This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft File: RyjroAE1nN1Bg0b2UcChh8ifur8.mft (raw, json) Hash identifier: D+BfoqScrPv9rN2n9Duz5UDSthGOnbrXAj9k8qK518g= Subject key identifier: 0D:A4:9C:D5:FC:68:33:C5:D1:3A:08:49:14:9D:CE:75:3D:76:34:5F Authority key identifier: 47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF Certificate issuer: /CN=4728eba001359cdd418346f651c0a187c89fbabf Certificate serial: 019AF1D1BD9157BFFC5A8A4CF234722E0735 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 04:00:45 +0000 Manifest this update: Sat 06 Dec 2025 04:00:45 +0000 Manifest next update: Sun 07 Dec 2025 04:00:45 +0000 Files and hashes: 1: RyjroAE1nN1Bg0b2UcChh8ifur8.crl (hash: jDgl+pJTdS85hwB6CTuioVOhKhKhihpHd3gTWDkVT7o=) 2: cBEyoeOIQqPilDWr0_I994MOPuI.roa (hash: isPNyBmr4XWxQFWKBdpcs0T6FtXR/DTgtbw1P60u2i4=) 3: i2M6rq1mSxd454EFcJs47ZfxfI8.roa (hash: x+6kMu73XXcjQUZNpiQj7d3/5eInEGiFNdUUMK9AZB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:bd:91:57:bf:fc:5a:8a:4c:f2:34:72:2e:07:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4728eba001359cdd418346f651c0a187c89fbabf Validity Not Before: Dec 6 04:00:45 2025 GMT Not After : Dec 7 04:00:45 2025 GMT Subject: CN=0da49cd5fc6833c5d13a0849149dce753d76345f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:28:31:f6:82:35:b8:8c:c9:b4:c9:1d:07:15: 1f:6d:07:ec:9f:f5:12:dd:87:44:3c:f8:c7:2f:5d: 83:4d:3a:b3:bd:c9:90:7c:11:1f:2e:b8:14:8b:57: 18:74:dd:70:54:70:b1:ed:b5:bf:3f:04:07:59:d9: 16:f5:6c:c3:ba:91:3f:b1:18:bd:f8:6c:f1:30:2c: 9f:2f:7b:85:e3:b5:59:2f:fc:c7:69:44:7f:d4:fd: 68:ef:5b:ab:34:e7:9d:bc:65:fe:b8:fe:4d:a7:db: 83:7b:68:9f:4c:a6:33:e7:f2:b5:22:81:6d:67:96: 4b:fa:d2:ad:4c:80:5e:ac:34:51:c1:1d:4d:45:b5: 20:78:22:34:4f:03:36:c0:4d:27:4c:e8:a5:ca:a3: bf:68:c7:2d:21:db:52:c4:ac:a2:9d:49:90:1c:85: 19:1c:61:e5:19:2d:e6:e5:35:5b:3b:bf:eb:03:4e: 80:e4:cd:1c:86:52:2e:71:ea:b9:57:df:ed:db:f4: 87:17:9e:ac:ef:97:f3:54:f1:c6:38:41:a3:6a:c1: 12:99:6f:69:6d:1a:f7:23:70:97:90:08:2a:db:4a: dc:f6:ca:5d:02:d0:30:40:13:7b:8b:74:3d:a8:a2: 41:da:54:9e:97:52:c3:5d:e9:30:17:97:c8:d0:6c: b9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A4:9C:D5:FC:68:33:C5:D1:3A:08:49:14:9D:CE:75:3D:76:34:5F X509v3 Authority Key Identifier: keyid:47:28:EB:A0:01:35:9C:DD:41:83:46:F6:51:C0:A1:87:C8:9F:BA:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyjroAE1nN1Bg0b2UcChh8ifur8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/28c5b6-23f0-45fb-9b21-294d9cf79e2e/1/RyjroAE1nN1Bg0b2UcChh8ifur8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:a8:26:da:7b:50:02:1c:df:3c:0a:cf:bc:c1:c7:1e:50:36: