This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft File: PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft (raw, json) Hash identifier: qMAMDWWeDjVd4c9apwYMn4KsLPijMgUKkhSH8t1Rlc0= Subject key identifier: 00:A7:80:10:87:73:8E:5F:A6:83:A8:BA:B7:B7:70:E0:66:6C:FD:EC Authority key identifier: 3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE Certificate issuer: /CN=3d8500bcde496899c5d1fa924de4e7827d9916ce Certificate serial: 019AF1D262F7E511A4342F354E1AB58AB807 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft Manifest number: 0EFB Signing time: Sat 06 Dec 2025 04:01:28 +0000 Manifest this update: Sat 06 Dec 2025 04:01:28 +0000 Manifest next update: Sun 07 Dec 2025 04:01:28 +0000 Files and hashes: 1: PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl (hash: 6odCxGg3J6pbR5akrfMrfLtFNe9TNZOPcKwzTDsUP2g=) 2: soI28UokBEmUA5YZ7-2YS-kO60w.roa (hash: x5boSWZM+Eb4DeBF9MHFVGtkPRePQy7kYVWQIl5DODM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:62:f7:e5:11:a4:34:2f:35:4e:1a:b5:8a:b8:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8500bcde496899c5d1fa924de4e7827d9916ce Validity Not Before: Dec 6 04:01:28 2025 GMT Not After : Dec 7 04:01:28 2025 GMT Subject: CN=00a7801087738e5fa683a8bab7b770e0666cfdec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fc:b5:54:8e:0d:3d:50:0a:99:1b:6b:3e:b6: 8b:18:40:a1:72:ef:3f:15:2c:e2:7f:b0:37:a0:d6: b3:c6:0e:5f:01:a4:6d:25:82:40:fa:0f:06:3a:ea: 98:f7:e4:86:b8:6c:bf:ca:3d:66:95:84:e3:8e:6a: 12:53:61:6a:95:d8:46:83:b1:af:7f:dd:01:3b:b7: 25:cf:35:c5:09:9b:6a:41:95:54:a4:78:f1:fa:16: 6c:06:32:41:a4:b2:04:ed:9e:27:ab:4e:63:f3:0f: e7:05:ad:18:34:89:92:e1:27:27:c2:0e:69:f0:2c: 3c:a3:1f:93:07:db:4d:ec:c2:89:69:a3:87:74:09: f3:92:3b:7c:8f:44:d4:ab:4c:ea:5a:b2:a7:fb:45: b1:85:34:3c:75:6e:4e:b9:ff:f9:5c:1e:71:1e:84: e7:02:99:76:e6:35:c5:6d:3b:08:95:17:d2:5a:ce: 1f:84:e7:d4:91:be:76:be:4f:9a:0f:50:3f:e4:1f: 43:d4:a7:c0:14:f1:b0:54:a5:59:6c:d7:b2:c4:2d: 59:51:0c:2e:42:e5:01:8d:9b:01:b3:53:d0:89:5c: 1f:24:05:6b:95:0c:ce:15:20:45:a1:ac:64:51:1c: 54:7d:d2:c2:23:b2:1e:b7:37:89:8a:07:47:b4:09: 5c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A7:80:10:87:73:8E:5F:A6:83:A8:BA:B7:B7:70:E0:66:6C:FD:EC X509v3 Authority Key Identifier: keyid:3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:fa:ea:01:eb:71:e9:2f:4d:46:65:ca:76:b2:9c:8e:8d:55: 