This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft File: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft (raw, json) Hash identifier: hQGyZv7j7J0Rdr3cGz43RpVs9QFHk37lxcva+CtQL0M= Subject key identifier: 18:B6:BF:56:0A:5D:8F:EC:EC:3C:3E:1C:FA:99:4D:34:F7:62:33:88 Authority key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4 Certificate issuer: /CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4 Certificate serial: 019B59770CF821A6B8E0A6C5D27B5516FE18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft Manifest number: 1794 Signing time: Fri 26 Dec 2025 07:02:12 +0000 Manifest this update: Fri 26 Dec 2025 07:02:12 +0000 Manifest next update: Sat 27 Dec 2025 07:02:12 +0000 Files and hashes: 1: 1-GwxGdQdSDv0GNH37kCGFbw_26Q.roa (hash: 8CUzx4XPAhE8seJ5BK68QhEaKNzFZcIoKPr1Lhqpte4=) 2: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl (hash: T/X3xAV3ew8yU7yQ9QhEeF5TLHGK8QIcZdEnkrHL76Q=) 3: tLZE9xN0wEMlciA44LFiADYH8LI.roa (hash: wSS87TjmYV1lgJuaVAo3xUhNdr4f/voSLt3pqfbBM5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:0c:f8:21:a6:b8:e0:a6:c5:d2:7b:55:16:fe:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4 Validity Not Before: Dec 26 07:02:12 2025 GMT Not After : Dec 27 07:02:12 2025 GMT Subject: CN=18b6bf560a5d8fecec3c3e1cfa994d34f7623388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ca:af:8c:74:b0:02:1f:f4:93:d8:fd:1b:89: 5b:c3:c0:ee:86:df:76:1e:3f:7e:8f:fe:f6:20:0b: 47:88:df:3d:ae:82:c3:b2:0d:26:a7:ad:1a:bb:ac: 0c:a7:a7:50:ba:66:f7:09:31:5f:f1:25:29:b9:ea: b3:29:a1:6e:72:ae:35:d5:d7:e5:f0:1b:4c:ff:37: 26:ab:c1:0e:2d:bf:6e:03:e2:6d:1b:09:7b:3d:f1: d4:33:c6:b5:c9:7b:a3:50:81:f7:be:3a:ee:d5:ca: cd:8b:63:75:c2:b0:56:50:41:56:20:4f:ab:be:d3: ae:1f:8d:90:67:00:65:02:e1:29:43:fe:3d:d3:5c: 69:cb:6e:65:d5:31:82:1a:93:52:0f:fb:77:54:30: 5c:ef:21:cd:6a:ec:2b:f9:15:0b:c0:1f:0e:14:3c: 05:74:56:d7:47:09:2f:4b:08:84:69:20:4f:0d:3f: 56:07:5d:5e:80:72:c2:60:14:f5:45:2f:1c:de:64: 45:ab:f1:c4:b4:19:d3:b7:16:32:bb:63:35:a9:94: c9:33:ff:b9:28:99:25:72:86:3c:cd:b5:c8:04:46: 6f:c7:f4:fc:3f:d0:77:93:1f:c1:32:4c:ad:b9:64: b3:57:71:ab:b8:f4:21:d2:d3:f7:bc:a5:99:72:48: 5b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B6:BF:56:0A:5D:8F:EC:EC:3C:3E:1C:FA:99:4D:34:F7:62:33:88 X509v3 Authority Key Identifier: