This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft File: dPYRYnGtLREZYKLZYaqcFi-VgKY.mft (raw, json) Hash identifier: Xm/80eM+o92VNKy0h0e/I024CIC350EWMGvWax5TTNI= Subject key identifier: 12:88:A5:34:0D:C2:76:96:15:47:38:75:9B:F1:B0:55:76:15:E0:6D Authority key identifier: 74:F6:11:62:71:AD:2D:11:19:60:A2:D9:61:AA:9C:16:2F:95:80:A6 Certificate issuer: /CN=74f6116271ad2d111960a2d961aa9c162f9580a6 Certificate serial: 019B597708FCC38FCEA5A4D77D2AA9F1B4A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft Manifest number: 118F Signing time: Fri 26 Dec 2025 07:02:11 +0000 Manifest this update: Fri 26 Dec 2025 07:02:11 +0000 Manifest next update: Sat 27 Dec 2025 07:02:11 +0000 Files and hashes: 1: dPYRYnGtLREZYKLZYaqcFi-VgKY.crl (hash: l8pcLt1rzcJ65GjHaoVvyNPH6T1KqTmHUDpeWTVC0WI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.crl rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft rsync://rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:08:fc:c3:8f:ce:a5:a4:d7:7d:2a:a9:f1:b4:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74f6116271ad2d111960a2d961aa9c162f9580a6 Validity Not Before: Dec 26 07:02:11 2025 GMT Not After : Dec 27 07:02:11 2025 GMT Subject: CN=1288a5340dc27696154738759bf1b0557615e06d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:30:74:88:d4:2d:f9:1d:e9:93:f1:96:2b:56: 81:3e:dd:d2:8b:7d:56:a8:b5:76:2b:75:63:24:e4: 8a:6e:bf:5e:0e:61:2d:76:1b:61:49:12:d5:d3:2d: 42:a5:eb:a7:9d:f7:2b:f5:4d:15:4a:25:57:35:24: 25:a2:92:e7:5e:1d:92:81:e6:ef:47:d7:53:05:c9: 25:2b:71:37:fb:49:a5:ae:dc:6d:56:16:a3:96:3f: 3d:92:64:21:02:2c:06:f4:66:45:0b:1b:24:34:ff: df:b0:06:b6:1a:e9:73:d9:0d:b2:db:69:b0:2d:21: 7c:71:a3:a4:7b:ba:36:41:27:22:2d:b6:67:28:a9: 10:72:1b:c7:44:7f:c0:82:1e:7e:b5:08:d8:1f:ea: 5e:b2:8e:bd:76:0a:6c:89:1c:53:25:d0:f2:35:b6: f6:93:00:f2:95:95:d3:34:8b:e0:05:b1:e7:20:8d: b3:b5:97:d7:5a:c2:76:49:8f:05:e7:5b:f4:df:90: 3f:b7:79:27:52:5c:3e:f8:01:75:f6:09:52:07:8c: 7c:9d:04:48:44:52:6a:e2:76:9b:7f:4b:3a:59:a3: 2a:e5:b0:2c:78:2a:3b:b1:43:84:7a:32:50:5a:cd: e1:8a:f7:7c:1a:93:97:a7:94:fb:0d:df:21:4e:a5: 3c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:88:A5:34:0D:C2:76:96:15:47:38:75:9B:F1:B0:55:76:15:E0:6D X509v3 Authority Key Identifier: keyid:74:F6:11:62:71:AD:2D:11:19:60:A2:D9:61:AA:9C:16:2F:95:80:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dPYRYnGtLREZYKLZYaqcFi-VgKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/56c8a7-562b-48c8-8a8f-5a05b91b2b8c/1/dPYRYnGtLREZYKLZYaqcFi-VgKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:da:76:d5:45:1b:e5:ba:59:0f:07:57:aa:28:65:8e:a4:9a: 