This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft File: dYib2lT4hX2kKQxnebwAYR5z4hI.mft (raw, json) Hash identifier: RcA+nA54u9DBL76zafRRgkOjnnYeIeyo6wegba+0yug= Subject key identifier: 92:00:EB:09:2B:43:53:7C:FA:6C:B9:98:E6:A3:8F:AB:E6:EA:8E:DA Authority key identifier: 75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12 Certificate issuer: /CN=75889bda54f8857da4290c6779bc00611e73e212 Certificate serial: 019AF5E60F4B53D70053270FAD5F07BA22A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 23:01:26 +0000 Manifest this update: Sat 06 Dec 2025 23:01:26 +0000 Manifest next update: Sun 07 Dec 2025 23:01:26 +0000 Files and hashes: 1: T_e8rESGCEo93LhSN21hTfmrTUk.roa (hash: atiJpHuf3SkNFx9qJY7AqgXkIGShTie6KIKrkLdR6O0=) 2: dYib2lT4hX2kKQxnebwAYR5z4hI.crl (hash: eujmedfZdKjdjQnk5fhuKkojJXv8zMS8s3qe/sL2az0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:0f:4b:53:d7:00:53:27:0f:ad:5f:07:ba:22:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75889bda54f8857da4290c6779bc00611e73e212 Validity Not Before: Dec 6 23:01:26 2025 GMT Not After : Dec 7 23:01:26 2025 GMT Subject: CN=9200eb092b43537cfa6cb998e6a38fabe6ea8eda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b8:c4:ee:5b:70:40:3a:fc:7f:e1:f9:6e:2e: 5d:4e:e3:e2:38:b7:41:41:0d:3d:6d:29:4d:70:de: da:46:00:55:5a:31:df:81:c1:f2:03:8b:0f:29:62: ba:7e:76:20:10:06:60:fe:e8:c1:12:64:8c:08:53: a9:bb:c7:6d:34:81:ca:13:85:0a:42:ed:39:ef:f6: 02:ae:00:0b:f3:0b:b1:af:25:34:86:73:d0:03:d4: e7:b6:b2:ac:ed:a7:cc:ff:0a:b4:fb:71:85:63:ff: a4:58:7e:51:2a:6b:3f:09:20:16:51:30:b1:26:ca: 61:d2:55:56:26:c0:04:dd:c2:60:f2:a1:5f:61:a8: 47:3d:d5:c4:06:e4:61:9b:c5:fd:57:a6:74:98:a3: cb:4f:fc:ef:f4:a9:2b:5f:aa:4b:d3:6a:a1:b2:e6: 3b:1b:40:f8:d2:2c:0c:25:14:c8:ad:7f:d3:cc:04: 14:6a:e6:55:84:4a:0b:61:46:55:79:c1:e5:40:0a: 4d:0f:f0:b5:d9:41:d6:11:d2:2a:dd:38:54:2f:99: 3a:73:e5:6e:ec:25:9d:b2:ed:73:ad:b3:6d:09:32: 49:7a:a8:aa:dc:46:e8:56:28:d9:7e:30:d7:34:89: 09:83:0e:65:c5:11:ef:97:79:19:81:8c:1c:07:38: dc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:00:EB:09:2B:43:53:7C:FA:6C:B9:98:E6:A3:8F:AB:E6:EA:8E:DA X509v3 Authority Key Identifier: keyid:75:88:9B:DA:54:F8:85:7D:A4:29:0C:67:79:BC:00:61:1E:73:E2:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYib2lT4hX2kKQxnebwAYR5z4hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6db2f6-e87b-4e1c-82c7-e78553a037bd/1/dYib2lT4hX2kKQxnebwAYR5z4hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:60:b4:33:fc:c6:7d:fd:8f:65:27:9a:83:db:b8:b1:fb:49: 