This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft File: DYGcnS5S2Ereot5MLeZLd4mFjrI.mft (raw, json) Hash identifier: 0LT6xfxDwnIukWWcgemMPCPJ4EzuTGIg4SxNLygW/9Y= Subject key identifier: 51:0E:36:0A:57:58:0E:6C:04:AC:1F:93:5D:B8:AB:D9:AD:19:C7:F4 Authority key identifier: 0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2 Certificate issuer: /CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2 Certificate serial: 019AF465A7D7DAC0306E6EFA403C5B493C7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft Manifest number: 0ABF Signing time: Sat 06 Dec 2025 16:01:34 +0000 Manifest this update: Sat 06 Dec 2025 16:01:34 +0000 Manifest next update: Sun 07 Dec 2025 16:01:34 +0000 Files and hashes: 1: 7g9WDnfwGC695A3gUF6F3XaKlmY.roa (hash: TzzYrMCZOYqgatk0txvOXfw1Un0jwLj7jZ0x8AM5wkA=) 2: DYGcnS5S2Ereot5MLeZLd4mFjrI.crl (hash: EJj5SUUlWfV60xN3+iK/hPwP+nPQriU3DyQ44BfUGAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:a7:d7:da:c0:30:6e:6e:fa:40:3c:5b:49:3c:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2 Validity Not Before: Dec 6 16:01:34 2025 GMT Not After : Dec 7 16:01:34 2025 GMT Subject: CN=510e360a57580e6c04ac1f935db8abd9ad19c7f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:30:11:6b:2d:e2:9b:0c:08:2b:1b:51:bc:37: d8:67:d4:ee:31:83:6d:ee:75:bf:e0:69:73:53:1c: c6:f0:e9:07:95:7c:51:5b:b1:02:93:c0:9e:10:70: fc:01:4e:88:92:4e:99:78:4d:54:f3:dc:b8:54:87: 69:4d:d9:24:ab:cc:0f:6e:f4:ce:e3:c5:a2:1e:ba: 1f:cd:27:ad:bc:be:b0:82:ac:f1:99:4d:13:6e:c4: cd:33:a4:d0:f0:a3:26:ad:b1:3a:ee:a6:52:41:f3: 60:c9:40:bc:3a:7a:2c:60:f7:20:07:72:b0:ac:e1: 21:96:fe:c9:f1:46:9e:b3:6c:0c:24:d5:fa:57:da: 65:15:53:c3:99:53:a0:a9:3b:b0:39:43:9e:76:21: 2a:dd:cb:ad:2b:4e:27:d0:6d:f8:8a:94:5f:be:6d: 83:01:ad:ef:7a:41:40:83:f5:eb:08:46:bd:44:30: 66:bd:40:af:60:9b:2c:cb:fc:53:50:07:58:59:09: b4:d2:a4:ac:bf:cf:19:61:dc:a3:c5:a3:b8:47:32: a5:78:a5:0a:71:6e:5d:32:97:af:10:01:08:3c:c6: a1:ae:e1:b9:e9:ff:b2:f5:33:3e:5c:c3:33:f8:f7: 08:81:b7:89:8e:75:c0:fc:23:fc:e5:47:9d:d2:fa: da:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0E:36:0A:57:58:0E:6C:04:AC:1F:93:5D:B8:AB:D9:AD:19:C7:F4 X509v3 Authority Key Identifier: keyid:0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:a0:cf:0f:c9:8c:3d:cf:1d:91:4a:b7:bb:6c:3c:b7:ad:0a: 64:5e:94:71:1d:e5:bb:dc:0b:c8:41:de:7a:0f:74:bc:f7:94: 