This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft File: PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft (raw, json) Hash identifier: c83N+tUptR2A4swcb2kWqxlKuclRhF4v5Jswvu3zrCE= Subject key identifier: DF:3F:11:57:B0:10:25:CD:53:A8:05:C8:A8:29:C5:59:09:C7:BF:AC Authority key identifier: 3F:25:95:F2:66:59:FC:74:DB:88:32:D5:DA:23:B0:E9:E3:67:FC:B3 Certificate issuer: /CN=3f2595f26659fc74db8832d5da23b0e9e367fcb3 Certificate serial: 019AF31D4C4DC8E91685B1615EB2929B5E7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft Manifest number: 06D1 Signing time: Sat 06 Dec 2025 10:02:54 +0000 Manifest this update: Sat 06 Dec 2025 10:02:54 +0000 Manifest next update: Sun 07 Dec 2025 10:02:54 +0000 Files and hashes: 1: PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl (hash: aXex6jhV0TnV2wsG1eQqKsdZOQRkseXdz/c+yXICQFA=) 2: fZ9isGtIlM4KCLTcv8R-iIf03v8.roa (hash: B9s0fxg99QLzPGHKR09eX4IAtgF+hQonUvqfnXhZlTc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:4c:4d:c8:e9:16:85:b1:61:5e:b2:92:9b:5e:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f2595f26659fc74db8832d5da23b0e9e367fcb3 Validity Not Before: Dec 6 10:02:54 2025 GMT Not After : Dec 7 10:02:54 2025 GMT Subject: CN=df3f1157b01025cd53a805c8a829c55909c7bfac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:02:ec:32:37:54:b9:5c:a3:14:23:50:13:1e: 1b:cf:37:ec:26:4b:63:8a:ef:cb:1d:f7:50:ab:04: bf:f4:0c:c9:e0:b1:ab:33:1d:f2:8e:22:38:bf:1e: c9:60:32:61:45:5f:b7:58:81:a7:4f:73:b2:0d:a4: 94:7b:1f:45:56:4d:32:ce:53:f2:19:a9:56:03:ba: a3:76:b2:9b:3a:91:27:23:8d:8b:47:c4:e5:65:7c: f5:5c:17:fa:00:49:e2:3d:ea:55:a9:1e:c9:e1:0b: 4c:bd:50:44:83:2b:ac:35:a4:c4:16:42:61:9f:c6: a9:2f:7e:86:e7:d1:16:01:0b:5a:6a:20:b3:6f:30: 14:13:31:f5:14:58:96:bb:4b:4f:66:4c:5c:4b:ec: 11:68:b6:11:2e:b2:27:4b:86:d5:e1:57:95:b7:0d: 6b:a9:0b:76:2e:09:dc:6e:df:d8:2a:4f:62:01:f0: f8:c8:ec:ac:a8:87:fc:c8:04:c8:52:5b:01:84:61: df:e5:69:26:19:e0:40:cd:77:b5:8b:f8:61:d2:cd: 76:9b:e7:d9:a0:62:f7:40:96:83:cf:a0:bf:0b:92: a8:9d:cb:0d:15:c9:9e:32:df:ba:6c:01:eb:db:6c: a8:37:54:51:49:19:a6:fd:5d:55:d2:a1:dc:3b:2d: 7a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:3F:11:57:B0:10:25:CD:53:A8:05:C8:A8:29:C5:59:09:C7:BF:AC X509v3 Authority Key Identifier: keyid:3F:25:95:F2:66:59:FC:74:DB:88:32:D5:DA:23:B0:E9:E3:67:FC:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:35:9e:2d:9a:21:b4:c9:10:1f:04:31:15:10:0d:76:da:ad: 