This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft File: dYOxUbdLsu2w9c5rbpux4MPQrRs.mft (raw, json) Hash identifier: YO4UR0FYxIw3BoarktrwmHyrmjn9eYKavIv2iewgyuo= Subject key identifier: A3:30:25:F3:EE:A3:52:F5:0C:A3:55:FD:BB:83:D1:7C:03:00:8B:B8 Authority key identifier: 75:83:B1:51:B7:4B:B2:ED:B0:F5:CE:6B:6E:9B:B1:E0:C3:D0:AD:1B Certificate issuer: /CN=7583b151b74bb2edb0f5ce6b6e9bb1e0c3d0ad1b Certificate serial: 019B3344770175265890B46E81975B62D66D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 21:01:23 +0000 Manifest this update: Thu 18 Dec 2025 21:01:23 +0000 Manifest next update: Fri 19 Dec 2025 21:01:23 +0000 Files and hashes: 1: dYOxUbdLsu2w9c5rbpux4MPQrRs.crl (hash: lkzbgqEpKw4nHn8iTrvjhMIKQnNUVAGAKJ8WjhTk6AI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:77:01:75:26:58:90:b4:6e:81:97:5b:62:d6:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7583b151b74bb2edb0f5ce6b6e9bb1e0c3d0ad1b Validity Not Before: Dec 18 21:01:23 2025 GMT Not After : Dec 19 21:01:23 2025 GMT Subject: CN=a33025f3eea352f50ca355fdbb83d17c03008bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:53:ee:d7:b1:b7:47:e7:40:86:f1:2e:5b:3a: 46:8f:37:ec:73:f8:c8:04:3f:c2:b2:7e:2a:92:8e: 5f:81:1e:56:14:d8:e6:4c:08:97:78:37:24:d3:34: d4:aa:90:97:b7:c2:c6:3e:2f:cf:04:6b:57:63:29: 26:79:ba:9a:1b:a8:d1:48:c7:e9:1a:ac:23:a0:35: 6d:23:1b:34:aa:ad:70:96:96:1c:0e:96:b4:ec:94: b3:0d:26:f2:74:28:41:15:6b:17:c6:c4:9e:08:a2: 55:3e:fd:d1:10:72:a7:1b:7a:a3:f1:05:d0:26:97: d6:6b:be:fc:c5:cf:90:7a:ea:1c:3d:4f:de:fc:26: b0:0d:32:c9:f7:58:65:b4:93:f4:89:5e:94:2b:5c: 6b:3f:b1:e8:50:2b:cc:8d:c5:6c:af:6a:9d:1a:0a: 2a:b0:f3:6d:48:10:0f:21:d0:58:7d:67:ad:38:8f: af:ad:0f:d4:13:0a:bb:87:88:53:15:56:c9:b8:cc: 61:9b:f6:4b:88:a5:ca:90:79:2b:ae:86:82:34:ee: cf:32:a2:12:16:8f:2b:e5:b2:99:98:98:4f:16:c4: ae:09:74:22:fe:16:77:69:67:fa:e6:a3:04:c1:bb: 18:fc:ca:34:1f:16:b0:0a:ef:cd:5a:28:cd:83:97: a2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:30:25:F3:EE:A3:52:F5:0C:A3:55:FD:BB:83:D1:7C:03:00:8B:B8 X509v3 Authority Key Identifier: keyid:75:83:B1:51:B7:4B:B2:ED:B0:F5:CE:6B:6E:9B:B1:E0:C3:D0:AD:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYOxUbdLsu2w9c5rbpux4MPQrRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0467dc-ccf3-4331-957c-158606318525/1/dYOxUbdLsu2w9c5rbpux4MPQrRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:f6:68:fa:04:96:a2:33:21:ba:40:cd:ca:3c:c6:1d:1f:d8: 