This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft File: DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft (raw, json) Hash identifier: HUvGIBzWv4OK+zaxVWnxGnw4/STetjNF42uAC6Mnz+M= Subject key identifier: 4D:2C:9F:41:EF:EF:07:1C:99:91:5F:CF:1B:13:EB:CD:D2:AF:69:43 Authority key identifier: 0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E Certificate issuer: /CN=0f2913e31531019a4328190655b45dd96bdd2c9e Certificate serial: 019B5A8892C4D021C74457BB670AAA669B6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft Manifest number: 07B1 Signing time: Fri 26 Dec 2025 12:00:58 +0000 Manifest this update: Fri 26 Dec 2025 12:00:58 +0000 Manifest next update: Sat 27 Dec 2025 12:00:58 +0000 Files and hashes: 1: DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl (hash: lF2Fap7ktHvmJxgj1zBncQt/sC2RaiOkN0/hKc5QbB8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:92:c4:d0:21:c7:44:57:bb:67:0a:aa:66:9b:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f2913e31531019a4328190655b45dd96bdd2c9e Validity Not Before: Dec 26 12:00:58 2025 GMT Not After : Dec 27 12:00:58 2025 GMT Subject: CN=4d2c9f41efef071c99915fcf1b13ebcdd2af6943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a1:2e:92:d8:3a:1e:e0:43:d1:17:d3:06:9d: c7:32:bd:ca:9f:d6:8c:46:7d:be:9e:80:fa:60:a5: e9:f5:e2:a2:d4:14:50:b2:bf:ae:a2:08:3c:27:29: 58:0e:f4:c6:f6:c4:8d:f5:37:c1:3e:34:8c:ad:8b: 67:2a:21:31:25:e3:c8:bd:02:2c:ec:49:77:99:5b: f4:8f:4d:67:45:7d:c4:1c:fb:16:42:34:b9:07:2c: 26:52:ce:38:77:ab:b5:e5:6a:a6:6c:6e:3c:02:76: e5:be:5c:b4:a1:41:93:89:6c:2a:c9:7f:47:d9:8d: 92:ff:e2:c7:1c:c6:83:77:c5:36:ad:55:6d:9d:e9: 49:ad:0b:58:7e:0f:44:66:a6:22:99:00:35:0c:7a: bb:d9:71:4f:fd:ff:7b:57:26:a8:25:db:2d:45:c2: 4d:9d:36:c5:61:e1:f2:c7:26:06:00:df:ab:a3:05: 6e:c9:ed:8d:55:4d:8b:e9:4e:87:23:99:7a:c4:15: 33:18:67:cc:c2:3c:80:43:f7:1e:7c:67:d6:41:8f: 61:fd:87:03:eb:29:49:18:92:55:e8:ea:ea:27:e1: 78:41:27:18:e9:24:15:8e:94:53:25:94:31:52:63: 72:ca:34:00:d9:d3:05:20:43:5b:2a:3c:21:71:47: 55:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:2C:9F:41:EF:EF:07:1C:99:91:5F:CF:1B:13:EB:CD:D2:AF:69:43 X509v3 Authority Key Identifier: keyid:0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:6c:16:32:74:09:2c:7a:88:94:b8:a3:4b:22:e1:e1:f2:1f: 06:ec:7c:8c:31:6b:fd:85:ea:85:ba:55:b4:ae:42:86:cd:4f: 01:87:3b:f8:1a:46:ec:96:2a:00:f7:be:4a:7a:6b:0e:79:dd: 86:e0:54:a0:ad:50:39:5e:08:8d:75:5d:2b:bf:e4:7e:99:7f: c8:4c:ed:90:4e:cf:f8:a0:cf:78:4b:27:db:be:21:75:f7:e5: 51:0a:28:7a:2f:ca:3e:60:32:b0:65:8b:2d:99:0a:8d:ed:94: 4a:b0:bf:8a:da:67:eb:5c:6d:8f:c8:55:52:9e:e1:40:86:21: b2:6e:2a:67:13:ae:c6:97:dd:71:be:72:f4:13:2b:2c:c4:18: 88:fc:4f:f8:f6:71:73:9f:f9:e8:57:b9:85:bc:95:85:da:67: cd:08:f4:37:b2:c2:74:0a:2c:08:c4:55:f6:60:e0:99:ab:70: 0d:7a:88:95:62:c6:fa:37:c5:8b:ad:7d:3a:d2:63:e8:b1:75: d9:17:42:56:35:97:bf:61:11:b6:c4:96:ba:8f:2b:8a:30:b0: 36:c9:19:0d:0f:9d:a0:9c:4a:91:bc:00:84:7a:85:35:67:52: df:eb:5e:c6:07:2f:c5:89:a0:3b:77:e4:66:27:f9:a7:31:d0: 82:0b:69:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiJLE0CHHRFe7ZwqqZptrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMjkxM2UzMTUzMTAxOWE0MzI4MTkwNjU1YjQ1ZGQ5NmJk ZDJjOWUwHhcNMjUxMjI2MTIwMDU4WhcNMjUxMjI3MTIwMDU4WjAzMTEwLwYDVQQD Eyg0ZDJjOWY0MWVmZWYwNzFjOTk5MTVmY2YxYjEzZWJjZGQyYWY2OTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqEuktg6HuBD0RfTBp3HMr3Kn9aM Rn2+noD6YKXp9eKi1BRQsr+uogg8JylYDvTG9sSN9TfBPjSMrYtnKiExJePIvQIs 7El3mVv0j01nRX3EHPsWQjS5BywmUs44d6u15WqmbG48Anblvly0oUGTiWwqyX9H 2Y2S/+LHHMaDd8U2rVVtnelJrQtYfg9EZqYimQA1DHq72XFP/f97VyaoJdstRcJN nTbFYeHyxyYGAN+rowVuye2NVU2L6U6HI5l6xBUzGGfMwjyAQ/cefGfWQY9h/YcD 6ylJGJJV6OrqJ+F4QScY6SQVjpRTJZQxUmNyyjQA2dMFIENbKjwhcUdVIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0sn0Hv7wccmZFfzxsT683Sr2lDMB8GA1UdIwQY MBaAFA8pE+MVMQGaQygZBlW0Xdlr3SyeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHlrVDR4VXhBWnBES0JrR1ZiUmQyV3ZkTEo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wZDJjYTMtMDIzNC00ZGJmLTgxOTAt MTJkMjhkN2Q0MjIzLzEvRHlrVDR4VXhBWnBES0JrR1ZiUmQyV3ZkTEo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8wZDJjYTMtMDIzNC00ZGJmLTgxOTAtMTJkMjhkN2Q0MjIz LzEvRHlrVDR4VXhBWnBES0JrR1ZiUmQyV3ZkTEo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArWwWMnQJ LHqIlLijSyLh4fIfBux8jDFr/YXqhbpVtK5Chs1PAYc7+BpG7JYqAPe+SnprDnnd huBUoK1QOV4IjXVdK7/kfpl/yEztkE7P+KDPeEsn274hdfflUQooei/KPmAysGWL LZkKje2USrC/itpn61xtj8hVUp7hQIYhsm4qZxOuxpfdcb5y9BMrLMQYiPxP+PZx c5/56Fe5hbyVhdpnzQj0N7LCdAosCMRV9mDgmatwDXqIlWLG+jfFi619OtJj6LF1 2RdCVjWXv2ERtsSWuo8rijCwNskZDQ+doJxKkbwAhHqFNWdS3+texgcvxYmgO3fk Zif5pzHQggtp+w== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:53 2025 by rpki-client