This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft File: dYOxUbdLsu2w9c5rbpux4MPQrRs.mft (raw, json) Hash identifier: GYfR3SIi9qAq6niyoHUTNr6U5F069t3eF3f0qgpEg80= Subject key identifier: FD:84:A2:76:2F:E8:F7:29:C6:53:83:DF:DC:DF:D4:45:C9:C3:3A:46 Authority key identifier: 75:83:B1:51:B7:4B:B2:ED:B0:F5:CE:6B:6E:9B:B1:E0:C3:D0:AD:1B Certificate issuer: /CN=7583b151b74bb2edb0f5ce6b6e9bb1e0c3d0ad1b Certificate serial: 019AF19AF2766976E1E6571DB2624A0D6330 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 03:00:54 +0000 Manifest this update: Sat 06 Dec 2025 03:00:54 +0000 Manifest next update: Sun 07 Dec 2025 03:00:54 +0000 Files and hashes: 1: dYOxUbdLsu2w9c5rbpux4MPQrRs.crl (hash: aGxVo1VL6+nZ7zB50yOagPlmnGRDxp80G3s4J7qQb6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:f2:76:69:76:e1:e6:57:1d:b2:62:4a:0d:63:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7583b151b74bb2edb0f5ce6b6e9bb1e0c3d0ad1b Validity Not Before: Dec 6 03:00:54 2025 GMT Not After : Dec 7 03:00:54 2025 GMT Subject: CN=fd84a2762fe8f729c65383dfdcdfd445c9c33a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2c:fe:d5:0a:88:ee:b3:5c:54:76:c8:55:a6: 06:22:93:b2:fe:cf:97:8a:46:4a:f5:07:da:80:d3: 4b:59:33:62:0d:04:8d:59:9b:32:3c:38:f5:07:ff: 8d:a0:99:c5:48:3e:4e:6d:cc:37:21:36:e8:db:0a: be:0d:7a:6d:c8:ec:5f:0d:9f:5b:f1:43:39:e7:bd: 59:8d:46:cb:25:07:be:f4:59:77:41:f3:d1:dc:a2: 82:20:6c:93:e7:3f:3d:63:8c:50:ec:61:99:89:7a: da:53:17:58:00:6d:48:77:f3:f6:95:b6:f4:30:f5: e3:2c:87:d9:5d:5d:c7:50:36:1c:39:ce:01:ae:83: 9b:cf:d5:ff:af:eb:33:d2:4e:ea:a6:6a:c5:9a:7c: 09:0c:50:18:20:70:fe:41:e3:42:3b:9f:e6:6b:44: 4e:db:ad:48:fd:97:b8:ae:c5:6e:1a:fa:fc:33:27: 10:68:bb:83:4c:51:64:c2:2d:86:23:e9:d0:7a:b3: 70:3e:4e:1e:ca:15:b0:0a:90:e3:9a:89:a6:3c:79: d7:0c:23:2c:17:80:dd:47:74:69:77:86:3c:78:c9: 29:4b:48:3b:ad:ad:82:00:f0:9e:0a:5f:13:6c:cc: 02:76:cf:3d:f9:9c:e9:0d:02:79:8b:05:d8:c0:4c: 81:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:84:A2:76:2F:E8:F7:29:C6:53:83:DF:DC:DF:D4:45:C9:C3:3A:46 X509v3 Authority Key Identifier: keyid:75:83:B1:51:B7:4B:B2:ED:B0:F5:CE:6B:6E:9B:B1:E0:C3:D0:AD:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f1:05:7e:42:cb:c9:8b:6d:6e:dd:74:c3:ef:69:52:20:54: cd:8f:b8:0b:69:ab:70:80:31:21:0b:82:d0:1f:59:00:73:ae: f7:a7:5c:d5:61:20:79:31:d1:8f:fa:7b:bf:c0:30:20:10:63: 