This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft File: DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft (raw, json) Hash identifier: FgHSw14mSkGdua0e2E4hH61in4t9Y5dep/uf7umSwDA= Subject key identifier: F3:D3:7D:1F:A7:00:BB:45:61:00:E3:66:73:F4:C7:C1:7D:BA:A4:8A Authority key identifier: 0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5 Certificate issuer: /CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5 Certificate serial: 019AF23F9F8F1790806E61C5DF5542C42653 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft Manifest number: 16F7 Signing time: Sat 06 Dec 2025 06:00:47 +0000 Manifest this update: Sat 06 Dec 2025 06:00:47 +0000 Manifest next update: Sun 07 Dec 2025 06:00:47 +0000 Files and hashes: 1: DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl (hash: w0rnssra8svXn2vSWyQcTpM/WE2JQiRlH9td7r8E8bw=) 2: KvpIDJeUQ3PjlBVGV8W3vX2yJrA.roa (hash: Hj3l47kt2nIv7SDXU84uufeP/5O2LYhvonXGlVlGdWo=) 3: LHzy93jejLfua__lp49Yht10cg4.roa (hash: +Pxk7BfXvDPKOZb+V9E2LwQFfxHHkQA8a+ipeBYUFC8=) 4: _I32ouhbcP7uIlgPiXnpN-afsyU.roa (hash: esu4xz3AO+6hl9m1YOif9vfWELQmZoJKQSaoLGoeI/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:9f:8f:17:90:80:6e:61:c5:df:55:42:c4:26:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5 Validity Not Before: Dec 6 06:00:47 2025 GMT Not After : Dec 7 06:00:47 2025 GMT Subject: CN=f3d37d1fa700bb456100e36673f4c7c17dbaa48a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5d:0f:5b:4c:6e:3d:05:f7:80:a5:d5:b2:cd: ac:2b:25:99:74:03:c4:88:59:60:d6:5a:61:30:ae: b0:79:82:57:1b:bc:61:1f:02:62:9a:bb:89:3d:bd: fb:a7:af:90:c5:94:ae:7d:59:d2:60:3b:05:a3:e5: 3c:0d:29:bd:a7:a5:0b:55:4f:e9:92:83:a6:fe:54: 93:e8:93:71:7d:c9:29:7a:02:c3:21:d4:e3:70:68: a8:33:81:f7:80:dd:34:ef:7b:85:7b:40:34:89:da: 67:d3:b2:93:f5:f1:34:9a:1a:bd:8a:f2:f7:cc:50: 3f:08:e3:47:87:08:85:fc:e2:7e:6a:51:bb:96:41: 08:f3:bb:e1:dd:b1:fc:c8:86:b0:64:5a:74:b3:66: ca:4e:27:04:13:dc:09:2d:68:85:ec:06:04:54:a4: 4d:6b:84:ab:81:47:55:51:8a:92:d2:42:6b:31:13: f7:ca:83:c8:8c:ae:68:47:d6:5d:16:52:d0:37:1a: fd:fb:3c:de:6e:13:39:30:66:b4:ef:de:63:28:6b: 4c:9f:7f:1a:e0:8b:56:32:35:57:99:b0:05:f0:20: 4d:f3:e1:7c:0a:94:93:16:87:91:ba:40:2a:1d:3d: 31:ee:ac:be:87:36:e6:27:59:28:df:aa:89:77:ea: 4d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:D3:7D:1F:A7:00:BB:45:61:00:E3:66:73:F4:C7:C1:7D:BA:A4:8A X509v3 Authority Key Identifier: keyid:0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:de:02:ef:f5:a9:bd:e7:ce:84:11:3c:01:7e:c7:d0:be:c8: 