This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft File: PYs6RAq37XlB4sQUhHVG_WP_E-o.mft (raw, json) Hash identifier: DRkC/OjTssoPMnGMlTamhXT0r3YQ+NOGEItmDOc070M= Subject key identifier: B8:19:88:6B:ED:CA:84:7F:D3:23:DC:19:ED:3A:65:D9:94:94:CE:9A Authority key identifier: 3D:8B:3A:44:0A:B7:ED:79:41:E2:C4:14:84:75:46:FD:63:FF:13:EA Certificate issuer: /CN=3d8b3a440ab7ed7941e2c414847546fd63ff13ea Certificate serial: 019AF12CE7E44D1E7BD2A6AD308B118000CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft Manifest number: 0A89 Signing time: Sat 06 Dec 2025 01:00:43 +0000 Manifest this update: Sat 06 Dec 2025 01:00:43 +0000 Manifest next update: Sun 07 Dec 2025 01:00:43 +0000 Files and hashes: 1: PYs6RAq37XlB4sQUhHVG_WP_E-o.crl (hash: KVuMZ/tTTxNlCXVAlcVoiKkGgrgg0BOmvhLk4mhLoXg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.crl rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:e7:e4:4d:1e:7b:d2:a6:ad:30:8b:11:80:00:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8b3a440ab7ed7941e2c414847546fd63ff13ea Validity Not Before: Dec 6 01:00:43 2025 GMT Not After : Dec 7 01:00:43 2025 GMT Subject: CN=b819886bedca847fd323dc19ed3a65d99494ce9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:91:eb:1d:be:f3:7b:fe:0c:72:c5:c5:84:73: 97:7a:57:27:81:2a:ec:fb:c0:72:36:b2:03:56:01: 44:45:6d:fc:87:fc:0c:0b:ab:95:ae:9e:7e:32:fd: 1e:4c:a0:a1:8e:93:41:24:60:dd:58:1c:96:76:76: 7d:24:1d:eb:f9:ae:75:fc:0d:73:b4:dc:6a:84:46: f1:c0:9f:3e:5c:fb:73:a9:84:d3:67:5b:8a:60:a7: bf:61:50:31:f2:cc:6f:20:38:4d:ba:cb:21:b9:2c: 4a:d9:90:22:eb:de:6f:9d:14:63:37:f7:0b:1b:1b: 92:fd:4c:44:af:08:9e:48:e5:87:2a:36:19:df:fa: b9:bc:9f:d6:3c:e8:fb:a5:d8:37:48:76:2e:d7:b4: bd:70:ed:8e:e6:b5:62:cf:1b:1d:88:6b:72:61:14: 24:9e:15:7d:56:8e:95:2f:ca:f3:2e:8a:df:32:56: 66:9a:ab:2f:80:a7:54:32:98:e4:64:26:8e:f7:ce: 26:c2:d7:9b:52:b2:8c:e9:c1:6e:b5:4e:9e:8e:5a: 54:26:17:49:bc:41:3f:8b:3c:3e:06:05:10:dc:f1: 22:38:e7:1a:39:97:b0:6a:eb:90:bc:95:a2:1a:03: bf:d1:50:26:bd:f2:77:74:d1:e6:5f:6e:5a:6c:06: 8c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:19:88:6B:ED:CA:84:7F:D3:23:DC:19:ED:3A:65:D9:94:94:CE:9A X509v3 Authority Key Identifier: keyid:3D:8B:3A:44:0A:B7:ED:79:41:E2:C4:14:84:75:46:FD:63:FF:13:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYs6RAq37XlB4sQUhHVG_WP_E-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/acbd9c-b123-433c-9f83-78ac90e48892/1/PYs6RAq37XlB4sQUhHVG_WP_E-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:22:37:5f:df:19:10:08:de:7f:62:4e:99:ff:d5:01:24:84: 