This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft File: DY087TLjYPzUbBY1Vt4oqigksZs.mft (raw, json) Hash identifier: 5xTLhFHXLLAxuKGzDHk04uTTl/WssnGp66F0J8pL+IM= Subject key identifier: 14:8C:A6:B0:F5:3E:7A:79:A1:93:42:4B:EF:A6:CE:75:E0:4E:48:9A Authority key identifier: 0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B Certificate issuer: /CN=0d8d3ced32e360fcd46c163556de28aa2824b19b Certificate serial: 019AF31BEA76745E32D460C95F0BB49D936D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft Manifest number: 023A Signing time: Sat 06 Dec 2025 10:01:24 +0000 Manifest this update: Sat 06 Dec 2025 10:01:24 +0000 Manifest next update: Sun 07 Dec 2025 10:01:24 +0000 Files and hashes: 1: DY087TLjYPzUbBY1Vt4oqigksZs.crl (hash: fN8rGVsxESlLNax6M3rvBVSraEk51KBt0Huxgh4o/Po=) 2: U1RYzEbHmiXutqW8M0GkGkDLUKA.roa (hash: 8576dkRYk3dW0Y6uWzvcN1Y2+IXW0jM0HiarzKgHeX0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:ea:76:74:5e:32:d4:60:c9:5f:0b:b4:9d:93:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d8d3ced32e360fcd46c163556de28aa2824b19b Validity Not Before: Dec 6 10:01:24 2025 GMT Not After : Dec 7 10:01:24 2025 GMT Subject: CN=148ca6b0f53e7a79a193424befa6ce75e04e489a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d1:38:75:43:99:b3:f0:51:b4:ae:4b:a1:4a: a8:c7:ac:50:25:01:24:98:34:7e:56:b5:27:6f:54: 7c:19:ba:5f:4e:06:87:a7:9c:90:ba:c0:af:09:39: 81:ed:92:ba:8a:ae:65:1b:13:ee:e9:1c:16:1a:4f: 9f:8b:bb:ac:7f:49:db:0f:16:b0:83:e0:36:eb:20: f9:b4:55:4e:71:39:25:25:7e:bd:c1:99:f1:04:d6: d6:10:91:4e:52:c5:46:48:33:7a:70:74:ec:01:ab: 7c:f9:21:7b:17:46:34:71:85:44:c7:84:c2:00:5e: 85:15:4f:9b:12:3f:20:cb:88:bc:6e:c5:27:a6:f4: 70:f3:fa:eb:d6:1a:9d:8a:e2:16:a7:80:ef:2a:9a: e4:70:cd:77:89:45:6a:3c:44:81:5d:1c:54:96:19: 83:db:71:55:c4:92:b7:f8:ac:bf:22:43:93:13:bb: 6b:7c:99:38:81:2b:d6:a9:b6:b7:83:5c:60:b4:da: 70:da:0f:d1:b5:33:0c:c3:5b:fe:78:fe:c0:4e:06: ed:0b:47:16:05:46:21:0e:41:43:1e:db:e7:65:b5: 52:f1:fb:4a:25:fe:48:7a:13:53:b3:ac:df:be:7b: 77:73:ff:65:cc:d2:19:e4:03:dd:9a:da:be:19:4c: d0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8C:A6:B0:F5:3E:7A:79:A1:93:42:4B:EF:A6:CE:75:E0:4E:48:9A X509v3 Authority Key Identifier: keyid:0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:60:0d:07:d9:cd:b0:82:c8:1b:c5:54:52:00:1f:a1:b9:fb: 45:99:58:eb:82:97:78:38:00:95:e8:b4:eb:d1:3a:ec:68:22: 