This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.mft File: pyiF7ybebTsiYKtj0sXKD4Y33wM.mft (raw, json) Hash identifier: XtwvRj579+Nghv/4dGRGGuUxgQCZ3ZzrvypoWb86QPo= Subject key identifier: 65:39:F5:8C:0E:52:8A:59:E5:AD:BE:63:08:F6:43:2F:F7:A4:4D:E2 Authority key identifier: A7:28:85:EF:26:DE:6D:3B:22:60:AB:63:D2:C5:CA:0F:86:37:DF:03 Certificate issuer: /CN=a72885ef26de6d3b2260ab63d2c5ca0f8637df03 Certificate serial: 019B2D0B57618F7622AB192DFB8D1123CE08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyiF7ybebTsiYKtj0sXKD4Y33wM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.mft Manifest number: 1693 Signing time: Wed 17 Dec 2025 16:01:16 +0000 Manifest this update: Wed 17 Dec 2025 16:01:16 +0000 Manifest next update: Thu 18 Dec 2025 16:01:16 +0000 Files and hashes: 1: pyiF7ybebTsiYKtj0sXKD4Y33wM.crl (hash: t6bGjjRqn4zqAGNSTs/6hqBYMAQnnppU6bo7xqpwdZs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.crl rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.mft rsync://rpki.ripe.net/repository/DEFAULT/pyiF7ybebTsiYKtj0sXKD4Y33wM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:57:61:8f:76:22:ab:19:2d:fb:8d:11:23:ce:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a72885ef26de6d3b2260ab63d2c5ca0f8637df03 Validity Not Before: Dec 17 16:01:16 2025 GMT Not After : Dec 18 16:01:16 2025 GMT Subject: CN=6539f58c0e528a59e5adbe6308f6432ff7a44de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:79:03:25:10:2b:67:32:4b:42:6d:c1:e1:ce: 9e:40:da:62:4c:20:88:69:02:62:2d:73:5c:61:f0: 53:7c:bc:10:58:e7:ce:7c:c0:72:50:40:37:c1:e2: b5:bb:e4:c9:d6:75:11:1b:9c:66:84:2c:53:d0:51: 57:d2:77:b7:00:0b:ff:57:77:5b:27:88:40:31:c7: 90:49:f5:cd:2e:65:1f:49:33:a5:0f:62:20:77:16: 49:46:b2:1e:3a:4b:ac:32:54:d6:5f:60:bb:af:21: e4:e8:ad:19:dc:b3:8b:23:05:53:99:f0:cd:d5:0b: 71:ce:e0:21:96:98:01:83:07:7b:5c:4e:fc:c6:30: 55:a8:f2:76:4f:cc:82:2f:0d:7f:54:6c:6f:70:d7: a0:2c:53:25:c6:0d:af:04:de:52:cf:26:7c:c9:8f: 91:c4:06:cd:98:20:e9:58:1a:55:cd:d1:b3:66:92: a7:9e:c8:b1:86:e5:00:75:d5:84:f3:52:1a:3e:d6: 0f:88:a8:cf:1d:5f:c4:15:fe:66:e5:8d:56:97:21: 46:d9:46:d1:51:5e:43:2b:e5:c1:6f:d0:42:84:04: 79:f7:74:c1:3d:8f:f7:0b:5e:ea:c6:d3:c2:36:d3: 18:0f:06:aa:bf:ea:d3:82:70:e5:cc:eb:85:44:91: 1e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:39:F5:8C:0E:52:8A:59:E5:AD:BE:63:08:F6:43:2F:F7:A4:4D:E2 X509v3 Authority Key Identifier: keyid:A7:28:85:EF:26:DE:6D:3B:22:60:AB:63:D2:C5:CA:0F:86:37:DF:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyiF7ybebTsiYKtj0sXKD4Y33wM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ed259b-d7bf-4de4-bbf0-0e7180f9874d/1/pyiF7ybebTsiYKtj0sXKD4Y33wM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:c8:12:fd:21:c3:d6:d3:82:a9:2b:3b:b2:e4:37:d3:2f:85: d6:da:fb:77:31:53:01:0d:da:36:a4:dd:0e:fa:94:bb:75:5d: 5c:7c:6c:7a:1d:8a:cd:32:a5:fb:c9:51:07:99:d7:98:dc:f0: df:06:c2:a1:7f:56:64:4e:81:e8:f6:b6:bf:4f:c9:21:de:4f: 00:55:ee:a9:80:c3:81:8c:ff:f4:19:96:ca:f0:34:0d:67:a1: cf:78:fd:1f:65:18:e9:4d:e0:30:e8:07:96:46:fb:36:0d:8c: 0f:33:e4:10:11:d6:0e:a1:ce:44:ae:bf:5b:22:45:b2:82:4a: c1:a3:ce:8b:68:63:9f:24:0f:a1:78:69:63:65:9d:47:62:eb: 43:36:bf:a1:62:56:5f:99:e6:30:41:45:b0:ac:2b:5a:5a:53: 33:a3:41:da:4b:5f:10:b3:df:24:9e:1e:81:99:90:18:c8:de: 57:89:97:59:ea:15:86:52:a1:95:46:c5:e0:33:e1:93:0f:a0: 7d:a6:93:f2:4d:6b:9e:47:d4:86:eb:be:c4:8d:62:06:20:56: c1:30:16:dc:d0:be:7b:46:22:d2:63:30:92:f1:8f:a3:a2:bb: a9:d0:9c:a6:54:51:44:bc:a9:d8:a7:c8:36:22:52:ce:6e:b5: 5b:c3:45:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC1dhj3Yiqxkt+40RI84IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3Mjg4NWVmMjZkZTZkM2IyMjYwYWI2M2QyYzVjYTBmODYz N2RmMDMwHhcNMjUxMjE3MTYwMTE2WhcNMjUxMjE4MTYwMTE2WjAzMTEwLwYDVQQD Eyg2NTM5ZjU4YzBlNTI4YTU5ZTVhZGJlNjMwOGY2NDMyZmY3YTQ0ZGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3kDJRArZzJLQm3B4c6eQNpiTCCI aQJiLXNcYfBTfLwQWOfOfMByUEA3weK1u+TJ1nURG5xmhCxT0FFX0ne3AAv/V3db J4hAMceQSfXNLmUfSTOlD2IgdxZJRrIeOkusMlTWX2C7ryHk6K0Z3LOLIwVTmfDN 1QtxzuAhlpgBgwd7XE78xjBVqPJ2T8yCLw1/VGxvcNegLFMlxg2vBN5SzyZ8yY+R xAbNmCDpWBpVzdGzZpKnnsixhuUAddWE81IaPtYPiKjPHV/EFf5m5Y1WlyFG2UbR UV5DK+XBb9BChAR593TBPY/3C17qxtPCNtMYDwaqv+rTgnDlzOuFRJEecwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGU59YwOUopZ5a2+Ywj2Qy/3pE3iMB8GA1UdIwQY MBaAFKcohe8m3m07ImCrY9LFyg+GN98DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHlpRjd5YmViVHNpWUt0ajBzWEtENFkzM3dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9lZDI1OWItZDdiZi00ZGU0LWJiZjAt MGU3MTgwZjk4NzRkLzEvcHlpRjd5YmViVHNpWUt0ajBzWEtENFkzM3dNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9lZDI1OWItZDdiZi00ZGU0LWJiZjAtMGU3MTgwZjk4NzRk LzEvcHlpRjd5YmViVHNpWUt0ajBzWEtENFkzM3dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8gS/SHD 1tOCqSs7suQ30y+F1tr7dzFTAQ3aNqTdDvqUu3VdXHxseh2KzTKl+8lRB5nXmNzw 3wbCoX9WZE6B6Pa2v0/JId5PAFXuqYDDgYz/9BmWyvA0DWehz3j9H2UY6U3gMOgH lkb7Ng2MDzPkEBHWDqHORK6/WyJFsoJKwaPOi2hjnyQPoXhpY2WdR2LrQza/oWJW X5nmMEFFsKwrWlpTM6NB2ktfELPfJJ4egZmQGMjeV4mXWeoVhlKhlUbF4DPhkw+g faaT8k1rnkfUhuu+xI1iBiBWwTAW3NC+e0Yi0mMwkvGPo6K7qdCcplRRRLyp2KfI NiJSzm61W8NFYg== -----END CERTIFICATE-----Generated at Wed Dec 17 19:41:48 2025 by rpki-client