This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft File: PYugpSxCEprx1PdD_rM7sUTUu1w.mft (raw, json) Hash identifier: HpZ2nJPTUACnoPOt/+u9DthIs1cxe/AecXChRQqQxvg= Subject key identifier: 5D:AB:AF:BE:F3:08:59:DC:A2:53:01:61:92:5E:8E:10:B3:8B:C4:F5 Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 019B3CECA15FD73EBE6FAC405DFF7BCE2D11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft Manifest number: 178E Signing time: Sat 20 Dec 2025 18:01:39 +0000 Manifest this update: Sat 20 Dec 2025 18:01:39 +0000 Manifest next update: Sun 21 Dec 2025 18:01:39 +0000 Files and hashes: 1: 9AkjaJRYRIOTmgf4F3gyV6pdFkQ.roa (hash: N1lZUtbJEJkRSUYDq/VJK4cR/RojBk8ALOORTw9wVk8=) 2: DUER2OIxuLfteK-5s9p125aHbHQ.roa (hash: MKxlsAlXCfnz4va2JwSTTtP5lv2QEgVXIYiD1U0P1iM=) 3: I5Dlj2iBXR78bV2NI4oXxT6DVcQ.roa (hash: pUPvPv3IMdPMN3mngjSRkbMNdszUqvQ/W+9CudZep1s=) 4: IKxEFfN_KNz819jDJF02u6P6vks.roa (hash: M1gfdLv0XPFzxrEqEMyJ47aUP/+uDTO64SIkdj54NaA=) 5: JcqV5Zbt-7BBvR25dnt58sZOVRw.roa (hash: Jyex6OZ5W2eO7E9m8v2xcJSNJuYcw9eBRYzL8fzsuKg=) 6: PYugpSxCEprx1PdD_rM7sUTUu1w.crl (hash: Sdx84K2dYtUWQfpmy8Q/1t+IyV8JJy/W+vdg5S6FYic=) 7: QeFtXb_2Jy97mUDOpmxAN1O437Q.roa (hash: pGsLweLJqx/P4hTPUc5m5Veo+2vG7HsRtDbmA1rHXlQ=) 8: YPwqy-r5Ds6zjUqs83c9wSrz4Xo.roa (hash: /OBWcwiTOuByZ0CFtuxP3jPnYcDQxuxVogbCk4BaZIM=) 9: _z_sTvwtZQKHpvup9rFWqFFhFKY.roa (hash: JVM6qUA4ZtDkSX81zJfuU5jJmnu8pCK2PaUHasgHRME=) 10: kUvUMMUm6A2S-PsLFuOoxFGjL2g.roa (hash: 43KKo4hB/OsGlhMLYdFrQhlx6kBqniKw+U0iCAYg2Qg=) 11: pOvELxmVMCJOREXgcbJwYPWQcLY.roa (hash: 8NAO5qgs1zoQcDKNETGRxihZubfEYTFA3QAx7BgtdEo=) 12: stpJENpG1HfxaYzx679NTwZFpZY.roa (hash: EMcugxArWnP7J9sItxl3gZsFeM8qrAvUxjSeKkZ4oao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:a1:5f:d7:3e:be:6f:ac:40:5d:ff:7b:ce:2d:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Dec 20 18:01:39 2025 GMT Not After : Dec 21 18:01:39 2025 GMT Subject: CN=5dabafbef30859dca2530161925e8e10b38bc4f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ae:3d:b6:5a:75:0d:22:b5:cf:94:ae:63:2c: 57:3b:81:4c:f0:ce:82:18:f6:b4:33:87:ce:c1:4f: 79:40:1e:ee:dd:41:de:2b:8e:8d:01:44:a4:24:6e: 8e:2c:36:ba:b0:db:ee:60:6e:07:58:fd:9d:86:b8: 55:f6:e2:7d:73:75:fb:ca:8a:2d:fa:eb:62:6a:b9: 49:70:f3:42:15:26:22:45:e0:91:38:6a:25:ed:da: 22:7d:f8:df:0a:a0:16:d1:10:a9:47:64:31:97:71: 59:82:2f:b3:8d:0a:04:c4:99:5a:90:ca:00:ca:20: 9a:eb:ca:fa:60:03:3e:60:b8:dd:35:bd:bd:3b:44: d0:f1:af:66:58:f1:08:92:c5:aa:6c:50:9f:c7:48: 