d0:05:2f:85:08:ba:a6:8a:25:3a:ce:40:bf:06:58:d3:0e:7e: 83:13:1a:d7:77:17:f8:21:66:5d:58:3b:73:52:90:18:08:cd: cb:81:32:47:fc:8a:c7:84:e1:83:60:2c:9c:41:da:b8:6b:89: a1:65:7b:c7:4c:2e:83:3c:8b:82:b5:e4:5f:3b:e6:ba:c8:7f: 14:db:58:92:4a:32:09:c3:49:f9:56:5e:84:d6:23:c7:f2:a4: ee:0d:42:48:2b:4e:34:8c:59:f2:38:e3:a3:72:a4:66:74:3f: a0:d7:2b:b1:43:ad:79:bc:fa:5c:e9:c2:e2:76:b1:8b:59:c1: 8c:d5:ab:21:81:3d:9c:41:e5:fd:fd:f9:54:46:40:44:cf:0c: 4f:95:f1:17:09:1c:20:73:4d:b9:00:44:d2:93:0c:8c:e1:5d: 7a:57:ed:97:c3:1f:d5:43:57:f4:77:6f:6c:18:76:47:cf:22: 28:92:34:c4:47:db:b4:11:4f:57:3a:da:78:20:ee:55:2b:db: aa:37:02:99:19:4f:7d:cf:66:dc:0d:ab:70:2c:bc:5a:ec:1f: 51:b2:7f:92:64:91:d9:45:5a:50:b5:8c:d0:a9:e6:be:fe:33: 12:f4:da:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0b2RV7/8WopM8jRyLgc1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MjhlYmEwMDEzNTljZGQ0MTgzNDZmNjUxYzBhMTg3Yzg5 ZmJhYmYwHhcNMjUxMjA2MDQwMDQ1WhcNMjUxMjA3MDQwMDQ1WjAzMTEwLwYDVQQD EygwZGE0OWNkNWZjNjgzM2M1ZDEzYTA4NDkxNDlkY2U3NTNkNzYzNDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoigx9oI1uIzJtMkdBxUfbQfsn/US 3YdEPPjHL12DTTqzvcmQfBEfLrgUi1cYdN1wVHCx7bW/PwQHWdkW9WzDupE/sRi9 +GzxMCyfL3uF47VZL/zHaUR/1P1o71urNOedvGX+uP5Np9uDe2ifTKYz5/K1IoFt Z5ZL+tKtTIBerDRRwR1NRbUgeCI0TwM2wE0nTOilyqO/aMctIdtSxKyinUmQHIUZ HGHlGS3m5TVbO7/rA06A5M0chlIuceq5V9/t2/SHF56s75fzVPHGOEGjasESmW9p bRr3I3CXkAgq20rc9spdAtAwQBN7i3Q9qKJB2lSel1LDXekwF5fI0Gy53QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2knNX8aDPF0ToISRSdznU9djRfMB8GA1UdIwQY MBaAFEco66ABNZzdQYNG9lHAoYfIn7q/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnlqcm9BRTFuTjFCZzBiMlVjQ2hoOGlmdXI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8yOGM1YjYtMjNmMC00NWZiLTliMjEt Mjk0ZDljZjc5ZTJlLzEvUnlqcm9BRTFuTjFCZzBiMlVjQ2hoOGlmdXI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8yOGM1YjYtMjNmMC00NWZiLTliMjEtMjk0ZDljZjc5ZTJl LzEvUnlqcm9BRTFuTjFCZzBiMlVjQ2hoOGlmdXI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqgm2ntQ AhzfPArPvMHHHlA20AUvhQi6poolOs5AvwZY0w5+gxMa13cX+CFmXVg7c1KQGAjN y4EyR/yKx4Thg2AsnEHauGuJoWV7x0wugzyLgrXkXzvmush/FNtYkkoyCcNJ+VZe hNYjx/Kk7g1CSCtONIxZ8jjjo3KkZnQ/oNcrsUOtebz6XOnC4naxi1nBjNWrIYE9 nEHl/f35VEZARM8MT5XxFwkcIHNNuQBE0pMMjOFdelftl8Mf1UNX9HdvbBh2R88i KJI0xEfbtBFPVzraeCDuVSvbqjcCmRlPfc9m3A2rcCy8WuwfUbJ/kmSR2UVaULWM 0Knmvv4zEvTahw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:48 2025 by rpki-client