This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft File: DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft (raw, json) Hash identifier: PP4zbwXxBVL0YqP8XpQulUfrrI08wGmS+B6zmZAYdXo= Subject key identifier: 03:F6:3A:09:8B:43:02:D8:24:45:84:93:CA:C2:17:84:61:26:48:36 Authority key identifier: 0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2 Certificate issuer: /CN=0d8be474c155fc13847b859501a553cffc3ac4b2 Certificate serial: 019B5A1A99810D8D5DA22CAD38D0BAAF9793 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft Manifest number: 0815 Signing time: Fri 26 Dec 2025 10:00:51 +0000 Manifest this update: Fri 26 Dec 2025 10:00:51 +0000 Manifest next update: Sat 27 Dec 2025 10:00:51 +0000 Files and hashes: 1: DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl (hash: 5zfqpU2+iuu2VoyckzqATIh8WcCIjSIIZdqrM1JSKfc=) 2: NfNxh6P1uZhDH6XoBFouc3RXHCs.roa (hash: qkk+5kxxRuEkhJwe+gYaKfgrph8xFe5jspGXDjsvcA0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:99:81:0d:8d:5d:a2:2c:ad:38:d0:ba:af:97:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d8be474c155fc13847b859501a553cffc3ac4b2 Validity Not Before: Dec 26 10:00:51 2025 GMT Not After : Dec 27 10:00:51 2025 GMT Subject: CN=03f63a098b4302d824458493cac2178461264836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0d:e1:ea:26:97:11:97:22:9a:5d:c1:6d:d0: b0:91:71:f8:2d:d6:21:6f:4d:5c:d9:b4:46:2f:7e: 69:e8:44:40:e7:cd:26:12:7b:56:d9:25:9c:92:8b: 95:5e:99:7c:d6:20:a2:de:3b:fc:79:5f:ca:c9:4c: 0b:df:e7:bc:ea:a7:ae:76:0f:a9:8c:d6:eb:20:22: 1c:0f:1c:fc:ef:3f:06:65:23:0d:1c:ba:7a:8c:8c: 3c:e8:c1:67:80:5f:8a:5c:b9:ef:ec:18:04:c6:32: 8e:22:93:81:8b:e5:3a:68:3e:80:11:51:42:1f:d6: ed:9e:fb:2b:d4:0f:68:0d:3a:e3:86:6e:99:77:fe: 2a:69:79:de:45:48:50:5f:0f:52:34:5a:af:86:47: 56:10:32:97:61:c5:97:fc:e2:d9:27:25:f6:40:62: b9:14:1d:d5:44:dc:f3:bf:b8:a3:a6:d8:be:ba:57: 6e:4f:b3:da:f6:e7:84:3b:81:f8:6a:52:68:14:a2: fa:0b:87:9d:c7:62:f2:8b:04:61:44:f7:69:d7:ee: a2:ab:f3:7b:81:13:34:a2:98:e6:31:c8:02:d6:23: b1:5c:bb:42:57:05:58:90:77:e2:09:83:a8:6d:f7: ee:4b:fd:25:c0:f2:2f:c2:7f:7b:92:b3:95:a7:d0: 9f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F6:3A:09:8B:43:02:D8:24:45:84:93:CA:C2:17:84:61:26:48:36 X509v3 Authority Key Identifier: keyid:0D:8B:E4:74:C1:55:FC:13:84:7B:85:95:01:A5:53:CF:FC:3A:C4:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYvkdMFV_BOEe4WVAaVTz_w6xLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd2efe-1471-42d8-9347-4861d43e24ef/1/DYvkdMFV_BOEe4WVAaVTz_w6xLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:71:e6:cf:ee:5f:a9:1f:60:93:6a:cc:d0:4b:e5:ae:8c:9c: 