This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft File: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json) Hash identifier: UMpKAELxyg5IdyZZqOLiV2gQFa5rpwYAKxrB885Ub+U= Subject key identifier: 23:5C:C8:94:C0:3E:37:ED:BC:E4:2C:9C:39:9A:BC:9F:0C:DD:62:6E Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 019AF0882F8B83F24D265C2B62E75E71C47B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft Manifest number: 176E Signing time: Fri 05 Dec 2025 22:00:48 +0000 Manifest this update: Fri 05 Dec 2025 22:00:48 +0000 Manifest next update: Sat 06 Dec 2025 22:00:48 +0000 Files and hashes: 1: 0bSG1GbQSr3JP2M9BW2A6zWEmWQ.roa (hash: m8/KEzPrRo4PqG3DFfILeyvmSqlK6Zrphut5P8ccG8c=) 2: 9lwL98-HDVBrZzYLRCpSdOAFXpo.roa (hash: Za/9eX9VNb3FiSxJk6MAE/CpFGWxRO5mjghE1elRivc=) 3: B0iUIhkwv2ZZdyXRyu9yUh7Z61o.roa (hash: F6O6OkDRyyyGqFimHsLztSYsh0AUNFPNkRW3jSPwvEw=) 4: I1EoUAseUd3MHO-sI_txqICBiwc.roa (hash: khM+HdjIw9WozXCqEk/wtCOtMrpNfxWXErjSXn8BT5M=) 5: KQ7nGqqdl8DwDw35UdDbOJPZhfY.roa (hash: 8pIf1gsysAeCO62ayw5k2bU+b1g8t0mrR6+zNCtTibQ=) 6: LS_oKjOyENRZwn9y786G7x_fDEc.roa (hash: qwrjawF9Z67WE+ivjm8mPIl3xqaLReHxca9+SNnwKPE=) 7: Pvub5ztTS47f0XG6tBZE9ngX8Rw.roa (hash: euQ5dqT6xwCfoTsPu9P7kfQ9UGdbPzkkEJWSyFwCBTw=) 8: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: 8n/Fw7K+pwOAjbzrp+Nv8CqJUyd0GvRZImnYBPhvthk=) 9: lqxGizsVmZbvi7xpd3yzs2I4ILw.roa (hash: aTi4SECMvkjegR9/FyzL9HTmeGkM0AsiVgyipWCsYrY=) 10: sFnlwbiQ75y8_114DKwn3kP_iWc.roa (hash: dkHr9wKemXLLSQfaJK2+kCvWwELtA6u+nMBynz2rXgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:2f:8b:83:f2:4d:26:5c:2b:62:e7:5e:71:c4:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: Dec 5 22:00:48 2025 GMT Not After : Dec 6 22:00:48 2025 GMT Subject: CN=235cc894c03e37edbce42c9c399abc9f0cdd626e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:72:0e:6c:d3:9f:5b:52:23:4e:61:46:74:81: 85:d2:ac:91:43:72:12:c4:be:87:a6:24:86:48:2b: 89:42:c2:23:f3:01:3a:0a:b7:81:b3:ab:f7:7e:e6: 7f:7c:fe:cb:a0:30:37:c9:bb:78:09:b3:c9:02:fe: 17:c8:cc:15:a4:4a:3c:77:c0:a8:81:12:c9:26:05: ff:b1:6d:63:8f:e6:02:bc:ef:05:b1:31:00:70:4c: cd:fc:68:6f:b5:d3:9b:96:1e:62:19:a5:ff:d1:75: f0:ba:ea:d0:09:aa:b5:04:43:af:23:d9:de:ce:55: de:20:90:a5:a7:a7:13:3a:28:5e:cd:4f:c1:ee:3a: c6:23:01:a8:2a:74:21:86:41:e0:20:22:0c:83:2a: 26:46:37:89:4e:b3:3f:04:3f:e5:68:66:a1:32:64: b8:bc:b0:08:73:c6:01:a1:98:a3:fa:fc:d0:c7:aa: 