This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft File: RYg0xSq-MEJ_CiKqRv09CAntRYU.mft (raw, json) Hash identifier: PhwQdPbKZyNPq13P3Z/jNAdMYjRuglUFr8NM2Wet4R0= Subject key identifier: 5B:B8:02:44:07:9C:23:76:1F:FB:95:E3:13:A2:2C:3A:5F:B9:F2:6A Authority key identifier: 45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85 Certificate issuer: /CN=458834c52abe30427f0a22aa46fd3d0809ed4585 Certificate serial: 019B53E1F2897AC503B173EC0A757807F5E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft Manifest number: 179A Signing time: Thu 25 Dec 2025 05:01:15 +0000 Manifest this update: Thu 25 Dec 2025 05:01:15 +0000 Manifest next update: Fri 26 Dec 2025 05:01:15 +0000 Files and hashes: 1: 9EAsH9WiZD4VxilaYIDfYTgwfr8.roa (hash: S6lIJn8kLzJ0SR0mYeMv6RwOAdGOeRdde/Wo386MMZ0=) 2: RYg0xSq-MEJ_CiKqRv09CAntRYU.crl (hash: OTaPdX6KYy1U+a2++QHhnWpuPbStosKNvPGaXGKpusE=) 3: Rd3HOWCgIifcE20uT6ZwMTd010E.roa (hash: Iyh7ZN8yRmO6xUm0HuFbl9LY6LaOBla7JBeUoV6oKtU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 05:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:e1:f2:89:7a:c5:03:b1:73:ec:0a:75:78:07:f5:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458834c52abe30427f0a22aa46fd3d0809ed4585 Validity Not Before: Dec 25 05:01:15 2025 GMT Not After : Dec 26 05:01:15 2025 GMT Subject: CN=5bb80244079c23761ffb95e313a22c3a5fb9f26a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:df:1c:9d:b7:c9:65:40:34:4d:8c:4c:1a:37: f7:8f:dd:da:32:cd:26:01:02:6b:04:a1:8b:59:45: e3:e8:3f:7a:d8:08:e9:f1:9d:36:78:c3:40:5c:e7: f4:12:64:46:f2:d7:be:09:2a:c9:bf:36:a8:c1:f7: ea:b4:13:4c:70:6f:da:66:3d:ab:ce:8b:20:38:a6: 4c:7e:ca:fb:6e:34:75:68:19:48:16:37:17:d4:96: 9b:5f:a7:bc:ce:e6:8c:24:d3:f5:49:40:1e:50:32: f5:43:53:99:51:f3:36:c7:47:1c:f5:50:8d:e8:1b: ff:3b:1a:71:1f:28:43:14:9e:e4:aa:69:cc:ec:eb: d1:a2:18:3a:ee:b7:f3:b1:3e:66:44:41:58:61:83: 56:e1:24:b4:ca:89:67:1b:54:d7:3f:1d:b9:69:84: f6:6c:ff:f0:82:be:37:30:08:95:e9:ec:11:23:a2: d9:21:29:a1:10:ac:2d:f4:1a:6d:02:5b:03:36:30: 30:fb:7c:4f:d9:82:3c:10:8d:b8:a8:be:72:fd:ca: a2:b1:cd:1b:8c:26:30:70:7c:be:04:4d:43:67:b9: c1:02:29:0a:92:46:1f:08:d2:05:90:76:f9:7f:58: 15:f0:91:63:ff:af:a8:81:97:46:16:2e:14:ab:f0: 97:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B8:02:44:07:9C:23:76:1F:FB:95:E3:13:A2:2C:3A:5F:B9:F2:6A X509v3 Authority Key Identifier: keyid:45:88:34:C5:2A:BE:30:42:7F:0A:22:AA:46:FD:3D:08:09:ED:45:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYg0xSq-MEJ_CiKqRv09CAntRYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c95a24-226c-476a-addb-a31143463be9/1/RYg0xSq-MEJ_CiKqRv09CAntRYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:cf:64:42:95:0d:fd:52:0f:cf:2e:39:5d:eb:27:2c:ec:17: 