This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft File: dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft (raw, json) Hash identifier: rfMyme9pL3lbxCq651OxF1ZGBapsbS7HvGneKUUUQgE= Subject key identifier: 05:BA:C2:9E:7B:F2:25:FF:8F:20:DD:96:37:E8:ED:C9:B1:2E:7C:4B Authority key identifier: 76:16:24:DD:DC:5C:02:79:C7:F8:C9:FF:12:88:A4:D3:04:4C:08:47 Certificate issuer: /CN=761624dddc5c0279c7f8c9ff1288a4d3044c0847 Certificate serial: 019B33E8C25FCF1DF20F829A3A0CF66BD703 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft Manifest number: 03F1 Signing time: Fri 19 Dec 2025 00:00:50 +0000 Manifest this update: Fri 19 Dec 2025 00:00:50 +0000 Manifest next update: Sat 20 Dec 2025 00:00:50 +0000 Files and hashes: 1: dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl (hash: rguuA4oetY/FaVDLggqqwrQIwqeApNmrO1Wi1mdSMh4=) 2: uMFOgPoc2NWCSxPiOG6b1D8E-ZI.roa (hash: R/unw2gN5aPMxs/UeuzYe+LHJKBGKVUf8WbT/53nntg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:c2:5f:cf:1d:f2:0f:82:9a:3a:0c:f6:6b:d7:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=761624dddc5c0279c7f8c9ff1288a4d3044c0847 Validity Not Before: Dec 19 00:00:50 2025 GMT Not After : Dec 20 00:00:50 2025 GMT Subject: CN=05bac29e7bf225ff8f20dd9637e8edc9b12e7c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:25:c2:6e:50:cb:d3:f5:86:5b:eb:47:6c:a1: 02:9d:9f:49:16:11:3d:8b:4b:32:45:59:1c:96:be: 0e:17:22:1b:0e:e1:bf:0c:57:55:fa:7d:c6:c1:88: 97:20:2b:07:d3:e6:fe:e2:f4:0f:bd:0f:fa:60:25: 21:71:2b:66:d0:f7:ea:72:2e:19:24:78:9c:81:db: 19:a8:0a:5b:17:9c:29:f3:ce:0e:2a:09:06:83:a3: 23:7c:a6:23:49:5f:38:57:be:08:f7:05:f3:a0:c9: 26:77:52:04:a2:5d:06:b5:c1:df:1c:92:f4:5e:37: ee:75:e7:ff:94:af:67:c3:f6:3c:c3:5e:0a:42:6a: 2e:dc:49:6a:0c:fd:a4:28:c4:9e:c1:3a:0f:90:c4: de:fb:d3:5a:0e:41:ae:b4:93:15:8e:07:a0:37:10: 7d:54:42:3a:72:eb:ec:68:a6:5d:6e:0e:12:40:0f: b7:e3:6c:ea:92:2a:2b:69:4b:1c:03:1e:d3:26:d7: 1d:c5:b0:c5:d5:1f:9c:01:e2:85:51:91:8f:52:64: 20:68:f7:1b:ed:00:11:a0:eb:70:94:bf:c1:d6:75: 80:da:42:a2:ff:5b:32:dd:f8:dd:cd:26:3b:dd:dd: ce:1c:2c:33:e6:04:f3:17:ac:ec:44:06:70:61:bb: f4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:BA:C2:9E:7B:F2:25:FF:8F:20:DD:96:37:E8:ED:C9:B1:2E:7C:4B X509v3 Authority Key Identifier: keyid:76:16:24:DD:DC:5C:02:79:C7:F8:C9:FF:12:88:A4:D3:04:4C:08:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589761-c662-4f13-870a-13e8801628f5/1/dhYk3dxcAnnH-Mn_Eoik0wRMCEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:59:da:f9:64:c9:16:8e:27:b9:78:e3:1d:43:82:24:ac:48: ca:92:00:df:a6:09:36:00:78:aa:50:6f:6c:9c:84:8e:6f:f1: ef:62:03:ce:d5:1b:fc:2e:d1:8b:9e:a0:43:91:39:03:7c:39: b3:a0:8a:6a:a8:8d:46:6f:52:31:6e:b3:34:36:9e:2c:64:f6: 03:1d:82:70:6a:c8:ef:d7:c8:41:7b:aa:72:04:94:18:09:a3: a6:29:99:e9:6b:94:7d:9e:f6:5f:4f:22:37:e9:78:b8:bd:a1: ca:77:e2:16:ad:f5:e7:99:df:d4:fb:59:e9:4f:1b:20:a1:fb: b7:4d:9e:ef:60:91:3f:cb:2c:57:aa:ab:16:ca:1f:14:0a:80: 0d:34:69:a4:a9:3f:e0:93:fa:e4:95:8a:f9:4f:b2:cd:d7:6e: 96:85:99:6a:9e:05:38:d9:60:8b:b8:28:2c:8d:1c:7a:8f:92: 86:dd:28:c8:e8:13:43:9d:9d:07:25:3d:f1:2d:4f:ad:c6:fd: 39:af:fd:04:e1:aa:f1:ba:ce:6e:43:4b:df:19:2a:eb:97:d6: 19:ad:28:95:03:26:6b:08:91:2c:71:7a:82:bb:f0:ac:56:7d: 83:bc:c4:29:42:bc:54:5d:f2:5c:33:dc:b9:43:0b:44:ce:a3: 18:49:a5:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6MJfzx3yD4KaOgz2a9cDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MTYyNGRkZGM1YzAyNzljN2Y4YzlmZjEyODhhNGQzMDQ0 YzA4NDcwHhcNMjUxMjE5MDAwMDUwWhcNMjUxMjIwMDAwMDUwWjAzMTEwLwYDVQQD EygwNWJhYzI5ZTdiZjIyNWZmOGYyMGRkOTYzN2U4ZWRjOWIxMmU3YzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiXCblDL0/WGW+tHbKECnZ9JFhE9 i0syRVkclr4OFyIbDuG/DFdV+n3GwYiXICsH0+b+4vQPvQ/6YCUhcStm0Pfqci4Z JHicgdsZqApbF5wp884OKgkGg6MjfKYjSV84V74I9wXzoMkmd1IEol0GtcHfHJL0 Xjfudef/lK9nw/Y8w14KQmou3ElqDP2kKMSewToPkMTe+9NaDkGutJMVjgegNxB9 VEI6cuvsaKZdbg4SQA+342zqkioraUscAx7TJtcdxbDF1R+cAeKFUZGPUmQgaPcb 7QARoOtwlL/B1nWA2kKi/1sy3fjdzSY73d3OHCwz5gTzF6zsRAZwYbv0gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAW6wp578iX/jyDdljfo7cmxLnxLMB8GA1UdIwQY MBaAFHYWJN3cXAJ5x/jJ/xKIpNMETAhHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGhZazNkeGNBbm5ILU1uX0VvaWswd1JNQ0VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81ODk3NjEtYzY2Mi00ZjEzLTg3MGEt MTNlODgwMTYyOGY1LzEvZGhZazNkeGNBbm5ILU1uX0VvaWswd1JNQ0VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC81ODk3NjEtYzY2Mi00ZjEzLTg3MGEtMTNlODgwMTYyOGY1 LzEvZGhZazNkeGNBbm5ILU1uX0VvaWswd1JNQ0VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkFna+WTJ Fo4nuXjjHUOCJKxIypIA36YJNgB4qlBvbJyEjm/x72IDztUb/C7Ri56gQ5E5A3w5 s6CKaqiNRm9SMW6zNDaeLGT2Ax2CcGrI79fIQXuqcgSUGAmjpimZ6WuUfZ72X08i N+l4uL2hynfiFq3155nf1PtZ6U8bIKH7t02e72CRP8ssV6qrFsofFAqADTRppKk/ 4JP65JWK+U+yzdduloWZap4FONlgi7goLI0ceo+Sht0oyOgTQ52dByU98S1Prcb9 Oa/9BOGq8brObkNL3xkq65fWGa0olQMmawiRLHF6grvwrFZ9g7zEKUK8VF3yXDPc uUMLRM6jGEmlww== -----END CERTIFICATE-----Generated at Fri Dec 19 04:49:30 2025 by rpki-client