This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft File: RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft (raw, json) Hash identifier: pjaiHSU72t6EhIDHd1Nd+SowZKoIhRkGkCoj1fdgkkQ= Subject key identifier: DE:A5:6B:E6:32:6B:C2:76:21:0F:47:4D:B9:CC:20:B0:18:4C:6E:0E Authority key identifier: 47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41 Certificate issuer: /CN=472694d8a399a3a66f442ec72295c754acbbad41 Certificate serial: 019B3D90D9F91B9974F360C96B9B7C7032CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft Manifest number: 1661 Signing time: Sat 20 Dec 2025 21:01:01 +0000 Manifest this update: Sat 20 Dec 2025 21:01:01 +0000 Manifest next update: Sun 21 Dec 2025 21:01:01 +0000 Files and hashes: 1: HDxSohX-IDNPW8pjacRSI1H_PKk.roa (hash: LmMZXQdXNsqjvcfV+qIzu55UsIszcW5rLny8ykXmqHQ=) 2: RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl (hash: QUYqGI5rX2Y3+npkawK0YAvuFLOPFuANUOcfZuL6XT4=) 3: ZTfX1eIYwu2teEKHLHrabIZkJWw.roa (hash: XbM05VStZazqLzFaHm9tyYba1eH2G3CcfziDsh45rsc=) 4: cOeYrSQu-ObbQyfYQeLjcuYaLQ0.roa (hash: GdluFLbgNrS7xoyapuqIK4cx1yZ3FPC1FpSx8lT9u+Y=) 5: jCdWeScDFXpWXYVASAbWW6Vizq0.roa (hash: 0snKT5LdHK0wV53UVPxEtQMU5HqJbqkJ3jy1nr8IbbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 21:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:d9:f9:1b:99:74:f3:60:c9:6b:9b:7c:70:32:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=472694d8a399a3a66f442ec72295c754acbbad41 Validity Not Before: Dec 20 21:01:01 2025 GMT Not After : Dec 21 21:01:01 2025 GMT Subject: CN=dea56be6326bc276210f474db9cc20b0184c6e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2c:28:82:20:30:50:fb:45:a7:2b:35:bb:88: 87:ce:3c:0a:c1:a1:f4:0b:b7:1c:c7:9a:c5:c7:44: 82:12:30:fe:30:63:31:b6:a3:d4:fa:26:22:df:7e: c6:f1:ab:3c:58:5d:48:67:71:df:75:30:58:92:d3: 1f:cd:86:9d:26:96:43:45:d0:5b:33:dd:23:99:5d: 07:e1:ab:e1:02:bd:b3:60:8c:eb:c5:f6:00:e3:68: ed:83:be:5d:44:07:c8:a2:7d:fe:a2:2d:7a:c0:36: 74:ba:d0:6e:2c:65:b3:b8:84:ba:04:99:64:4a:7c: ca:0f:64:48:b6:31:9d:5f:24:a5:72:41:9f:27:c4: 28:1d:5f:26:9f:32:49:41:d4:ae:2f:9f:12:d7:a4: 01:c8:23:c9:ae:fe:45:65:45:40:c8:c1:d3:a7:71: 36:0c:9b:04:a8:87:01:38:58:33:1a:de:0e:b4:21: 37:c1:14:dd:15:4e:94:59:69:cd:af:35:16:98:2c: 2d:0a:20:d1:e7:2f:3d:b0:ec:36:a7:41:33:88:86: cd:47:41:17:6a:1c:26:5a:4e:d6:d6:21:3a:95:16: d6:45:5b:c1:47:53:85:dd:08:7f:63:7d:9d:2d:57: 67:79:36:6b:7f:1b:e1:d1:83:97:08:34:46:6e:de: d9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A5:6B:E6:32:6B:C2:76:21:0F:47:4D:B9:CC:20:B0:18:4C:6E:0E X509v3 