b4:f6:ba:d7:e3:6d:a1: 13:b1:58:50:23:09:3f:f8:52:c8:5e:a8:34:55:dc: d4:fb:44:d4:ca:46:9d:43:4c:b1:de:02:54:a6:7f: 72:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:57:EC:95:44:D0:29:69:BF:00:18:ED:10:E1:66:DB:BA:C4:CA:0F X509v3 Authority Key Identifier: keyid:77:2F:62:F7:E8:99:81:74:41:18:09:35:F4:2B:82:A3:99:80:A2:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:8c:1c:76:0a:ec:7e:e2:09:d4:bc:dc:37:79:cf:a4:98:9b: 63:45:16:fb:0d:72:b5:6a:b0:52:74:b2:0f:4f:9e:10:ce:f7: 91:2b:9e:53:ea:5a:36:25:80:61:0a:33:f4:3d:00:34:c6:eb: a2:b3:b3:85:86:cd:6f:e3:4a:c7:2b:d7:10:15:16:20:ec:7d: d9:bd:2c:a3:9b:fd:ed:71:32:b2:53:6a:29:d5:80:11:d1:4f: 09:c0:62:a7:ef:63:9b:e0:4b:e6:e7:a2:87:bc:63:58:6f:ec: 34:89:40:a5:1e:7a:eb:4a:66:2f:a1:e7:26:0e:c4:90:64:bc: 3a:cb:54:2c:0a:ad:ee:af:83:1c:0d:00:d9:83:f4:86:82:c4: 5b:30:7c:6f:43:87:78:58:74:31:c1:75:fa:dc:68:7c:2c:47: f7:05:c7:42:78:9d:a3:65:5c:ab:73:3e:aa:9e:1b:4e:91:31: ec:50:5e:c8:51:01:8e:cf:77:03:9f:61:78:d3:8b:10:55:f8: ec:7f:97:0c:bb:4d:0c:c7:92:d5:84:3d:2e:1a:d3:04:07:62: a0:cd:51:1d:bc:0d:12:96:32:97:31:7c:ca:6b:8b:91:a3:91: 54:b1:1f:ca:87:40:f6:40:00:f5:60:38:38:8e:20:3e:8d:17: 21:07:f1:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9TmqSfVvVlAqxawUeaZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MmY2MmY3ZTg5OTgxNzQ0MTE4MDkzNWY0MmI4MmEzOTk4 MGEyZGMwHhcNMjUxMjA2MDIwMDQyWhcNMjUxMjA3MDIwMDQyWjAzMTEwLwYDVQQD EygwNTU3ZWM5NTQ0ZDAyOTY5YmYwMDE4ZWQxMGUxNjZkYmJhYzRjYTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uSt2xELu9JKdmoAvn/Ct61oo3B5 JLn0rKTZDimn7fItXkRspzjLDI7rYT1FLZ8+WjR4SuVMIMDHrEv58H+Km2V7h64C tum4R5cbJxheDx9RDkCPUrB5gb14Hrb9swODtOTEE78QxH2rhsidlEF79cCRQ18+ 9tAjD9aKS13akNCxf/trNTlkXZslqDmQ77nwsv+kcALRcv1nDH9l5Hf9laMkwHQx Ah3RV+Wjij6UmmylEI0UjCgNyOCEM9v3VZFQTta7zCsc+ta3JJcMKttnCd+45Y+e HDZcX7T2utfjbaETsVhQIwk/+FLIXqg0VdzU+0TUykadQ0yx3gJUpn9yZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVX7JVE0ClpvwAY7RDhZtu6xMoPMB8GA1UdIwQY MBaAFHcvYvfomYF0QRgJNfQrgqOZgKLcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHk5aTktaVpnWFJCR0FrMTlDdUNvNW1Bb3R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xNTBkMmItYTA4OC00MDFkLWI1NTkt YTA2MWE4Yzc3ZjE2LzEvZHk5aTktaVpnWFJCR0FrMTlDdUNvNW1Bb3R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8xNTBkMmItYTA4OC00MDFkLWI1NTktYTA2MWE4Yzc3ZjE2 LzEvZHk5aTktaVpnWFJCR0FrMTlDdUNvNW1Bb3R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy4wcdgrs fuIJ1LzcN3nPpJibY0UW+w1ytWqwUnSyD0+eEM73kSueU+paNiWAYQoz9D0ANMbr orOzhYbNb+NKxyvXEBUWIOx92b0so5v97XEyslNqKdWAEdFPCcBip+9jm+BL5uei h7xjWG/sNIlApR5660pmL6HnJg7EkGS8OstULAqt7q+DHA0A2YP0hoLEWzB8b0OH eFh0McF1+txofCxH9wXHQnido2Vcq3M+qp4bTpEx7FBeyFEBjs93A59heNOLEFX4 7H+XDLtNDMeS1YQ9LhrTBAdioM1RHbwNEpYylzF8ymuLkaORVLEfyodA9kAA9WA4 OI4gPo0XIQfxmA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:32 2025 by rpki-client