60:50:8c:01:3b:ed:ad:e6:29:55:d0:a8:82:30:68: 54:7e:5e:56:6c:95:cd:91:e1:22:1d:ea:40:31:fa: fa:40:5f:2f:a9:ee:49:bf:83:1e:b5:33:4b:a1:88: c7:fb:2e:04:f5:1e:30:66:7a:7e:a2:f3:d2:a9:29: 4b:ab:ae:19:93:a1:61:e1:39:ec:3c:1c:8f:f6:10: 0a:99:f4:de:b9:ac:ac:e1:b8:9f:5c:06:3d:76:cf: c2:78:cd:63:5c:b5:99:f9:dd:6b:6b:bc:4d:7d:34: 09:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:AB:AF:BE:F3:08:59:DC:A2:53:01:61:92:5E:8E:10:B3:8B:C4:F5 X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:64:8f:ab:7e:51:76:d2:5a:5c:c9:2d:a7:af:f1:19:fe:2d: 67:72:83:77:ea:e4:cb:ad:fe:b0:bf:37:78:8d:49:34:ba:b2: ac:ef:96:c3:8a:c5:fc:28:98:48:a0:38:27:8c:7d:32:8d:69: 94:d6:25:ed:c8:d9:f2:54:ee:29:f1:36:79:4e:32:f3:02:d3: e4:26:ee:6f:45:a7:91:c9:a1:7b:ed:2f:84:90:36:02:b1:63: 44:b5:e8:33:60:1d:69:a5:28:ba:ba:02:99:25:1c:76:7a:35: 26:cb:74:3a:22:88:2c:da:f4:3d:a6:09:c4:86:c0:9e:08:be: 22:6c:bb:2d:e5:bc:23:03:37:71:1f:7c:48:50:07:6e:e5:7f: a1:ee:16:44:77:b8:23:c0:43:42:86:d1:0c:a2:c4:80:92:c6: 4f:c0:15:a7:ac:82:54:5d:94:a4:3c:59:42:24:08:96:f4:98: b8:fd:74:6f:86:c1:b7:52:e2:6e:e3:3c:7e:7e:15:a3:e9:b3: 52:f0:44:b0:41:05:ec:d2:35:a3:f1:c5:d9:8e:14:74:88:35: c1:70:33:0c:ff:42:09:40:91:25:2f:40:ff:87:f9:dc:7f:2f: 68:b0:57:41:ff:3a:6f:2d:48:49:6a:3d:5a:29:d6:bb:08:c1: 04:1f:e6:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87KFf1z6+b6xAXf97zi0RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjUxMjIwMTgwMTM5WhcNMjUxMjIxMTgwMTM5WjAzMTEwLwYDVQQD Eyg1ZGFiYWZiZWYzMDg1OWRjYTI1MzAxNjE5MjVlOGUxMGIzOGJjNGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq49tlp1DSK1z5SuYyxXO4FM8M6C GPa0M4fOwU95QB7u3UHeK46NAUSkJG6OLDa6sNvuYG4HWP2dhrhV9uJ9c3X7yoot +utiarlJcPNCFSYiReCROGol7doiffjfCqAW0RCpR2Qxl3FZgi+zjQoExJlakMoA yiCa68r6YAM+YLjdNb29O0TQ8a9mWPEIksWqbFCfx0hgUIwBO+2t5ilV0KiCMGhU fl5WbJXNkeEiHepAMfr6QF8vqe5Jv4MetTNLoYjH+y4E9R4wZnp+ovPSqSlLq64Z k6Fh4TnsPByP9hAKmfTeuays4bifXAY9ds/CeM1jXLWZ+d1ra7xNfTQJTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2rr77zCFncolMBYZJejhCzi8T1MB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2SPq35R dtJaXMktp6/xGf4tZ3KDd+rky63+sL83eI1JNLqyrO+Ww4rF/CiYSKA4J4x9Mo1p lNYl7cjZ8lTuKfE2eU4y8wLT5Cbub0Wnkcmhe+0vhJA2ArFjRLXoM2AdaaUouroC mSUcdno1Jst0OiKILNr0PaYJxIbAngi+Imy7LeW8IwM3cR98SFAHbuV/oe4WRHe4 I8BDQobRDKLEgJLGT8AVp6yCVF2UpDxZQiQIlvSYuP10b4bBt1LibuM8fn4Vo+mz UvBEsEEF7NI1o/HF2Y4UdIg1wXAzDP9CCUCRJS9A/4f53H8vaLBXQf86by1ISWo9 WinWuwjBBB/mNA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:46:05 2025 by rpki-client