This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft File: RyyyiCCZANGvGpmLsDnsdX5JPdU.mft (raw, json) Hash identifier: 57YufsBdoGgWXruRWmmfhhlwq+PBgQ2T6yf7+bdUopo= Subject key identifier: 11:D6:C9:BE:03:C4:87:54:0C:63:0A:D1:58:EA:91:49:2A:0F:13:BF Authority key identifier: 47:2C:B2:88:20:99:00:D1:AF:1A:99:8B:B0:39:EC:75:7E:49:3D:D5 Certificate issuer: /CN=472cb288209900d1af1a998bb039ec757e493dd5 Certificate serial: 019B5C772DFD620D568895DF4A56B13A6752 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyyyiCCZANGvGpmLsDnsdX5JPdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft Manifest number: 09C1 Signing time: Fri 26 Dec 2025 21:01:12 +0000 Manifest this update: Fri 26 Dec 2025 21:01:12 +0000 Manifest next update: Sat 27 Dec 2025 21:01:12 +0000 Files and hashes: 1: RyyyiCCZANGvGpmLsDnsdX5JPdU.crl (hash: 6TonoKgLkPjg4Vi+Vc0DCMB/HQzFsOorGxKuBSh6UTs=) 2: S3dIMaIh62_y7HmBxhlxOM_ScHc.roa (hash: wYfLcBDYpc1piz/XiUHEld94m4pY4RAv7rF1GCt4/I0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.crl rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft rsync://rpki.ripe.net/repository/DEFAULT/RyyyiCCZANGvGpmLsDnsdX5JPdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:77:2d:fd:62:0d:56:88:95:df:4a:56:b1:3a:67:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=472cb288209900d1af1a998bb039ec757e493dd5 Validity Not Before: Dec 26 21:01:12 2025 GMT Not After : Dec 27 21:01:12 2025 GMT Subject: CN=11d6c9be03c487540c630ad158ea91492a0f13bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d1:03:f9:9c:84:75:33:72:84:05:96:d2:60: d2:c5:51:46:28:b5:79:68:52:8b:1d:e1:ca:31:68: 46:7c:13:bb:4e:77:75:40:76:df:9a:cc:f8:9b:8f: 79:c8:59:84:4e:96:31:49:da:ff:fa:0b:4b:0d:84: 7e:51:c3:57:27:1e:8e:fa:10:78:7a:7b:3c:06:f1: fc:eb:f3:de:97:42:c4:28:40:85:ba:ec:da:47:e8: dc:82:a8:ef:fc:dc:c1:80:49:52:fe:e1:13:68:c9: db:b5:04:7a:ff:dc:82:1f:62:14:94:f0:73:a4:48: 2e:2c:b5:da:bf:01:9c:df:a7:fd:14:53:fd:96:7b: bd:72:6a:46:64:40:d4:65:0a:b6:7b:57:f8:5f:b2: 61:86:48:c3:75:15:da:52:80:8d:e2:ca:83:f0:3c: 60:71:ec:47:e8:83:ed:84:5b:1b:0a:e7:2a:10:77: ab:f9:0f:ed:20:56:27:5f:ea:33:ef:7e:1e:cb:eb: 37:ac:ac:05:3d:2b:d0:66:18:c7:1a:a4:7b:3e:01: c6:ee:97:78:15:be:6b:95:b8:47:dc:d8:53:8b:cf: c4:c5:a8:f1:bd:d2:e5:7e:4e:3a:91:de:49:ff:68: 20:38:5c:07:ba:cd:2a:10:99:06:a0:54:c4:4e:fb: 7c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D6:C9:BE:03:C4:87:54:0C:63:0A:D1:58:EA:91:49:2A:0F:13:BF X509v3 Authority Key Identifier: keyid:47:2C:B2:88:20:99:00:D1:AF:1A:99:8B:B0:39:EC:75:7E:49:3D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyyyiCCZANGvGpmLsDnsdX5JPdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f9b6b9-b787-4e28-b0bf-aa902dbae928/1/RyyyiCCZANGvGpmLsDnsdX5JPdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:5c:9b:26:e6:9d:fd:d6:e7:b2:67:50:c6:c4:75:2a:86:ee: 2d:ae:40:28:92:0c:61:30:08:04:66:ba:e2:78:fd:de:09:52: 88:38:43:46:e3:57:ae:28:27:a5:50:13:b6:a8:08:58:13:ac: 6d:44:a2:3a:5b:c1:f2:e0:8f:31:e9:8b:3c:ed:75:2a:31:ce: 75:c6:31:7d:7e:3a:84:40:80:c6:8e:cc:25:55:83:de:4a:e6: 32:2a:55:9d:b8:2d:c7:fd:6c:31:74:4f:19:d1:c2:2a:78:a0: 25:f4:2e:e8:b1:77:d1:f2:8f:f6:79:b5:5a:21:f0:37:b0:c1: e3:d6:90:02:6a:0f:67:81:87:d5:4c:c1:56:20:e0:39:b8:86: 73:87:60:57:20:02:ca:f0:31:27:e2:77:a4:e0:23:88:28:93: a8:51:cb:46:e4:e9:45:58:67:15:fd:1c:75:ff:31:72:e1:63: 09:4c:55:2d:68:56:46:26:23:37:4e:80:24:6c:06:fc:85:1c: 5a:1b:f6:99:05:0e:8c:57:17:f0:85:cd:dc:41:c8:37:b0:d7: 2e:d7:7b:da:34:46:64:53:62:f7:4e:60:e0:cd:5c:4c:fe:00: 16:6d:71:e9:43:3e:ae:e2:e7:21:81:d3:26:44:86:28:3b:ae: c7:c2:7a:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcdy39Yg1WiJXfSlaxOmdSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MmNiMjg4MjA5OTAwZDFhZjFhOTk4YmIwMzllYzc1N2U0 OTNkZDUwHhcNMjUxMjI2MjEwMTEyWhcNMjUxMjI3MjEwMTEyWjAzMTEwLwYDVQQD EygxMWQ2YzliZTAzYzQ4NzU0MGM2MzBhZDE1OGVhOTE0OTJhMGYxM2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tED+ZyEdTNyhAWW0mDSxVFGKLV5 aFKLHeHKMWhGfBO7Tnd1QHbfmsz4m495yFmETpYxSdr/+gtLDYR+UcNXJx6O+hB4 ens8BvH86/Pel0LEKECFuuzaR+jcgqjv/NzBgElS/uETaMnbtQR6/9yCH2IUlPBz pEguLLXavwGc36f9FFP9lnu9cmpGZEDUZQq2e1f4X7JhhkjDdRXaUoCN4sqD8Dxg cexH6IPthFsbCucqEHer+Q/tIFYnX+oz734ey+s3rKwFPSvQZhjHGqR7PgHG7pd4 Fb5rlbhH3NhTi8/ExajxvdLlfk46kd5J/2ggOFwHus0qEJkGoFTETvt8qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHWyb4DxIdUDGMK0VjqkUkqDxO/MB8GA1UdIwQY MBaAFEcssoggmQDRrxqZi7A57HV+ST3VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnl5eWlDQ1pBTkd2R3BtTHNEbnNkWDVKUGRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9mOWI2YjktYjc4Ny00ZTI4LWIwYmYt YWE5MDJkYmFlOTI4LzEvUnl5eWlDQ1pBTkd2R3BtTHNEbnNkWDVKUGRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9mOWI2YjktYjc4Ny00ZTI4LWIwYmYtYWE5MDJkYmFlOTI4 LzEvUnl5eWlDQ1pBTkd2R3BtTHNEbnNkWDVKUGRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFybJuad /dbnsmdQxsR1KobuLa5AKJIMYTAIBGa64nj93glSiDhDRuNXrignpVATtqgIWBOs bUSiOlvB8uCPMemLPO11KjHOdcYxfX46hECAxo7MJVWD3krmMipVnbgtx/1sMXRP GdHCKnigJfQu6LF30fKP9nm1WiHwN7DB49aQAmoPZ4GH1UzBViDgObiGc4dgVyAC yvAxJ+J3pOAjiCiTqFHLRuTpRVhnFf0cdf8xcuFjCUxVLWhWRiYjN06AJGwG/IUc Whv2mQUOjFcX8IXN3EHIN7DXLtd72jRGZFNi905g4M1cTP4AFm1x6UM+ruLnIYHT JkSGKDuux8J6bg== -----END CERTIFICATE-----Generated at Sat Dec 27 05:39:51 2025 by rpki-client