24:0d:87:73:85:3d:01:d9:71:50:90:09:d0:5c:cb:ac:1e:6c: 12:48:99:11:15:e4:13:41:89:c8:10:99:62:4c:36:0d:db:e3: 25:6b:db:20:72:18:93:71:1c:fd:29:e2:08:46:10:e5:4e:25: a7:38:a7:52:93:cd:6b:4e:c1:06:ff:2e:6e:a7:15:51:43:62: 16:2c:1e:e1:88:61:84:de:75:fa:01:bc:87:bd:ee:05:17:46: a0:ed:0a:87:28:73:fd:60:bd:13:b2:c4:e4:3d:bd:11:82:75: 12:70:e2:54:66:5c:25:f7:73:4d:33:64:5f:cc:48:e5:4a:af: 18:d2:9e:ef:67:33:f4:9b:34:c7:04:8b:20:42:06:92:0d:48: 82:58:f8:de:20:a6:e6:5e:13:94:82:56:5f:84:76:be:f4:90: 27:f1:c3:25:b6:6f:9c:96:50:11:24:85:0f:9d:37:f6:43:f0: ab:68:e7:94:87:26:33:0d:ff:2b:1f:31:12:90:15:f8:9b:38: bc:29:24:0f:25:78:ce:79:bd:5a:53:0b:ff:e2:ec:32:e9:3b: 67:06:58:0c:f0:3d:ef:8e:c7:23:b9:4e:f7:8e:bc:65:d3:7b: 18:95:ea:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdwj8w4/OpaTXfSqp8bSmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZjYxMTYyNzFhZDJkMTExOTYwYTJkOTYxYWE5YzE2MmY5 NTgwYTYwHhcNMjUxMjI2MDcwMjExWhcNMjUxMjI3MDcwMjExWjAzMTEwLwYDVQQD EygxMjg4YTUzNDBkYzI3Njk2MTU0NzM4NzU5YmYxYjA1NTc2MTVlMDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjB0iNQt+R3pk/GWK1aBPt3Si31W qLV2K3VjJOSKbr9eDmEtdhthSRLV0y1Cpeunnfcr9U0VSiVXNSQlopLnXh2Sgebv R9dTBcklK3E3+0mlrtxtVhajlj89kmQhAiwG9GZFCxskNP/fsAa2Gulz2Q2y22mw LSF8caOke7o2QSciLbZnKKkQchvHRH/Agh5+tQjYH+peso69dgpsiRxTJdDyNbb2 kwDylZXTNIvgBbHnII2ztZfXWsJ2SY8F51v035A/t3knUlw++AF19glSB4x8nQRI RFJq4nabf0s6WaMq5bAseCo7sUOEejJQWs3hivd8GpOXp5T7Dd8hTqU82QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBKIpTQNwnaWFUc4dZvxsFV2FeBtMB8GA1UdIwQY MBaAFHT2EWJxrS0RGWCi2WGqnBYvlYCmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFBZUlluR3RMUkVaWUtMWllhcWNGaS1WZ0tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni81NmM4YTctNTYyYi00OGM4LThhOGYt NWEwNWI5MWIyYjhjLzEvZFBZUlluR3RMUkVaWUtMWllhcWNGaS1WZ0tZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni81NmM4YTctNTYyYi00OGM4LThhOGYtNWEwNWI5MWIyYjhj LzEvZFBZUlluR3RMUkVaWUtMWllhcWNGaS1WZ0tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9p21UUb 5bpZDwdXqihljqSaJA2Hc4U9AdlxUJAJ0FzLrB5sEkiZERXkE0GJyBCZYkw2Ddvj JWvbIHIYk3Ec/SniCEYQ5U4lpzinUpPNa07BBv8ubqcVUUNiFiwe4YhhhN51+gG8 h73uBRdGoO0Khyhz/WC9E7LE5D29EYJ1EnDiVGZcJfdzTTNkX8xI5UqvGNKe72cz 9Js0xwSLIEIGkg1Iglj43iCm5l4TlIJWX4R2vvSQJ/HDJbZvnJZQESSFD5039kPw q2jnlIcmMw3/Kx8xEpAV+Js4vCkkDyV4znm9WlML/+LsMuk7ZwZYDPA9747HI7lO 9468ZdN7GJXqVw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:30 2025 by rpki-client