4a:96:e1:a4:23:ea:27:a6:f1:5c:5a:1b:e0:ec:f0:11:c5:37: a5:1b:55:49:2b:9c:5a:87:96:5a:ff:4a:e6:e3:a2:7f:98:f5: b9:d1:19:2a:6e:a5:dd:55:c3:00:76:8d:a2:20:3a:77:1a:2f: 98:05:a9:69:7b:27:b6:5f:c1:f6:22:6f:e9:ab:a9:0c:0c:10: ed:82:8b:eb:df:fa:38:32:09:e7:72:54:e6:18:2c:f4:fd:80: f4:60:71:42:fa:e1:f9:76:4f:c9:1a:19:1f:18:3e:e2:97:1b: 72:bc:ae:bf:a0:e4:dc:47:4c:58:11:3c:64:3a:58:0e:dd:4a: 13:82:1e:3f:9d:14:10:84:8e:e9:c3:5a:62:ef:fb:55:c2:2e: 6d:ca:06:36:48:9b:57:0c:12:3c:f3:6a:3a:e1:60:63:d1:7d: 92:27:d9:9b:36:68:94:40:a2:0e:3a:40:07:66:49:54:3b:c3: 05:70:48:4c:26:c5:ec:a9:ca:b5:55:55:13:20:b7:2e:bc:41: dd:4d:95:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvJ2aXbh5lcdsmJKDWMwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ODNiMTUxYjc0YmIyZWRiMGY1Y2U2YjZlOWJiMWUwYzNk MGFkMWIwHhcNMjUxMjA2MDMwMDU0WhcNMjUxMjA3MDMwMDU0WjAzMTEwLwYDVQQD EyhmZDg0YTI3NjJmZThmNzI5YzY1MzgzZGZkY2RmZDQ0NWM5YzMzYTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyz+1QqI7rNcVHbIVaYGIpOy/s+X ikZK9QfagNNLWTNiDQSNWZsyPDj1B/+NoJnFSD5Obcw3ITbo2wq+DXptyOxfDZ9b 8UM5571ZjUbLJQe+9Fl3QfPR3KKCIGyT5z89Y4xQ7GGZiXraUxdYAG1Id/P2lbb0 MPXjLIfZXV3HUDYcOc4BroObz9X/r+sz0k7qpmrFmnwJDFAYIHD+QeNCO5/ma0RO 261I/Ze4rsVuGvr8MycQaLuDTFFkwi2GI+nQerNwPk4eyhWwCpDjmommPHnXDCMs F4DdR3Rpd4Y8eMkpS0g7ra2CAPCeCl8TbMwCds89+ZzpDQJ5iwXYwEyBpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2EonYv6PcpxlOD39zf1EXJwzpGMB8GA1UdIwQY MBaAFHWDsVG3S7LtsPXOa26bseDD0K0bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFlPeFViZExzdTJ3OWM1cmJwdXg0TVBRclJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wNDY3ZGMtY2NmMy00MzMxLTk1N2Mt MTU4NjA2MzE4NTI1LzEvZFlPeFViZExzdTJ3OWM1cmJwdXg0TVBRclJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8wNDY3ZGMtY2NmMy00MzMxLTk1N2MtMTU4NjA2MzE4NTI1 LzEvZFlPeFViZExzdTJ3OWM1cmJwdXg0TVBRclJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/EFfkLL yYttbt10w+9pUiBUzY+4C2mrcIAxIQuC0B9ZAHOu96dc1WEgeTHRj/p7v8AwIBBj SpbhpCPqJ6bxXFob4OzwEcU3pRtVSSucWoeWWv9K5uOif5j1udEZKm6l3VXDAHaN oiA6dxovmAWpaXsntl/B9iJv6aupDAwQ7YKL69/6ODIJ53JU5hgs9P2A9GBxQvrh +XZPyRoZHxg+4pcbcryuv6Dk3EdMWBE8ZDpYDt1KE4IeP50UEISO6cNaYu/7VcIu bcoGNkibVwwSPPNqOuFgY9F9kifZmzZolECiDjpAB2ZJVDvDBXBITCbF7KnKtVVV EyC3LrxB3U2VGA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:19:59 2025 by rpki-client