This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft File: dyktxjcY7rxwSrAC7LgdPVLU0cM.mft (raw, json) Hash identifier: kwMM0j9S9amhuzvbyDjOcVm/n/EecJzRPcR6RudcQio= Subject key identifier: 2D:60:D5:93:63:3C:65:59:E2:96:BF:08:12:89:94:F5:6E:DA:31:5E Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3 Certificate issuer: /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3 Certificate serial: 019B2EF98EF90333BBCC16E70777E7CDF471 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft Manifest number: 1717 Signing time: Thu 18 Dec 2025 01:01:05 +0000 Manifest this update: Thu 18 Dec 2025 01:01:05 +0000 Manifest next update: Fri 19 Dec 2025 01:01:05 +0000 Files and hashes: 1: NSXTzp-bcsK67axImvlm62j1gls.roa (hash: E1eYCntbOiVraxHatdviG57+mcIBSIgGI+IxJsKYH00=) 2: dyktxjcY7rxwSrAC7LgdPVLU0cM.crl (hash: Hvol/GVgoA4DuzKuwUWpJde8nBouvm9YKAtxWX3wbmU=) 3: nRaH2rUmuv-AHY6EWLCQZkoxie8.roa (hash: 1A31dYhtBdU/C/TcM+RDwu8HFF6psikiN1Pz0/js/fM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:8e:f9:03:33:bb:cc:16:e7:07:77:e7:cd:f4:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3 Validity Not Before: Dec 18 01:01:05 2025 GMT Not After : Dec 19 01:01:05 2025 GMT Subject: CN=2d60d593633c6559e296bf08128994f56eda315e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:cc:31:95:94:dc:64:18:99:ee:e9:b2:1a:9c: 0b:19:ac:cc:1a:f0:a0:46:af:fd:7a:f9:93:35:c3: c1:40:ca:17:93:00:37:36:c9:68:14:f3:d9:4a:4e: 48:72:49:ac:7e:8e:e7:e6:dc:b2:61:82:48:33:b5: f0:c8:13:b3:9a:98:38:4f:82:3b:28:cc:43:02:92: 2b:7f:e5:ca:73:c0:1d:a9:a6:bc:09:25:10:89:83: 45:1e:e3:3b:c6:dd:c5:97:25:ea:75:dd:3c:82:f5: e2:e2:65:fd:60:f6:1f:2d:e4:19:3e:a2:4c:0f:cd: e5:a2:48:ca:0f:e0:dd:76:80:57:2b:60:27:93:45: 22:c5:26:34:77:b0:ec:21:ea:ce:56:73:57:88:8c: 70:f1:6a:e0:b7:32:93:12:ee:50:00:17:40:4c:0a: 9e:2b:d6:dc:87:a9:b4:74:13:59:86:c1:b4:fa:cf: f3:f4:73:32:7f:bb:69:cc:ba:b8:5a:6d:e2:03:40: 4e:25:87:f9:7b:4a:e3:18:2d:95:ae:d1:b3:4d:14: 89:98:e0:e6:52:ad:fc:99:fc:dc:e5:aa:7b:99:8f: af:1d:0f:f3:ea:c8:a8:60:cb:77:b9:eb:0a:84:01: fa:1f:1b:20:48:0f:a6:6a:3a:66:ce:3e:68:64:e4: ca:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:60:D5:93:63:3C:65:59:E2:96:BF:08:12:89:94:F5:6E:DA:31:5E X509v3 Authority Key Identifier: keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:e7:20:42:0d:08:6b:a2:92:f1:09:8a:0f:ee:b2:3f:d5:b5: 