This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft File: PyixvqC1iXcj6nxfu918zSlSsFw.mft (raw, json) Hash identifier: ACiPRV2F5+iqQxjQKEvkCDFRKCgddOGC4AdFkkAgrRE= Subject key identifier: 2D:17:41:AE:19:8D:9A:7F:54:CA:90:55:95:8D:08:B2:CB:67:1D:67 Authority key identifier: 3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C Certificate issuer: /CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c Certificate serial: 019B661F189C7B87ECD07D262297B3960808 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft Manifest number: 0863 Signing time: Sun 28 Dec 2025 18:01:12 +0000 Manifest this update: Sun 28 Dec 2025 18:01:12 +0000 Manifest next update: Mon 29 Dec 2025 18:01:12 +0000 Files and hashes: 1: 1F_TkFNUb-s2_7y4TclItI2rQso.roa (hash: CLIjr10SKvI8VikQ8I8lxU5GeLh25bWphMtR56ykfWg=) 2: PyixvqC1iXcj6nxfu918zSlSsFw.crl (hash: fypvcUCe1jKyv3idAWCJbpjGqhs377bJazDZbteAXX8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 18:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:1f:18:9c:7b:87:ec:d0:7d:26:22:97:b3:96:08:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f28b1bea0b5897723ea7c5fbbdd7ccd2952b05c Validity Not Before: Dec 28 18:01:12 2025 GMT Not After : Dec 29 18:01:12 2025 GMT Subject: CN=2d1741ae198d9a7f54ca9055958d08b2cb671d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:29:75:20:e1:09:41:9b:a1:1c:f2:de:2d:3a: f6:2e:03:01:b5:ee:0d:d3:81:59:9f:ab:c8:8d:1b: a2:7f:2a:d2:45:b9:03:35:76:b4:ee:e6:f9:05:66: cc:83:7d:54:05:87:d8:98:dc:07:9b:c3:a9:fd:0f: e8:55:65:10:0f:e8:30:03:a5:79:68:39:de:b9:94: ea:70:7b:d1:4a:d8:59:0d:a4:03:d1:ed:cd:59:79: 1f:a3:e5:c2:ab:9b:70:4b:a2:ea:fe:11:27:c4:6b: 0a:5b:e4:27:d4:d3:0b:f7:c7:ea:43:c3:d4:98:cc: 7a:d4:b1:21:14:46:6a:4a:6c:9f:79:5d:75:d5:04: 5d:b6:e8:9e:ab:6e:e5:20:e5:55:2e:e5:37:8f:8f: e2:e3:82:d3:41:40:a1:5d:14:29:8b:56:45:fe:23: 92:19:20:7d:20:23:b4:80:34:f7:a3:ee:b8:b1:23: 65:4b:4c:9b:eb:c2:b5:79:b7:9e:96:47:5c:60:fe: 6c:f7:17:b1:59:3d:ff:54:30:56:dd:5d:1e:72:fb: 22:21:ef:01:2e:ec:61:d1:2d:22:ae:1e:d7:41:07: eb:19:6d:79:ed:48:13:cb:48:51:ea:28:b9:26:42: 39:81:cb:85:63:e6:d8:15:51:90:a9:da:43:bf:e6: b7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:17:41:AE:19:8D:9A:7F:54:CA:90:55:95:8D:08:B2:CB:67:1D:67 X509v3 Authority Key Identifier: keyid:3F:28:B1:BE:A0:B5:89:77:23:EA:7C:5F:BB:DD:7C:CD:29:52:B0:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyixvqC1iXcj6nxfu918zSlSsFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/d88b46-6ef9-4624-8984-bfa6d340787a/1/PyixvqC1iXcj6nxfu918zSlSsFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f1:b9:bf:ac:50:00:4f:0a:56:84:60:39:e4:de:3a:69:21: 