84:22:27:20:ed:56:38:b9:43:ab:bc:76:e2:ce:d2:c8:81:0d: cd:f3:77:b8:54:01:bb:f6:ce:c9:a4:8a:b2:04:e4:fd:80:a3: f4:26:82:26:06:5a:81:1a:cf:70:4c:35:09:dd:cd:b2:d3:35: f6:a4:5d:dd:07:03:70:f8:e8:8a:d2:4a:54:dc:12:ed:5e:58: 09:26:49:ee:44:47:ff:18:47:60:ce:68:62:08:c1:51:43:6e: 77:69:3c:82:3f:14:5b:41:2e:ab:ca:72:9b:72:ed:ee:6a:9c: f2:e5:f4:42:1f:79:9b:17:2c:6d:b3:86:34:39:f6:0e:8f:a0: 31:fc:1a:be:8e:c2:e9:95:c6:ae:ac:e5:2c:0a:5e:84:8e:e1: c2:51:78:93:7f:0a:80:dd:d1:fd:a2:ea:7d:47:af:5d:e7:01: 2f:2f:f6:81:47:8f:dc:77:24:19:48:d6:c0:78:e0:2b:83:d7: dc:4f:7e:23:64:3d:c0:5f:05:0a:b2:bc:6d:c3:14:17:ae:1a: f2:e3:79:63:1f:98:2c:4c:57:6d:f5:79:61:89:fc:d5:8e:f7: e7:3a:1a:9e:bb:4c:be:14:b1:f6:c7:69:80:49:37:af:c0:23: e4:82:ac:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLOfkTR570qatMIsRgADLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGIzYTQ0MGFiN2VkNzk0MWUyYzQxNDg0NzU0NmZkNjNm ZjEzZWEwHhcNMjUxMjA2MDEwMDQzWhcNMjUxMjA3MDEwMDQzWjAzMTEwLwYDVQQD EyhiODE5ODg2YmVkY2E4NDdmZDMyM2RjMTllZDNhNjVkOTk0OTRjZTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpHrHb7ze/4McsXFhHOXelcngSrs +8ByNrIDVgFERW38h/wMC6uVrp5+Mv0eTKChjpNBJGDdWByWdnZ9JB3r+a51/A1z tNxqhEbxwJ8+XPtzqYTTZ1uKYKe/YVAx8sxvIDhNusshuSxK2ZAi695vnRRjN/cL GxuS/UxErwieSOWHKjYZ3/q5vJ/WPOj7pdg3SHYu17S9cO2O5rVizxsdiGtyYRQk nhV9Vo6VL8rzLorfMlZmmqsvgKdUMpjkZCaO984mwtebUrKM6cFutU6ejlpUJhdJ vEE/izw+BgUQ3PEiOOcaOZewauuQvJWiGgO/0VAmvfJ3dNHmX25abAaM4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgZiGvtyoR/0yPcGe06ZdmUlM6aMB8GA1UdIwQY MBaAFD2LOkQKt+15QeLEFIR1Rv1j/xPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFlzNlJBcTM3WGxCNHNRVWhIVkdfV1BfRS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9hY2JkOWMtYjEyMy00MzNjLTlmODMt NzhhYzkwZTQ4ODkyLzEvUFlzNlJBcTM3WGxCNHNRVWhIVkdfV1BfRS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9hY2JkOWMtYjEyMy00MzNjLTlmODMtNzhhYzkwZTQ4ODky LzEvUFlzNlJBcTM3WGxCNHNRVWhIVkdfV1BfRS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGiI3X98Z EAjef2JOmf/VASSEhCInIO1WOLlDq7x24s7SyIENzfN3uFQBu/bOyaSKsgTk/YCj 9CaCJgZagRrPcEw1Cd3NstM19qRd3QcDcPjoitJKVNwS7V5YCSZJ7kRH/xhHYM5o YgjBUUNud2k8gj8UW0Euq8pym3Lt7mqc8uX0Qh95mxcsbbOGNDn2Do+gMfwavo7C 6ZXGrqzlLApehI7hwlF4k38KgN3R/aLqfUevXecBLy/2gUeP3HckGUjWwHjgK4PX 3E9+I2Q9wF8FCrK8bcMUF64a8uN5Yx+YLExXbfV5YYn81Y735zoanrtMvhSx9sdp gEk3r8Aj5IKs9A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:26 2025 by rpki-client