This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft File: RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft (raw, json) Hash identifier: /Obd5WO3dgxINfmpphgSfp0mTrWUk3RXI5ZkDj3oSK8= Subject key identifier: C1:62:F9:30:27:4B:29:5E:96:39:D3:05:7C:FC:E7:2D:60:52:5C:CB Authority key identifier: 47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41 Certificate issuer: /CN=472694d8a399a3a66f442ec72295c754acbbad41 Certificate serial: 019B50E0C81E441A47C2EB9203D592F09EB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft Manifest number: 166B Signing time: Wed 24 Dec 2025 15:01:07 +0000 Manifest this update: Wed 24 Dec 2025 15:01:07 +0000 Manifest next update: Thu 25 Dec 2025 15:01:07 +0000 Files and hashes: 1: HDxSohX-IDNPW8pjacRSI1H_PKk.roa (hash: LmMZXQdXNsqjvcfV+qIzu55UsIszcW5rLny8ykXmqHQ=) 2: RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl (hash: LTzoUqbEV4l6DVvrrvvfip8oQ3noSgIB3303Xmqu29c=) 3: ZTfX1eIYwu2teEKHLHrabIZkJWw.roa (hash: XbM05VStZazqLzFaHm9tyYba1eH2G3CcfziDsh45rsc=) 4: cOeYrSQu-ObbQyfYQeLjcuYaLQ0.roa (hash: GdluFLbgNrS7xoyapuqIK4cx1yZ3FPC1FpSx8lT9u+Y=) 5: jCdWeScDFXpWXYVASAbWW6Vizq0.roa (hash: 0snKT5LdHK0wV53UVPxEtQMU5HqJbqkJ3jy1nr8IbbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:c8:1e:44:1a:47:c2:eb:92:03:d5:92:f0:9e:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=472694d8a399a3a66f442ec72295c754acbbad41 Validity Not Before: Dec 24 15:01:07 2025 GMT Not After : Dec 25 15:01:07 2025 GMT Subject: CN=c162f930274b295e9639d3057cfce72d60525ccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7e:77:be:95:fb:ee:f2:95:ed:8e:e7:97:d2: 15:c7:20:40:8e:57:8d:d6:18:6f:8b:de:aa:6a:55: 52:89:b9:4b:e9:e1:b0:7e:0c:ba:7c:37:59:da:de: b1:7b:12:1e:54:3f:a4:1a:c3:df:b5:96:d3:c4:70: 4b:53:38:25:f9:eb:35:01:53:d2:1f:cd:99:b0:0a: 35:1a:2d:ee:ef:ec:51:ff:f2:6c:82:21:4d:32:84: 1f:02:37:6a:c3:5d:18:83:67:62:a7:08:74:35:15: f5:0f:f4:4d:a5:eb:e8:94:f4:a1:11:5c:aa:f0:98: 86:01:cb:44:71:7a:65:e6:84:61:74:dd:34:f7:2f: d3:13:9a:49:9e:60:f7:e5:a6:a5:65:c9:48:28:22: 7a:97:32:5c:02:e0:c2:58:b6:5d:dd:de:9e:2c:2d: d1:9a:bc:88:58:ee:7b:75:a5:b7:f4:ef:68:19:b6: 30:92:4f:ef:2b:c5:ec:44:77:ee:23:ba:b5:c6:c2: a1:93:29:2d:13:60:eb:2c:da:8c:72:b0:ab:f2:5a: 8e:15:f5:46:d6:cf:6d:09:34:85:08:41:9c:83:05: e8:bd:a7:a0:97:51:ff:ec:e1:91:27:0a:47:88:04: 3d:88:c3:cd:f6:62:98:3b:87:f0:41:61:b0:30:59: 58:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:62:F9:30:27:4B:29:5E:96:39:D3:05:7C:FC:E7:2D:60:52:5C:CB X509v3 Authority Key Identifier: