This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft File: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json) Hash identifier: u+IMGAGXGNvvbCuMV5qCJOd9T8uYtAdOto0uwhfzyf0= Subject key identifier: AB:D1:DC:F4:AA:5E:1D:F5:9A:CB:1F:61:5C:22:BF:2C:B5:07:C8:C5 Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 019B39EAD543F4B52EC70EAE80DE4CF22A1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft Manifest number: 1794 Signing time: Sat 20 Dec 2025 04:00:49 +0000 Manifest this update: Sat 20 Dec 2025 04:00:49 +0000 Manifest next update: Sun 21 Dec 2025 04:00:49 +0000 Files and hashes: 1: 0bSG1GbQSr3JP2M9BW2A6zWEmWQ.roa (hash: m8/KEzPrRo4PqG3DFfILeyvmSqlK6Zrphut5P8ccG8c=) 2: 9lwL98-HDVBrZzYLRCpSdOAFXpo.roa (hash: Za/9eX9VNb3FiSxJk6MAE/CpFGWxRO5mjghE1elRivc=) 3: B0iUIhkwv2ZZdyXRyu9yUh7Z61o.roa (hash: F6O6OkDRyyyGqFimHsLztSYsh0AUNFPNkRW3jSPwvEw=) 4: I1EoUAseUd3MHO-sI_txqICBiwc.roa (hash: khM+HdjIw9WozXCqEk/wtCOtMrpNfxWXErjSXn8BT5M=) 5: KQ7nGqqdl8DwDw35UdDbOJPZhfY.roa (hash: 8pIf1gsysAeCO62ayw5k2bU+b1g8t0mrR6+zNCtTibQ=) 6: LS_oKjOyENRZwn9y786G7x_fDEc.roa (hash: qwrjawF9Z67WE+ivjm8mPIl3xqaLReHxca9+SNnwKPE=) 7: Pvub5ztTS47f0XG6tBZE9ngX8Rw.roa (hash: euQ5dqT6xwCfoTsPu9P7kfQ9UGdbPzkkEJWSyFwCBTw=) 8: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: ZUjjGHm3uWIQ6hWsM//el2jxc0DNQVbhkuZpWiwJbXA=) 9: lqxGizsVmZbvi7xpd3yzs2I4ILw.roa (hash: aTi4SECMvkjegR9/FyzL9HTmeGkM0AsiVgyipWCsYrY=) 10: sFnlwbiQ75y8_114DKwn3kP_iWc.roa (hash: dkHr9wKemXLLSQfaJK2+kCvWwELtA6u+nMBynz2rXgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 04:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:ea:d5:43:f4:b5:2e:c7:0e:ae:80:de:4c:f2:2a:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: Dec 20 04:00:49 2025 GMT Not After : Dec 21 04:00:49 2025 GMT Subject: CN=abd1dcf4aa5e1df59acb1f615c22bf2cb507c8c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dc:96:59:76:d9:de:ab:9d:b6:24:08:ad:fa: bd:5f:f3:5c:d8:0b:e0:7f:fd:fe:85:c8:20:12:56: 74:aa:48:59:5d:c9:80:f1:37:61:8a:a2:b9:de:d9: 91:f0:8b:1c:1c:b4:f5:d3:11:fc:a4:e2:4c:d7:a7: 25:02:c9:01:66:e6:02:1c:48:af:7c:9b:07:41:a2: 3e:25:e0:b5:58:81:b7:97:4d:92:66:dc:62:7b:fc: 3f:34:b2:8d:73:1c:6a:3c:a7:2f:94:f4:eb:15:73: 7a:94:fb:37:a7:c6:4a:54:33:96:e5:24:c1:d0:5e: 34:bf:82:db:a5:5c:2e:f4:65:15:6a:bd:e9:bc:db: f2:60:e8:14:10:a1:ef:37:e0:69:66:67:48:0e:03: 1f:84:e4:3e:73:b3:c4:80:e8:3c:81:2b:50:65:48: f9:19:43:1a:88:ba:7f:9b:54:4a:d5:6a:e6:b3:d2: b9:af:91:ea:66:86:e1:4e:bb:3e:87:93:a8:a5:3b: 54:ca:33:02:8b:30:f4:b6:2d:4a:26:98:c2:6a:17: 16:2a:12:8b:96:2d:d4:54:0f:31:e1:2c:37:7b:37: d1:aa:20:d7:ad:55:aa:03:ca:32:9e:cc:13:d5:0d: ea:25:5e:31:03:b0:d2:84:63:e5:8d:14:36:76:e6: ae:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D1:DC:F4:AA:5E:1D:F5:9A:CB:1F:61:5C:22:BF:2C:B5:07:C8:C5 X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f4:5c:81:39:b5:c0:70:68:b8:2c:c5:69:30:d6:4e:98:e4: 8c:82:1c:e1:80:c2:73:7e:23:16:6c:fc:57:61:73:20:88:a4: 5f:32:06:ad:2f:5a:c5:12:b3:61:e8:81:7b:ec:27:76:cf:56: 38:e9:1c:aa:03:f6:a1:cb:bb:14:72:3d:e5:e3:b3:5f:5c:4e: 9e:17:66:2f:cc:cb:ff:22:92:b1:02:10:48:a2:b9:34:92:a6: 89:49:92:80:fa:a1:69:5b:0b:98:46:bf:50:b7:78:ab:f5:63: 97:dc:30:80:ce:fd:75:12:da:2e:54:3c:3a:e6:c0:7c:8a:34: 48:dc:62:98:ca:46:d9:bf:2d:cb:37:7c:1b:f0:0c:45:43:5f: 5b:5a:97:4e:29:2f:af:d4:bc:82:df:25:88:a7:87:51:6a:4a: 60:bf:2d:aa:f0:1e:1f:fb:e8:ac:06:a8:0f:62:ce:be:c0:2b: 6f:74:cd:a2:1f:2f:6e:ab:3b:99:88:0e:8d:03:2b:f5:66:55: 39:34:d7:e9:8f:63:0a:30:d2:a4:e2:06:a1:f8:ff:6f:84:9f: fc:db:b0:90:ad:1a:52:4d:01:b4:17:5a:7b:21:77:61:0e:fc: 05:c2:95:2b:75:6b:0b:ae:e9:9d:8a:95:4b:10:b8:cb:76:e3: e4:7e:d8:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56tVD9LUuxw6ugN5M8ioaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjUxMjIwMDQwMDQ5WhcNMjUxMjIxMDQwMDQ5WjAzMTEwLwYDVQQD EyhhYmQxZGNmNGFhNWUxZGY1OWFjYjFmNjE1YzIyYmYyY2I1MDdjOGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtyWWXbZ3qudtiQIrfq9X/Nc2Avg f/3+hcggElZ0qkhZXcmA8TdhiqK53tmR8IscHLT10xH8pOJM16clAskBZuYCHEiv fJsHQaI+JeC1WIG3l02SZtxie/w/NLKNcxxqPKcvlPTrFXN6lPs3p8ZKVDOW5STB 0F40v4LbpVwu9GUVar3pvNvyYOgUEKHvN+BpZmdIDgMfhOQ+c7PEgOg8gStQZUj5 GUMaiLp/m1RK1Wrms9K5r5HqZobhTrs+h5OopTtUyjMCizD0ti1KJpjCahcWKhKL li3UVA8x4Sw3ezfRqiDXrVWqA8oynswT1Q3qJV4xA7DShGPljRQ2duauUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvR3PSqXh31mssfYVwivyy1B8jFMB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAavRcgTm1 wHBouCzFaTDWTpjkjIIc4YDCc34jFmz8V2FzIIikXzIGrS9axRKzYeiBe+wnds9W OOkcqgP2ocu7FHI95eOzX1xOnhdmL8zL/yKSsQIQSKK5NJKmiUmSgPqhaVsLmEa/ ULd4q/Vjl9wwgM79dRLaLlQ8OubAfIo0SNximMpG2b8tyzd8G/AMRUNfW1qXTikv r9S8gt8liKeHUWpKYL8tqvAeH/vorAaoD2LOvsArb3TNoh8vbqs7mYgOjQMr9WZV OTTX6Y9jCjDSpOIGofj/b4Sf/NuwkK0aUk0BtBdaeyF3YQ78BcKVK3VrC67pnYqV SxC4y3bj5H7YMg== -----END CERTIFICATE-----Generated at Sat Dec 20 11:28:22 2025 by rpki-client