64:2d:4b:44:d4:e0:9d:83:dc:2d:f3:5c:98:e3:66:3f:95:ae: cb:c2:f5:75:aa:5a:c1:d6:c9:c7:16:90:cd:cd:53:f5:79:f8: 5c:e7:e1:46:98:79:9d:b1:53:92:76:19:9d:21:1d:3e:68:1f: f1:08:e5:5e:7f:4e:98:bd:f2:43:c6:4e:91:26:9c:86:2e:4a: 78:ac:37:92:3a:8d:d3:da:d1:c5:d7:b5:70:58:b7:98:9f:aa: 3f:41:d7:cd:09:83:5e:76:e8:0b:71:a8:17:b1:e1:87:dc:92: 94:a1:ee:65:b7:88:cc:99:ba:65:63:9b:34:4f:40:8c:52:08: 4a:94:f1:1f:2b:97:af:12:5a:28:58:35:b0:eb:2b:2f:5d:80: bb:d9:57:5f:a3:0c:3f:21:59:44:d4:43:4d:7b:a1:af:75:0c: 12:91:d2:07:b9:33:49:04:1a:6e:94:3e:72:03:df:7b:78:c3: 37:48:67:7c:f5:70:5b:7b:86:1e:7f:f1:3e:1f:1b:85:1d:3d: 70:2a:89:26:e7:21:7f:49:a5:12:64:dc:5e:94:87:21:c9:53: 96:79:36:6f:43:17:b0:38:5f:cb:0f:3d:bc:8f:dc:d7:54:bc: 27:4f:34:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0mL35RGkNC81Thq1irgHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkODUwMGJjZGU0OTY4OTljNWQxZmE5MjRkZTRlNzgyN2Q5 OTE2Y2UwHhcNMjUxMjA2MDQwMTI4WhcNMjUxMjA3MDQwMTI4WjAzMTEwLwYDVQQD EygwMGE3ODAxMDg3NzM4ZTVmYTY4M2E4YmFiN2I3NzBlMDY2NmNmZGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvy1VI4NPVAKmRtrPraLGEChcu8/ FSzif7A3oNazxg5fAaRtJYJA+g8GOuqY9+SGuGy/yj1mlYTjjmoSU2FqldhGg7Gv f90BO7clzzXFCZtqQZVUpHjx+hZsBjJBpLIE7Z4nq05j8w/nBa0YNImS4Scnwg5p 8Cw8ox+TB9tN7MKJaaOHdAnzkjt8j0TUq0zqWrKn+0WxhTQ8dW5Ouf/5XB5xHoTn Apl25jXFbTsIlRfSWs4fhOfUkb52vk+aD1A/5B9D1KfAFPGwVKVZbNeyxC1ZUQwu QuUBjZsBs1PQiVwfJAVrlQzOFSBFoaxkURxUfdLCI7IetzeJigdHtAlcWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACngBCHc45fpoOoure3cOBmbP3sMB8GA1UdIwQY MBaAFD2FALzeSWiZxdH6kk3k54J9mRbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFlVQXZONUphSm5GMGZxU1RlVG5nbjJaRnM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80MTliNWQtMTRhYS00ZTM2LTlkZjct NzUyNmM5ZjA1Y2Q4LzEvUFlVQXZONUphSm5GMGZxU1RlVG5nbjJaRnM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi80MTliNWQtMTRhYS00ZTM2LTlkZjctNzUyNmM5ZjA1Y2Q4 LzEvUFlVQXZONUphSm5GMGZxU1RlVG5nbjJaRnM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARfrqAetx 6S9NRmXKdrKcjo1VZC1LRNTgnYPcLfNcmONmP5Wuy8L1dapawdbJxxaQzc1T9Xn4 XOfhRph5nbFTknYZnSEdPmgf8QjlXn9OmL3yQ8ZOkSachi5KeKw3kjqN09rRxde1 cFi3mJ+qP0HXzQmDXnboC3GoF7Hhh9ySlKHuZbeIzJm6ZWObNE9AjFIISpTxHyuX rxJaKFg1sOsrL12Au9lXX6MMPyFZRNRDTXuhr3UMEpHSB7kzSQQabpQ+cgPfe3jD N0hnfPVwW3uGHn/xPh8bhR09cCqJJuchf0mlEmTcXpSHIclTlnk2b0MXsDhfyw89 vI/c11S8J080kw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:02 2025 by rpki-client