This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft File: RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft (raw, json) Hash identifier: ZtJQV5cXHupZ5pE6qahMauPhTgKbwFT70iVpMw/YZUk= Subject key identifier: 51:A7:4B:D0:2C:E2:CE:6B:3C:9B:63:51:45:ED:08:67:B9:F6:9C:FC Authority key identifier: 44:F6:10:F8:72:CF:31:B7:C3:22:4C:D2:C1:66:9C:99:68:35:0B:7A Certificate issuer: /CN=44f610f872cf31b7c3224cd2c1669c9968350b7a Certificate serial: 019B3AFD6FB141541B6E0735E420257AB793 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPYQ-HLPMbfDIkzSwWacmWg1C3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 09:00:46 +0000 Manifest this update: Sat 20 Dec 2025 09:00:46 +0000 Manifest next update: Sun 21 Dec 2025 09:00:46 +0000 Files and hashes: 1: RPYQ-HLPMbfDIkzSwWacmWg1C3o.crl (hash: IE6zN/jT2vQN2eY7aHWcY/fFQ+Z73tN6KAra6uM1Roo=) 2: ZmJk3i0UqR_uJ_XLaSjGUe2aH00.roa (hash: BCwdh7j1ZUyJ+mVEfLtfrzwX+n9rg9YN807VJjPHsUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.crl rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft rsync://rpki.ripe.net/repository/DEFAULT/RPYQ-HLPMbfDIkzSwWacmWg1C3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:6f:b1:41:54:1b:6e:07:35:e4:20:25:7a:b7:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44f610f872cf31b7c3224cd2c1669c9968350b7a Validity Not Before: Dec 20 09:00:46 2025 GMT Not After : Dec 21 09:00:46 2025 GMT Subject: CN=51a74bd02ce2ce6b3c9b635145ed0867b9f69cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e1:54:ed:8d:2d:31:ec:f3:db:e1:04:c8:8b: 5c:2a:74:0b:ae:b5:b3:90:73:c3:a0:62:a3:f0:69: 2e:3f:6c:ab:29:cf:20:91:17:4b:f6:64:a9:7e:8b: b9:98:b2:86:6e:60:54:55:2b:be:74:e4:50:3f:fd: 29:1e:4c:7e:31:4d:ad:ca:a2:b9:5a:77:84:e4:f6: 80:4f:49:5f:71:d5:d6:6e:84:56:d3:31:e1:43:fc: 4d:19:27:94:d1:cb:69:9a:cd:11:78:89:b4:0c:5c: 53:af:ab:19:f5:d7:c8:47:40:74:c8:f1:35:21:80: d5:bf:52:4a:14:63:f5:f0:1d:5f:58:ab:5f:48:af: c5:8d:6b:2a:5e:2f:69:13:50:a4:10:45:b9:68:97: 39:69:58:95:a0:d0:19:76:35:3e:32:39:5e:fa:cb: fe:a0:39:08:54:17:6e:9e:f9:81:4b:15:a0:9c:7a: b4:7a:73:c9:ca:f7:68:f8:08:a7:a5:22:c1:5e:2e: 9f:2b:5b:ad:e7:c8:5f:ad:a7:68:f4:16:df:24:34: 6b:f1:82:ea:3d:33:80:25:2a:81:71:7f:ec:fb:37: 8e:b0:17:11:5c:9e:d2:35:25:27:74:b6:da:8a:ad: a1:60:a1:fb:b1:3a:b5:3c:05:c5:f7:5b:d0:1b:b4: db:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A7:4B:D0:2C:E2:CE:6B:3C:9B:63:51:45:ED:08:67:B9:F6:9C:FC X509v3 Authority Key Identifier: