This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft File: PYr-wXpBs52_aQE-yhZ732Oqhl0.mft (raw, json) Hash identifier: hPQbTHWW1dgD46hIlAZeR47trFinJ2k72c3LXDGdrR4= Subject key identifier: CF:6D:D8:68:0F:E4:2D:CE:31:6A:22:68:9B:9B:A6:D3:52:84:BA:53 Authority key identifier: 3D:8A:FE:C1:7A:41:B3:9D:BF:69:01:3E:CA:16:7B:DF:63:AA:86:5D Certificate issuer: /CN=3d8afec17a41b39dbf69013eca167bdf63aa865d Certificate serial: 019AF12D3E50663016DB6AD79C03303665A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft Manifest number: 0860 Signing time: Sat 06 Dec 2025 01:01:05 +0000 Manifest this update: Sat 06 Dec 2025 01:01:05 +0000 Manifest next update: Sun 07 Dec 2025 01:01:05 +0000 Files and hashes: 1: PYr-wXpBs52_aQE-yhZ732Oqhl0.crl (hash: u+2hfzq02g4OZeqR6WOk+wEoFVcYxxWRy5kUNDkh++s=) 2: jrw3uqdkA6aKRrYyLdhJsdQJmwE.roa (hash: E/ICIdLuVq2VYN9ruBUIoxT9BQwq5xAlmJn8kVZHVXc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:3e:50:66:30:16:db:6a:d7:9c:03:30:36:65:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8afec17a41b39dbf69013eca167bdf63aa865d Validity Not Before: Dec 6 01:01:05 2025 GMT Not After : Dec 7 01:01:05 2025 GMT Subject: CN=cf6dd8680fe42dce316a22689b9ba6d35284ba53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2c:21:4f:c4:22:1c:fe:d0:17:43:dc:96:d7: 74:57:ad:6e:5d:fb:34:5c:a3:5e:81:5a:05:54:4e: bc:4a:b2:6a:0e:3d:91:93:13:7d:91:8a:7a:a9:38: b5:e3:64:5c:68:de:4e:41:fb:22:a5:d8:91:50:85: 95:0b:a1:c6:c9:6b:57:1f:6a:ec:7f:3e:c9:96:31: e2:94:66:9c:ac:5f:f9:33:0b:f9:56:e1:91:d9:b7: 26:bb:12:18:96:86:cf:1f:4d:f5:55:9b:fa:76:d8: 53:9d:0b:0e:77:78:7c:2f:94:87:6f:85:c4:d2:93: e1:b1:0e:b9:84:72:a0:de:35:92:de:3b:59:4d:a2: 82:6c:73:09:50:c5:2e:cf:ec:88:89:5b:7d:fa:03: 6d:ce:53:14:23:d3:a7:b0:35:52:92:ea:bc:9d:e3: 21:86:85:0f:c8:fe:6e:30:06:57:64:cb:bb:e0:bc: f6:4e:cd:12:fe:1f:9a:4b:cc:a2:85:92:a9:6f:6b: d0:81:11:02:2b:d1:ed:7c:cf:56:02:62:85:48:84: 05:e4:19:d9:3f:45:c5:a5:3a:e6:1a:1f:2c:fc:4e: 25:84:5d:ef:8a:e1:07:6f:54:cb:e8:3a:a0:e3:c2: 21:1d:91:d6:92:98:ba:a9:6a:bb:65:1c:18:67:ba: 99:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:6D:D8:68:0F:E4:2D:CE:31:6A:22:68:9B:9B:A6:D3:52:84:BA:53 X509v3 Authority Key Identifier: keyid:3D:8A:FE:C1:7A:41:B3:9D:BF:69:01:3E:CA:16:7B:DF:63:AA:86:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYr-wXpBs52_aQE-yhZ732Oqhl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/8bcaba-38ad-4051-b414-94d37e9595c1/1/PYr-wXpBs52_aQE-yhZ732Oqhl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:0e:01:ec:98:d9:f3:25:a2:65:36:bd:b3:f6:5a:7d:6d:97: e5:e3:67:aa:b0:6d:40:ce:0a:c0:72:09:0e:9f:4c:d0:a7:dd: a0:23:9c:2c:ee:30:02:5d:38:dc:3e:74:83:c7:9b:35:c4:2a: db:2f:fe:3b:a5:37:64:c6:b1:32:82:86:19:ab:85:9b:8c:45: ad:3d:89:78:cb:bd:2c:7d:26:04:e8:a5:a7:e0:a5:aa:26:d1: 32:e0:6b:27:d3:e5:00:ad:e4:db:8f:54:de:70:a7:4f:20:77: 71:c9:e2:7b:d6:79:07:a8:30:31:cb:cf:83:c6:29:0e:67:be: f6:77:19:8b:d9:3c:5c:cb:5a:b3:cb:07:2f:52:24:2b:ba:b2: 5f:13:94:f1:bd:52:eb:0f:4a:1c:3b:aa:e8:03:4e:93:21:75: 29:33:55:00:05:ed:fc:00:f5:d9:e8:23:b1:22:60:df:e8:8a: 42:c3:9d:5e:9d:9c:40:e5:3f:14:d1:71:d3:b9:d3:d5:31:dc: 21:a2:0e:65:94:50:8a:e6:ea:e0:66:4a:3d:d4:67:ab:7d:6b: 91:c7:87:a3:5a:61:24:7b:74:01:52:13:bc:89:a9:87:a1:f1: 9f:bd:85:4d:ce:cd:33:ff:c0:da:a8:d6:6f:ef:1f:db:3d:c4: 98:84:ea:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLT5QZjAW22rXnAMwNmWjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGFmZWMxN2E0MWIzOWRiZjY5MDEzZWNhMTY3YmRmNjNh YTg2NWQwHhcNMjUxMjA2MDEwMTA1WhcNMjUxMjA3MDEwMTA1WjAzMTEwLwYDVQQD EyhjZjZkZDg2ODBmZTQyZGNlMzE2YTIyNjg5YjliYTZkMzUyODRiYTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjywhT8QiHP7QF0Pcltd0V61uXfs0 XKNegVoFVE68SrJqDj2RkxN9kYp6qTi142RcaN5OQfsipdiRUIWVC6HGyWtXH2rs fz7JljHilGacrF/5Mwv5VuGR2bcmuxIYlobPH031VZv6dthTnQsOd3h8L5SHb4XE 0pPhsQ65hHKg3jWS3jtZTaKCbHMJUMUuz+yIiVt9+gNtzlMUI9OnsDVSkuq8neMh hoUPyP5uMAZXZMu74Lz2Ts0S/h+aS8yihZKpb2vQgRECK9HtfM9WAmKFSIQF5BnZ P0XFpTrmGh8s/E4lhF3viuEHb1TL6Dqg48IhHZHWkpi6qWq7ZRwYZ7qZzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9t2GgP5C3OMWoiaJubptNShLpTMB8GA1UdIwQY MBaAFD2K/sF6QbOdv2kBPsoWe99jqoZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFlyLXdYcEJzNTJfYVFFLXloWjczMk9xaGwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy84YmNhYmEtMzhhZC00MDUxLWI0MTQt OTRkMzdlOTU5NWMxLzEvUFlyLXdYcEJzNTJfYVFFLXloWjczMk9xaGwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy84YmNhYmEtMzhhZC00MDUxLWI0MTQtOTRkMzdlOTU5NWMx LzEvUFlyLXdYcEJzNTJfYVFFLXloWjczMk9xaGwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGA4B7JjZ 8yWiZTa9s/ZafW2X5eNnqrBtQM4KwHIJDp9M0KfdoCOcLO4wAl043D50g8ebNcQq 2y/+O6U3ZMaxMoKGGauFm4xFrT2JeMu9LH0mBOilp+ClqibRMuBrJ9PlAK3k249U 3nCnTyB3ccnie9Z5B6gwMcvPg8YpDme+9ncZi9k8XMtas8sHL1IkK7qyXxOU8b1S 6w9KHDuq6ANOkyF1KTNVAAXt/AD12egjsSJg3+iKQsOdXp2cQOU/FNFx07nT1THc IaIOZZRQiubq4GZKPdRnq31rkceHo1phJHt0AVITvImph6Hxn72FTc7NM//A2qjW b+8f2z3EmITq4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:34 2025 by rpki-client