9f:8a:48:f2:d9:b8:28:8f:5b:13:58:e0:7e:c5:d3:9b:2f:e8: a6:a9:0a:7d:13:15:4d:0e:b4:24:20:24:91:e1:1a:88:c8:c9: 5b:96:11:7e:21:bd:26:d7:f6:f5:48:27:8d:08:db:14:05:ef: 18:79:6a:73:ff:f9:22:84:21:c7:88:ba:34:df:68:bb:09:d5: 8f:81:ae:0c:0b:f0:e3:12:8b:08:b6:54:99:d5:87:da:90:37: dc:23:75:99:f8:9c:bd:52:d2:00:76:cf:d1:c6:5f:69:a3:1a: 50:eb:ce:06:6f:12:c6:14:df:34:75:83:55:8e:47:b1:fb:79: 45:3e:58:8a:9e:1c:50:93:1f:6d:7f:57:aa:b3:c1:87:d8:e4: 2a:79:c0:c1:ff:fa:d3:16:4d:9b:44:06:08:f5:0c:89:47:a5: 36:44:21:79:b9:ad:54:61:aa:34:ad:d5:6f:70:98:e2:72:44: 72:39:8a:8e:e4:fd:12:2a:76:31:2c:aa:a3:f2:f3:96:d0:d3: 5b:6f:83:b0:5f:4c:4f:c0:e6:e4:58:02:43:0a:cc:60:57:8a: a0:0c:97:ab:e3:72:41:20:14:68:40:96:2a:4d:39:3d:ce:2a: 95:20:43:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRHcBdSZYkLRugZdbYtZtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ODNiMTUxYjc0YmIyZWRiMGY1Y2U2YjZlOWJiMWUwYzNk MGFkMWIwHhcNMjUxMjE4MjEwMTIzWhcNMjUxMjE5MjEwMTIzWjAzMTEwLwYDVQQD EyhhMzMwMjVmM2VlYTM1MmY1MGNhMzU1ZmRiYjgzZDE3YzAzMDA4YmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVPu17G3R+dAhvEuWzpGjzfsc/jI BD/Csn4qko5fgR5WFNjmTAiXeDck0zTUqpCXt8LGPi/PBGtXYykmebqaG6jRSMfp GqwjoDVtIxs0qq1wlpYcDpa07JSzDSbydChBFWsXxsSeCKJVPv3REHKnG3qj8QXQ JpfWa778xc+QeuocPU/e/CawDTLJ91hltJP0iV6UK1xrP7HoUCvMjcVsr2qdGgoq sPNtSBAPIdBYfWetOI+vrQ/UEwq7h4hTFVbJuMxhm/ZLiKXKkHkrroaCNO7PMqIS Fo8r5bKZmJhPFsSuCXQi/hZ3aWf65qMEwbsY/Mo0HxawCu/NWijNg5eiWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMwJfPuo1L1DKNV/buD0XwDAIu4MB8GA1UdIwQY MBaAFHWDsVG3S7LtsPXOa26bseDD0K0bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFlPeFViZExzdTJ3OWM1cmJwdXg0TVBRclJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wNDY3ZGMtY2NmMy00MzMxLTk1N2Mt MTU4NjA2MzE4NTI1LzEvZFlPeFViZExzdTJ3OWM1cmJwdXg0TVBRclJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy8wNDY3ZGMtY2NmMy00MzMxLTk1N2MtMTU4NjA2MzE4NTI1 LzEvZFlPeFViZExzdTJ3OWM1cmJwdXg0TVBRclJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ/Zo+gSW ojMhukDNyjzGHR/Yn4pI8tm4KI9bE1jgfsXTmy/opqkKfRMVTQ60JCAkkeEaiMjJ W5YRfiG9Jtf29UgnjQjbFAXvGHlqc//5IoQhx4i6NN9ouwnVj4GuDAvw4xKLCLZU mdWH2pA33CN1mficvVLSAHbP0cZfaaMaUOvOBm8SxhTfNHWDVY5Hsft5RT5Yip4c UJMfbX9XqrPBh9jkKnnAwf/60xZNm0QGCPUMiUelNkQhebmtVGGqNK3Vb3CY4nJE cjmKjuT9Eip2MSyqo/LzltDTW2+DsF9MT8Dm5FgCQwrMYFeKoAyXq+NyQSAUaECW Kk05Pc4qlSBDsg== -----END CERTIFICATE-----Generated at Fri Dec 19 00:49:42 2025 by rpki-client