This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft File: DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft (raw, json) Hash identifier: SIO5drGJhVgvzKHN4da2zZEGLrYKs4tpx4BwuZ56vvY= Subject key identifier: 56:C6:31:52:CE:E4:D7:45:ED:45:FB:43:FB:D6:4E:48:89:E9:F2:39 Authority key identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2 Certificate issuer: /CN=0d8be474c155fc13847b859501a553cffc3ac4b2 Certificate serial: 019AF1D20B59D7BDC293556745B7CB4A487B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft Manifest number: 07DF Signing time: Sat 06 Dec 2025 04:01:05 +0000 Manifest this update: Sat 06 Dec 2025 04:01:05 +0000 Manifest next update: Sun 07 Dec 2025 04:01:05 +0000 Files and hashes: 1: DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl (hash: v9cK4IUNkbfxn3upW4GAYEcyIAlfJdjFp2ocyCJjZMw=) 2: NfNxh6P1uZhDH6XoBFouc3RXHCs.roa (hash: qkk+5kxxRuEkhJwe+gYaKfgrph8xFe5jspGXDjsvcA0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:0b:59:d7:bd:c2:93:55:67:45:b7:cb:4a:48:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d8be474c155fc13847b859501a553cffc3ac4b2 Validity Not Before: Dec 6 04:01:05 2025 GMT Not After : Dec 7 04:01:05 2025 GMT Subject: CN=56c63152cee4d745ed45fb43fbd64e4889e9f239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:aa:6b:a7:0a:23:62:b8:8e:70:eb:09:8d:27: 65:e6:03:83:f7:9a:42:86:ba:60:de:e4:31:1d:41: 08:6b:08:a2:91:ff:4a:a1:bf:19:44:e7:db:56:f2: 2a:72:23:ea:c0:a3:31:07:ae:24:9b:89:a9:8d:05: 2f:22:fa:70:76:92:d3:36:92:d8:f5:5a:e5:36:f8: 34:12:1e:e4:02:dd:e0:fa:dc:51:c8:3e:57:82:9e: b4:6d:c3:cf:bb:98:2c:b2:e2:12:4f:b3:0c:9e:3a: 8e:be:17:93:cd:65:e4:cf:39:a7:e3:b4:01:ef:43: 2f:b2:8b:6b:87:e2:04:e6:fa:7b:39:2b:59:69:e6: 18:12:05:d3:28:94:7d:37:d1:e1:b9:e5:82:ac:f9: e2:a0:6e:65:95:75:41:58:12:b8:92:ea:eb:46:aa: 4a:c5:30:ae:2d:49:20:dd:0f:08:4a:2a:d3:10:4f: e2:19:53:62:a9:27:c6:60:1a:59:24:7e:cd:f3:2a: 86:6d:9f:da:94:3c:49:63:48:63:94:29:c4:44:6a: d4:94:e2:9d:25:e1:21:00:aa:fb:59:74:32:0f:40: e8:e8:28:c8:a5:6f:2a:c4:47:59:9e:40:00:92:a0: b1:52:29:ad:d4:d8:51:7d:72:fb:f3:eb:9a:09:f0: c4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C6:31:52:CE:E4:D7:45:ED:45:FB:43:FB:D6:4E:48:89:E9:F2:39 X509v3 Authority Key Identifier: keyid:0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:7a:df:e6:76:e9:1a:01:96:a0:bd:d1:8f:28:2d:dd:c9:eb: 8f:0f:37:f4:4e:fd:fa:c8:ee:95:d3:bd:f2:5d:fd:03:b3:80: