This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft File: DyKg7jvG4y2JLt3iV8u3mRefLNY.mft (raw, json) Hash identifier: w00j6IPs4dwznoiqjnDK4TCXpALR82wVpHJSCIIcqTk= Subject key identifier: 46:C6:9E:56:34:32:F7:87:FD:97:17:57:E5:C4:78:4F:93:19:E4:7B Authority key identifier: 0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6 Certificate issuer: /CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6 Certificate serial: 019AFA675EC6590100B1D2BBEA259DD2C387 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft Manifest number: 08D0 Signing time: Sun 07 Dec 2025 20:01:09 +0000 Manifest this update: Sun 07 Dec 2025 20:01:09 +0000 Manifest next update: Mon 08 Dec 2025 20:01:09 +0000 Files and hashes: 1: 3ybDPKiA0wDv8fgYqqJjrGlrgZo.roa (hash: Lzgk9VM3/0+YuHabQnt8dL/9QNx4stqWd1uOafztoy0=) 2: DyKg7jvG4y2JLt3iV8u3mRefLNY.crl (hash: xVcfG7N6+ZQkmDwt9yYq5vEaNdpp5u5NrUj+ADpyO5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:67:5e:c6:59:01:00:b1:d2:bb:ea:25:9d:d2:c3:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6 Validity Not Before: Dec 7 20:01:09 2025 GMT Not After : Dec 8 20:01:09 2025 GMT Subject: CN=46c69e563432f787fd971757e5c4784f9319e47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:56:ab:67:bd:6e:d4:21:f9:92:3b:e5:35:79: a7:17:06:1f:c3:85:c7:73:ff:04:16:21:af:48:4e: 1e:02:62:fb:85:0f:d2:65:a4:05:92:90:db:50:6c: d9:a9:c6:ab:23:13:4f:0c:f6:b1:23:c8:f4:f1:e3: 02:da:38:2f:36:4c:3b:cc:27:c7:4e:5c:3b:fd:c8: 77:f8:47:13:71:2a:7b:82:04:f1:84:af:a3:6d:3b: 2e:a5:70:07:43:d3:61:20:cb:74:f2:fd:9b:a1:58: b6:32:a1:85:75:92:b9:c2:a6:86:6b:80:fa:b6:1b: f6:10:bb:03:55:36:ab:b9:41:16:b3:df:60:be:05: 37:82:af:bb:62:c2:da:b6:83:c7:3c:24:4a:5b:27: 50:2d:e6:68:5b:2a:ac:dd:bc:ca:48:fe:d5:60:ef: f6:de:bb:61:b9:13:10:ce:0b:4a:b4:95:7f:22:2f: 04:26:f5:0e:f8:ba:ae:90:54:3f:fc:ca:d0:99:3d: d3:7d:ed:f4:e5:f6:e1:d3:c2:48:92:43:70:67:56: 12:4a:1e:d7:f6:a1:76:b6:dc:36:e9:7b:b2:17:86: c2:4a:7b:35:5e:42:1e:93:14:ed:b3:35:ba:88:d2: f0:78:08:80:1b:27:74:ea:1e:e0:9a:02:a0:67:9f: 95:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C6:9E:56:34:32:F7:87:FD:97:17:57:E5:C4:78:4F:93:19:E4:7B X509v3 Authority Key Identifier: keyid:0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:46:18:5a:76:6f:8a:9f:6f:2f:d8:8f:f2:b5:2d:6e:da:00: 1b:a1:2a:72:40:78:a2:14:b8:4c:37:df:1b:0a:53:26:9a:0d: d1:20:5d:1f:a0:3e:cb:3c:73:34:fe:31:08:71:40:33:18:7a: eb:bc:2d:83:14:ec:17:76:da:4f:0c:89:11:b8:ee:48:9b:52: dd:8a:77:9d:db:83:69:1f:90:da:74:75:24:92:b8:41:e7:19: 4d:d7:65:e2:d0:ab:d8:5c:7e:73:01:a2:11:09:b8:12:6b:2b: 79:c2:2b:17:d6:78:9f:13:47:83:1d:b8:7d:4f:2a:bc:97:4a: db:d8:3f:fd:a0:61:cc:14:f6:f8:d9:58:a8:ee:ef:e5:82:26: ff:e4:a7:2a:53:88:fd:b7:86:55:a5:f7:fe:92:5b:13:8f:b6: 66:28:e0:e0:b4:19:11:26:6f:9c:0f:82:2d:67:11:38:b0:04: 1c:49:eb:f2:92:e5:a1:80:6a:c3:71:e9:aa:d5:b0:87:93:14: 88:9e:cf:93:6c:00:8f:b0:4e:7e:d0:3a:7d:06:17:11:2b:68: 0f:1d:b9:59:0d:bc:af:67:bc:ef:26:ce:3d:89:2a:b1:23:19: 8a:a9:38:9d:70:02:db:4c:ef:b7:f9:12:78:f9:7a:99:fb:36: 39:9a:0f:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr6Z17GWQEAsdK76iWd0sOHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMjJhMGVlM2JjNmUzMmQ4OTJlZGRlMjU3Y2JiNzk5MTc5 ZjJjZDYwHhcNMjUxMjA3MjAwMTA5WhcNMjUxMjA4MjAwMTA5WjAzMTEwLwYDVQQD Eyg0NmM2OWU1NjM0MzJmNzg3ZmQ5NzE3NTdlNWM0Nzg0ZjkzMTllNDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslarZ71u1CH5kjvlNXmnFwYfw4XH c/8EFiGvSE4eAmL7hQ/SZaQFkpDbUGzZqcarIxNPDPaxI8j08eMC2jgvNkw7zCfH Tlw7/ch3+EcTcSp7ggTxhK+jbTsupXAHQ9NhIMt08v2boVi2MqGFdZK5wqaGa4D6 thv2ELsDVTaruUEWs99gvgU3gq+7YsLatoPHPCRKWydQLeZoWyqs3bzKSP7VYO/2 3rthuRMQzgtKtJV/Ii8EJvUO+LqukFQ//MrQmT3Tfe305fbh08JIkkNwZ1YSSh7X 9qF2ttw26XuyF4bCSns1XkIekxTtszW6iNLweAiAGyd06h7gmgKgZ5+VDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEbGnlY0MveH/ZcXV+XEeE+TGeR7MB8GA1UdIwQY MBaAFA8ioO47xuMtiS7d4lfLt5kXnyzWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHlLZzdqdkc0eTJKTHQzaVY4dTNtUmVmTE5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zMDg0ZGUtYjE1OS00ZTU0LTllZDct NDJkNjc4NDA5NDRkLzEvRHlLZzdqdkc0eTJKTHQzaVY4dTNtUmVmTE5ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8zMDg0ZGUtYjE1OS00ZTU0LTllZDctNDJkNjc4NDA5NDRk LzEvRHlLZzdqdkc0eTJKTHQzaVY4dTNtUmVmTE5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn0YYWnZv ip9vL9iP8rUtbtoAG6EqckB4ohS4TDffGwpTJpoN0SBdH6A+yzxzNP4xCHFAMxh6 67wtgxTsF3baTwyJEbjuSJtS3Yp3nduDaR+Q2nR1JJK4QecZTddl4tCr2Fx+cwGi EQm4EmsrecIrF9Z4nxNHgx24fU8qvJdK29g//aBhzBT2+NlYqO7v5YIm/+SnKlOI /beGVaX3/pJbE4+2Zijg4LQZESZvnA+CLWcROLAEHEnr8pLloYBqw3HpqtWwh5MU iJ7Pk2wAj7BOftA6fQYXEStoDx25WQ28r2e87ybOPYkqsSMZiqk4nXAC20zvt/kS ePl6mfs2OZoPYw== -----END CERTIFICATE-----Generated at Sun Dec 7 22:24:54 2025 by rpki-client