keyid:A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:0f:53:b5:82:f2:2c:d7:12:50:2e:76:94:33:c1:34:15:a4: 06:96:9e:d5:f9:99:7a:3c:c8:b7:7b:45:23:c0:33:2a:5f:6d: f3:60:08:5c:c5:a7:84:f2:85:be:a5:a2:c8:2b:14:6a:01:ef: f8:4e:6a:e6:55:f6:e9:1e:3e:fa:f0:54:97:16:65:be:ad:5e: ee:d1:96:b2:c3:aa:bb:aa:1b:6c:00:36:2c:6f:40:fb:db:8b: ab:f8:86:2d:f4:b6:c9:b3:ba:11:c2:92:8e:a6:44:e5:a4:59: d2:6d:73:a6:a4:7f:0c:67:ab:c4:14:e0:62:12:e4:fc:1d:f9: 1b:2c:d0:43:f1:28:f0:6e:95:47:ed:ba:b8:9e:16:77:9b:2f: 3e:e8:07:59:cf:4c:a7:7c:d2:39:ab:b9:29:b0:44:40:b4:8b: 55:7a:15:df:0b:09:ad:13:d4:6a:e0:f1:d9:82:fc:c7:5c:c3: 52:82:4e:69:1a:95:0a:47:c8:1e:66:1d:b3:a7:00:a2:2e:90: 5f:c2:13:9e:12:a6:f5:19:38:15:0b:ac:14:ba:f3:a9:22:8e: 51:67:6b:f4:cb:13:bc:55:e2:3c:7d:7f:5a:3c:a7:cf:a4:e1: 9e:5b:aa:51:bf:2e:3c:d5:35:96:cb:27:71:09:45:8f:f5:98: 6c:6c:df:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdwz4Iaa44KbF0ntVFv4YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ODg2MDRkMjViODdiODJmZDEyNTlkZmUyOTRjZDhmYjlm ZjQ5YjQwHhcNMjUxMjI2MDcwMjEyWhcNMjUxMjI3MDcwMjEyWjAzMTEwLwYDVQQD EygxOGI2YmY1NjBhNWQ4ZmVjZWMzYzNlMWNmYTk5NGQzNGY3NjIzMzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcqvjHSwAh/0k9j9G4lbw8Duht92 Hj9+j/72IAtHiN89roLDsg0mp60au6wMp6dQumb3CTFf8SUpueqzKaFucq411dfl 8BtM/zcmq8EOLb9uA+JtGwl7PfHUM8a1yXujUIH3vjru1crNi2N1wrBWUEFWIE+r vtOuH42QZwBlAuEpQ/4901xpy25l1TGCGpNSD/t3VDBc7yHNauwr+RULwB8OFDwF dFbXRwkvSwiEaSBPDT9WB11egHLCYBT1RS8c3mRFq/HEtBnTtxYyu2M1qZTJM/+5 KJklcoY8zbXIBEZvx/T8P9B3kx/BMkytuWSzV3GruPQh0tP3vKWZckhbNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBi2v1YKXY/s7Dw+HPqZTTT3YjOIMB8GA1UdIwQY MBaAFKWIYE0luHuC/RJZ3+KUzY+5/0m0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81MTBhNGUtNjZlZi00ZGMxLTgwM2It MjBkZGRiYzEyODFkLzEvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC81MTBhNGUtNjZlZi00ZGMxLTgwM2ItMjBkZGRiYzEyODFk LzEvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADw9TtYLy LNcSUC52lDPBNBWkBpae1fmZejzIt3tFI8AzKl9t82AIXMWnhPKFvqWiyCsUagHv +E5q5lX26R4++vBUlxZlvq1e7tGWssOqu6obbAA2LG9A+9uLq/iGLfS2ybO6EcKS jqZE5aRZ0m1zpqR/DGerxBTgYhLk/B35GyzQQ/Eo8G6VR+26uJ4Wd5svPugHWc9M p3zSOau5KbBEQLSLVXoV3wsJrRPUauDx2YL8x1zDUoJOaRqVCkfIHmYds6cAoi6Q X8ITnhKm9Rk4FQusFLrzqSKOUWdr9MsTvFXiPH1/Wjynz6ThnluqUb8uPNU1lssn cQlFj/WYbGzfUA== -----END CERTIFICATE-----Generated at Fri Dec 26 09:23:39 2025 by rpki-client