This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft File: RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft (raw, json) Hash identifier: 93P7iS/7Pg6dLBgjzFAhsBviB/XF6X3luSVrOIV6cMw= Subject key identifier: 54:39:7E:8D:FF:B8:05:6A:E3:DF:37:EF:20:F2:C1:82:93:AF:33:00 Authority key identifier: 47:21:BF:48:E4:01:66:0E:E9:61:1B:35:C0:4B:5D:1D:1F:3F:AB:FA Certificate issuer: /CN=4721bf48e401660ee9611b35c04b5d1d1f3fabfa Certificate serial: 019B66FBBB17F01DA94FF33F80ADE2EE41AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft Manifest number: 0931 Signing time: Sun 28 Dec 2025 22:02:11 +0000 Manifest this update: Sun 28 Dec 2025 22:02:11 +0000 Manifest next update: Mon 29 Dec 2025 22:02:11 +0000 Files and hashes: 1: Q0tX8C3mAUGr4XLZlc4tVpO7Am4.roa (hash: hVicWWTtt7YlyO3V3zzscqDP1fMclWoLBHVq6weE/Lo=) 2: RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl (hash: 2d5ME1ZpfELVzCeXkq7PcofqNcq97AQya/1DbOfEZSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fb:bb:17:f0:1d:a9:4f:f3:3f:80:ad:e2:ee:41:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4721bf48e401660ee9611b35c04b5d1d1f3fabfa Validity Not Before: Dec 28 22:02:11 2025 GMT Not After : Dec 29 22:02:11 2025 GMT Subject: CN=54397e8dffb8056ae3df37ef20f2c18293af3300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:87:6c:31:69:22:1c:f2:a6:32:e9:67:27:87: ae:84:eb:33:de:c8:6f:9f:f9:28:f4:d2:f8:88:92: dc:42:68:ec:25:2e:9b:bc:4c:e9:02:1d:e8:9e:7b: e3:26:d1:e3:e2:56:61:21:75:ed:e1:cf:03:f0:bc: fc:fc:ef:e5:1d:99:cc:a1:d8:5f:49:12:cf:80:60: 57:db:fb:4f:6e:8a:b4:84:10:0a:af:f3:b5:99:cc: 42:bc:0f:7b:34:8f:88:24:f0:02:8c:35:aa:a3:aa: 70:f7:74:51:77:4b:66:ba:6f:41:3e:4b:c7:f7:ec: d3:2d:e2:35:0c:26:ae:ce:b0:32:5c:a5:9d:f6:21: 72:54:2f:ad:9b:50:34:ca:e0:5f:ec:9b:b7:04:5e: 82:a6:bd:e0:94:e3:92:6f:46:a1:11:70:4c:54:b6: 4c:49:35:13:98:44:42:c9:70:a9:0d:da:f0:e6:05: 22:e2:d2:97:b8:4d:07:46:29:bf:79:3a:17:85:f8: c7:30:9d:ad:c9:56:8d:98:4c:26:c0:ce:91:2a:7b: 9a:04:50:79:1b:ed:8c:0f:6d:5d:8d:09:b0:d6:5d: 18:4e:dd:ee:f8:b2:af:13:91:1a:09:a5:9b:44:c8: 37:b2:10:7c:f9:a1:b4:42:18:de:c6:25:9b:98:72: 7f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:39:7E:8D:FF:B8:05:6A:E3:DF:37:EF:20:F2:C1:82:93:AF:33:00 X509v3 Authority Key Identifier: keyid:47:21:BF:48:E4:01:66:0E:E9:61:1B:35:C0:4B:5D:1D:1F:3F:AB:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:9f:d1:5a:c3:1f:60:e4:ef:15:55:75:00:99:b4:0c:c9:eb: 