This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft File: pyDgfSiyYVg7b_sWSYzefUfjQlw.mft (raw, json) Hash identifier: //rJqTdpvJKlZxfar4KgIRkVSP9tytIb1APBFwz3SHE= Subject key identifier: F5:E6:8F:E5:28:2A:9E:22:CB:7B:09:2A:37:1F:6E:45:73:28:BF:2A Authority key identifier: A7:20:E0:7D:28:B2:61:58:3B:6F:FB:16:49:8C:DE:7D:47:E3:42:5C Certificate issuer: /CN=a720e07d28b261583b6ffb16498cde7d47e3425c Certificate serial: 019B3A914A3DF7B9B16936708CF50FE885C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft Manifest number: 0F51 Signing time: Sat 20 Dec 2025 07:02:38 +0000 Manifest this update: Sat 20 Dec 2025 07:02:38 +0000 Manifest next update: Sun 21 Dec 2025 07:02:38 +0000 Files and hashes: 1: pyDgfSiyYVg7b_sWSYzefUfjQlw.crl (hash: wROYAiqDkF8wL7/b4fgY6DfDd4gKQOPNzUWf3KlNIp4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:91:4a:3d:f7:b9:b1:69:36:70:8c:f5:0f:e8:85:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a720e07d28b261583b6ffb16498cde7d47e3425c Validity Not Before: Dec 20 07:02:38 2025 GMT Not After : Dec 21 07:02:38 2025 GMT Subject: CN=f5e68fe5282a9e22cb7b092a371f6e457328bf2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1d:11:7d:ad:f0:07:3a:9d:65:1a:7d:2a:68: 14:9f:97:79:b3:df:fc:1a:d9:f6:28:f6:83:cd:0c: 96:45:12:c3:30:46:c8:cf:fb:b7:c6:38:25:75:59: 20:80:45:6d:ec:a9:af:3c:a6:ae:b3:d1:43:c2:f1: 42:62:67:49:2d:93:04:94:66:ee:62:9b:87:40:85: 2c:0b:67:a2:67:ab:a9:20:cb:a7:eb:b0:81:70:1c: 69:7c:56:0b:da:38:51:08:f3:a6:c5:63:e8:1f:ee: 52:51:10:67:3a:3e:25:70:b7:6f:77:2f:99:20:6e: c3:c4:5d:5a:24:71:af:39:50:dd:4f:2b:d1:66:b9: 68:6f:1c:79:f6:19:9a:fb:67:76:4d:94:36:5e:df: 72:6b:e3:8f:30:73:b4:71:47:0b:a3:f3:e4:4c:78: ef:4a:c2:f8:9b:58:c1:eb:6b:9c:84:5c:4f:be:c3: 02:4f:0f:c4:1d:94:49:77:b6:7a:66:17:66:a1:d6: 26:25:14:55:0f:49:11:a2:2f:96:b7:ca:62:d8:f1: ce:8f:41:01:a2:68:49:48:2e:33:aa:34:81:96:2c: 88:97:eb:23:0d:af:d2:de:7f:53:79:18:aa:86:2d: 52:b4:f0:62:5b:68:f5:f1:85:b0:70:f7:51:4a:02: 04:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E6:8F:E5:28:2A:9E:22:CB:7B:09:2A:37:1F:6E:45:73:28:BF:2A X509v3 Authority Key Identifier: keyid:A7:20:E0:7D:28:B2:61:58:3B:6F:FB:16:49:8C:DE:7D:47:E3:42:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyDgfSiyYVg7b_sWSYzefUfjQlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/36af69-9fb4-4620-aaab-dec94de858cf/1/pyDgfSiyYVg7b_sWSYzefUfjQlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:81:ed:37:ea:51:bd:76:e6:b0:c6:85:d9:a4:67:29:94:3f: 