keyid:44:F6:10:F8:72:CF:31:B7:C3:22:4C:D2:C1:66:9C:99:68:35:0B:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPYQ-HLPMbfDIkzSwWacmWg1C3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7253f0-d825-4dab-801f-9b509e5931f9/1/RPYQ-HLPMbfDIkzSwWacmWg1C3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:a8:67:8f:a8:0d:87:e6:e9:c6:ed:df:14:b8:d9:f6:9b:01: e5:de:28:b2:7f:90:aa:fc:a2:16:7a:46:17:e0:e9:d9:4f:fd: bf:24:ae:f3:4b:fd:d7:1b:2a:f4:90:bf:a8:54:10:7f:2b:1a: 7b:d4:04:e9:9b:01:4f:da:c9:e0:fc:f9:02:4a:45:aa:f1:bf: 14:2c:73:df:03:d5:00:58:0e:28:5a:42:ec:47:1b:be:c7:f8: e6:11:28:a5:ff:a8:8e:f0:9f:a3:6a:c7:4e:ba:47:61:4c:51: b3:10:db:2c:d1:63:e4:d9:8d:dd:5e:02:c9:0e:92:39:2c:17: d6:74:da:25:bb:7f:ab:ae:1f:03:b1:f7:9c:25:78:a4:7e:2a: 44:dd:15:a5:bf:98:76:21:cb:f9:28:7b:e2:a3:1a:64:fb:a8: f5:7a:91:de:69:2f:22:e4:68:a1:cc:ab:ee:d7:bd:d2:fe:4f: 33:cf:ef:e1:7a:01:1b:e6:9e:e4:ed:de:88:88:b0:d2:45:ac: 7e:3b:31:50:f7:77:91:62:a9:c8:b3:2b:65:c0:81:05:8d:58: 00:ba:23:38:ac:f3:7e:d1:ef:be:e5:8b:92:1d:cf:25:c3:ed: 8d:3c:12:0c:68:8b:a1:74:b7:1d:92:0f:67:bf:ca:ec:69:c3: 57:ca:16:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/W+xQVQbbgc15CAlereTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZjYxMGY4NzJjZjMxYjdjMzIyNGNkMmMxNjY5Yzk5Njgz NTBiN2EwHhcNMjUxMjIwMDkwMDQ2WhcNMjUxMjIxMDkwMDQ2WjAzMTEwLwYDVQQD Eyg1MWE3NGJkMDJjZTJjZTZiM2M5YjYzNTE0NWVkMDg2N2I5ZjY5Y2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOFU7Y0tMezz2+EEyItcKnQLrrWz kHPDoGKj8GkuP2yrKc8gkRdL9mSpfou5mLKGbmBUVSu+dORQP/0pHkx+MU2tyqK5 WneE5PaAT0lfcdXWboRW0zHhQ/xNGSeU0ctpms0ReIm0DFxTr6sZ9dfIR0B0yPE1 IYDVv1JKFGP18B1fWKtfSK/FjWsqXi9pE1CkEEW5aJc5aViVoNAZdjU+Mjle+sv+ oDkIVBdunvmBSxWgnHq0enPJyvdo+AinpSLBXi6fK1ut58hfrado9BbfJDRr8YLq PTOAJSqBcX/s+zeOsBcRXJ7SNSUndLbaiq2hYKH7sTq1PAXF91vQG7Tb5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGnS9As4s5rPJtjUUXtCGe59pz8MB8GA1UdIwQY MBaAFET2EPhyzzG3wyJM0sFmnJloNQt6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlBZUS1ITFBNYmZESWt6U3dXYWNtV2cxQzNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83MjUzZjAtZDgyNS00ZGFiLTgwMWYt OWI1MDllNTkzMWY5LzEvUlBZUS1ITFBNYmZESWt6U3dXYWNtV2cxQzNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS83MjUzZjAtZDgyNS00ZGFiLTgwMWYtOWI1MDllNTkzMWY5 LzEvUlBZUS1ITFBNYmZESWt6U3dXYWNtV2cxQzNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl6hnj6gN h+bpxu3fFLjZ9psB5d4osn+QqvyiFnpGF+Dp2U/9vySu80v91xsq9JC/qFQQfysa e9QE6ZsBT9rJ4Pz5AkpFqvG/FCxz3wPVAFgOKFpC7Ecbvsf45hEopf+ojvCfo2rH TrpHYUxRsxDbLNFj5NmN3V4CyQ6SOSwX1nTaJbt/q64fA7H3nCV4pH4qRN0Vpb+Y diHL+Sh74qMaZPuo9XqR3mkvIuRoocyr7te90v5PM8/v4XoBG+ae5O3eiIiw0kWs fjsxUPd3kWKpyLMrZcCBBY1YALojOKzzftHvvuWLkh3PJcPtjTwSDGiLoXS3HZIP Z7/K7GnDV8oWfA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:10:44 2025 by rpki-client