This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft File: pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft (raw, json) Hash identifier: +cGusfyDd4pfNeV+SRldCo96Qpy/HEjZ069ghAYGOB4= Subject key identifier: FC:5B:97:C1:FE:82:70:E8:33:4C:D5:96:C8:6B:98:3A:14:64:0E:03 Authority key identifier: A7:24:38:34:90:A1:05:BD:C0:D2:15:97:BF:B1:47:8E:F0:46:30:B1 Certificate issuer: /CN=a724383490a105bdc0d21597bfb1478ef04630b1 Certificate serial: 019B454A721EC318DFBAD8E4642A4E0A6ADD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyQ4NJChBb3A0hWXv7FHjvBGMLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft Manifest number: 075D Signing time: Mon 22 Dec 2025 09:01:05 +0000 Manifest this update: Mon 22 Dec 2025 09:01:05 +0000 Manifest next update: Tue 23 Dec 2025 09:01:05 +0000 Files and hashes: 1: pyQ4NJChBb3A0hWXv7FHjvBGMLE.crl (hash: tse36D/+B518+GEvy51TKRhutuRbEaLgBWL/jS/4v1k=) 2: zq6R1CnWZYXNrJ9Nu3qaClXC_EI.roa (hash: ak8xaUb5ScJnJTZZZkylfOFl3x6iHQeLyCotCjAzekI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft rsync://rpki.ripe.net/repository/DEFAULT/pyQ4NJChBb3A0hWXv7FHjvBGMLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:72:1e:c3:18:df:ba:d8:e4:64:2a:4e:0a:6a:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a724383490a105bdc0d21597bfb1478ef04630b1 Validity Not Before: Dec 22 09:01:05 2025 GMT Not After : Dec 23 09:01:05 2025 GMT Subject: CN=fc5b97c1fe8270e8334cd596c86b983a14640e03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0f:ed:6d:c3:b2:be:4c:e2:69:46:bb:78:df: ae:8f:82:2b:9d:7a:f4:43:0a:19:48:a9:f7:14:11: ad:34:d3:ed:46:6d:66:35:65:f9:b7:ba:fb:ba:42: 8c:48:13:06:7a:8e:b2:e1:8f:fa:67:6e:b1:b3:57: 93:0e:d7:31:2a:ae:65:5b:c3:88:f2:93:72:c5:6f: 83:bf:ba:68:de:d4:6d:70:a7:fd:51:3c:df:a2:d2: aa:95:0f:1c:33:dc:bc:11:7a:da:73:62:be:f9:16: 21:99:f8:d3:5b:fc:04:05:c0:e9:79:cd:f2:aa:7e: 8b:18:51:18:15:29:b0:44:29:bf:19:ae:a4:62:8e: 5e:df:57:2a:23:ff:0f:ba:61:e4:42:f1:a6:17:a3: 0f:fd:50:fa:35:54:61:3a:34:1d:c6:75:f1:74:56: 6c:db:94:e1:27:65:31:85:5f:01:7e:55:2d:45:88: ca:99:87:8c:c5:2c:5f:4b:c9:fb:08:d6:3a:03:00: bd:cd:91:45:1f:b4:b5:d1:58:77:14:4d:7b:12:4a: 7b:ee:51:86:84:ac:3b:2b:7e:d1:c9:f7:b2:1a:58: 7b:fd:81:cd:0d:7b:75:fa:a2:37:c3:08:34:57:2e: 2a:96:4b:2e:30:3f:fb:da:96:40:1e:02:cb:65:d8: a6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5B:97:C1:FE:82:70:E8:33:4C:D5:96:C8:6B:98:3A:14:64:0E:03 X509v3 Authority Key Identifier: keyid:A7:24:38:34:90:A1:05:BD:C0:D2:15:97:BF:B1:47:8E:F0:46:30:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyQ4NJChBb3A0hWXv7FHjvBGMLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:0f:29:5d:d6:2e:1a:e8:7d:f0:e4:59:f2:dc:c1:45:ef:7d: 6b:8f:87:25:9a:1f:ef:ca:91:c5:48:1a:0c:28:33:fc:2d:6c: 30:4c:4f:34:ba:a4:1d:c3:84:75:00:0e:01:a6:06:16:e1:59: 00:41:5d:49:64:7c:65:43:21:8b:af:55:dc:8f:08:04:ea:a2: 87:ce:9b:cd:55:21:2b:14:50:ba:ef:3c:30:8f:21:24:1f:11: 5c:31:63:d8:44:2c:b9:0a:3c:04:3c:34:5c:9d:15:02:c8:cf: 76:ff:29:85:6d:90:3f:2f:f0:e0:06:b2:96:29:cb:1a:72:2f: af:d8:06:11:07:08:d0:c2:85:72:ab:7d:05:3b:5c:70:56:f6: 8e:3e:da:22:73:1d:95:31:49:09:49:00:3d:e2:7b:04:5b:da: 2c:d3:6d:8e:7a:23:c8:94:12:0c:d0:b1:7e:20:e1:6c:12:65: 42:25:90:3a:e4:cc:14:8e:dc:c8:8c:87:0b:22:42:68:31:8f: 72:97:ce:a0:d9:37:09:25:18:f4:73:38:8c:a8:ea:1e:d8:55: f4:c8:81:ee:41:b7:7d:a1:09:1c:88:fc:b3:74:0d:d3:47:a6: ee:1f:8e:da:dd:64:8d:da:b0:9d:55:20:0e:2d:30:6f:67:cb: ba:f7:70:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFSnIewxjfutjkZCpOCmrdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MjQzODM0OTBhMTA1YmRjMGQyMTU5N2JmYjE0NzhlZjA0 NjMwYjEwHhcNMjUxMjIyMDkwMTA1WhcNMjUxMjIzMDkwMTA1WjAzMTEwLwYDVQQD EyhmYzViOTdjMWZlODI3MGU4MzM0Y2Q1OTZjODZiOTgzYTE0NjQwZTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ/tbcOyvkziaUa7eN+uj4IrnXr0 QwoZSKn3FBGtNNPtRm1mNWX5t7r7ukKMSBMGeo6y4Y/6Z26xs1eTDtcxKq5lW8OI 8pNyxW+Dv7po3tRtcKf9UTzfotKqlQ8cM9y8EXrac2K++RYhmfjTW/wEBcDpec3y qn6LGFEYFSmwRCm/Ga6kYo5e31cqI/8PumHkQvGmF6MP/VD6NVRhOjQdxnXxdFZs 25ThJ2UxhV8BflUtRYjKmYeMxSxfS8n7CNY6AwC9zZFFH7S10Vh3FE17Ekp77lGG hKw7K37RyfeyGlh7/YHNDXt1+qI3wwg0Vy4qlksuMD/72pZAHgLLZdimoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxbl8H+gnDoM0zVlshrmDoUZA4DMB8GA1UdIwQY MBaAFKckODSQoQW9wNIVl7+xR47wRjCxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHlRNE5KQ2hCYjNBMGhXWHY3RkhqdkJHTUxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zMDUzNjAtMjIwMy00YTIxLWEyZmQt OTFlODU5OWRkYmY3LzEvcHlRNE5KQ2hCYjNBMGhXWHY3RkhqdkJHTUxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8zMDUzNjAtMjIwMy00YTIxLWEyZmQtOTFlODU5OWRkYmY3 LzEvcHlRNE5KQ2hCYjNBMGhXWHY3RkhqdkJHTUxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAag8pXdYu Guh98ORZ8tzBRe99a4+HJZof78qRxUgaDCgz/C1sMExPNLqkHcOEdQAOAaYGFuFZ AEFdSWR8ZUMhi69V3I8IBOqih86bzVUhKxRQuu88MI8hJB8RXDFj2EQsuQo8BDw0 XJ0VAsjPdv8phW2QPy/w4AaylinLGnIvr9gGEQcI0MKFcqt9BTtccFb2jj7aInMd lTFJCUkAPeJ7BFvaLNNtjnojyJQSDNCxfiDhbBJlQiWQOuTMFI7cyIyHCyJCaDGP cpfOoNk3CSUY9HM4jKjqHthV9MiB7kG3faEJHIj8s3QN00em7h+O2t1kjdqwnVUg Di0wb2fLuvdw8A== -----END CERTIFICATE-----Generated at Mon Dec 22 10:42:28 2025 by rpki-client