This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft File: pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft (raw, json) Hash identifier: CDD8qPFjhGh8qS9uKOAeIXAYPqdx1q6jpzV0H4P0Wl0= Subject key identifier: B0:8F:C7:21:DB:08:90:C0:46:CB:8B:3A:8B:80:F1:77:40:46:8A:7E Authority key identifier: A7:24:38:34:90:A1:05:BD:C0:D2:15:97:BF:B1:47:8E:F0:46:30:B1 Certificate issuer: /CN=a724383490a105bdc0d21597bfb1478ef04630b1 Certificate serial: 019AF24020E75820FCB661CE1C2304331B63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyQ4NJChBb3A0hWXv7FHjvBGMLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft Manifest number: 0732 Signing time: Sat 06 Dec 2025 06:01:20 +0000 Manifest this update: Sat 06 Dec 2025 06:01:20 +0000 Manifest next update: Sun 07 Dec 2025 06:01:20 +0000 Files and hashes: 1: pyQ4NJChBb3A0hWXv7FHjvBGMLE.crl (hash: /7xQH6HYEwZ3k+JBcOQ4VbCxsDT2CXANogh/ZklyG98=) 2: zq6R1CnWZYXNrJ9Nu3qaClXC_EI.roa (hash: ak8xaUb5ScJnJTZZZkylfOFl3x6iHQeLyCotCjAzekI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft rsync://rpki.ripe.net/repository/DEFAULT/pyQ4NJChBb3A0hWXv7FHjvBGMLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:20:e7:58:20:fc:b6:61:ce:1c:23:04:33:1b:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a724383490a105bdc0d21597bfb1478ef04630b1 Validity Not Before: Dec 6 06:01:20 2025 GMT Not After : Dec 7 06:01:20 2025 GMT Subject: CN=b08fc721db0890c046cb8b3a8b80f17740468a7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:95:cc:20:b9:0a:63:0e:b7:06:e7:cb:ff:b9: da:22:ff:86:b5:2c:aa:64:cf:d6:39:b7:f6:a1:a5: 6e:96:bb:42:7b:6c:f9:44:41:f8:3e:4a:a1:19:c6: 04:dc:be:73:d7:c7:05:eb:82:ad:48:5d:eb:c1:12: b5:1b:19:7e:48:5e:64:dc:1d:56:f4:78:f4:bf:8c: ce:3a:d9:4b:25:4e:62:d7:aa:45:86:67:17:dd:72: 8d:e2:9f:54:d5:2d:67:71:b3:6e:aa:44:c9:22:fa: bb:7a:2b:18:81:69:9a:54:8f:7a:04:e2:02:84:a5: 76:8f:60:9d:ed:0a:6e:94:b5:91:87:18:6a:92:6c: 1f:7a:24:63:dd:cd:2a:9d:92:e3:81:a9:68:4e:c0: dd:bd:1f:02:30:15:3c:9d:cb:94:09:0f:3b:07:7c: c1:ed:86:81:0b:d6:da:f4:21:05:15:4a:ac:70:23: 21:6e:2c:ec:c0:57:71:1a:c5:7f:7a:c5:cf:7d:80: 49:2f:c3:70:2f:3a:d1:bc:15:f5:76:e4:ea:eb:09: 7e:cc:95:68:bc:42:c5:68:1d:28:30:75:bd:6c:e1: 9e:82:be:1c:da:40:86:af:e7:84:ad:18:3c:d0:51: f6:8d:3f:f2:25:01:a2:c5:f9:db:0a:5e:4b:ca:58: 76:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:8F:C7:21:DB:08:90:C0:46:CB:8B:3A:8B:80:F1:77:40:46:8A:7E X509v3 Authority Key Identifier: keyid:A7:24:38:34:90:A1:05:BD:C0:D2:15:97:BF:B1:47:8E:F0:46:30:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyQ4NJChBb3A0hWXv7FHjvBGMLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/305360-2203-4a21-a2fd-91e8599ddbf7/1/pyQ4NJChBb3A0hWXv7FHjvBGMLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:c9:20:b8:a8:4b:9b:ff:1b:bf:73:62:88:9d:b6:4b:1b:3f: a6:1c:78:a4:24:32:0f:4e:d7:82:6d:b6:6a:b8:c6:c2:79:98: e7:db:31:7e:15:9c:d6:99:a3:41:bd:f0:d3:a9:96:2b:08:47: e9:1b:c9:7e:be:55:ca:c7:33:aa:29:36:d8:b5:65:de:c5:12: 62:dc:2a:e3:6e:ed:c7:71:81:58:e5:f7:61:c4:45:43:f3:e1: c2:01:a9:11:77:66:67:07:04:06:c1:98:84:ad:0e:d1:b4:5f: b1:a5:82:48:9f:2b:d9:d4:40:04:61:07:e9:78:19:18:1e:9a: ed:63:f1:12:fa:29:91:fe:dc:94:01:0b:fe:67:34:1c:7e:07: be:75:8e:2f:c4:6b:78:cb:f2:48:7d:8e:8a:5d:a5:6d:4f:70: 95:58:71:47:b6:23:7a:0f:43:79:54:b3:ff:9a:3b:a3:b5:b4: 60:1c:65:ef:d4:e7:3d:62:5b:f1:9b:a2:70:f4:1c:91:22:53: 72:fb:63:67:7c:10:3f:ee:d7:99:b4:e0:47:64:b3:c0:d5:56: 8f:eb:12:ac:f7:02:bb:34:9b:c9:87:e8:24:cc:8c:bb:67:80: 2f:17:e7:c0:30:a8:b0:84:f0:36:a4:24:68:7a:66:48:d7:d0: a3:db:65:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCDnWCD8tmHOHCMEMxtjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MjQzODM0OTBhMTA1YmRjMGQyMTU5N2JmYjE0NzhlZjA0 NjMwYjEwHhcNMjUxMjA2MDYwMTIwWhcNMjUxMjA3MDYwMTIwWjAzMTEwLwYDVQQD EyhiMDhmYzcyMWRiMDg5MGMwNDZjYjhiM2E4YjgwZjE3NzQwNDY4YTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZXMILkKYw63BufL/7naIv+GtSyq ZM/WObf2oaVulrtCe2z5REH4PkqhGcYE3L5z18cF64KtSF3rwRK1Gxl+SF5k3B1W 9Hj0v4zOOtlLJU5i16pFhmcX3XKN4p9U1S1ncbNuqkTJIvq7eisYgWmaVI96BOIC hKV2j2Cd7QpulLWRhxhqkmwfeiRj3c0qnZLjgaloTsDdvR8CMBU8ncuUCQ87B3zB 7YaBC9ba9CEFFUqscCMhbizswFdxGsV/esXPfYBJL8NwLzrRvBX1duTq6wl+zJVo vELFaB0oMHW9bOGegr4c2kCGr+eErRg80FH2jT/yJQGixfnbCl5Lylh2uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCPxyHbCJDARsuLOouA8XdARop+MB8GA1UdIwQY MBaAFKckODSQoQW9wNIVl7+xR47wRjCxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHlRNE5KQ2hCYjNBMGhXWHY3RkhqdkJHTUxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zMDUzNjAtMjIwMy00YTIxLWEyZmQt OTFlODU5OWRkYmY3LzEvcHlRNE5KQ2hCYjNBMGhXWHY3RkhqdkJHTUxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8zMDUzNjAtMjIwMy00YTIxLWEyZmQtOTFlODU5OWRkYmY3 LzEvcHlRNE5KQ2hCYjNBMGhXWHY3RkhqdkJHTUxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWskguKhL m/8bv3NiiJ22Sxs/phx4pCQyD07Xgm22arjGwnmY59sxfhWc1pmjQb3w06mWKwhH 6RvJfr5Vysczqik22LVl3sUSYtwq427tx3GBWOX3YcRFQ/PhwgGpEXdmZwcEBsGY hK0O0bRfsaWCSJ8r2dRABGEH6XgZGB6a7WPxEvopkf7clAEL/mc0HH4HvnWOL8Rr eMvySH2Oil2lbU9wlVhxR7Yjeg9DeVSz/5o7o7W0YBxl79TnPWJb8ZuicPQckSJT cvtjZ3wQP+7XmbTgR2SzwNVWj+sSrPcCuzSbyYfoJMyMu2eALxfnwDCosITwNqQk aHpmSNfQo9tlXw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:35:39 2025 by rpki-client