This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.mft File: dy9wNcKJOyjNBP0amzys0kKMjf0.mft (raw, json) Hash identifier: JD5m3rc/B35uXHUr+ji2Uig47hwcthnK/VFrM8ZAWXQ= Subject key identifier: 0B:E0:6C:72:2D:91:B7:BE:1B:B7:F2:70:00:DB:21:07:FD:EE:3E:54 Authority key identifier: 77:2F:70:35:C2:89:3B:28:CD:04:FD:1A:9B:3C:AC:D2:42:8C:8D:FD Certificate issuer: /CN=772f7035c2893b28cd04fd1a9b3cacd2428c8dfd Certificate serial: 019B50E077E825368490F3987D1371884763 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy9wNcKJOyjNBP0amzys0kKMjf0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.mft Manifest number: 04AE Signing time: Wed 24 Dec 2025 15:00:46 +0000 Manifest this update: Wed 24 Dec 2025 15:00:46 +0000 Manifest next update: Thu 25 Dec 2025 15:00:46 +0000 Files and hashes: 1: 9jS2v21J95xARBtQOtdTT0EtYBQ.roa (hash: BeiYvaVP67aUM+eVkzjpflxlaHwkNmiJmUTQZAVqkOQ=) 2: dy9wNcKJOyjNBP0amzys0kKMjf0.crl (hash: rEfHxaQIZwQgSJ+sEhtjf9BxgV2LQYHypJVdkrNElos=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.crl rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.mft rsync://rpki.ripe.net/repository/DEFAULT/dy9wNcKJOyjNBP0amzys0kKMjf0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:77:e8:25:36:84:90:f3:98:7d:13:71:88:47:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=772f7035c2893b28cd04fd1a9b3cacd2428c8dfd Validity Not Before: Dec 24 15:00:46 2025 GMT Not After : Dec 25 15:00:46 2025 GMT Subject: CN=0be06c722d91b7be1bb7f27000db2107fdee3e54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9a:7f:17:93:5d:27:d1:d7:2c:5d:c6:be:8f: 66:81:d5:33:dd:1c:f6:af:21:62:ee:1b:7c:c2:42: 46:84:d0:66:7f:49:0e:bc:10:44:8e:b3:5f:ca:9a: 91:e8:bb:34:29:e4:2b:93:03:36:f4:8b:a0:cb:32: 27:24:ce:5d:44:85:84:a1:60:60:b1:98:ad:79:60: b7:1f:ea:ad:95:49:3a:b7:e2:40:5d:f8:91:8c:69: 7f:e1:01:5d:6b:de:2b:5c:a1:70:cb:84:40:8f:67: 61:23:34:96:ac:b0:2f:91:84:41:6f:56:69:c2:dd: 25:a9:20:bf:d4:f5:80:b1:cd:1a:4e:08:13:46:2f: db:9c:93:b2:5e:11:35:b1:e9:20:a2:b2:1a:63:92: c7:5a:3a:c3:78:c6:31:8f:ac:c1:a9:2b:16:5b:c6: 92:eb:82:68:6e:28:2f:3d:f5:17:47:bc:86:9c:3b: 41:b1:8d:d5:b2:d2:4f:99:cf:45:e3:5f:f7:43:a6: 94:9d:1c:c6:d6:f1:bd:aa:db:d0:50:5e:42:4c:1d: 72:c1:7e:09:0e:23:05:5e:23:9f:9d:b9:83:a9:57: d0:c2:6e:95:34:fb:fa:8f:26:b1:a7:c6:f8:76:11: aa:48:37:ea:01:25:58:ae:22:08:c2:c5:b5:31:fe: 56:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E0:6C:72:2D:91:B7:BE:1B:B7:F2:70:00:DB:21:07:FD:EE:3E:54 X509v3 Authority Key Identifier: keyid:77:2F:70:35:C2:89:3B:28:CD:04:FD:1A:9B:3C:AC:D2:42:8C:8D:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy9wNcKJOyjNBP0amzys0kKMjf0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:e8:e1:2e:78:32:95:55:f4:9f:3e:9e:19:bd:33:d2:c1:00: 63:20:ae:83:ef:c9:d8:c3:1a:14:b0:24:4c:12:51:95:a9:89: 05:5d:4d:d8:b5:3f:3c:d6:8a:f0:3c:14:3c:13:fd:bf:a3:11: d4:26:34:6b:a5:1d:b4:2a:fa:0e:2b:c4:42:68:70:a4:b6:ab: be:9a:e3:18:b9:ee:07:8e:d4:3a:1f:a3:ce:12:d7:0c:1a:ae: a5:79:72:c3:1a:05:29:4b:ab:8c:1d:d2:30:18:a2:18:c4:a5: 8e:d9:69:f8:e6:d4:b1:29:43:e9:64:18:50:9a:9a:80:16:cf: f6:cd:da:0e:76:57:f8:6f:87:ec:3d:a9:9f:fa:a3:6b:2a:ee: 94:a8:f6:59:ff:16:4f:ba:d8:f0:0e:79:39:0f:b7:70:56:6e: 12:6d:88:f6:1d:67:8f:5b:cc:fa:ac:b9:24:53:5c:20:64:72: 08:7a:64:71:2f:14:de:63:2b:ad:63:e2:e1:2a:9a:2d:10:e1: d7:56:e8:7b:97:53:56:c8:0b:39:b5:5d:46:05:7d:2b:45:a4: dd:36:27:c3:b0:3d:aa:83:de:37:f4:17:62:75:6b:99:d7:b7: 68:c0:06:b8:77:45:69:9d:cf:e6:ab:a0:0f:34:96:dd:93:e3: 6b:b1:c2:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4HfoJTaEkPOYfRNxiEdjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MmY3MDM1YzI4OTNiMjhjZDA0ZmQxYTliM2NhY2QyNDI4 YzhkZmQwHhcNMjUxMjI0MTUwMDQ2WhcNMjUxMjI1MTUwMDQ2WjAzMTEwLwYDVQQD EygwYmUwNmM3MjJkOTFiN2JlMWJiN2YyNzAwMGRiMjEwN2ZkZWUzZTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJp/F5NdJ9HXLF3Gvo9mgdUz3Rz2 ryFi7ht8wkJGhNBmf0kOvBBEjrNfypqR6Ls0KeQrkwM29IugyzInJM5dRIWEoWBg sZiteWC3H+qtlUk6t+JAXfiRjGl/4QFda94rXKFwy4RAj2dhIzSWrLAvkYRBb1Zp wt0lqSC/1PWAsc0aTggTRi/bnJOyXhE1sekgorIaY5LHWjrDeMYxj6zBqSsWW8aS 64JobigvPfUXR7yGnDtBsY3VstJPmc9F41/3Q6aUnRzG1vG9qtvQUF5CTB1ywX4J DiMFXiOfnbmDqVfQwm6VNPv6jyaxp8b4dhGqSDfqASVYriIIwsW1Mf5W8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvgbHItkbe+G7fycADbIQf97j5UMB8GA1UdIwQY MBaAFHcvcDXCiTsozQT9Gps8rNJCjI39MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHk5d05jS0pPeWpOQlAwYW16eXMwa0tNamYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80MWVhZTAtNmI3Mi00NjI0LTljMjQt ODMwMzVhZmU0YTM3LzEvZHk5d05jS0pPeWpOQlAwYW16eXMwa0tNamYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi80MWVhZTAtNmI3Mi00NjI0LTljMjQtODMwMzVhZmU0YTM3 LzEvZHk5d05jS0pPeWpOQlAwYW16eXMwa0tNamYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD+jhLngy lVX0nz6eGb0z0sEAYyCug+/J2MMaFLAkTBJRlamJBV1N2LU/PNaK8DwUPBP9v6MR 1CY0a6UdtCr6DivEQmhwpLarvprjGLnuB47UOh+jzhLXDBqupXlywxoFKUurjB3S MBiiGMSljtlp+ObUsSlD6WQYUJqagBbP9s3aDnZX+G+H7D2pn/qjayrulKj2Wf8W T7rY8A55OQ+3cFZuEm2I9h1nj1vM+qy5JFNcIGRyCHpkcS8U3mMrrWPi4SqaLRDh 11boe5dTVsgLObVdRgV9K0Wk3TYnw7A9qoPeN/QXYnVrmde3aMAGuHdFaZ3P5qug DzSW3ZPja7HCRA== -----END CERTIFICATE-----Generated at Wed Dec 24 18:56:08 2025 by rpki-client