Authority Key Identifier: keyid:47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:d6:d7:ad:6c:4f:84:5b:c0:22:d5:00:9f:83:77:38:07:bb: 0e:a7:7c:64:18:b8:14:60:37:ac:52:75:7b:cb:8a:7b:2d:49: 16:5a:da:62:76:e9:6c:75:4e:71:31:eb:69:9e:29:c2:ca:72: 55:11:91:66:b5:c0:c3:87:38:32:66:a4:a5:1d:83:ec:b6:4c: 73:fe:7c:5f:66:ca:4f:b1:3c:b0:a9:91:14:94:41:ef:46:87: f5:25:98:2f:38:35:d6:22:a9:0b:93:02:5f:a9:40:96:04:5e: 68:dc:b5:7e:80:e3:c0:3d:f6:41:a5:9b:91:36:b8:33:eb:e1: ee:e4:61:b7:8f:b4:1e:a7:be:70:f0:b5:fe:41:9e:41:bf:bd: 43:9b:d5:a6:bd:2d:70:63:1f:a4:3b:f4:6b:9d:9c:96:db:a9: 73:1a:cd:c2:a0:1b:b0:13:87:a9:6c:ea:f2:0c:98:e7:98:cb: 21:18:ad:56:6a:91:18:f2:37:75:9e:5a:e5:ce:33:da:da:5c: 85:72:f0:cc:7e:8d:5e:87:e5:27:33:f8:ba:47:b7:56:4b:33: d2:80:7b:12:97:9f:5b:1c:ca:cc:60:fe:a1:9a:8d:46:aa:6e: f3:16:db:79:63:b2:ba:fe:e9:06:b1:52:27:fc:ad:ff:1f:ba: 50:a8:a2:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kNn5G5l082DJa5t8cDLKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MjY5NGQ4YTM5OWEzYTY2ZjQ0MmVjNzIyOTVjNzU0YWNi YmFkNDEwHhcNMjUxMjIwMjEwMTAxWhcNMjUxMjIxMjEwMTAxWjAzMTEwLwYDVQQD EyhkZWE1NmJlNjMyNmJjMjc2MjEwZjQ3NGRiOWNjMjBiMDE4NGM2ZTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iwogiAwUPtFpys1u4iHzjwKwaH0 C7ccx5rFx0SCEjD+MGMxtqPU+iYi337G8as8WF1IZ3HfdTBYktMfzYadJpZDRdBb M90jmV0H4avhAr2zYIzrxfYA42jtg75dRAfIon3+oi16wDZ0utBuLGWzuIS6BJlk SnzKD2RItjGdXySlckGfJ8QoHV8mnzJJQdSuL58S16QByCPJrv5FZUVAyMHTp3E2 DJsEqIcBOFgzGt4OtCE3wRTdFU6UWWnNrzUWmCwtCiDR5y89sOw2p0EziIbNR0EX ahwmWk7W1iE6lRbWRVvBR1OF3Qh/Y32dLVdneTZrfxvh0YOXCDRGbt7ZDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6la+Yya8J2IQ9HTbnMILAYTG4OMB8GA1UdIwQY MBaAFEcmlNijmaOmb0QuxyKVx1Ssu61BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnlhVTJLT1pvNlp2UkM3SElwWEhWS3k3clVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9kZGMyNmUtMzFkYS00M2RkLWI0ZDEt MDYzYTA4ODFhNmQyLzEvUnlhVTJLT1pvNlp2UkM3SElwWEhWS3k3clVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9kZGMyNmUtMzFkYS00M2RkLWI0ZDEtMDYzYTA4ODFhNmQy LzEvUnlhVTJLT1pvNlp2UkM3SElwWEhWS3k3clVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdbXrWxP hFvAItUAn4N3OAe7Dqd8ZBi4FGA3rFJ1e8uKey1JFlraYnbpbHVOcTHraZ4pwspy VRGRZrXAw4c4MmakpR2D7LZMc/58X2bKT7E8sKmRFJRB70aH9SWYLzg11iKpC5MC X6lAlgReaNy1foDjwD32QaWbkTa4M+vh7uRht4+0Hqe+cPC1/kGeQb+9Q5vVpr0t cGMfpDv0a52cltupcxrNwqAbsBOHqWzq8gyY55jLIRitVmqRGPI3dZ5a5c4z2tpc hXLwzH6NXoflJzP4uke3Vksz0oB7EpefWxzKzGD+oZqNRqpu8xbbeWOyuv7pBrFS J/yt/x+6UKiiWA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:05:22 2025 by rpki-client