1c:3c:e0:9c:30:3c:1f:f0:bc:87:de:54:8d:6c:61:59:3f:d1: 2a:f9:05:3c:db:d4:5a:19:16:2e:71:a1:4d:b9:d8:e1:46:c0: 62:6c:8a:45:6a:c5:a4:8a:2b:c2:b6:f0:9b:28:73:a4:09:a6: ac:f8:f0:f0:31:5a:93:0b:e7:93:d6:d1:4e:b8:93:75:3f:98: ac:b7:e6:fd:71:99:89:b6:b3:cb:8d:d4:87:e9:a9:e3:27:9a: 99:f0:83:36:db:cb:d2:16:4b:88:5d:a1:f4:00:f0:22:d0:4a: e5:85:65:9a:d8:29:0d:ff:b0:90:8b:80:29:ae:74:8b:cb:fb: a3:93:c0:cc:11:3b:a7:6d:a6:ca:50:17:82:3b:4b:a9:fc:d2: e8:ee:27:7b:7f:1d:17:60:cf:56:7a:a5:0f:4e:06:cd:59:38: 6d:21:f7:96:ff:7c:4d:92:22:41:91:20:66:89:cc:03:7e:82: 42:18:9d:62:f0:38:5c:3f:4e:a3:cc:87:9a:a6:c8:7c:b2:f3: 29:22:9b:e5:d1:06:83:96:aa:d1:2a:10:f9:90:1c:f4:c0:d8: e7:0f:51:2d:92:e4:9d:f3:1c:92:7c:b1:8e:bc:3c:9f:da:28: e5:95:d2:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtT4fKJesUDsXPsCnV4B/XhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1ODgzNGM1MmFiZTMwNDI3ZjBhMjJhYTQ2ZmQzZDA4MDll ZDQ1ODUwHhcNMjUxMjI1MDUwMTE1WhcNMjUxMjI2MDUwMTE1WjAzMTEwLwYDVQQD Eyg1YmI4MDI0NDA3OWMyMzc2MWZmYjk1ZTMxM2EyMmMzYTVmYjlmMjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN8cnbfJZUA0TYxMGjf3j93aMs0m AQJrBKGLWUXj6D962Ajp8Z02eMNAXOf0EmRG8te+CSrJvzaowffqtBNMcG/aZj2r zosgOKZMfsr7bjR1aBlIFjcX1JabX6e8zuaMJNP1SUAeUDL1Q1OZUfM2x0cc9VCN 6Bv/OxpxHyhDFJ7kqmnM7OvRohg67rfzsT5mREFYYYNW4SS0yolnG1TXPx25aYT2 bP/wgr43MAiV6ewRI6LZISmhEKwt9BptAlsDNjAw+3xP2YI8EI24qL5y/cqisc0b jCYwcHy+BE1DZ7nBAikKkkYfCNIFkHb5f1gV8JFj/6+ogZdGFi4Uq/CX5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFu4AkQHnCN2H/uV4xOiLDpfufJqMB8GA1UdIwQY MBaAFEWINMUqvjBCfwoiqkb9PQgJ7UWFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUllnMHhTcS1NRUpfQ2lLcVJ2MDlDQW50UllVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jOTVhMjQtMjI2Yy00NzZhLWFkZGIt YTMxMTQzNDYzYmU5LzEvUllnMHhTcS1NRUpfQ2lLcVJ2MDlDQW50UllVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9jOTVhMjQtMjI2Yy00NzZhLWFkZGItYTMxMTQzNDYzYmU5 LzEvUllnMHhTcS1NRUpfQ2lLcVJ2MDlDQW50UllVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj89kQpUN /VIPzy45XesnLOwXHDzgnDA8H/C8h95UjWxhWT/RKvkFPNvUWhkWLnGhTbnY4UbA YmyKRWrFpIorwrbwmyhzpAmmrPjw8DFakwvnk9bRTriTdT+YrLfm/XGZibazy43U h+mp4yeamfCDNtvL0hZLiF2h9ADwItBK5YVlmtgpDf+wkIuAKa50i8v7o5PAzBE7 p22mylAXgjtLqfzS6O4ne38dF2DPVnqlD04GzVk4bSH3lv98TZIiQZEgZonMA36C QhidYvA4XD9Oo8yHmqbIfLLzKSKb5dEGg5aq0SoQ+ZAc9MDY5w9RLZLknfMcknyx jrw8n9oo5ZXSNw== -----END CERTIFICATE-----Generated at Thu Dec 25 14:34:42 2025 by rpki-client