This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft File: dyktxjcY7rxwSrAC7LgdPVLU0cM.mft (raw, json) Hash identifier: 17n++D59gKtzYztQ65Kbc4dEc0El1VVOD5rNKYse6j8= Subject key identifier: 5B:20:52:C6:E2:CC:AF:D8:43:6A:33:D8:B2:39:28:DC:32:D9:60:AB Authority key identifier: 77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3 Certificate issuer: /CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3 Certificate serial: 019B0E24CF3B94BCD850A3A06F21C0CC5994 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft Manifest number: 1706 Signing time: Thu 11 Dec 2025 16:00:51 +0000 Manifest this update: Thu 11 Dec 2025 16:00:51 +0000 Manifest next update: Fri 12 Dec 2025 16:00:51 +0000 Files and hashes: 1: NSXTzp-bcsK67axImvlm62j1gls.roa (hash: E1eYCntbOiVraxHatdviG57+mcIBSIgGI+IxJsKYH00=) 2: dyktxjcY7rxwSrAC7LgdPVLU0cM.crl (hash: Fjac+kUZwUgTBcrZNsWIrSwSHVvuL/vMMB65t2S6pwc=) 3: nRaH2rUmuv-AHY6EWLCQZkoxie8.roa (hash: 1A31dYhtBdU/C/TcM+RDwu8HFF6psikiN1Pz0/js/fM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:24:cf:3b:94:bc:d8:50:a3:a0:6f:21:c0:cc:59:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77292dc63718eebc704ab002ecb81d3d52d4d1c3 Validity Not Before: Dec 11 16:00:51 2025 GMT Not After : Dec 12 16:00:51 2025 GMT Subject: CN=5b2052c6e2ccafd8436a33d8b23928dc32d960ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d2:2b:e4:2c:90:7c:60:e3:05:22:5f:93:db: ea:04:6d:c1:d4:18:3f:1b:ae:92:3d:ca:6f:06:4e: 7b:10:2f:08:1a:9d:d7:4c:8d:32:ce:49:fe:d9:b8: e6:13:7d:35:b0:75:97:48:23:c8:c3:1b:93:f9:f6: 32:b2:4f:61:13:dd:5d:2e:f2:b1:c7:94:df:20:2c: 01:45:cf:cf:f1:01:dd:0b:4b:76:c7:58:4c:2b:07: 3c:34:8b:86:62:fc:74:dc:22:ac:d7:b2:3c:3b:b5: a2:87:a3:7e:ba:89:b6:eb:ba:52:02:8e:65:30:59: 95:37:1d:ec:62:eb:89:f4:64:5a:2e:cb:23:b3:a3: 2b:b0:8d:80:78:65:ab:57:00:c5:27:85:ba:d3:60: 93:7e:3e:a9:f2:92:59:ec:04:32:c1:d7:38:52:06: b5:c2:32:3d:ba:c7:86:98:af:24:85:7d:31:b6:3d: 7f:98:b4:20:09:65:c8:c6:be:33:e2:1e:9e:84:3d: 0d:85:c5:54:c5:81:61:8d:b2:55:e4:b1:d6:77:fc: 9f:81:b4:31:cc:01:0b:47:11:07:8b:22:ba:1c:66: 75:97:00:3d:ef:f0:a7:6e:3a:9a:93:9a:7f:84:72: 4b:fa:dd:a5:50:f7:49:43:43:26:37:2a:81:0a:9d: 58:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:20:52:C6:E2:CC:AF:D8:43:6A:33:D8:B2:39:28:DC:32:D9:60:AB X509v3 Authority Key Identifier: keyid:77:29:2D:C6:37:18:EE:BC:70:4A:B0:02:EC:B8:1D:3D:52:D4:D1:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dyktxjcY7rxwSrAC7LgdPVLU0cM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/65764a-dd8e-401b-b731-d9c5d26419b2/1/dyktxjcY7rxwSrAC7LgdPVLU0cM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:8c:60:e5:f2:f9:90:eb:49:dc:73:fc:3d:18:85:09:24:30: 06:94:17:74:b1:1a:ca:f4:fe:5a:c9:49:f2:a8:4f:73:fa:c9: 4c:ea:82:bd:71:e5:5a:fa:77:de:b0:92:08:3f:95:74:69:6e: 31:6a:cd:cb:1a:76:4d:90:4b:43:3c:19:54:98:26:e8:95:0f: 6f:77:98:4c:f1:51:44:56:d5:00:15:13:02:21:30:0f:57:89: c4:3d:9d:f2:8d:e8:09:89:3d:4a:9a:11:1d:da:79:fa:ec:67: ec:33:a3:ee:94:9f:02:e8:5f:44:81:63:8e:f8:57:ce:19:3c: be:98:3e:c6:f5:dd:0e:94:fe:aa:75:ce:02:64:42:28:3b:9d: 2a:21:a6:4c:76:0b:05:ee:94:3b:35:b4:00:fb:7d:ad:10:58: 3e:42:b5:24:07:a6:12:c9:b0:30:68:b5:1e:d7:0a:a0:b9:84: c3:05:81:5b:46:02:4b:78:99:39:fe:d2:db:4f:f0:c5:2d:c6: 2e:14:da:b5:0c:7a:fc:9e:18:83:8d:20:08:1d:16:93:26:aa: d9:af:fd:31:02:08:1e:bf:fd:3f:d6:b3:af:1c:ef:c0:8c:da: 51:16:29:ef:46:6d:c1:85:48:bf:23:87:2e:e9:82:86:a9:d9: 0c:4c:68:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJM87lLzYUKOgbyHAzFmUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MjkyZGM2MzcxOGVlYmM3MDRhYjAwMmVjYjgxZDNkNTJk NGQxYzMwHhcNMjUxMjExMTYwMDUxWhcNMjUxMjEyMTYwMDUxWjAzMTEwLwYDVQQD Eyg1YjIwNTJjNmUyY2NhZmQ4NDM2YTMzZDhiMjM5MjhkYzMyZDk2MGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztIr5CyQfGDjBSJfk9vqBG3B1Bg/ G66SPcpvBk57EC8IGp3XTI0yzkn+2bjmE301sHWXSCPIwxuT+fYysk9hE91dLvKx x5TfICwBRc/P8QHdC0t2x1hMKwc8NIuGYvx03CKs17I8O7Wih6N+uom267pSAo5l MFmVNx3sYuuJ9GRaLssjs6MrsI2AeGWrVwDFJ4W602CTfj6p8pJZ7AQywdc4Uga1 wjI9useGmK8khX0xtj1/mLQgCWXIxr4z4h6ehD0NhcVUxYFhjbJV5LHWd/yfgbQx zAELRxEHiyK6HGZ1lwA97/Cnbjqak5p/hHJL+t2lUPdJQ0MmNyqBCp1YLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFsgUsbizK/YQ2oz2LI5KNwy2WCrMB8GA1UdIwQY MBaAFHcpLcY3GO68cEqwAuy4HT1S1NHDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS82NTc2NGEtZGQ4ZS00MDFiLWI3MzEt ZDljNWQyNjQxOWIyLzEvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS82NTc2NGEtZGQ4ZS00MDFiLWI3MzEtZDljNWQyNjQxOWIy LzEvZHlrdHhqY1k3cnh3U3JBQzdMZ2RQVkxVMGNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIxg5fL5 kOtJ3HP8PRiFCSQwBpQXdLEayvT+WslJ8qhPc/rJTOqCvXHlWvp33rCSCD+VdGlu MWrNyxp2TZBLQzwZVJgm6JUPb3eYTPFRRFbVABUTAiEwD1eJxD2d8o3oCYk9SpoR Hdp5+uxn7DOj7pSfAuhfRIFjjvhXzhk8vpg+xvXdDpT+qnXOAmRCKDudKiGmTHYL Be6UOzW0APt9rRBYPkK1JAemEsmwMGi1HtcKoLmEwwWBW0YCS3iZOf7S20/wxS3G LhTatQx6/J4Yg40gCB0Wkyaq2a/9MQIIHr/9P9azrxzvwIzaURYp70ZtwYVIvyOH LumChqnZDExo2w== -----END CERTIFICATE-----Generated at Fri Dec 12 01:18:32 2025 by rpki-client