This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft File: dYYhYjrGyrj2veVSbnopMdYm_ow.mft (raw, json) Hash identifier: zrtECv3sWF4qrZMqRwNK/iowKe/moOmfyGhhbmZt7dw= Subject key identifier: 4C:F8:BF:EB:18:C9:93:11:E1:DF:BA:86:6A:FF:42:F8:57:0C:0D:29 Authority key identifier: 75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C Certificate issuer: /CN=758621623ac6cab8f6bde5526e7a2931d626fe8c Certificate serial: 019B269BA9F15EE0B89461F9A728E02FBFAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft Manifest number: 1710 Signing time: Tue 16 Dec 2025 10:01:34 +0000 Manifest this update: Tue 16 Dec 2025 10:01:34 +0000 Manifest next update: Wed 17 Dec 2025 10:01:34 +0000 Files and hashes: 1: dYYhYjrGyrj2veVSbnopMdYm_ow.crl (hash: ApBzCXEdowKobQRKyusO7tF2cKj8AG4GED2fNDt/7tA=) 2: hD0ar_tHc7p3YZ1QwpI7BJcBiok.roa (hash: wT7KNqysLUSBZ2MK1PEYcvNRcVleye9t9OdQ04Vtz2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:9b:a9:f1:5e:e0:b8:94:61:f9:a7:28:e0:2f:bf:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=758621623ac6cab8f6bde5526e7a2931d626fe8c Validity Not Before: Dec 16 10:01:34 2025 GMT Not After : Dec 17 10:01:34 2025 GMT Subject: CN=4cf8bfeb18c99311e1dfba866aff42f8570c0d29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d9:0f:fa:47:a7:c3:b8:89:84:1a:6c:60:04: 4e:0c:59:96:8a:b4:a5:76:cb:0c:0d:30:b9:2f:16: 83:57:98:8b:68:79:96:c0:38:64:65:92:a9:fc:5a: 2b:85:0b:00:98:93:2c:05:98:de:a4:7b:8f:44:f4: 20:d7:0a:af:54:7e:5f:58:f5:4e:3e:14:5c:fa:98: 1b:e3:94:a6:61:bd:a1:bc:8d:cc:92:8b:bd:e9:c1: f1:64:4b:22:fd:9b:96:bb:7f:5e:62:c9:97:7c:37: 3d:a6:e9:14:15:6e:2c:b3:9b:e6:db:b3:be:bd:a8: 80:c7:19:50:f6:67:56:ce:02:e3:9a:37:97:fb:2e: fa:da:1c:31:bd:ac:c0:88:6f:cd:9c:fe:13:37:b1: 32:e5:59:fa:8c:00:23:fe:3a:f6:1f:df:5c:1a:14: 86:a5:f6:74:06:bc:b0:a1:d3:67:58:41:17:94:4b: 39:64:f4:3d:64:d6:49:e0:88:cf:fa:db:e8:53:08: 3d:ef:11:c0:39:85:35:03:d9:43:d8:ea:a2:bd:10: 66:60:80:ac:d8:e2:44:86:ea:5c:79:48:40:47:e1: 7c:0d:8b:dc:ed:0d:78:06:8d:cd:95:e6:57:e3:eb: ba:c1:5a:47:7c:0a:6b:40:d2:e8:f1:49:7c:7e:f3: 80:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F8:BF:EB:18:C9:93:11:E1:DF:BA:86:6A:FF:42:F8:57:0C:0D:29 X509v3 Authority Key Identifier: keyid:75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:e3:6b:71:ce:d7:0d:72:fe:fa:2f:eb:cb:c0:02:df:26:13: 7b:6e:b1:21:0a:aa:9a:a6:40:49:69:d9:5a:d1:b7:99:9c:96: b9:8c:ec:25:61:5f:5f:67:0f:02:ba:d2:51:3a:48:88:11:19: 74:d7:29:62:50:24:95:68:e4:26:e5:e5:2c:64:0a:a3:55:3c: 3e:65:37:78:d3:5d:85:b3:92:61:34:7c:4a:f5:1d:9a:93:08: 05:3d:ff:fa:12:bc:63:54:2b:11:58:8d:cc:9a:8a:76:08:60: 5e:91:25:b3:d0:ec:9a:93:d6:ca:4a:22:82:ac:79:cd:a0:57: 23:c4:80:7a:20:44:f1:c0:27:0c:56:6c:c8:75:f5:46:3e:16: 7e:c2:35:9a:fb:16:e7:b1:91:5c:ab:67:a1:2f:65:8c:40:5e: 74:1a:3c:17:58:1f:50:83:c5:6a:4c:1d:8d:81:c9:ac:42:45: 29:43:3c:ae:47:52:13:51:17:9f:8a:47:1c:e3:0b:d9:78:a6: c6:7b:4c:e6:22:9d:bc:d1:a8:90:e1:1d:da:b7:45:90:04:99: a0:eb:23:19:8a:b7:71:3f:f9:61:fe:43:91:42:73:e0:6f:5e: 07:51:03:8d:56:ba:ed:ca:d4:98:3d:87:35:a0:70:36:f1:74: 3e:c2:d7:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmm6nxXuC4lGH5pyjgL7+tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ODYyMTYyM2FjNmNhYjhmNmJkZTU1MjZlN2EyOTMxZDYy NmZlOGMwHhcNMjUxMjE2MTAwMTM0WhcNMjUxMjE3MTAwMTM0WjAzMTEwLwYDVQQD Eyg0Y2Y4YmZlYjE4Yzk5MzExZTFkZmJhODY2YWZmNDJmODU3MGMwZDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9kP+kenw7iJhBpsYARODFmWirSl dssMDTC5LxaDV5iLaHmWwDhkZZKp/ForhQsAmJMsBZjepHuPRPQg1wqvVH5fWPVO PhRc+pgb45SmYb2hvI3Mkou96cHxZEsi/ZuWu39eYsmXfDc9pukUFW4ss5vm27O+ vaiAxxlQ9mdWzgLjmjeX+y762hwxvazAiG/NnP4TN7Ey5Vn6jAAj/jr2H99cGhSG pfZ0BrywodNnWEEXlEs5ZPQ9ZNZJ4IjP+tvoUwg97xHAOYU1A9lD2OqivRBmYICs 2OJEhupceUhAR+F8DYvc7Q14Bo3NleZX4+u6wVpHfAprQNLo8Ul8fvOACQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEz4v+sYyZMR4d+6hmr/QvhXDA0pMB8GA1UdIwQY MBaAFHWGIWI6xsq49r3lUm56KTHWJv6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFlZaFlqckd5cmoydmVWU2Jub3BNZFltX293LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8zNjcwOGItZDY2Yi00MDdmLTk1NDct ZjAyMTE2MjI2YTg4LzEvZFlZaFlqckd5cmoydmVWU2Jub3BNZFltX293Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8zNjcwOGItZDY2Yi00MDdmLTk1NDctZjAyMTE2MjI2YTg4 LzEvZFlZaFlqckd5cmoydmVWU2Jub3BNZFltX293LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeONrcc7X DXL++i/ry8AC3yYTe26xIQqqmqZASWnZWtG3mZyWuYzsJWFfX2cPArrSUTpIiBEZ dNcpYlAklWjkJuXlLGQKo1U8PmU3eNNdhbOSYTR8SvUdmpMIBT3/+hK8Y1QrEViN zJqKdghgXpEls9DsmpPWykoigqx5zaBXI8SAeiBE8cAnDFZsyHX1Rj4WfsI1mvsW 57GRXKtnoS9ljEBedBo8F1gfUIPFakwdjYHJrEJFKUM8rkdSE1EXn4pHHOML2Xim xntM5iKdvNGokOEd2rdFkASZoOsjGYq3cT/5Yf5DkUJz4G9eB1EDjVa67crUmD2H NaBwNvF0PsLX7g== -----END CERTIFICATE-----Generated at Tue Dec 16 12:34:36 2025 by rpki-client