43:13:2f:25:32:b7:8e:94:03:bf:27:c3:88:63:77:31:6b:1b: c0:19:06:be:b3:c1:2d:8e:a4:6f:d6:08:2d:d5:69:2b:f2:8f: ec:cc:1f:15:1e:bb:fa:71:43:ac:ec:34:1f:06:50:28:86:e0: 9e:4d:84:28:ce:f8:d8:f5:3e:95:4d:43:c2:79:5c:fb:d9:bf: bc:5b:97:5f:7d:10:a3:ef:21:bb:ac:32:33:df:23:a4:ca:c8: 81:4c:cf:85:f3:e9:54:15:e5:b9:cb:c5:1c:97:a1:ff:ad:12: e5:fa:cb:dc:75:c0:8a:ae:ea:91:c7:fc:6d:8f:f2:83:b7:d3: 23:ad:3f:70:b0:b9:e4:6d:9e:45:9c:08:ab:80:2c:52:30:9e: c7:15:d8:d5:90:29:ea:61:74:92:9b:76:19:75:b4:88:8d:fe: 79:b7:16:7f:11:09:0e:0f:06:ac:2f:ef:2a:25:91:ef:97:a8: 5e:9f:c2:fc:73:10:b8:58:8b:63:0f:72:c0:21:78:f0:b7:51: 67:c2:81:fa:dc:ee:1c:48:ca:94:dc:db:b4:c7:01:38:76:03: bc:a2:c2:2f:8c:a7:d1:d8:87:c7:cd:f3:ba:a0:51:0e:f8:8a: 67:c4:18:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmHxice4fs0H0mIpezlggIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMjhiMWJlYTBiNTg5NzcyM2VhN2M1ZmJiZGQ3Y2NkMjk1 MmIwNWMwHhcNMjUxMjI4MTgwMTEyWhcNMjUxMjI5MTgwMTEyWjAzMTEwLwYDVQQD EygyZDE3NDFhZTE5OGQ5YTdmNTRjYTkwNTU5NThkMDhiMmNiNjcxZDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyl1IOEJQZuhHPLeLTr2LgMBte4N 04FZn6vIjRuifyrSRbkDNXa07ub5BWbMg31UBYfYmNwHm8Op/Q/oVWUQD+gwA6V5 aDneuZTqcHvRSthZDaQD0e3NWXkfo+XCq5twS6Lq/hEnxGsKW+Qn1NML98fqQ8PU mMx61LEhFEZqSmyfeV111QRdtuieq27lIOVVLuU3j4/i44LTQUChXRQpi1ZF/iOS GSB9ICO0gDT3o+64sSNlS0yb68K1ebeelkdcYP5s9xexWT3/VDBW3V0ecvsiIe8B Luxh0S0irh7XQQfrGW157UgTy0hR6ii5JkI5gcuFY+bYFVGQqdpDv+a3uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0XQa4ZjZp/VMqQVZWNCLLLZx1nMB8GA1UdIwQY MBaAFD8osb6gtYl3I+p8X7vdfM0pUrBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHlpeHZxQzFpWGNqNm54ZnU5MTh6U2xTc0Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9kODhiNDYtNmVmOS00NjI0LTg5ODQt YmZhNmQzNDA3ODdhLzEvUHlpeHZxQzFpWGNqNm54ZnU5MTh6U2xTc0Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9kODhiNDYtNmVmOS00NjI0LTg5ODQtYmZhNmQzNDA3ODdh LzEvUHlpeHZxQzFpWGNqNm54ZnU5MTh6U2xTc0Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/G5v6xQ AE8KVoRgOeTeOmkhQxMvJTK3jpQDvyfDiGN3MWsbwBkGvrPBLY6kb9YILdVpK/KP 7MwfFR67+nFDrOw0HwZQKIbgnk2EKM742PU+lU1Dwnlc+9m/vFuXX30Qo+8hu6wy M98jpMrIgUzPhfPpVBXlucvFHJeh/60S5frL3HXAiq7qkcf8bY/yg7fTI60/cLC5 5G2eRZwIq4AsUjCexxXY1ZAp6mF0kpt2GXW0iI3+ebcWfxEJDg8GrC/vKiWR75eo Xp/C/HMQuFiLYw9ywCF48LdRZ8KB+tzuHEjKlNzbtMcBOHYDvKLCL4yn0diHx83z uqBRDviKZ8QYrg== -----END CERTIFICATE-----Generated at Sun Dec 28 23:38:58 2025 by rpki-client