This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft File: dy-5SkWdO3XOi_uPErTPcZgsY0M.mft (raw, json) Hash identifier: j2hReDRbC40Hl/adFsOwepOj3QSGRQEoSp2DeG82sdg= Subject key identifier: 7D:72:A1:9F:95:E5:C9:B6:6C:85:72:8E:F8:84:D0:13:05:C0:22:20 Authority key identifier: 77:2F:B9:4A:45:9D:3B:75:CE:8B:FB:8F:12:B4:CF:71:98:2C:63:43 Certificate issuer: /CN=772fb94a459d3b75ce8bfb8f12b4cf71982c6343 Certificate serial: 019B3569638FFA39688C59F96E472BE38F28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft Manifest number: 0308 Signing time: Fri 19 Dec 2025 07:00:57 +0000 Manifest this update: Fri 19 Dec 2025 07:00:57 +0000 Manifest next update: Sat 20 Dec 2025 07:00:57 +0000 Files and hashes: 1: IRnn9ORtzivUx2TGUOWiZn2YmA8.roa (hash: Xk0n7E/wui7qwpm2gqzzeQ3XkyXcylQYY0mSQoyL7gs=) 2: dy-5SkWdO3XOi_uPErTPcZgsY0M.crl (hash: jekEoqf9olgVXCVl0+pEbiXOHZYMxRKBPwQagG91tUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:63:8f:fa:39:68:8c:59:f9:6e:47:2b:e3:8f:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=772fb94a459d3b75ce8bfb8f12b4cf71982c6343 Validity Not Before: Dec 19 07:00:57 2025 GMT Not After : Dec 20 07:00:57 2025 GMT Subject: CN=7d72a19f95e5c9b66c85728ef884d01305c02220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:45:8c:bb:41:73:4f:96:d1:c8:dd:dc:0f:0c: f8:de:30:7b:36:3a:34:d6:55:4e:c5:15:1c:d0:db: c2:6a:0f:1e:0e:d1:bf:6d:b5:2a:bd:dd:f6:81:19: 45:e1:2d:78:84:c8:b9:e5:97:6b:40:75:80:2d:23: fe:b0:ae:fe:fa:a0:46:f2:07:f3:3a:f9:c1:fc:58: c4:92:d2:2a:75:96:26:f8:6d:2b:57:a5:a2:36:ca: 90:f9:0b:03:6b:53:b2:65:0e:61:50:1e:0e:44:99: 5a:5b:12:5d:fb:5c:a1:e5:0c:b8:4b:14:56:ad:28: 2b:96:6f:0d:c2:b9:2a:fc:2f:31:28:d7:82:44:4a: 01:16:0e:e9:04:7f:35:fe:e3:77:b4:38:c8:31:f3: 77:70:01:0d:be:42:9a:c4:ff:a3:9a:ec:f5:a0:42: 31:85:6c:5a:2d:19:51:96:80:fa:38:e5:62:01:54: de:92:ba:7c:25:6c:85:6a:34:6f:84:4b:9d:e7:de: 32:31:52:c8:0a:32:c5:89:c0:6b:67:32:75:87:d0: ef:96:fb:77:bd:f5:81:ba:63:b5:f9:f0:9f:b5:31: 43:58:99:15:5a:5b:3c:b8:55:8f:35:c4:53:3c:a3: f5:2a:69:89:3a:9e:ad:e7:81:25:3a:3a:e0:30:78: 91:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:72:A1:9F:95:E5:C9:B6:6C:85:72:8E:F8:84:D0:13:05:C0:22:20 X509v3 Authority Key Identifier: keyid:77:2F:B9:4A:45:9D:3B:75:CE:8B:FB:8F:12:B4:CF:71:98:2C:63:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy-5SkWdO3XOi_uPErTPcZgsY0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/337e3d-536c-4d50-8657-2b11ad693815/1/dy-5SkWdO3XOi_uPErTPcZgsY0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:2d:c2:33:ad:01:63:66:4a:cf:0d:7c:2c:47:a7:0e:71:67: cf:0b:0c:a7:dc:9a:44:03:aa:df:d7:a8:d3:67:60:3e:a2:cc: 26:0a:7e:48:e8:4b:ea:45:2e:73:96:98:7f:88:98:61:c6:6f: f7:14:1e:41:55:fe:e5:22:73:5b:dd:0f:6a:b6:1d:44:35:c0: 05:2a:54:fa:09:6a:be:5c:40:6b:8b:d3:fd:9c:45:ce:85:41: 97:e5:aa:f9:e0:15:d5:8d:b8:10:3d:c2:d5:fa:d8:77:6b:f3: 95:6b:89:5e:a1:1b:9a:f9:5e:11:95:ba:bc:21:00:02:39:54: 64:36:ee:df:88:5f:41:9c:a9:f1:f3:f3:68:c3:5f:72:6c:f7: 2f:29:ea:c1:01:a2:5f:05:25:94:cc:46:49:79:01:13:a5:0e: a4:34:5a:84:e3:0b:72:8e:52:d3:1c:12:e8:73:45:73:b1:fd: 7a:b5:37:f9:49:68:df:8e:5f:12:12:4d:2b:23:37:44:7d:39: 68:ea:3c:13:3a:0d:67:09:ca:eb:98:4a:c9:46:4f:d2:6c:ab: cf:ac:5f:c4:06:1d:a4:b0:4c:ce:a2:7b:80:1b:fd:23:84:b8: b4:e3:4a:10:77:9a:01:9c:2b:a5:4a:21:f8:2b:f4:0f:3d:a5: 3e:dc:b6:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aWOP+jlojFn5bkcr448oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MmZiOTRhNDU5ZDNiNzVjZThiZmI4ZjEyYjRjZjcxOTgy YzYzNDMwHhcNMjUxMjE5MDcwMDU3WhcNMjUxMjIwMDcwMDU3WjAzMTEwLwYDVQQD Eyg3ZDcyYTE5Zjk1ZTVjOWI2NmM4NTcyOGVmODg0ZDAxMzA1YzAyMjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0WMu0FzT5bRyN3cDwz43jB7Njo0 1lVOxRUc0NvCag8eDtG/bbUqvd32gRlF4S14hMi55ZdrQHWALSP+sK7++qBG8gfz OvnB/FjEktIqdZYm+G0rV6WiNsqQ+QsDa1OyZQ5hUB4ORJlaWxJd+1yh5Qy4SxRW rSgrlm8Nwrkq/C8xKNeCREoBFg7pBH81/uN3tDjIMfN3cAENvkKaxP+jmuz1oEIx hWxaLRlRloD6OOViAVTekrp8JWyFajRvhEud594yMVLICjLFicBrZzJ1h9Dvlvt3 vfWBumO1+fCftTFDWJkVWls8uFWPNcRTPKP1KmmJOp6t54ElOjrgMHiRyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH1yoZ+V5cm2bIVyjviE0BMFwCIgMB8GA1UdIwQY MBaAFHcvuUpFnTt1zov7jxK0z3GYLGNDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHktNVNrV2RPM1hPaV91UEVyVFBjWmdzWTBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zMzdlM2QtNTM2Yy00ZDUwLTg2NTct MmIxMWFkNjkzODE1LzEvZHktNVNrV2RPM1hPaV91UEVyVFBjWmdzWTBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8zMzdlM2QtNTM2Yy00ZDUwLTg2NTctMmIxMWFkNjkzODE1 LzEvZHktNVNrV2RPM1hPaV91UEVyVFBjWmdzWTBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZS3CM60B Y2ZKzw18LEenDnFnzwsMp9yaRAOq39eo02dgPqLMJgp+SOhL6kUuc5aYf4iYYcZv 9xQeQVX+5SJzW90ParYdRDXABSpU+glqvlxAa4vT/ZxFzoVBl+Wq+eAV1Y24ED3C 1frYd2vzlWuJXqEbmvleEZW6vCEAAjlUZDbu34hfQZyp8fPzaMNfcmz3LynqwQGi XwUllMxGSXkBE6UOpDRahOMLco5S0xwS6HNFc7H9erU3+Ulo345fEhJNKyM3RH05 aOo8EzoNZwnK65hKyUZP0myrz6xfxAYdpLBMzqJ7gBv9I4S4tONKEHeaAZwrpUoh +Cv0Dz2lPty2Dw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:54:33 2025 by rpki-client