This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft File: PytPzqS3IvKm9scFxVie4avGIK4.mft (raw, json) Hash identifier: WIeIj4iXwc6o2E7bWaKhKpk8d2XBVfSJgYeinWWiZAQ= Subject key identifier: B1:B6:48:24:D7:04:15:D9:44:4D:1D:AC:6E:EE:A9:49:93:E0:B5:FF Authority key identifier: 3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE Certificate issuer: /CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae Certificate serial: 019B755A8A50C9C403B4ED4BA01C74E01976 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft Manifest number: 17A6 Signing time: Wed 31 Dec 2025 17:00:26 +0000 Manifest this update: Wed 31 Dec 2025 17:00:26 +0000 Manifest next update: Thu 01 Jan 2026 17:00:26 +0000 Files and hashes: 1: PytPzqS3IvKm9scFxVie4avGIK4.crl (hash: waAz7KW9KmdF7N6MTCX5f5vFhzVhe8ikZvJVxO432iE=) 2: YQBFYB0MYwrVqZbuM7UQcqbC024.roa (hash: wyZtqH/kTGiAK4e2xHLNhEXkV/FU12e6HKB8OJ8RKis=) 3: wfcB4mAnFj3QU1k-UoqD7LNH2ks.roa (hash: SfjPp8tTJZPwOpMDomAWdq0cbTqhgyvnx9jbemLwves=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 16:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:5a:8a:50:c9:c4:03:b4:ed:4b:a0:1c:74:e0:19:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae Validity Not Before: Dec 31 17:00:26 2025 GMT Not After : Jan 1 17:00:26 2026 GMT Subject: CN=b1b64824d70415d9444d1dac6eeea94993e0b5ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:28:5c:d7:96:19:c0:56:98:92:a5:56:3b:cc: f7:e5:46:41:49:19:fd:c7:19:af:98:96:83:68:73: f5:d4:b8:1d:80:9d:e9:23:17:ea:99:4b:5c:44:50: d6:e1:24:2c:63:e6:7e:eb:1c:9a:4c:1e:72:6f:37: fc:aa:58:4d:87:9e:63:4e:69:87:6e:8c:fa:bd:d7: a5:9b:66:c7:e4:b7:04:89:e7:99:e0:19:68:d5:69: 02:39:da:82:48:1a:57:96:54:67:cd:43:e5:ad:49: 8f:8e:54:8a:a9:16:30:a3:02:93:17:f7:31:4d:af: b3:44:54:7a:2d:4a:6a:7a:14:72:43:6c:73:84:e4: ae:6f:0a:84:cd:a6:ae:21:f9:f2:c8:f9:ea:6f:93: 89:bc:2c:c5:dc:5c:59:41:5c:f2:5f:72:67:ea:a4: 4b:d5:ac:0d:39:96:74:68:68:b7:e8:1c:da:6b:a7: fc:4c:7f:0c:4d:d4:b5:88:f0:d5:5c:c2:cd:e5:38: 8a:4e:b6:9a:0c:b0:22:3f:54:0c:63:59:a0:69:c3: 99:12:e8:cc:be:16:96:58:f7:ad:45:da:18:ad:d3: b9:a0:8f:39:a6:b0:a5:f9:8e:0e:26:b2:2a:9a:02: 72:2d:43:64:92:0e:31:28:9c:5e:35:b8:7c:1f:46: f0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B6:48:24:D7:04:15:D9:44:4D:1D:AC:6E:EE:A9:49:93:E0:B5:FF X509v3 Authority Key Identifier: keyid:3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:7a:ef:ff:0e:ef:02:57:af:a5:eb:f4:8b:d1:2e:c0:fd:bd: 