7f:e3:05:25:1d:48:24:05:46:dc:b5:41:86:17:36:60:ff:dc: 70:3d:00:91:26:48:df:0e:10:50:89:ab:c7:f6:f1:b9:c2:c3: af:4c:fc:13:9b:54:d5:42:0a:4a:36:23:36:32:2f:bf:ee:d0: d3:4e:9c:34:72:cb:2d:79:c7:11:99:a4:0e:02:f6:e1:39:94: a5:7e:46:d5:2a:40:35:90:44:6b:bd:1f:10:4d:8b:5e:a2:1a: f3:9a:a1:99:00:6f:1c:96:55:46:a1:d9:55:21:e8:71:49:be: ca:a9:50:8e:00:00:af:88:6d:5b:2f:2f:81:cf:a4:0c:ec:34: ac:33:e3:21:22:45:94:fc:17:e4:10:87:2a:4c:03:58:51:eb: 3a:fa:3c:23:9f:c3:72:3e:06:55:a9:38:21:29:ab:bf:a6:19: 3c:80:77:fd:ee:6c:4e:38:f4:dc:1b:43:a5:b5:94:9a:2d:17: 5a:6f:81:56:3b:53:c4:d7:e6:ff:0b:91:8e:42:5c:a6:16:63: 4d:72:86:42:08:c1:16:67:3e:73:a1:ac:c4:2c:71:0a:65:21: c9:c0:be:6e:35:2f:92:05:f2:0d:7c:e3:35:20:69:da:d4:2a: ee:48:05:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHUxNyOkWhbFhXrKSm159MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMjU5NWYyNjY1OWZjNzRkYjg4MzJkNWRhMjNiMGU5ZTM2 N2ZjYjMwHhcNMjUxMjA2MTAwMjU0WhcNMjUxMjA3MTAwMjU0WjAzMTEwLwYDVQQD EyhkZjNmMTE1N2IwMTAyNWNkNTNhODA1YzhhODI5YzU1OTA5YzdiZmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wLsMjdUuVyjFCNQEx4bzzfsJktj iu/LHfdQqwS/9AzJ4LGrMx3yjiI4vx7JYDJhRV+3WIGnT3OyDaSUex9FVk0yzlPy GalWA7qjdrKbOpEnI42LR8TlZXz1XBf6AEniPepVqR7J4QtMvVBEgyusNaTEFkJh n8apL36G59EWAQtaaiCzbzAUEzH1FFiWu0tPZkxcS+wRaLYRLrInS4bV4VeVtw1r qQt2Lgncbt/YKk9iAfD4yOysqIf8yATIUlsBhGHf5WkmGeBAzXe1i/hh0s12m+fZ oGL3QJaDz6C/C5KoncsNFcmeMt+6bAHr22yoN1RRSRmm/V1V0qHcOy16iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8/EVewECXNU6gFyKgpxVkJx7+sMB8GA1UdIwQY MBaAFD8llfJmWfx024gy1dojsOnjZ/yzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHlXVjhtWlpfSFRiaURMVjJpT3c2ZU5uX0xNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yOTNjYmYtY2Q1Yy00ZWU4LWI3MWUt ZjY2NjY5MDlkZDRhLzEvUHlXVjhtWlpfSFRiaURMVjJpT3c2ZU5uX0xNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8yOTNjYmYtY2Q1Yy00ZWU4LWI3MWUtZjY2NjY5MDlkZDRh LzEvUHlXVjhtWlpfSFRiaURMVjJpT3c2ZU5uX0xNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzWeLZoh tMkQHwQxFRANdtqtf+MFJR1IJAVG3LVBhhc2YP/ccD0AkSZI3w4QUImrx/bxucLD r0z8E5tU1UIKSjYjNjIvv+7Q006cNHLLLXnHEZmkDgL24TmUpX5G1SpANZBEa70f EE2LXqIa85qhmQBvHJZVRqHZVSHocUm+yqlQjgAAr4htWy8vgc+kDOw0rDPjISJF lPwX5BCHKkwDWFHrOvo8I5/Dcj4GVak4ISmrv6YZPIB3/e5sTjj03BtDpbWUmi0X Wm+BVjtTxNfm/wuRjkJcphZjTXKGQgjBFmc+c6GsxCxxCmUhycC+bjUvkgXyDXzj NSBp2tQq7kgFLw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:51:38 2025 by rpki-client