This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft File: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft (raw, json) Hash identifier: hylMdnSnQVslV6UhBHiS0a1l8vP+g6B7jY4N6kkkNP8= Subject key identifier: 51:FE:F9:03:6D:AA:28:5E:7F:1D:94:67:CB:E0:00:C8:0A:1A:3B:5F Authority key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4 Certificate issuer: /CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4 Certificate serial: 019B3A90F7AB8A8E9CF0DBB60FFA8B349AC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft Manifest number: 1784 Signing time: Sat 20 Dec 2025 07:02:17 +0000 Manifest this update: Sat 20 Dec 2025 07:02:17 +0000 Manifest next update: Sun 21 Dec 2025 07:02:17 +0000 Files and hashes: 1: 1-GwxGdQdSDv0GNH37kCGFbw_26Q.roa (hash: 8CUzx4XPAhE8seJ5BK68QhEaKNzFZcIoKPr1Lhqpte4=) 2: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl (hash: g+GSgUMlFdhu+Ggo7B+eG76+eZ94aTyLGyW0jwiHuVI=) 3: tLZE9xN0wEMlciA44LFiADYH8LI.roa (hash: wSS87TjmYV1lgJuaVAo3xUhNdr4f/voSLt3pqfbBM5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:f7:ab:8a:8e:9c:f0:db:b6:0f:fa:8b:34:9a:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4 Validity Not Before: Dec 20 07:02:17 2025 GMT Not After : Dec 21 07:02:17 2025 GMT Subject: CN=51fef9036daa285e7f1d9467cbe000c80a1a3b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:34:b5:e2:38:0e:3c:e3:ef:4c:ab:f2:37:3c: a2:48:a3:11:9e:71:12:ed:8d:ed:d1:1d:84:d0:bb: d7:ee:83:33:dc:96:9c:3a:6d:ce:ac:05:5a:35:25: 06:65:2a:3c:7e:37:09:c1:54:5a:64:59:cf:80:82: 59:fd:ae:f6:24:89:15:b7:41:ab:c3:92:04:b7:7c: c1:e0:42:d4:35:86:ad:6e:93:80:36:73:8d:cd:0a: 69:3b:57:36:dd:7f:0e:98:3d:8e:3a:d9:8a:94:4d: bb:8f:24:59:9a:f2:4b:c5:fa:81:23:e4:53:c9:48: a1:c0:1d:76:94:bc:43:a2:1b:52:a3:48:5f:db:d5: 13:36:dc:87:19:1c:dc:a5:d0:64:1d:6b:d4:92:89: 1d:ad:96:2c:b9:bf:99:53:5d:ea:90:86:c9:8b:7f: cd:af:70:42:bb:4f:c1:f1:92:2c:d8:33:ae:8e:15: 11:ac:c6:71:cc:f7:97:28:e7:05:5e:c3:86:d6:3e: 71:86:15:c4:69:32:27:3d:67:2c:55:1e:e7:f9:04: 15:ab:d3:3e:42:17:2e:f2:85:94:69:03:15:ab:af: 83:0e:6d:e5:1b:4d:4d:7c:cd:e3:39:6a:1f:07:e6: c9:88:07:25:19:ca:50:63:45:c0:33:6f:04:a8:6b: 7c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:FE:F9:03:6D:AA:28:5E:7F:1D:94:67:CB:E0:00:C8:0A:1A:3B:5F X509v3 Authority Key Identifier: keyid:A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:61:f9:8b:67:a9:94:64:5e:a6:fe:65:ac:8b:1b:d3:dd:64: d1:3e:73:c9:72:6a:a2:a3:25:fa:ef:88:26:fa:ea:fa:e4:46: 8b:12:fa:e6:32:64:7f:ab:32:3b:8a:57:32:28:3c:ec:07:4e: d8:35:8b:ee:32:bc:88:4e:43:83:66:09:91:bb:87:9e:b5:aa: ff:58:40:13:ce:7a:dd:7c:c0:27:0b:b8:e0:9a:b5:36:63:d2: 7e:cf:47:64:c7:37:c3:dd:b1:3e:51:61:47:82:0b:02:af:a6: 0c:1e:4d:cc:7f:7a:46:a3:8a:dc:d8:c8:90:bf:6a:9f:f7:f8: 8e:25:a3:88:fb:e9:3d:21:28:b6:e4:7c:4b:48:58:fd:db:b1: 96:eb:72:72:cf:f6:3f:44:5f:31:c8:cb:54:99:84:b6:39:74: 04:78:1a:43:b9:e7:ef:25:5b:ae:63:72:dd:76:ad:a4:cc:a4: 79:29:c6:13:e9:12:d1:66:97:51:f9:2f:44:4c:70:47:7b:97: 32:45:0d:5b:ae:42:cc:39:17:49:e1:71:96:bd:db:62:5a:76: b8:8c:31:c8:e3:76:d5:b0:c2:f0:e8:d5:47:18:70:19:18:fa: fc:51:6c:4c:a5:48:82:59:01:a3:96:a2:f0:6e:2e:b9:ae:9d: 88:da:fe:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kPerio6c8Nu2D/qLNJrCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ODg2MDRkMjViODdiODJmZDEyNTlkZmUyOTRjZDhmYjlm ZjQ5YjQwHhcNMjUxMjIwMDcwMjE3WhcNMjUxMjIxMDcwMjE3WjAzMTEwLwYDVQQD Eyg1MWZlZjkwMzZkYWEyODVlN2YxZDk0NjdjYmUwMDBjODBhMWEzYjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzS14jgOPOPvTKvyNzyiSKMRnnES 7Y3t0R2E0LvX7oMz3JacOm3OrAVaNSUGZSo8fjcJwVRaZFnPgIJZ/a72JIkVt0Gr w5IEt3zB4ELUNYatbpOANnONzQppO1c23X8OmD2OOtmKlE27jyRZmvJLxfqBI+RT yUihwB12lLxDohtSo0hf29UTNtyHGRzcpdBkHWvUkokdrZYsub+ZU13qkIbJi3/N r3BCu0/B8ZIs2DOujhURrMZxzPeXKOcFXsOG1j5xhhXEaTInPWcsVR7n+QQVq9M+ Qhcu8oWUaQMVq6+DDm3lG01NfM3jOWofB+bJiAclGcpQY0XAM28EqGt8mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFH++QNtqihefx2UZ8vgAMgKGjtfMB8GA1UdIwQY MBaAFKWIYE0luHuC/RJZ3+KUzY+5/0m0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81MTBhNGUtNjZlZi00ZGMxLTgwM2It MjBkZGRiYzEyODFkLzEvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC81MTBhNGUtNjZlZi00ZGMxLTgwM2ItMjBkZGRiYzEyODFk LzEvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWH5i2ep lGRepv5lrIsb091k0T5zyXJqoqMl+u+IJvrq+uRGixL65jJkf6syO4pXMig87AdO 2DWL7jK8iE5Dg2YJkbuHnrWq/1hAE8563XzAJwu44Jq1NmPSfs9HZMc3w92xPlFh R4ILAq+mDB5NzH96RqOK3NjIkL9qn/f4jiWjiPvpPSEotuR8S0hY/duxlutycs/2 P0RfMcjLVJmEtjl0BHgaQ7nn7yVbrmNy3XatpMykeSnGE+kS0WaXUfkvRExwR3uX MkUNW65CzDkXSeFxlr3bYlp2uIwxyON21bDC8OjVRxhwGRj6/FFsTKVIglkBo5ai 8G4uua6diNr++w== -----END CERTIFICATE-----Generated at Sat Dec 20 13:56:57 2025 by rpki-client