This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft File: DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft (raw, json) Hash identifier: 7pdM7v/9joGMzvLBE9f7iBrdQSY8JUYeM1P33ik8Oes= Subject key identifier: EA:3B:40:A3:B4:05:22:E4:DC:1C:D8:E0:BF:A0:F4:CC:F4:73:A9:03 Authority key identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2 Certificate issuer: /CN=0d8be474c155fc13847b859501a553cffc3ac4b2 Certificate serial: 019B2DB0575DA97CC859F96A5BE21F136B3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft Manifest number: 07FE Signing time: Wed 17 Dec 2025 19:01:29 +0000 Manifest this update: Wed 17 Dec 2025 19:01:29 +0000 Manifest next update: Thu 18 Dec 2025 19:01:29 +0000 Files and hashes: 1: DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl (hash: H8hAjKeRjJJc6d5nKsdT+vjvOVQnPyWBR8JfvBSqdlg=) 2: NfNxh6P1uZhDH6XoBFouc3RXHCs.roa (hash: qkk+5kxxRuEkhJwe+gYaKfgrph8xFe5jspGXDjsvcA0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:b0:57:5d:a9:7c:c8:59:f9:6a:5b:e2:1f:13:6b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d8be474c155fc13847b859501a553cffc3ac4b2 Validity Not Before: Dec 17 19:01:29 2025 GMT Not After : Dec 18 19:01:29 2025 GMT Subject: CN=ea3b40a3b40522e4dc1cd8e0bfa0f4ccf473a903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e2:b8:de:28:76:0e:cc:48:df:27:fc:9a:05: 1d:a4:69:0f:f2:05:e8:9f:7f:eb:43:32:a9:37:0a: 79:e9:eb:9f:a1:09:6a:c4:be:61:38:e6:fc:cd:de: 81:a7:ce:1d:8d:63:f1:86:18:06:e8:69:e0:87:d3: d6:29:cd:f7:07:db:43:c6:d2:64:1c:aa:59:b1:dd: 83:6c:45:3c:71:45:89:97:87:80:85:6f:93:0f:1b: 61:7a:bf:0e:c9:04:15:64:f6:6e:1d:37:59:65:d2: b4:b2:d0:61:98:70:ad:d4:b0:59:f3:e8:90:eb:42: e0:a5:92:91:95:97:47:86:16:7b:7e:c3:fd:31:f1: 94:1c:75:b3:33:db:be:58:fe:cd:7c:6e:c4:fb:42: eb:5c:de:a9:a7:71:9f:1f:ab:54:0b:ba:da:8b:f2: c4:6b:a5:b5:e3:ae:78:b9:c2:98:41:1e:fd:d7:2a: 71:1d:d1:4b:27:03:6f:62:af:e8:dc:88:79:ce:27: 6f:38:98:ea:b5:b0:27:85:bb:7f:68:1b:93:16:0a: be:d0:f1:0b:2a:d7:d7:25:02:ca:92:ca:36:80:d7: ac:75:d6:f0:2b:59:09:ca:c3:07:ad:88:74:bb:fb: 50:01:e7:7e:89:cd:6c:17:2d:92:d1:5c:fe:4d:ac: 0a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:3B:40:A3:B4:05:22:E4:DC:1C:D8:E0:BF:A0:F4:CC:F4:73:A9:03 X509v3 Authority Key Identifier: keyid:0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:39:c9:34:4a:e8:ce:3a:44:9d:7b:0a:46:aa:d3:c6:62:c7: 83:0d:fd:f2:cd:ca:af:a4:9e:72:09:44:b8:0e:c8:40:3a:48: c6:fe:33:5c:4b:c9:f1:6a:36:4c:f1:78:20:84:81:ca:67:d5: a8:b0:09:9a:58:af:02:97:d7:4c:96:da:77:3c:88:b2:0f:9d: 09:5b:3d:5e:cb:24:09:d6:d5:fc:db:54:48:b8:81:f5:ae:8e: f0:bf:df:52:03:6c:23:0f:a3:e1:c6:e0:d6:50:ce:59:e3:5a: 4e:1d:10:fe:65:15:cd:9a:46:b3:b2:39:67:90:64:42:6e:d0: 64:77:90:dd:0e:36:da:22:4d:df:a2:ef:7d:1f:f3:5b:07:e8: 9d:25:9f:d2:fb:fa:02:9e:6e:2b:29:34:86:21:d1:8f:73:4d: 54:af:db:97:39:93:30:b7:07:82:e3:21:80:e6:3a:3a:a6:2a: 4d:7b:cb:1b:b6:a7:c6:8b:62:2e:20:eb:88:4b:c3:dc:98:c2: cc:73:75:40:57:a5:b6:c8:9c:a1:12:2d:ac:5e:e8:8c:3a:aa: 73:4a:4e:36:34:72:48:bd:ba:a9:53:21:de:fc:85:95:f3:6f: d5:d9:24:f1:07:17:e4:f1:c7:ce:8b:24:66:a8:ed:08:04:73: 93:1c:5a:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstsFddqXzIWflqW+IfE2s/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkOGJlNDc0YzE1NWZjMTM4NDdiODU5NTAxYTU1M2NmZmMz YWM0YjIwHhcNMjUxMjE3MTkwMTI5WhcNMjUxMjE4MTkwMTI5WjAzMTEwLwYDVQQD EyhlYTNiNDBhM2I0MDUyMmU0ZGMxY2Q4ZTBiZmEwZjRjY2Y0NzNhOTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseK43ih2DsxI3yf8mgUdpGkP8gXo n3/rQzKpNwp56eufoQlqxL5hOOb8zd6Bp84djWPxhhgG6Gngh9PWKc33B9tDxtJk HKpZsd2DbEU8cUWJl4eAhW+TDxther8OyQQVZPZuHTdZZdK0stBhmHCt1LBZ8+iQ 60LgpZKRlZdHhhZ7fsP9MfGUHHWzM9u+WP7NfG7E+0LrXN6pp3GfH6tUC7rai/LE a6W14654ucKYQR791ypxHdFLJwNvYq/o3Ih5zidvOJjqtbAnhbt/aBuTFgq+0PEL KtfXJQLKkso2gNesddbwK1kJysMHrYh0u/tQAed+ic1sFy2S0Vz+TawK/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOo7QKO0BSLk3BzY4L+g9Mz0c6kDMB8GA1UdIwQY MBaAFA2L5HTBVfwThHuFlQGlU8/8OsSyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFl2a2RNRlZfQk9FZTRXVkFhVlR6X3c2eExJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9mZDJlZmUtMTQ3MS00MmQ4LTkzNDct NDg2MWQ0M2UyNGVmLzEvRFl2a2RNRlZfQk9FZTRXVkFhVlR6X3c2eExJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9mZDJlZmUtMTQ3MS00MmQ4LTkzNDctNDg2MWQ0M2UyNGVm LzEvRFl2a2RNRlZfQk9FZTRXVkFhVlR6X3c2eExJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdznJNEro zjpEnXsKRqrTxmLHgw398s3Kr6SecglEuA7IQDpIxv4zXEvJ8Wo2TPF4IISBymfV qLAJmlivApfXTJbadzyIsg+dCVs9XsskCdbV/NtUSLiB9a6O8L/fUgNsIw+j4cbg 1lDOWeNaTh0Q/mUVzZpGs7I5Z5BkQm7QZHeQ3Q422iJN36LvfR/zWwfonSWf0vv6 Ap5uKyk0hiHRj3NNVK/blzmTMLcHguMhgOY6OqYqTXvLG7anxotiLiDriEvD3JjC zHN1QFeltsicoRItrF7ojDqqc0pONjRySL26qVMh3vyFlfNv1dkk8QcX5PHHzosk ZqjtCARzkxxagw== -----END CERTIFICATE-----Generated at Wed Dec 17 21:05:31 2025 by rpki-client