This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft File: pyRyw_AEsLcfEY6HK5g4pODHIcc.mft (raw, json) Hash identifier: 4b2wNQev7NJ7li+/MwHeJzDcY3N7tArTj064CT1xqeA= Subject key identifier: FD:B4:C0:E1:8B:37:E3:C2:AF:38:A2:D2:1C:03:E8:69:9F:BB:7F:8B Authority key identifier: A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7 Certificate issuer: /CN=a72472c3f004b0b71f118e872b9838a4e0c721c7 Certificate serial: 019B394646EC4B2D86407BC2CC49F7630976 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft Manifest number: 02D6 Signing time: Sat 20 Dec 2025 01:01:05 +0000 Manifest this update: Sat 20 Dec 2025 01:01:05 +0000 Manifest next update: Sun 21 Dec 2025 01:01:05 +0000 Files and hashes: 1: 6DpWZbBL9E7B4j1aF-rxc-G8DWI.roa (hash: SV3cobOGrBeYAeMDxv8oIoNqGXu5Q+QcGtKFI/sHBB4=) 2: jSbiesDgF1BjYr1K6jnTWbKgx4o.roa (hash: Oe/Y66dWQyjSuf4Xd/fvNzxL7OXnyluh/diNnzBb2/g=) 3: pyRyw_AEsLcfEY6HK5g4pODHIcc.crl (hash: uFTt8z66PRMp7Tq8W4Oz+24HGbIFchIgci1yiQJw6QU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:46:ec:4b:2d:86:40:7b:c2:cc:49:f7:63:09:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a72472c3f004b0b71f118e872b9838a4e0c721c7 Validity Not Before: Dec 20 01:01:05 2025 GMT Not After : Dec 21 01:01:05 2025 GMT Subject: CN=fdb4c0e18b37e3c2af38a2d21c03e8699fbb7f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f6:a4:89:e1:2d:d9:c9:4d:d8:45:23:a1:12: 5e:bf:17:cb:57:78:37:b6:3b:d4:b7:43:7a:12:35: 22:56:fe:1b:dc:7b:ef:3b:db:6d:45:ee:e1:e2:da: 1d:e7:58:f5:a8:90:29:a7:34:29:bd:af:bf:36:6f: 48:be:d4:f5:3c:fa:31:d4:ec:0f:1d:a4:3d:87:13: 16:f2:f4:54:52:30:e4:e5:2c:e0:5c:09:e8:61:f2: f3:39:90:05:60:00:cd:22:fb:37:70:e9:bd:ce:b4: 40:fe:3c:23:33:c7:6c:57:0a:f3:96:fd:f3:71:eb: 2b:1d:74:32:1b:e2:a2:0a:ef:d2:f0:56:5e:1b:3d: 39:59:7a:03:5c:01:29:38:ce:df:b9:a1:63:59:30: 2f:eb:ea:3f:62:3e:c2:7d:9e:9e:79:a3:b3:d5:58: 36:21:15:86:74:a6:b4:ba:db:67:46:cb:3b:28:51: eb:f0:0f:d5:93:b9:6a:64:52:26:a9:01:a3:5d:20: c9:fa:fd:f8:97:d7:47:2d:c1:0b:7e:d3:6a:06:e0: a8:d3:ee:dd:1c:40:a3:fc:01:14:62:ba:b4:f6:bb: 2a:20:56:6e:38:85:b6:88:0e:3e:7c:f4:d5:2f:a6: 5a:c6:ea:6f:06:f9:19:8e:75:df:34:87:80:13:4e: 2f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B4:C0:E1:8B:37:E3:C2:AF:38:A2:D2:1C:03:E8:69:9F:BB:7F:8B X509v3 Authority Key Identifier: keyid:A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:73:f8:b8:1a:d3:b3:64:9f:66:c8:e6:6d:28:e6:b3:c4:45: 