This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft File: PYs6RAq37XlB4sQUhHVG_WP_E-o.mft (raw, json) Hash identifier: DJyN3pNtRSMJlFTekHQxthljJJW6NdZ6W3jiloAUpLA= Subject key identifier: FF:43:99:8D:1B:DD:E2:51:E0:D1:96:12:B7:79:82:14:40:ED:12:4C Authority key identifier: 3D:8B:3A:44:0A:B7:ED:79:41:E2:C4:14:84:75:46:FD:63:FF:13:EA Certificate issuer: /CN=3d8b3a440ab7ed7941e2c414847546fd63ff13ea Certificate serial: 019B4DDF645CB8E3975B9CC4A5CFF4B08796 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft Manifest number: 0AB9 Signing time: Wed 24 Dec 2025 01:00:44 +0000 Manifest this update: Wed 24 Dec 2025 01:00:44 +0000 Manifest next update: Thu 25 Dec 2025 01:00:44 +0000 Files and hashes: 1: PYs6RAq37XlB4sQUhHVG_WP_E-o.crl (hash: PlRq9AdRMJIUd1mVgTmHt2b8oPQdCWwzOe/dDubxtEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.crl rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:df:64:5c:b8:e3:97:5b:9c:c4:a5:cf:f4:b0:87:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8b3a440ab7ed7941e2c414847546fd63ff13ea Validity Not Before: Dec 24 01:00:44 2025 GMT Not After : Dec 25 01:00:44 2025 GMT Subject: CN=ff43998d1bdde251e0d19612b779821440ed124c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6d:c2:ca:3a:d2:40:91:62:78:01:93:6d:b9: 54:58:1c:4b:ed:d4:ce:56:e1:e6:c0:aa:b1:81:26: 66:c0:ed:76:2c:96:bf:10:8d:6a:30:6e:92:2e:ea: 9f:c7:ad:ee:2e:80:eb:8e:12:52:ab:b3:e8:0c:e8: 46:48:6d:16:80:63:d8:60:94:18:81:f1:80:e3:d1: ef:de:d7:6f:6a:21:61:7a:46:33:3e:5e:43:04:da: c4:f1:4c:23:00:2c:90:38:e2:3a:59:68:6e:64:7d: 97:af:b2:66:da:bd:05:16:b1:1d:d9:e5:b8:d2:0a: 9f:f9:e7:44:07:9a:40:eb:ac:08:33:f7:e7:7a:f1: fd:77:57:3e:ab:5a:d1:b1:98:b2:85:65:4c:fa:27: ab:65:e8:4e:96:3b:83:57:0e:4b:35:dd:91:a3:f0: bf:ee:85:38:71:b7:8a:98:32:82:94:f2:c9:fb:f0: b1:dc:ee:06:6b:47:9e:e7:3d:03:6d:78:e7:2d:c0: 7d:88:fb:62:4d:39:4f:0d:3b:b2:97:ce:09:ac:3c: 9b:e1:67:da:08:e9:41:70:94:bc:e9:ad:51:a8:31: d0:36:d1:fc:28:42:61:5e:c4:ac:18:35:b3:13:02: 24:e2:f7:3d:5b:68:23:e9:11:95:58:e4:65:bb:84: 8f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:43:99:8D:1B:DD:E2:51:E0:D1:96:12:B7:79:82:14:40:ED:12:4C X509v3 Authority Key Identifier: keyid:3D:8B:3A:44:0A:B7:ED:79:41:E2:C4:14:84:75:46:FD:63:FF:13:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:a4:27:b3:e2:7d:49:c0:2c:12:19:f2:d5:cb:c9:19:45:f5: 68:a9:3b:95:4f:a4:80:80:61:2c:20:64:9d:71:24:2c:56:74: 