89:81:1d:e8:ed:03:9b:c8:69:b9:95:f4:3e:42:db:06:e1:06: 86:cb:4c:ac:63:d0:12:cb:45:90:b2:cc:60:15:57:dc:d7:41: 76:6d:dc:69:72:d7:f8:eb:29:bd:b1:2e:db:fb:5a:8a:92:e2: 32:ab:aa:59:76:d1:46:ad:ea:96:cc:6d:5b:e5:0f:b6:3e:4b: d7:74:0f:dc:4a:1d:c2:0b:6e:5b:75:2d:dd:e3:c7:21:02:ec: eb:28:bc:04:b6:17:11:37:0c:32:88:07:3e:8f:f3:d2:ad:85: 42:ce:08:95:c5:cd:e7:aa:86:6f:76:f2:4f:ad:39:2c:23:4e: 0f:ef:5d:f9:ce:d3:7d:48:e9:24:7b:d1:c4:66:02:2a:25:5e: 03:13:f1:12:4b:7f:08:84:09:73:45:88:3d:d3:8c:70:34:b4: da:af:d8:fe:36:a9:ab:f8:a1:55:02:df:4f:02:82:b9:c1:3e: f6:42:70:cf:f3:73:bf:e7:9f:e9:5a:5e:c3:50:14:a8:f7:58: f4:27:55:1d:98:7a:32:92:42:6b:82:2b:87:b9:12:af:91:9d: e3:45:62:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG+p2dF4y1GDJXwu0nZNtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkOGQzY2VkMzJlMzYwZmNkNDZjMTYzNTU2ZGUyOGFhMjgy NGIxOWIwHhcNMjUxMjA2MTAwMTI0WhcNMjUxMjA3MTAwMTI0WjAzMTEwLwYDVQQD EygxNDhjYTZiMGY1M2U3YTc5YTE5MzQyNGJlZmE2Y2U3NWUwNGU0ODlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotE4dUOZs/BRtK5LoUqox6xQJQEk mDR+VrUnb1R8GbpfTgaHp5yQusCvCTmB7ZK6iq5lGxPu6RwWGk+fi7usf0nbDxaw g+A26yD5tFVOcTklJX69wZnxBNbWEJFOUsVGSDN6cHTsAat8+SF7F0Y0cYVEx4TC AF6FFU+bEj8gy4i8bsUnpvRw8/rr1hqdiuIWp4DvKprkcM13iUVqPESBXRxUlhmD 23FVxJK3+Ky/IkOTE7trfJk4gSvWqba3g1xgtNpw2g/RtTMMw1v+eP7ATgbtC0cW BUYhDkFDHtvnZbVS8ftKJf5IehNTs6zfvnt3c/9lzNIZ5APdmtq+GUzQSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBSMprD1Pnp5oZNCS++mznXgTkiaMB8GA1UdIwQY MBaAFA2NPO0y42D81GwWNVbeKKooJLGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFkwODdUTGpZUHpVYkJZMVZ0NG9xaWdrc1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jYjZmN2UtZTNiOC00ZDBjLTgyOTMt YTQ5N2I4Y2JmMTc3LzEvRFkwODdUTGpZUHpVYkJZMVZ0NG9xaWdrc1pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9jYjZmN2UtZTNiOC00ZDBjLTgyOTMtYTQ5N2I4Y2JmMTc3 LzEvRFkwODdUTGpZUHpVYkJZMVZ0NG9xaWdrc1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWANB9nN sILIG8VUUgAfobn7RZlY64KXeDgAlei069E67GgiiYEd6O0Dm8hpuZX0PkLbBuEG hstMrGPQEstFkLLMYBVX3NdBdm3caXLX+OspvbEu2/taipLiMquqWXbRRq3qlsxt W+UPtj5L13QP3EodwgtuW3Ut3ePHIQLs6yi8BLYXETcMMogHPo/z0q2FQs4IlcXN 56qGb3byT605LCNOD+9d+c7TfUjpJHvRxGYCKiVeAxPxEkt/CIQJc0WIPdOMcDS0 2q/Y/japq/ihVQLfTwKCucE+9kJwz/Nzv+ef6Vpew1AUqPdY9CdVHZh6MpJCa4Ir h7kSr5Gd40Vi+A== -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:32 2025 by rpki-client