This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft File: PYAS-hSs56DDvS6C4KKdmkS_4pA.mft (raw, json) Hash identifier: RuPRams+Uyk6MJrBVPVimS1aNhpEmdq3EEh7zdpHzgA= Subject key identifier: 1A:FE:99:BE:F9:8C:29:75:50:D6:DB:A3:04:79:1C:02:9B:65:A8:3A Authority key identifier: 3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90 Certificate issuer: /CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290 Certificate serial: 019B2D0C00FB00645C86C611B7F6BBDD8BEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft Manifest number: 1786 Signing time: Wed 17 Dec 2025 16:01:59 +0000 Manifest this update: Wed 17 Dec 2025 16:01:59 +0000 Manifest next update: Thu 18 Dec 2025 16:01:59 +0000 Files and hashes: 1: PYAS-hSs56DDvS6C4KKdmkS_4pA.crl (hash: L7pquinqB4zyBE3ziJaKZPGQK9zyOO71ouVENiroSYA=) 2: V63W0aVBLx51NnINgD_iQeLMOyw.roa (hash: FLA4TSQ4UunV1xOhrn0rSmh7Oq3MF9Le3VUmM3hfUww=) 3: yE0AwLBzhrC3USxmIPbSNA6JiN0.roa (hash: iP655Z0vSJV+iwH+Vd2nT6rPYgBPSGVwVe0RcmkGPWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:00:fb:00:64:5c:86:c6:11:b7:f6:bb:dd:8b:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290 Validity Not Before: Dec 17 16:01:59 2025 GMT Not After : Dec 18 16:01:59 2025 GMT Subject: CN=1afe99bef98c297550d6dba304791c029b65a83a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bb:64:ba:1c:17:39:14:05:20:9d:4f:39:5b: 33:0c:bc:fa:73:bd:1c:0a:63:ec:25:e1:ae:92:68: cb:d5:51:d5:10:58:e2:8d:1c:95:9c:6e:6a:0a:4f: 50:4c:22:5d:a7:38:6c:86:e2:d1:9b:d7:35:5c:01: 93:ea:54:ab:5c:50:92:ff:e2:0a:c2:fa:57:3a:58: 83:e8:77:0c:5a:c7:d6:3d:91:c7:67:1d:0d:39:57: b0:c9:91:bc:30:d9:f7:cd:df:79:cd:92:86:79:4f: 85:e5:d0:c3:e0:3d:75:33:82:6d:6b:0b:e3:18:77: d0:39:38:d9:ea:87:8a:81:42:6f:3c:2d:10:9b:4d: 61:65:a6:07:d3:7e:2e:54:be:cd:28:b2:41:ac:0a: fd:68:84:2f:4b:41:e7:ed:e0:f3:50:ac:37:90:1a: 48:ad:d3:36:00:0c:7a:0a:b1:dc:f6:16:f5:62:59: 15:d6:6b:23:43:5e:74:a7:02:69:1c:f8:3f:6e:d5: e0:bc:39:fd:c6:e1:7a:b2:df:3f:26:17:90:01:14: 10:1d:72:64:99:78:a1:bb:2b:0d:96:37:23:26:bb: 0a:15:19:bd:4f:02:6e:5b:69:fc:38:c8:62:45:40: a1:cc:ee:5f:e6:cf:1d:a1:bc:87:a4:ba:dc:b0:3c: e4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:FE:99:BE:F9:8C:29:75:50:D6:DB:A3:04:79:1C:02:9B:65:A8:3A X509v3 Authority Key Identifier: keyid:3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:7e:5e:e5:cc:a5:e8:e4:e4:a4:07:8a:5c:d6:83:dc:f3:bb: 