df:05:36:53:8c:4d:ea:6f:a4:d4:4b:45:f8:ae:e6:99:9f:26: 4e:41:14:16:14:b0:8d:03:e8:76:1a:64:1a:ee:50:d9:e2:c0: 47:86:29:fd:e0:b5:2d:dc:f6:c8:07:8f:11:59:4c:ab:4c:4e: f0:ee:70:73:50:a7:3e:67:7e:c7:d8:cb:72:1d:44:f6:11:d0: 7e:5a:ae:75:b0:c0:4e:47:27:7a:3f:84:59:23:61:9f:d1:dd: fa:44:b8:cb:4c:30:46:d5:14:7e:95:29:0b:d5:2a:c5:63:46: e3:44:e0:94:af:87:9f:0f:ff:4a:b5:79:82:94:d2:f7:ed:97: 6d:c9:36:59:ab:a0:56:a9:7a:15:2f:d3:58:19:27:da:8b:bb: 89:4b:09:64:f7:e8:79:09:38:7a:60:3e:6b:8b:14:23:26:f7: c4:1b:f9:b3:aa:1b:60:40:10:81:75:e6:c9:df:a3:b0:26:b1: 5d:3d:4e:82:ff:91:ac:5a:05:e7:f1:a3:e4:c4:b9:81:00:fc: 5d:cd:54:68:42:61:52:c8:1a:60:a6:b2:68:54:1b:af:bb:08: d4:1c:4c:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gtZ173Ck1VnRbfLSkh7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkOGJlNDc0YzE1NWZjMTM4NDdiODU5NTAxYTU1M2NmZmMz YWM0YjIwHhcNMjUxMjA2MDQwMTA1WhcNMjUxMjA3MDQwMTA1WjAzMTEwLwYDVQQD Eyg1NmM2MzE1MmNlZTRkNzQ1ZWQ0NWZiNDNmYmQ2NGU0ODg5ZTlmMjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqprpwojYriOcOsJjSdl5gOD95pC hrpg3uQxHUEIawiikf9Kob8ZROfbVvIqciPqwKMxB64km4mpjQUvIvpwdpLTNpLY 9VrlNvg0Eh7kAt3g+txRyD5Xgp60bcPPu5gssuIST7MMnjqOvheTzWXkzzmn47QB 70Mvsotrh+IE5vp7OStZaeYYEgXTKJR9N9HhueWCrPnioG5llXVBWBK4kurrRqpK xTCuLUkg3Q8ISirTEE/iGVNiqSfGYBpZJH7N8yqGbZ/alDxJY0hjlCnERGrUlOKd JeEhAKr7WXQyD0Do6CjIpW8qxEdZnkAAkqCxUimt1NhRfXL78+uaCfDEIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFbGMVLO5NdF7UX7Q/vWTkiJ6fI5MB8GA1UdIwQY MBaAFA2L5HTBVfwThHuFlQGlU8/8OsSyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFl2a2RNRlZfQk9FZTRXVkFhVlR6X3c2eExJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9mZDJlZmUtMTQ3MS00MmQ4LTkzNDct NDg2MWQ0M2UyNGVmLzEvRFl2a2RNRlZfQk9FZTRXVkFhVlR6X3c2eExJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9mZDJlZmUtMTQ3MS00MmQ4LTkzNDctNDg2MWQ0M2UyNGVm LzEvRFl2a2RNRlZfQk9FZTRXVkFhVlR6X3c2eExJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXrf5nbp GgGWoL3Rjygt3cnrjw839E79+sjuldO98l39A7OA3wU2U4xN6m+k1EtF+K7mmZ8m TkEUFhSwjQPodhpkGu5Q2eLAR4Yp/eC1Ldz2yAePEVlMq0xO8O5wc1CnPmd+x9jL ch1E9hHQflqudbDATkcnej+EWSNhn9Hd+kS4y0wwRtUUfpUpC9UqxWNG40TglK+H nw//SrV5gpTS9+2Xbck2WaugVql6FS/TWBkn2ou7iUsJZPfoeQk4emA+a4sUIyb3 xBv5s6obYEAQgXXmyd+jsCaxXT1Ogv+RrFoF5/Gj5MS5gQD8Xc1UaEJhUsgaYKay aFQbr7sI1BxMXw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:57:41 2025 by rpki-client