This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft File: PYr-wXpBs52_aQE-yhZ732Oqhl0.mft (raw, json) Hash identifier: acP3d9kLmFEAfapNqYJgbOBd3BX2n3vhkTNmxMsVeTo= Subject key identifier: 25:62:9A:28:C6:F7:4B:06:BC:47:3E:A2:15:EE:17:03:B8:8F:A6:E8 Authority key identifier: 3D:8A:FE:C1:7A:41:B3:9D:BF:69:01:3E:CA:16:7B:DF:63:AA:86:5D Certificate issuer: /CN=3d8afec17a41b39dbf69013eca167bdf63aa865d Certificate serial: 019B424AADCC1F0059F8ACAD55A7FBE549A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft Manifest number: 088A Signing time: Sun 21 Dec 2025 19:02:28 +0000 Manifest this update: Sun 21 Dec 2025 19:02:28 +0000 Manifest next update: Mon 22 Dec 2025 19:02:28 +0000 Files and hashes: 1: PYr-wXpBs52_aQE-yhZ732Oqhl0.crl (hash: AHkVNGJba53eMgBZppqcd7dpLnLkyKtnXHnNBgCGMb8=) 2: jrw3uqdkA6aKRrYyLdhJsdQJmwE.roa (hash: E/ICIdLuVq2VYN9ruBUIoxT9BQwq5xAlmJn8kVZHVXc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:ad:cc:1f:00:59:f8:ac:ad:55:a7:fb:e5:49:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8afec17a41b39dbf69013eca167bdf63aa865d Validity Not Before: Dec 21 19:02:28 2025 GMT Not After : Dec 22 19:02:28 2025 GMT Subject: CN=25629a28c6f74b06bc473ea215ee1703b88fa6e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:46:16:19:b3:a0:a1:5c:63:c3:95:9f:6e:00: aa:a6:45:19:df:be:d1:ca:1c:e9:e4:e2:f0:c0:e2: 0b:e5:1d:b0:30:94:07:7b:1e:c9:f0:8c:33:9b:d3: e7:f4:5a:40:0a:3a:66:3b:96:f6:97:07:5f:c0:f6: 06:ca:d6:5b:81:b8:4c:95:cc:ca:d6:16:bd:af:32: 9a:67:dc:99:1f:31:c7:e3:42:5e:48:59:43:be:36: 08:08:e2:3f:20:b1:a4:36:b5:91:70:46:cf:ec:d4: 3b:41:f6:17:9f:e0:1a:4c:74:71:d9:6b:c2:74:70: 92:f1:16:f0:84:ca:8c:22:26:39:22:92:38:27:e4: 6b:31:77:77:b2:cf:d8:41:b1:bd:f6:8d:17:22:86: ac:89:ac:af:6c:d9:7b:66:22:5c:f7:f1:dc:92:c0: 01:a2:ca:56:5f:84:b0:a5:78:67:ca:97:8a:bc:21: 5f:d4:c3:27:11:08:e3:24:f6:e6:06:25:6e:b2:97: 74:1d:00:26:ef:e8:3e:74:a3:c7:b9:0d:95:9b:e4: 4d:50:86:b7:27:81:f8:ec:6d:ff:c4:2a:14:53:a3: 35:92:01:82:5c:9f:71:55:5e:8c:a4:8d:a8:40:b7: 2f:d3:0a:17:e9:78:3b:ff:12:f7:aa:3a:54:62:eb: 3a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:62:9A:28:C6:F7:4B:06:BC:47:3E:A2:15:EE:17:03:B8:8F:A6:E8 X509v3 Authority Key Identifier: keyid:3D:8A:FE:C1:7A:41:B3:9D:BF:69:01:3E:CA:16:7B:DF:63:AA:86:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:28:36:80:9c:6d:34:97:5b:94:bf:fd:6d:37:b2:2c:17:63: da:73:83:f2:ac:e5:83:19:b8:79:1d:c5:d2:03:5c:0d:1e:52: 1d:1f:d9:95:08:d1:53:a2:8f:86:89:b6:70:0d:c4:69:96:69: fd:88:bd:5f:7f:23:c3:67:17:77:c8:5d:6a:45:b3:9e:6f:bd: a1:84:70:c4:01:e1:23:b1:65:8c:8e:0e:1f:97:4f:e4:99:0e: da:fe:21:5a:f7:29:68:d8:03:d9:08:65:3e:31:4b:5e:fb:a0: c4:6c:68:44:3c:4b:74:59:f2:0f:bb:45:65:36:ad:d6:ed:21: 86:96:16:f0:a4:4b:39:d2:1f:28:20:a8:dc:a9:59:c2:9d:cf: 7a:0b:c2:84:04:7b:6c:c5:d2:02:b4:26:a0:0c:57:f9:a3:cd: fd:c1:62:3f:2d:f1:e0:82:7e:90:37:7d:94:e6:15:03:f3:58: 81:29:56:c7:f8:6d:e2:24:37:83:1f:73:e9:e0:6d:71:a9:8d: 53:5a:83:65:82:18:af:0c:4c:ba:08:2d:8a:2e:75:6b:4b:8b: 6b:f8:26:88:ef:29:ba:08:4b:ed:9b:ee:b1:55:76:8c:41:43: 4c:60:35:61:2f:d6:90:06:6c:f1:0a:dd:18:13:60:91:33:07: 5e:81:13:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSq3MHwBZ+KytVaf75UmlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGFmZWMxN2E0MWIzOWRiZjY5MDEzZWNhMTY3YmRmNjNh YTg2NWQwHhcNMjUxMjIxMTkwMjI4WhcNMjUxMjIyMTkwMjI4WjAzMTEwLwYDVQQD EygyNTYyOWEyOGM2Zjc0YjA2YmM0NzNlYTIxNWVlMTcwM2I4OGZhNmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUYWGbOgoVxjw5WfbgCqpkUZ377R yhzp5OLwwOIL5R2wMJQHex7J8Iwzm9Pn9FpACjpmO5b2lwdfwPYGytZbgbhMlczK 1ha9rzKaZ9yZHzHH40JeSFlDvjYICOI/ILGkNrWRcEbP7NQ7QfYXn+AaTHRx2WvC dHCS8RbwhMqMIiY5IpI4J+RrMXd3ss/YQbG99o0XIoasiayvbNl7ZiJc9/HcksAB ospWX4SwpXhnypeKvCFf1MMnEQjjJPbmBiVuspd0HQAm7+g+dKPHuQ2Vm+RNUIa3 J4H47G3/xCoUU6M1kgGCXJ9xVV6MpI2oQLcv0woX6Xg7/xL3qjpUYus6ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVimijG90sGvEc+ohXuFwO4j6boMB8GA1UdIwQY MBaAFD2K/sF6QbOdv2kBPsoWe99jqoZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFlyLXdYcEJzNTJfYVFFLXloWjczMk9xaGwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy84YmNhYmEtMzhhZC00MDUxLWI0MTQt OTRkMzdlOTU5NWMxLzEvUFlyLXdYcEJzNTJfYVFFLXloWjczMk9xaGwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy84YmNhYmEtMzhhZC00MDUxLWI0MTQtOTRkMzdlOTU5NWMx LzEvUFlyLXdYcEJzNTJfYVFFLXloWjczMk9xaGwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqig2gJxt NJdblL/9bTeyLBdj2nOD8qzlgxm4eR3F0gNcDR5SHR/ZlQjRU6KPhom2cA3EaZZp /Yi9X38jw2cXd8hdakWznm+9oYRwxAHhI7FljI4OH5dP5JkO2v4hWvcpaNgD2Qhl PjFLXvugxGxoRDxLdFnyD7tFZTat1u0hhpYW8KRLOdIfKCCo3KlZwp3PegvChAR7 bMXSArQmoAxX+aPN/cFiPy3x4IJ+kDd9lOYVA/NYgSlWx/ht4iQ3gx9z6eBtcamN U1qDZYIYrwxMuggtii51a0uLa/gmiO8pughL7ZvusVV2jEFDTGA1YS/WkAZs8Qrd GBNgkTMHXoET3Q== -----END CERTIFICATE-----Generated at Mon Dec 22 04:39:42 2025 by rpki-client