7c:ff:cc:91:80:67:06:a0:87:53:89:97:4b:7c:7d:1a:a5:4d: bb:09:0d:3c:f7:50:da:f3:b9:98:b0:c8:89:78:21:58:4b:56: 5b:9c:7c:d6:3b:a5:29:5f:f4:61:37:23:25:ec:8d:91:50:3b: 65:d8:70:10:0f:a7:49:b0:fa:7c:e4:1c:2b:36:b4:cb:99:69: 42:dd:8a:7f:59:d5:d0:77:44:1f:62:d1:77:ac:07:f5:48:45: 28:12:55:43:21:8a:05:d4:38:13:7c:6c:9c:22:03:e5:b1:9d: 9c:ba:70:7c:46:b5:03:6f:71:ec:af:86:22:43:d5:fc:e5:ff: e0:0f:75:8f:da:24:71:da:43:b3:05:e4:56:70:0a:be:1c:7f: 5e:15:1d:cf:98:ff:1a:9a:c7:cf:13:d2:82:85:48:69:a4:3c: 7f:46:59:06:aa:40:1d:8b:9c:2f:cb:a6:41:88:8b:6b:a0:a4: 7b:20:46:70:51:f5:49:27:57:13:d2:de:e6:ee:56:fa:98:f5: 9e:35:50:06:e5:67:24:8b:7e:00:d4:5f:40:5e:18:9f:2e:6f: 0a:bd:46:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZafX2sAwbm76QDxbSTx+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkODE5YzlkMmU1MmQ4NGFkZWEyZGU0YzJkZTY0Yjc3ODk4 NThlYjIwHhcNMjUxMjA2MTYwMTM0WhcNMjUxMjA3MTYwMTM0WjAzMTEwLwYDVQQD Eyg1MTBlMzYwYTU3NTgwZTZjMDRhYzFmOTM1ZGI4YWJkOWFkMTljN2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zARay3imwwIKxtRvDfYZ9TuMYNt 7nW/4GlzUxzG8OkHlXxRW7ECk8CeEHD8AU6Ikk6ZeE1U89y4VIdpTdkkq8wPbvTO 48WiHrofzSetvL6wgqzxmU0TbsTNM6TQ8KMmrbE67qZSQfNgyUC8OnosYPcgB3Kw rOEhlv7J8Uaes2wMJNX6V9plFVPDmVOgqTuwOUOediEq3cutK04n0G34ipRfvm2D Aa3vekFAg/XrCEa9RDBmvUCvYJssy/xTUAdYWQm00qSsv88ZYdyjxaO4RzKleKUK cW5dMpevEAEIPMahruG56f+y9TM+XMMz+PcIgbeJjnXA/CP85Ued0vra/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFEONgpXWA5sBKwfk124q9mtGcf0MB8GA1UdIwQY MBaAFA2BnJ0uUthK3qLeTC3mS3eJhY6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFlHY25TNVMyRXJlb3Q1TUxlWkxkNG1GanJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS84NzczNDItNzM0Yy00NzFiLWIzZjkt MDJjMzdmZWI4YTllLzEvRFlHY25TNVMyRXJlb3Q1TUxlWkxkNG1GanJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS84NzczNDItNzM0Yy00NzFiLWIzZjktMDJjMzdmZWI4YTll LzEvRFlHY25TNVMyRXJlb3Q1TUxlWkxkNG1GanJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFqDPD8mM Pc8dkUq3u2w8t60KZF6UcR3lu9wLyEHeeg90vPeUfP/MkYBnBqCHU4mXS3x9GqVN uwkNPPdQ2vO5mLDIiXghWEtWW5x81julKV/0YTcjJeyNkVA7ZdhwEA+nSbD6fOQc Kza0y5lpQt2Kf1nV0HdEH2LRd6wH9UhFKBJVQyGKBdQ4E3xsnCID5bGdnLpwfEa1 A29x7K+GIkPV/OX/4A91j9okcdpDswXkVnAKvhx/XhUdz5j/GprHzxPSgoVIaaQ8 f0ZZBqpAHYucL8umQYiLa6CkeyBGcFH1SSdXE9Le5u5W+pj1njVQBuVnJIt+ANRf QF4Yny5vCr1Gmg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:16:22 2025 by rpki-client