keyid:47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:0b:ee:79:73:21:50:39:48:42:e3:d3:d7:fb:90:44:ba:09: 4d:38:85:8e:3c:9f:31:21:ee:35:ef:9f:4a:c4:e7:d8:32:95: 10:74:8c:ac:57:54:7a:dd:ae:a8:a9:20:1a:77:b7:0a:00:e8: bd:b4:1b:d3:f3:cb:a8:88:60:63:46:99:f9:f6:7a:bb:89:1e: b3:3e:5f:c9:13:a1:ef:29:5e:2c:43:14:aa:25:be:67:55:40: 16:53:54:aa:90:b0:ba:58:8f:bd:57:27:4e:67:9a:b4:e0:6b: 0d:7c:ec:67:86:d0:44:6e:b4:9f:e5:88:4c:58:57:e1:5c:0b: 4e:8d:3b:29:a4:45:2a:88:80:6c:85:9d:92:6d:c7:aa:5e:21: f9:14:a5:92:68:92:61:78:c9:6f:d9:7e:4a:e6:de:dd:22:04: 19:fc:b5:79:dd:ff:a4:94:a7:af:22:04:0f:fe:cb:53:8c:7d: 41:3b:b0:0d:06:57:c8:c7:0d:96:4b:28:52:49:de:17:3d:5f: c2:ae:8a:20:d7:fe:e8:26:cd:b8:7f:87:e9:05:c1:f2:31:76: 56:9e:d4:69:01:c6:29:35:e5:60:f9:ff:3b:7e:e6:f0:e2:59: 8a:37:4a:29:7d:d4:bd:2e:e3:86:df:11:64:30:07:be:93:de: 7e:48:9b:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4MgeRBpHwuuSA9WS8J62MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MjY5NGQ4YTM5OWEzYTY2ZjQ0MmVjNzIyOTVjNzU0YWNi YmFkNDEwHhcNMjUxMjI0MTUwMTA3WhcNMjUxMjI1MTUwMTA3WjAzMTEwLwYDVQQD EyhjMTYyZjkzMDI3NGIyOTVlOTYzOWQzMDU3Y2ZjZTcyZDYwNTI1Y2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH53vpX77vKV7Y7nl9IVxyBAjleN 1hhvi96qalVSiblL6eGwfgy6fDdZ2t6xexIeVD+kGsPftZbTxHBLUzgl+es1AVPS H82ZsAo1Gi3u7+xR//JsgiFNMoQfAjdqw10Yg2dipwh0NRX1D/RNpevolPShEVyq 8JiGActEcXpl5oRhdN009y/TE5pJnmD35aalZclIKCJ6lzJcAuDCWLZd3d6eLC3R mryIWO57daW39O9oGbYwkk/vK8XsRHfuI7q1xsKhkyktE2DrLNqMcrCr8lqOFfVG 1s9tCTSFCEGcgwXovaegl1H/7OGRJwpHiAQ9iMPN9mKYO4fwQWGwMFlYMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFi+TAnSyleljnTBXz85y1gUlzLMB8GA1UdIwQY MBaAFEcmlNijmaOmb0QuxyKVx1Ssu61BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnlhVTJLT1pvNlp2UkM3SElwWEhWS3k3clVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9kZGMyNmUtMzFkYS00M2RkLWI0ZDEt MDYzYTA4ODFhNmQyLzEvUnlhVTJLT1pvNlp2UkM3SElwWEhWS3k3clVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9kZGMyNmUtMzFkYS00M2RkLWI0ZDEtMDYzYTA4ODFhNmQy LzEvUnlhVTJLT1pvNlp2UkM3SElwWEhWS3k3clVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwvueXMh UDlIQuPT1/uQRLoJTTiFjjyfMSHuNe+fSsTn2DKVEHSMrFdUet2uqKkgGne3CgDo vbQb0/PLqIhgY0aZ+fZ6u4kesz5fyROh7yleLEMUqiW+Z1VAFlNUqpCwuliPvVcn TmeatOBrDXzsZ4bQRG60n+WITFhX4VwLTo07KaRFKoiAbIWdkm3Hql4h+RSlkmiS YXjJb9l+Sube3SIEGfy1ed3/pJSnryIED/7LU4x9QTuwDQZXyMcNlksoUkneFz1f wq6KINf+6CbNuH+H6QXB8jF2Vp7UaQHGKTXlYPn/O37m8OJZijdKKX3UvS7jht8R ZDAHvpPefkibtA== -----END CERTIFICATE-----Generated at Wed Dec 24 23:26:04 2025 by rpki-client