14:62:a4:2f:31:c9:a1:ef:61:3f:85:5f:19:9c:9c: 32:ac:7f:7b:dd:ce:28:69:5c:be:e8:8c:e9:88:61: 22:df:a0:67:36:e1:47:b7:4a:c9:8e:35:e7:9d:b7: 51:56:c1:3f:db:3b:a1:99:37:72:61:45:f8:b6:dd: a6:50:64:5b:2e:7e:15:18:66:d1:d8:fb:cd:3e:56: 08:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5C:C8:94:C0:3E:37:ED:BC:E4:2C:9C:39:9A:BC:9F:0C:DD:62:6E X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e5:29:47:60:eb:f6:4a:c8:2d:68:04:f6:47:65:8c:00:cb: 2e:7f:db:c1:0c:8f:f9:0a:47:c4:6e:93:71:4e:e1:6f:4f:ee: a0:73:9a:05:5d:37:be:be:1d:59:5a:7f:be:69:2e:15:8a:ac: 74:22:00:86:82:91:15:51:95:cd:44:61:f4:02:bf:dd:34:e6: 89:45:9a:9b:5d:5a:58:ae:85:a2:fc:e2:53:2b:2c:d4:ec:1c: 5c:b1:c8:02:f7:8c:90:e2:52:18:15:ce:76:53:74:3b:4c:ed: 02:5c:1f:b3:12:56:1a:b1:b1:1d:d7:87:11:5c:ff:33:e5:35: 2b:76:c3:92:3c:a8:22:46:af:ce:8a:f9:1c:1a:58:61:39:cc: d1:fb:ae:03:85:dd:9f:e5:0f:52:83:10:35:fa:1c:8c:d3:fc: bd:a2:5d:d3:15:4c:4b:55:17:c0:69:78:92:27:d3:7d:f9:cf: 20:8b:52:26:95:0d:5c:1e:42:1d:45:3a:dc:f7:b3:8f:4f:4a: c8:b7:af:d2:3a:6e:a4:97:c6:97:79:54:31:c4:5a:18:e2:eb: c5:88:97:53:be:1d:06:2c:06:a4:0b:c1:d6:43:2f:6a:35:1a: b0:91:89:35:be:76:85:f4:28:36:16:d4:1f:bc:f8:97:db:2f: f6:c8:68:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiC+Lg/JNJlwrYudeccR7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjUxMjA1MjIwMDQ4WhcNMjUxMjA2MjIwMDQ4WjAzMTEwLwYDVQQD EygyMzVjYzg5NGMwM2UzN2VkYmNlNDJjOWMzOTlhYmM5ZjBjZGQ2MjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnIObNOfW1IjTmFGdIGF0qyRQ3IS xL6HpiSGSCuJQsIj8wE6CreBs6v3fuZ/fP7LoDA3ybt4CbPJAv4XyMwVpEo8d8Co gRLJJgX/sW1jj+YCvO8FsTEAcEzN/GhvtdOblh5iGaX/0XXwuurQCaq1BEOvI9ne zlXeIJClp6cTOihezU/B7jrGIwGoKnQhhkHgICIMgyomRjeJTrM/BD/laGahMmS4 vLAIc8YBoZij+vzQx6oUYqQvMcmh72E/hV8ZnJwyrH973c4oaVy+6IzpiGEi36Bn NuFHt0rJjjXnnbdRVsE/2zuhmTdyYUX4tt2mUGRbLn4VGGbR2PvNPlYI1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNcyJTAPjftvOQsnDmavJ8M3WJuMB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXeUpR2Dr 9krILWgE9kdljADLLn/bwQyP+QpHxG6TcU7hb0/uoHOaBV03vr4dWVp/vmkuFYqs dCIAhoKRFVGVzURh9AK/3TTmiUWam11aWK6FovziUyss1OwcXLHIAveMkOJSGBXO dlN0O0ztAlwfsxJWGrGxHdeHEVz/M+U1K3bDkjyoIkavzor5HBpYYTnM0fuuA4Xd n+UPUoMQNfocjNP8vaJd0xVMS1UXwGl4kifTffnPIItSJpUNXB5CHUU63Pezj09K yLev0jpupJfGl3lUMcRaGOLrxYiXU74dBiwGpAvB1kMvajUasJGJNb52hfQoNhbU H7z4l9sv9shoVw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:41 2025 by rpki-client