44:21:1a:1d:45:13:24:18:ac:d9:68:cf:e0:0d:f7:3e:97:35: db:c8:91:ec:fc:93:b6:74:a8:e8:a7:e7:3b:5f:c1:ba:56:a6: 7d:8d:e9:3f:10:72:e1:2e:69:a1:37:81:a2:cb:cb:d3:e1:aa: 09:e9:25:47:1d:e3:2b:93:f0:be:12:47:48:ed:78:3f:b4:41: 15:a0:87:5f:2a:58:6b:34:d0:ef:22:ce:26:3a:1a:74:9a:a8: 28:d9:cd:7e:5b:08:db:89:42:24:25:67:84:74:84:49:03:8f: bf:33:b6:b8:11:28:a0:47:4f:e1:82:4d:a5:b4:25:5a:38:87: ee:c3:39:95:09:07:35:b3:68:bf:32:20:32:3e:35:1c:79:b1: ad:52:9e:e6:d3:93:64:68:17:8b:f7:7d:ef:bf:d4:eb:90:aa: 7d:44:c1:9d:df:72:5b:17:7c:94:6b:b3:1f:60:55:26:61:03: a3:7b:c4:6c:2b:99:bf:84:7f:7d:10:83:af:c3:09:5d:3d:f4: 86:92:f1:f1:71:ed:fa:7b:be:6e:f1:b3:f8:5d:41:38:15:d6: ef:c7:31:36:e5:54:f6:99:18:d8:5e:d5:b2:9d:8a:3a:eb:6f: 5b:c7:c8:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15g9LU9cAUycPrV8HuiKoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ODg5YmRhNTRmODg1N2RhNDI5MGM2Nzc5YmMwMDYxMWU3 M2UyMTIwHhcNMjUxMjA2MjMwMTI2WhcNMjUxMjA3MjMwMTI2WjAzMTEwLwYDVQQD Eyg5MjAwZWIwOTJiNDM1MzdjZmE2Y2I5OThlNmEzOGZhYmU2ZWE4ZWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7jE7ltwQDr8f+H5bi5dTuPiOLdB QQ09bSlNcN7aRgBVWjHfgcHyA4sPKWK6fnYgEAZg/ujBEmSMCFOpu8dtNIHKE4UK Qu057/YCrgAL8wuxryU0hnPQA9TntrKs7afM/wq0+3GFY/+kWH5RKms/CSAWUTCx Jsph0lVWJsAE3cJg8qFfYahHPdXEBuRhm8X9V6Z0mKPLT/zv9KkrX6pL02qhsuY7 G0D40iwMJRTIrX/TzAQUauZVhEoLYUZVecHlQApND/C12UHWEdIq3ThUL5k6c+Vu 7CWdsu1zrbNtCTJJeqiq3EboVijZfjDXNIkJgw5lxRHvl3kZgYwcBzjcqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJIA6wkrQ1N8+my5mOajj6vm6o7aMB8GA1UdIwQY MBaAFHWIm9pU+IV9pCkMZ3m8AGEec+ISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFlpYjJsVDRoWDJrS1F4bmVid0FZUjV6NGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82ZGIyZjYtZTg3Yi00ZTFjLTgyYzct ZTc4NTUzYTAzN2JkLzEvZFlpYjJsVDRoWDJrS1F4bmVid0FZUjV6NGhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS82ZGIyZjYtZTg3Yi00ZTFjLTgyYzctZTc4NTUzYTAzN2Jk LzEvZFlpYjJsVDRoWDJrS1F4bmVid0FZUjV6NGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWC0M/zG ff2PZSeag9u4sftJRCEaHUUTJBis2WjP4A33Ppc128iR7PyTtnSo6KfnO1/Bulam fY3pPxBy4S5poTeBosvL0+GqCeklRx3jK5PwvhJHSO14P7RBFaCHXypYazTQ7yLO JjoadJqoKNnNflsI24lCJCVnhHSESQOPvzO2uBEooEdP4YJNpbQlWjiH7sM5lQkH NbNovzIgMj41HHmxrVKe5tOTZGgXi/d977/U65CqfUTBnd9yWxd8lGuzH2BVJmED o3vEbCuZv4R/fRCDr8MJXT30hpLx8XHt+nu+bvGz+F1BOBXW78cxNuVU9pkY2F7V sp2KOutvW8fI2A== -----END CERTIFICATE-----Generated at Sun Dec 7 03:19:22 2025 by rpki-client