3a:bc:62:73:70:29:86:90:ae:83:6c:16:aa:1b:d4:35:c4:0a: 66:c6:ca:19:8d:c3:f0:88:e5:01:22:ca:b7:98:4f:ee:89:41: dd:ad:71:6a:87:31:2b:e5:e3:0d:c9:a7:a7:47:a0:74:da:d6: 4a:11:ae:ae:b0:1b:86:ef:96:84:b1:c0:0a:06:d9:a8:80:19: 30:47:79:87:ab:bb:90:ac:54:a0:d4:4c:4f:e8:ac:6c:8b:b1: 85:3c:3e:74:26:a1:96:05:11:cb:79:6c:6c:fc:ee:cd:76:d8: 74:1b:54:07:4e:b6:e1:a4:41:c2:75:f9:11:73:c0:a2:d8:09: be:4e:fe:e5:b9:f9:7c:2a:88:cb:22:ad:9f:36:34:ba:87:a2: 87:e1:5a:19:6f:bd:97:02:da:7c:9b:84:54:46:62:9f:c9:df: 98:e5:ca:27:53:1a:43:b8:93:69:34:10:f9:df:2e:40:ef:d7: c0:5a:6e:58:ef:77:c8:02:27:61:cb:0c:1f:b7:73:ce:b4:14: e3:24:af:53:5d:0a:5e:eb:3b:10:41:e0:71:0e:c4:15:fa:8c: a6:6e:8f:74:ea:de:43:e2:e8:9d:7e:62:0c:dc:16:2b:2c:6d: 95:b6:d8:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1WopQycQDtO1LoBx04Bl2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMmI0ZmNlYTRiNzIyZjJhNmY2YzcwNWM1NTg5ZWUxYWJj NjIwYWUwHhcNMjUxMjMxMTcwMDI2WhcNMjYwMTAxMTcwMDI2WjAzMTEwLwYDVQQD EyhiMWI2NDgyNGQ3MDQxNWQ5NDQ0ZDFkYWM2ZWVlYTk0OTkzZTBiNWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yhc15YZwFaYkqVWO8z35UZBSRn9 xxmvmJaDaHP11LgdgJ3pIxfqmUtcRFDW4SQsY+Z+6xyaTB5ybzf8qlhNh55jTmmH boz6vdelm2bH5LcEieeZ4Blo1WkCOdqCSBpXllRnzUPlrUmPjlSKqRYwowKTF/cx Ta+zRFR6LUpqehRyQ2xzhOSubwqEzaauIfnyyPnqb5OJvCzF3FxZQVzyX3Jn6qRL 1awNOZZ0aGi36Bzaa6f8TH8MTdS1iPDVXMLN5TiKTraaDLAiP1QMY1mgacOZEujM vhaWWPetRdoYrdO5oI85prCl+Y4OJrIqmgJyLUNkkg4xKJxeNbh8H0bwhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLG2SCTXBBXZRE0drG7uqUmT4LX/MB8GA1UdIwQY MBaAFD8rT86ktyLypvbHBcVYnuGrxiCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHl0UHpxUzNJdkttOXNjRnhWaWU0YXZHSUs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84NWIyMzctZDA0MS00NDk3LWE3Mjkt NjI1M2FkMDhmODU4LzEvUHl0UHpxUzNJdkttOXNjRnhWaWU0YXZHSUs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC84NWIyMzctZDA0MS00NDk3LWE3MjktNjI1M2FkMDhmODU4 LzEvUHl0UHpxUzNJdkttOXNjRnhWaWU0YXZHSUs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWHrv/w7v Alevpev0i9EuwP29Orxic3AphpCug2wWqhvUNcQKZsbKGY3D8IjlASLKt5hP7olB 3a1xaocxK+XjDcmnp0egdNrWShGurrAbhu+WhLHACgbZqIAZMEd5h6u7kKxUoNRM T+isbIuxhTw+dCahlgURy3lsbPzuzXbYdBtUB0624aRBwnX5EXPAotgJvk7+5bn5 fCqIyyKtnzY0uoeih+FaGW+9lwLafJuEVEZin8nfmOXKJ1MaQ7iTaTQQ+d8uQO/X wFpuWO93yAInYcsMH7dzzrQU4ySvU10KXus7EEHgcQ7EFfqMpm6PdOreQ+LonX5i DNwWKyxtlbbYVw== -----END CERTIFICATE-----Generated at Wed Dec 31 21:46:16 2025 by rpki-client