1c:b8:e6:33:83:0a:b0:28:7c:3b:a5:ac:54:88:5b:04:69:bb: 2e:40:2e:37:ce:79:ad:75:71:ca:5e:4d:1b:f6:34:d4:53:d7: 98:43:68:a4:b2:c7:bc:1a:bd:85:c4:c3:24:ad:2e:22:c6:8d: 1b:e0:24:6b:8b:b1:ed:63:f1:33:5e:f6:9d:9f:26:fc:55:a1: 8a:e3:27:ac:25:a8:67:a8:cb:e2:5d:e0:c1:71:53:f4:ea:36: db:83:9f:6e:c8:46:37:4b:86:82:71:d6:ab:e5:23:cc:ef:96: e7:8c:2a:cf:51:c1:4f:a8:86:04:3a:5f:fc:4a:0a:82:58:e4: e0:33:5a:65:f8:4d:e7:c8:55:92:7b:5a:73:56:54:46:21:f0: b7:fa:ac:c7:c4:0a:bc:c7:2c:5a:1f:97:62:aa:9a:bc:fa:63: fb:87:50:fd:30:cb:27:27:38:51:63:2a:bf:76:33:c9:6f:90: 17:b9:b0:54:8f:fd:22:48:a3:6e:4c:c9:d9:12:d7:9c:65:1c: df:0b:51:8b:12:eb:b4:fa:d9:af:bf:9b:6e:32:b3:58:df:cb: 03:0a:0d:dc:82:80:28:b6:df:82:08:a6:5a:47:66:ae:1b:98: 08:f4:c9:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5+PF5CAbmHF31VCxCZTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMjFiNzhjZTk3YjBmNWZiM2Q4OGJmOTVjZmJiMDhiMmZi ZWE4ZTUwHhcNMjUxMjA2MDYwMDQ3WhcNMjUxMjA3MDYwMDQ3WjAzMTEwLwYDVQQD EyhmM2QzN2QxZmE3MDBiYjQ1NjEwMGUzNjY3M2Y0YzdjMTdkYmFhNDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV0PW0xuPQX3gKXVss2sKyWZdAPE iFlg1lphMK6weYJXG7xhHwJimruJPb37p6+QxZSufVnSYDsFo+U8DSm9p6ULVU/p koOm/lST6JNxfckpegLDIdTjcGioM4H3gN0073uFe0A0idpn07KT9fE0mhq9ivL3 zFA/CONHhwiF/OJ+alG7lkEI87vh3bH8yIawZFp0s2bKTicEE9wJLWiF7AYEVKRN a4SrgUdVUYqS0kJrMRP3yoPIjK5oR9ZdFlLQNxr9+zzebhM5MGa0795jKGtMn38a 4ItWMjVXmbAF8CBN8+F8CpSTFoeRukAqHT0x7qy+hzbmJ1ko36qJd+pNsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPTfR+nALtFYQDjZnP0x8F9uqSKMB8GA1UdIwQY MBaAFA8ht4zpew9fs9iL+Vz7sIsvvqjlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHlHM2pPbDdEMS16Mkl2NVhQdXdpeS0tcU9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8wZjc1OTQtZjA0OC00NzNkLWEzOWEt ZGRiOWU0ZGI5OGM2LzEvRHlHM2pPbDdEMS16Mkl2NVhQdXdpeS0tcU9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8wZjc1OTQtZjA0OC00NzNkLWEzOWEtZGRiOWU0ZGI5OGM2 LzEvRHlHM2pPbDdEMS16Mkl2NVhQdXdpeS0tcU9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo94C7/Wp vefOhBE8AX7H0L7IHLjmM4MKsCh8O6WsVIhbBGm7LkAuN855rXVxyl5NG/Y01FPX mENopLLHvBq9hcTDJK0uIsaNG+Aka4ux7WPxM172nZ8m/FWhiuMnrCWoZ6jL4l3g wXFT9Oo224OfbshGN0uGgnHWq+UjzO+W54wqz1HBT6iGBDpf/EoKgljk4DNaZfhN 58hVkntac1ZURiHwt/qsx8QKvMcsWh+XYqqavPpj+4dQ/TDLJyc4UWMqv3YzyW+Q F7mwVI/9IkijbkzJ2RLXnGUc3wtRixLrtPrZr7+bbjKzWN/LAwoN3IKAKLbfggim WkdmrhuYCPTJng== -----END CERTIFICATE-----Generated at Sat Dec 6 12:04:42 2025 by rpki-client