44:28:69:db:aa:45:db:cc:ef:5f:51:87:1f:9e:91:28:9c:34: 38:79:6f:46:f7:fc:8f:2f:58:12:5f:d0:c1:6f:fc:a5:83:4b: 8b:0f:49:2c:2e:8b:d5:cf:fc:90:d4:1f:a7:d6:11:77:b7:25: ea:b8:3c:73:d3:6e:62:40:46:3a:5e:c9:a6:12:c3:78:ab:b7: a4:62:ab:b9:a4:c9:78:fc:bf:cd:8f:20:f2:a4:8a:6a:3e:be: ed:bb:71:cd:19:2f:14:ce:32:81:0a:f5:6a:39:9e:f2:bc:92: 86:ca:9f:84:5a:5a:4e:56:90:4a:7e:d0:2a:2e:71:95:3c:a5: ff:bc:cc:9a:21:96:55:6e:99:1c:b2:f3:55:49:25:10:6e:78: 55:75:47:be:f5:9d:37:73:78:5d:b5:63:f8:1c:fa:88:83:89: 0b:6c:ff:be:e4:90:52:37:88:46:d9:1a:71:04:f0:d4:27:9e: fc:db:4d:66:1b:16:d5:4a:b7:24:0b:bc:3a:a1:4e:38:49:f5: 4f:27:ec:d6:25:5a:a6:57:08:71:a5:08:c1:3f:34:33:33:3c: 8d:e3:7b:c2:a9:f9:2b:80:73:48:f0:5d:90:bb:ee:00:a7:05: 81:4a:83:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+Y75AzO7zBbnB3fnzfRxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MjkyZGM2MzcxOGVlYmM3MDRhYjAwMmVjYjgxZDNkNTJk NGQxYzMwHhcNMjUxMjE4MDEwMTA1WhcNMjUxMjE5MDEwMTA1WjAzMTEwLwYDVQQD EygyZDYwZDU5MzYzM2M2NTU5ZTI5NmJmMDgxMjg5OTRmNTZlZGEzMTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7swxlZTcZBiZ7umyGpwLGazMGvCg Rq/9evmTNcPBQMoXkwA3NsloFPPZSk5Ickmsfo7n5tyyYYJIM7XwyBOzmpg4T4I7 KMxDApIrf+XKc8Adqaa8CSUQiYNFHuM7xt3FlyXqdd08gvXi4mX9YPYfLeQZPqJM D83lokjKD+DddoBXK2Ank0UixSY0d7DsIerOVnNXiIxw8WrgtzKTEu5QABdATAqe K9bch6m0dBNZhsG0+s/z9HMyf7tpzLq4Wm3iA0BOJYf5e0rjGC2VrtGzTRSJmODm Uq38mfzc5ap7mY+vHQ/z6sioYMt3uesKhAH6HxsgSA+majpmzj5oZOTKSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1g1ZNjPGVZ4pa/CBKJlPVu2jFeMB8GA1UdIwQY MBaAFHcpLcY3GO68cEqwAuy4HT1S1NHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82NTc2NGEtZGQ4ZS00MDFiLWI3MzEt ZDljNWQyNjQxOWIyLzEvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS82NTc2NGEtZGQ4ZS00MDFiLWI3MzEtZDljNWQyNjQxOWIy LzEvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAucgQg0I a6KS8QmKD+6yP9W1RChp26pF28zvX1GHH56RKJw0OHlvRvf8jy9YEl/QwW/8pYNL iw9JLC6L1c/8kNQfp9YRd7cl6rg8c9NuYkBGOl7JphLDeKu3pGKruaTJePy/zY8g 8qSKaj6+7btxzRkvFM4ygQr1ajme8ryShsqfhFpaTlaQSn7QKi5xlTyl/7zMmiGW VW6ZHLLzVUklEG54VXVHvvWdN3N4XbVj+Bz6iIOJC2z/vuSQUjeIRtkacQTw1Cee /NtNZhsW1Uq3JAu8OqFOOEn1Tyfs1iVaplcIcaUIwT80MzM8jeN7wqn5K4BzSPBd kLvuAKcFgUqDwg== -----END CERTIFICATE-----Generated at Thu Dec 18 09:28:24 2025 by rpki-client