29:ea:fa:16:69:ee:5b:26:4f:20:d7:b7:09:94:4e:c6:b4:8b: 2f:de:0a:5c:06:c8:41:af:1d:c5:e1:91:b8:ea:73:e7:dc:a6: fa:2b:1b:17:84:95:41:49:c6:6c:54:c2:a8:cf:1e:80:a4:e6: a4:d7:69:5a:e7:0b:b7:dc:78:b7:a7:a9:db:77:18:58:71:ae: 2b:50:00:79:e5:70:87:c3:98:6f:9d:8d:48:05:94:78:76:d5: 51:a2:5f:4a:37:00:2c:6e:85:49:de:9a:c6:f1:0e:66:d5:3b: 34:dd:40:75:d8:23:df:de:d2:dd:93:4f:8c:c2:76:82:3d:86: a0:4e:9b:43:94:83:fb:73:01:58:2d:d1:96:8d:82:98:ba:57: 96:67:52:a7:67:9b:a1:73:22:d2:7c:45:7f:bd:c8:29:6c:3f: cc:ad:b5:c3:d6:8d:f2:5d:59:2c:de:e5:3e:f9:5c:7e:4f:86: 1b:ac:8d:6c:aa:04:6e:ef:d6:ee:8c:15:7c:c3:fc:67:4c:72: 46:ee:3d:41:89:87:5d:86:db:ae:df:64:da:8b:ae:aa:7f:a3: c6:17:56:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN32RcuOOXW5zEpc/0sIeWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGIzYTQ0MGFiN2VkNzk0MWUyYzQxNDg0NzU0NmZkNjNm ZjEzZWEwHhcNMjUxMjI0MDEwMDQ0WhcNMjUxMjI1MDEwMDQ0WjAzMTEwLwYDVQQD EyhmZjQzOTk4ZDFiZGRlMjUxZTBkMTk2MTJiNzc5ODIxNDQwZWQxMjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW3CyjrSQJFieAGTbblUWBxL7dTO VuHmwKqxgSZmwO12LJa/EI1qMG6SLuqfx63uLoDrjhJSq7PoDOhGSG0WgGPYYJQY gfGA49Hv3tdvaiFhekYzPl5DBNrE8UwjACyQOOI6WWhuZH2Xr7Jm2r0FFrEd2eW4 0gqf+edEB5pA66wIM/fnevH9d1c+q1rRsZiyhWVM+ierZehOljuDVw5LNd2Ro/C/ 7oU4cbeKmDKClPLJ+/Cx3O4Ga0ee5z0DbXjnLcB9iPtiTTlPDTuyl84JrDyb4Wfa COlBcJS86a1RqDHQNtH8KEJhXsSsGDWzEwIk4vc9W2gj6RGVWORlu4SPTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9DmY0b3eJR4NGWErd5ghRA7RJMMB8GA1UdIwQY MBaAFD2LOkQKt+15QeLEFIR1Rv1j/xPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFlzNlJBcTM3WGxCNHNRVWhIVkdfV1BfRS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9hY2JkOWMtYjEyMy00MzNjLTlmODMt NzhhYzkwZTQ4ODkyLzEvUFlzNlJBcTM3WGxCNHNRVWhIVkdfV1BfRS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9hY2JkOWMtYjEyMy00MzNjLTlmODMtNzhhYzkwZTQ4ODky LzEvUFlzNlJBcTM3WGxCNHNRVWhIVkdfV1BfRS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlaQns+J9 ScAsEhny1cvJGUX1aKk7lU+kgIBhLCBknXEkLFZ0Ker6FmnuWyZPINe3CZROxrSL L94KXAbIQa8dxeGRuOpz59ym+isbF4SVQUnGbFTCqM8egKTmpNdpWucLt9x4t6ep 23cYWHGuK1AAeeVwh8OYb52NSAWUeHbVUaJfSjcALG6FSd6axvEOZtU7NN1Addgj 397S3ZNPjMJ2gj2GoE6bQ5SD+3MBWC3Rlo2CmLpXlmdSp2eboXMi0nxFf73IKWw/ zK21w9aN8l1ZLN7lPvlcfk+GG6yNbKoEbu/W7owVfMP8Z0xyRu49QYmHXYbbrt9k 2ouuqn+jxhdWcA== -----END CERTIFICATE-----Generated at Wed Dec 24 02:56:24 2025 by rpki-client