This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft File: DY_I34T78qtAQS5tSt_3wbhKWy8.mft (raw, json) Hash identifier: 1W4lSB6DkM4vm3aDSdfaEXIZmnGHawJNJxUv4t6bSF0= Subject key identifier: E2:1A:82:3B:80:6D:17:1E:5F:C8:9D:33:2E:3B:B7:B3:00:27:FF:60 Authority key identifier: 0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F Certificate issuer: /CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f Certificate serial: 019AF1648BC6B49E55A9FEB8140709849527 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft Manifest number: 0F3A Signing time: Sat 06 Dec 2025 02:01:29 +0000 Manifest this update: Sat 06 Dec 2025 02:01:29 +0000 Manifest next update: Sun 07 Dec 2025 02:01:29 +0000 Files and hashes: 1: DY_I34T78qtAQS5tSt_3wbhKWy8.crl (hash: RJqfV7uzGh9UUOTIoR0NJQhKW+YcxPOg/WFf+ta4Dy8=) 2: WLSJNsKtp7tRpU1OJgVstTs_lJ8.roa (hash: HTWALMbF2cmOkLXiJznP+o3iPW0wZUQzmHPHS3MTUp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:8b:c6:b4:9e:55:a9:fe:b8:14:07:09:84:95:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f Validity Not Before: Dec 6 02:01:29 2025 GMT Not After : Dec 7 02:01:29 2025 GMT Subject: CN=e21a823b806d171e5fc89d332e3bb7b30027ff60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:63:e7:27:d2:19:7d:31:20:a5:a3:f0:32:2f: 73:da:ca:ba:23:64:a9:37:d7:8e:2e:79:93:09:82: fd:15:c4:1e:3d:5b:38:8f:e4:b2:e5:ad:a8:22:d9: c0:6a:d8:7a:8b:a6:4f:64:ca:6f:29:87:33:f5:2b: ab:bb:95:d2:58:2e:94:ed:56:a0:76:d2:97:21:d3: b4:8a:83:2c:b2:03:d4:f3:4f:14:d0:64:53:3b:14: 15:4d:55:b4:4d:04:9f:55:cc:55:0a:5c:8a:f4:7a: b3:04:68:0f:09:e2:d9:46:91:34:4c:98:cf:e4:42: 8d:d7:31:72:ef:5e:16:19:e0:cd:6d:a1:c6:eb:e1: ed:18:4c:e1:a3:fb:98:b8:6f:16:11:03:d5:ee:25: 47:51:08:32:ab:68:64:70:c2:7e:bb:0a:6c:6a:a7: 0c:15:6e:9b:f5:cf:7c:10:3d:22:ab:2d:41:4d:c5: e1:7c:ff:91:a6:c5:43:3d:93:59:ab:a7:87:81:44: 05:6d:38:f3:97:8e:c2:e1:e4:cd:88:df:e0:64:87: 25:6d:0d:82:b6:fa:89:db:bf:4f:98:94:9d:f1:a3: 94:5a:a6:d8:10:8b:ae:b5:0f:07:15:ea:45:5c:88: 74:d7:e0:6f:d0:5c:f1:42:a4:13:8f:b1:b4:f4:5b: 68:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1A:82:3B:80:6D:17:1E:5F:C8:9D:33:2E:3B:B7:B3:00:27:FF:60 X509v3 Authority Key Identifier: keyid:0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:b1:fb:2b:52:a6:18:a2:db:2b:16:f2:82:cc:60:34:c6:0f: cf:6e:a8:dd:71:9e:10:9c:9c:9e:de:60:26:7a:7c:da:37:06: 90:5f:7f:17:a9:c3:ed:b3:df:a3:c1:4e:55:57:d9:e5:d0:45: 61:e9:19:16:6f:98:af:37:94:0f:9f:dd:0c:d7:b0:b1:ed:0f: 11:ef:24:e0:76:c7:26:ec:0f:a9:e6:8e:27:62:5f:82:ac:0c: d5:96:e4:6d:f2:23:f2:73:71:e0:71:57:3a:7e:66:3a:26:cf: d3:c4:6a:86:39:d9:41:01:24:db:6f:48:41:e3:2c:2e:ec:2e: 40:af:82:7f:4d:a0:74:75:22:c8:11:49:a9:9d:f2:02:ce:32: f0:bb:70:dd:9b:ce:ea:c1:f6:06:41:30:d6:9b:a0:17:82:dd: 24:73:7a:e9:36:4c:1f:59:74:20:69:af:6a:36:d2:16:5e:83: a9:c5:88:27:28:51:eb:85:f0:c8:d3:f7:30:71:a1:c0:bd:b4: cf:59:e8:a5:38:79:03:6a:f5:f7:b4:b8:80:35:09:e7:74:7b: ed:fd:32:ec:88:04:71:0f:be:58:28:19:8c:2e:f5:83:9a:b8: 1e:65:4f:c5:bf:e7:77:8d:22:12:4b:86:47:c2:f9:4c:30:1f: 1a:25:4e:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZIvGtJ5Vqf64FAcJhJUnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkOGZjOGRmODRmYmYyYWI0MDQxMmU2ZDRhZGZmN2MxYjg0 YTViMmYwHhcNMjUxMjA2MDIwMTI5WhcNMjUxMjA3MDIwMTI5WjAzMTEwLwYDVQQD EyhlMjFhODIzYjgwNmQxNzFlNWZjODlkMzMyZTNiYjdiMzAwMjdmZjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWPnJ9IZfTEgpaPwMi9z2sq6I2Sp N9eOLnmTCYL9FcQePVs4j+Sy5a2oItnAath6i6ZPZMpvKYcz9Suru5XSWC6U7Vag dtKXIdO0ioMssgPU808U0GRTOxQVTVW0TQSfVcxVClyK9HqzBGgPCeLZRpE0TJjP 5EKN1zFy714WGeDNbaHG6+HtGEzho/uYuG8WEQPV7iVHUQgyq2hkcMJ+uwpsaqcM FW6b9c98ED0iqy1BTcXhfP+RpsVDPZNZq6eHgUQFbTjzl47C4eTNiN/gZIclbQ2C tvqJ279PmJSd8aOUWqbYEIuutQ8HFepFXIh01+Bv0FzxQqQTj7G09FtoJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIagjuAbRceX8idMy47t7MAJ/9gMB8GA1UdIwQY MBaAFA2PyN+E+/KrQEEubUrf98G4SlsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lY2UyZWItODNmYS00NzZiLWFiOTgt Njg4NzYyYmI5ODVlLzEvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9lY2UyZWItODNmYS00NzZiLWFiOTgtNjg4NzYyYmI5ODVl LzEvRFlfSTM0VDc4cXRBUVM1dFN0XzN3YmhLV3k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbH7K1Km GKLbKxbygsxgNMYPz26o3XGeEJycnt5gJnp82jcGkF9/F6nD7bPfo8FOVVfZ5dBF YekZFm+YrzeUD5/dDNewse0PEe8k4HbHJuwPqeaOJ2JfgqwM1ZbkbfIj8nNx4HFX On5mOibP08RqhjnZQQEk229IQeMsLuwuQK+Cf02gdHUiyBFJqZ3yAs4y8Ltw3ZvO 6sH2BkEw1pugF4LdJHN66TZMH1l0IGmvajbSFl6DqcWIJyhR64XwyNP3MHGhwL20 z1nopTh5A2r197S4gDUJ53R77f0y7IgEcQ++WCgZjC71g5q4HmVPxb/nd40iEkuG R8L5TDAfGiVOpA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:15:16 2025 by rpki-client