33:28:a3:ed:6c:2f:6e:e6:4d:87:5a:9e:67:e6:ed:2d:3f:05: 93:3d:b5:63:b9:2f:9e:e0:a2:3d:9f:0d:31:01:9c:ce:d3:98: 39:58:42:61:e0:b8:88:7a:d4:0b:40:4a:99:f0:30:e2:a3:ce: 19:f9:4f:0f:fd:1b:3a:a3:6d:79:f0:5e:8f:8a:c7:af:8c:b9: 18:dd:6f:74:c2:7f:0c:2c:20:36:9b:e7:9c:1f:b4:ec:9c:fa: d4:b5:78:9d:14:03:bc:86:f0:d7:aa:a6:25:f2:d6:4d:8f:92: aa:0f:c1:a9:d8:71:c6:da:9d:87:99:2d:75:31:87:cc:5a:1a: 34:0e:1e:5f:84:d8:92:33:c6:26:76:a5:15:ae:f1:c4:f7:aa: 29:2b:28:f7:63:fc:eb:da:65:bb:da:a3:05:0c:63:ce:1b:ed: 77:fb:0a:0c:94:89:f5:36:e5:27:a3:4a:9d:81:7f:04:11:1c: d9:a8:f3:8f:16:61:19:0f:c6:f5:8b:99:67:aa:07:f6:f3:ef: 7b:3a:ca:8a:53:18:ce:78:a2:58:ed:b1:bc:02:c3:02:59:c2: 01:4e:88:07:6d:71:f6:c3:e4:ff:0f:0b:49:f1:08:77:94:78: 34:bc:d5:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kUo997mxaTZwjPUP6IXIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MjBlMDdkMjhiMjYxNTgzYjZmZmIxNjQ5OGNkZTdkNDdl MzQyNWMwHhcNMjUxMjIwMDcwMjM4WhcNMjUxMjIxMDcwMjM4WjAzMTEwLwYDVQQD EyhmNWU2OGZlNTI4MmE5ZTIyY2I3YjA5MmEzNzFmNmU0NTczMjhiZjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR0Rfa3wBzqdZRp9KmgUn5d5s9/8 Gtn2KPaDzQyWRRLDMEbIz/u3xjgldVkggEVt7KmvPKaus9FDwvFCYmdJLZMElGbu YpuHQIUsC2eiZ6upIMun67CBcBxpfFYL2jhRCPOmxWPoH+5SURBnOj4lcLdvdy+Z IG7DxF1aJHGvOVDdTyvRZrlobxx59hma+2d2TZQ2Xt9ya+OPMHO0cUcLo/PkTHjv SsL4m1jB62uchFxPvsMCTw/EHZRJd7Z6ZhdmodYmJRRVD0kRoi+Wt8pi2PHOj0EB omhJSC4zqjSBliyIl+sjDa/S3n9TeRiqhi1StPBiW2j18YWwcPdRSgIE7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXmj+UoKp4iy3sJKjcfbkVzKL8qMB8GA1UdIwQY MBaAFKcg4H0osmFYO2/7FkmM3n1H40JcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHlEZ2ZTaXlZVmc3Yl9zV1NZemVmVWZqUWx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8zNmFmNjktOWZiNC00NjIwLWFhYWIt ZGVjOTRkZTg1OGNmLzEvcHlEZ2ZTaXlZVmc3Yl9zV1NZemVmVWZqUWx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8zNmFmNjktOWZiNC00NjIwLWFhYWItZGVjOTRkZTg1OGNm LzEvcHlEZ2ZTaXlZVmc3Yl9zV1NZemVmVWZqUWx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD4HtN+pR vXbmsMaF2aRnKZQ/Myij7WwvbuZNh1qeZ+btLT8Fkz21Y7kvnuCiPZ8NMQGcztOY OVhCYeC4iHrUC0BKmfAw4qPOGflPD/0bOqNtefBej4rHr4y5GN1vdMJ/DCwgNpvn nB+07Jz61LV4nRQDvIbw16qmJfLWTY+Sqg/Bqdhxxtqdh5ktdTGHzFoaNA4eX4TY kjPGJnalFa7xxPeqKSso92P869plu9qjBQxjzhvtd/sKDJSJ9TblJ6NKnYF/BBEc 2ajzjxZhGQ/G9YuZZ6oH9vPvezrKilMYzniiWO2xvALDAlnCAU6IB21x9sPk/w8L SfEId5R4NLzVJQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:15:41 2025 by rpki-client