49:1e:5e:77:7e:22:b3:5e:c3:9f:a1:e9:bd:f2:ec:23:73:6d: 87:c9:dc:8c:5e:bd:a2:26:7f:dc:66:01:d2:f4:af:88:af:a1: df:56:47:d5:aa:4f:ec:5a:c5:ae:b0:37:e2:b0:a7:ca:64:09: f8:89:93:34:3d:51:35:48:18:69:b9:c0:a6:96:54:29:ac:a5: 74:8b:76:07:bf:cd:85:ee:e9:8a:c1:92:1c:45:33:65:11:d0: f5:1e:bb:3d:fa:7e:14:c2:37:b4:f9:26:d9:87:ac:51:2c:57: de:2d:89:97:87:d3:d4:4b:f4:a5:ba:08:9f:c6:cf:31:8a:11: 18:cd:91:2c:2e:50:76:ff:f7:74:6d:64:22:d6:25:0f:28:ce: 3c:da:e1:5b:d5:04:a1:fc:1f:a7:f2:9e:0e:20:6f:b6:3a:39: 6a:a2:45:9c:bf:6c:97:d4:5b:01:6f:34:30:c3:67:35:63:3a: 84:40:52:89:af:0d:64:2c:90:7e:d6:2e:63:40:23:b4:7b:c6: 6e:b6:4b:5a:16:87:f6:72:07:9f:9d:fd:ff:ad:ed:8c:7f:64: 41:4d:f0:2d:ad:4e:fc:af:bb:34:03:ab:a0:3d:7c:7a:97:bb: 5c:6d:6a:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RkbsSy2GQHvCzEn3Ywl2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MjQ3MmMzZjAwNGIwYjcxZjExOGU4NzJiOTgzOGE0ZTBj NzIxYzcwHhcNMjUxMjIwMDEwMTA1WhcNMjUxMjIxMDEwMTA1WjAzMTEwLwYDVQQD EyhmZGI0YzBlMThiMzdlM2MyYWYzOGEyZDIxYzAzZTg2OTlmYmI3ZjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvakieEt2clN2EUjoRJevxfLV3g3 tjvUt0N6EjUiVv4b3HvvO9ttRe7h4tod51j1qJAppzQpva+/Nm9IvtT1PPox1OwP HaQ9hxMW8vRUUjDk5SzgXAnoYfLzOZAFYADNIvs3cOm9zrRA/jwjM8dsVwrzlv3z cesrHXQyG+KiCu/S8FZeGz05WXoDXAEpOM7fuaFjWTAv6+o/Yj7CfZ6eeaOz1Vg2 IRWGdKa0uttnRss7KFHr8A/Vk7lqZFImqQGjXSDJ+v34l9dHLcELftNqBuCo0+7d HECj/AEUYrq09rsqIFZuOIW2iA4+fPTVL6ZaxupvBvkZjnXfNIeAE04v7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP20wOGLN+PCrzii0hwD6Gmfu3+LMB8GA1UdIwQY MBaAFKckcsPwBLC3HxGOhyuYOKTgxyHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHlSeXdfQUVzTGNmRVk2SEs1ZzRwT0RISWNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85OThhMWQtMzA5NS00NjQzLTg3M2Qt ZDhjOTUwY2FjYWI1LzEvcHlSeXdfQUVzTGNmRVk2SEs1ZzRwT0RISWNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS85OThhMWQtMzA5NS00NjQzLTg3M2QtZDhjOTUwY2FjYWI1 LzEvcHlSeXdfQUVzTGNmRVk2SEs1ZzRwT0RISWNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcHP4uBrT s2SfZsjmbSjms8RFSR5ed34is17Dn6HpvfLsI3Nth8ncjF69oiZ/3GYB0vSviK+h 31ZH1apP7FrFrrA34rCnymQJ+ImTND1RNUgYabnAppZUKayldIt2B7/Nhe7pisGS HEUzZRHQ9R67Pfp+FMI3tPkm2YesUSxX3i2Jl4fT1Ev0pboIn8bPMYoRGM2RLC5Q dv/3dG1kItYlDyjOPNrhW9UEofwfp/KeDiBvtjo5aqJFnL9sl9RbAW80MMNnNWM6 hEBSia8NZCyQftYuY0AjtHvGbrZLWhaH9nIHn539/63tjH9kQU3wLa1O/K+7NAOr oD18epe7XG1qyw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:35:08 2025 by rpki-client