4f:f2:d0:8c:f7:fb:89:33:a1:43:32:cb:b0:70:88:07:e5:26: 06:a1:00:7e:2f:2e:b6:ff:b6:7d:97:e9:85:47:a1:79:0a:e9: f5:fe:6f:4b:df:3a:76:90:12:20:5d:68:c1:7a:0d:3b:f1:9e: 9e:ff:d1:50:42:57:0c:4a:6a:b9:32:85:c9:c1:c3:42:f1:17: f3:98:0e:f0:24:86:51:44:f5:b0:7a:b1:14:92:13:ea:15:e2: 05:7f:e0:3c:38:ad:d0:4c:39:83:80:47:85:18:0f:d5:a4:39: 6b:18:31:41:b9:7f:42:ea:91:47:0f:e3:c2:95:c4:63:61:03: 57:05:74:b7:dc:01:ff:ab:49:89:1c:e5:9d:19:7b:ed:0b:7b: cf:a5:08:a4:17:1a:18:95:e2:93:46:3c:2a:1f:4f:5c:59:69: 0d:0f:59:32:37:2d:b9:01:5f:fd:56:11:bd:f7:9f:1f:2d:6a: 19:54:f2:b1:3d:6e:b0:c5:bd:a4:e7:09:85:18:94:97:2e:b8: 05:13:f4:83:f6:bd:95:66:be:5d:23:42:0a:a2:4e:6a:7d:6a: f9:a4:34:4f:47:3e:aa:54:9d:3a:06:f0:89:56:11:b7:68:bb: a4:50:b8:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm+7sX8B2pT/M/gK3i7kGsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MjFiZjQ4ZTQwMTY2MGVlOTYxMWIzNWMwNGI1ZDFkMWYz ZmFiZmEwHhcNMjUxMjI4MjIwMjExWhcNMjUxMjI5MjIwMjExWjAzMTEwLwYDVQQD Eyg1NDM5N2U4ZGZmYjgwNTZhZTNkZjM3ZWYyMGYyYzE4MjkzYWYzMzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoodsMWkiHPKmMulnJ4euhOsz3shv n/ko9NL4iJLcQmjsJS6bvEzpAh3onnvjJtHj4lZhIXXt4c8D8Lz8/O/lHZnModhf SRLPgGBX2/tPboq0hBAKr/O1mcxCvA97NI+IJPACjDWqo6pw93RRd0tmum9BPkvH 9+zTLeI1DCauzrAyXKWd9iFyVC+tm1A0yuBf7Ju3BF6Cpr3glOOSb0ahEXBMVLZM STUTmERCyXCpDdrw5gUi4tKXuE0HRim/eToXhfjHMJ2tyVaNmEwmwM6RKnuaBFB5 G+2MD21djQmw1l0YTt3u+LKvE5EaCaWbRMg3shB8+aG0QhjexiWbmHJ/zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQ5fo3/uAVq49837yDywYKTrzMAMB8GA1UdIwQY MBaAFEchv0jkAWYO6WEbNcBLXR0fP6v6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnlHX1NPUUJaZzdwWVJzMXdFdGRIUjhfcV9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9lNmJhODEtYjM4ZS00YmIzLWIwMDUt NTZmZGU1ZTcxNWIxLzEvUnlHX1NPUUJaZzdwWVJzMXdFdGRIUjhfcV9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9lNmJhODEtYjM4ZS00YmIzLWIwMDUtNTZmZGU1ZTcxNWIx LzEvUnlHX1NPUUJaZzdwWVJzMXdFdGRIUjhfcV9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMp/RWsMf YOTvFVV1AJm0DMnrT/LQjPf7iTOhQzLLsHCIB+UmBqEAfi8utv+2fZfphUeheQrp 9f5vS986dpASIF1owXoNO/Genv/RUEJXDEpquTKFycHDQvEX85gO8CSGUUT1sHqx FJIT6hXiBX/gPDit0Ew5g4BHhRgP1aQ5axgxQbl/QuqRRw/jwpXEY2EDVwV0t9wB /6tJiRzlnRl77Qt7z6UIpBcaGJXik0Y8Kh9PXFlpDQ9ZMjctuQFf/VYRvfefHy1q GVTysT1usMW9pOcJhRiUly64BRP0g/a9lWa+XSNCCqJOan1q+aQ0T0c+qlSdOgbw iVYRt2i7pFC45g== -----END CERTIFICATE-----Generated at Mon Dec 29 05:22:33 2025 by rpki-client