4a:22:d0:c8:08:07:5d:1f:63:41:64:d8:20:90:14:00:b2:ad: e5:c9:9a:77:71:55:46:c3:eb:d2:f0:16:17:18:a1:bd:0d:79: 50:57:eb:b4:5f:c6:eb:be:bf:fe:ea:e3:11:ac:a6:ff:9d:fb: be:f4:a1:aa:58:0d:90:71:4f:e1:ed:95:94:1a:1e:d9:55:a9: fc:7c:65:10:ed:7a:12:d7:9d:c4:cf:22:fe:cc:65:da:22:9b: ed:23:75:70:fc:08:0f:be:e9:cd:00:9e:66:75:4a:fa:50:36: 98:1e:35:ed:2d:42:41:bf:1e:75:68:ad:1c:50:31:a9:2a:06: 97:2f:c4:ad:c9:25:b8:8d:69:d8:38:67:a1:5c:aa:7a:63:ce: ce:be:f3:d8:33:58:19:11:56:05:82:0a:cc:b8:55:af:ee:dd: 64:5f:0d:89:80:9d:bc:f0:6f:f9:24:21:d8:d8:43:ca:76:65: 28:be:27:c6:c0:0f:f6:fa:7d:bd:30:24:8f:73:3c:fc:be:de: 98:08:33:99:9d:9e:4a:32:d0:5b:57:52:a0:76:1d:8a:86:17: 5e:30:93:55:ff:32:94:83:e9:bd:9d:e1:0c:15:34:ea:c9:ed: 4e:05:f3:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDAD7AGRchsYRt/a73YvsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkODAxMmZhMTRhY2U3YTBjM2JkMmU4MmUwYTI5ZDlhNDRi ZmUyOTAwHhcNMjUxMjE3MTYwMTU5WhcNMjUxMjE4MTYwMTU5WjAzMTEwLwYDVQQD EygxYWZlOTliZWY5OGMyOTc1NTBkNmRiYTMwNDc5MWMwMjliNjVhODNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrtkuhwXORQFIJ1POVszDLz6c70c CmPsJeGukmjL1VHVEFjijRyVnG5qCk9QTCJdpzhshuLRm9c1XAGT6lSrXFCS/+IK wvpXOliD6HcMWsfWPZHHZx0NOVewyZG8MNn3zd95zZKGeU+F5dDD4D11M4Jtawvj GHfQOTjZ6oeKgUJvPC0Qm01hZaYH034uVL7NKLJBrAr9aIQvS0Hn7eDzUKw3kBpI rdM2AAx6CrHc9hb1YlkV1msjQ150pwJpHPg/btXgvDn9xuF6st8/JheQARQQHXJk mXihuysNljcjJrsKFRm9TwJuW2n8OMhiRUChzO5f5s8dobyHpLrcsDzkgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBr+mb75jCl1UNbbowR5HAKbZag6MB8GA1UdIwQY MBaAFD2AEvoUrOegw70uguCinZpEv+KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFlBUy1oU3M1NkREdlM2QzRLS2Rta1NfNHBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9lZjVlZDEtYmRlZS00NjM5LTkyNDgt NzdmODRjNTYyYTVmLzEvUFlBUy1oU3M1NkREdlM2QzRLS2Rta1NfNHBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9lZjVlZDEtYmRlZS00NjM5LTkyNDgtNzdmODRjNTYyYTVm LzEvUFlBUy1oU3M1NkREdlM2QzRLS2Rta1NfNHBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHn5e5cyl 6OTkpAeKXNaD3PO7SiLQyAgHXR9jQWTYIJAUALKt5cmad3FVRsPr0vAWFxihvQ15 UFfrtF/G676//urjEaym/537vvShqlgNkHFP4e2VlBoe2VWp/HxlEO16EtedxM8i /sxl2iKb7SN1cPwID77pzQCeZnVK+lA2mB417S1CQb8edWitHFAxqSoGly/Erckl uI1p2DhnoVyqemPOzr7z2DNYGRFWBYIKzLhVr+7dZF8NiYCdvPBv+SQh2NhDynZl KL4nxsAP9vp9vTAkj3M8/L7emAgzmZ2eSjLQW1dSoHYdioYXXjCTVf8ylIPpvZ3h DBU06sntTgXzmA== -----END CERTIFICATE-----Generated at Wed Dec 17 21:41:08 2025 by rpki-client