00:fa:a0:3a:e5:13:7a:8b:cb:e0:ff:16:29:08:4a:63:62:78: 84:9e:12:61:2e:ac:71:45:58:6c:7f:3f:77:17:17:7d:39:db: 0b:98:44:d1:eb:66:2c:12:c1:c6:5e:80:cf:67:8b:70:e0:2a: 8c:de:63:c1:b1:e3:c9:34:41:2f:98:44:51:d2:56:4a:82:36: 20:96:fe:01:55:0f:f3:d4:4f:d8:2b:af:26:67:bb:56:c6:0b: eb:4a:9c:6d:b4:40:97:0a:3a:81:eb:de:c9:4f:d9:d2:35:ce: eb:2e:17:d8:91:12:06:95:88:ee:a8:f9:8a:e9:95:1b:a1:e8: 82:15:19:9f:88:57:1e:ad:73:40:fb:96:5b:14:ab:80:dc:59: 78:cd:0f:a2:c1:ba:39:92:3d:8b:39:6b:c1:68:dd:2e:e1:0d: fc:af:26:46:1c:f8:59:4c:c2:a5:ee:8f:98:ec:79:3a:d0:96: 24:d4:d5:ee:92:2f:6d:db:06:cc:02:fe:40:08:f5:df:20:b1: b4:55:94:7d:7a:78:bb:a1:bf:4e:84:ea:ee:cb:ee:4f:ad:4d: b7:dc:13:7d:3a:e2:b2:1c:bc:42:f3:79:31:04:56:8f:c1:df: 1a:97:c9:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGpmBDY1doiytONC6r5eTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkOGJlNDc0YzE1NWZjMTM4NDdiODU5NTAxYTU1M2NmZmMz YWM0YjIwHhcNMjUxMjI2MTAwMDUxWhcNMjUxMjI3MTAwMDUxWjAzMTEwLwYDVQQD EygwM2Y2M2EwOThiNDMwMmQ4MjQ0NTg0OTNjYWMyMTc4NDYxMjY0ODM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA3h6iaXEZciml3BbdCwkXH4LdYh b01c2bRGL35p6ERA580mEntW2SWckouVXpl81iCi3jv8eV/KyUwL3+e86qeudg+p jNbrICIcDxz87z8GZSMNHLp6jIw86MFngF+KXLnv7BgExjKOIpOBi+U6aD6AEVFC H9btnvsr1A9oDTrjhm6Zd/4qaXneRUhQXw9SNFqvhkdWEDKXYcWX/OLZJyX2QGK5 FB3VRNzzv7ijpti+ulduT7Pa9ueEO4H4alJoFKL6C4edx2LyiwRhRPdp1+6iq/N7 gRM0opjmMcgC1iOxXLtCVwVYkHfiCYOobffuS/0lwPIvwn97krOVp9CfSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAP2OgmLQwLYJEWEk8rCF4RhJkg2MB8GA1UdIwQY MBaAFA2L5HTBVfwThHuFlQGlU8/8OsSyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFl2a2RNRlZfQk9FZTRXVkFhVlR6X3c2eExJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9mZDJlZmUtMTQ3MS00MmQ4LTkzNDct NDg2MWQ0M2UyNGVmLzEvRFl2a2RNRlZfQk9FZTRXVkFhVlR6X3c2eExJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9mZDJlZmUtMTQ3MS00MmQ4LTkzNDctNDg2MWQ0M2UyNGVm LzEvRFl2a2RNRlZfQk9FZTRXVkFhVlR6X3c2eExJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnHmz+5f qR9gk2rM0EvlroycAPqgOuUTeovL4P8WKQhKY2J4hJ4SYS6scUVYbH8/dxcXfTnb C5hE0etmLBLBxl6Az2eLcOAqjN5jwbHjyTRBL5hEUdJWSoI2IJb+AVUP89RP2Cuv Jme7VsYL60qcbbRAlwo6geveyU/Z0jXO6y4X2JESBpWI7qj5iumVG6HoghUZn4hX Hq1zQPuWWxSrgNxZeM0PosG6OZI9izlrwWjdLuEN/K8mRhz4WUzCpe6PmOx5OtCW JNTV7pIvbdsGzAL+QAj13yCxtFWUfXp4u6G/ToTq7svuT61Nt9wTfTrishy8QvN5 MQRWj8HfGpfJ4g== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:11 2025 by rpki-client