This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft File: ryNYW_zdBhypRuLZ6ouX5FucMdY.mft (raw, json) Hash identifier: Nc5idgBqsGa2Za9QfqdJZeef/JvLNKg3O7mGU4zthrw= Subject key identifier: BF:BB:92:A4:2B:E9:A2:47:28:D0:D1:50:12:2C:CC:27:94:78:19:64 Authority key identifier: AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6 Certificate issuer: /CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6 Certificate serial: 019AF1D27F233BBC9357E8F9A35469D5A64F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft Manifest number: 16C7 Signing time: Sat 06 Dec 2025 04:01:35 +0000 Manifest this update: Sat 06 Dec 2025 04:01:35 +0000 Manifest next update: Sun 07 Dec 2025 04:01:35 +0000 Files and hashes: 1: SeufauaKg6Zpqe8UY9h9PfD262s.roa (hash: f9EK4NXbDLFnpfyftEzrpn9paJMCGETNbGO1nrHQTYE=) 2: ryNYW_zdBhypRuLZ6ouX5FucMdY.crl (hash: FvNWj2eN66+qbkS1OsZjTokmtCU6DitU1EdzpJ3MjfU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:7f:23:3b:bc:93:57:e8:f9:a3:54:69:d5:a6:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af23585bfcdd061ca946e2d9ea8b97e45b9c31d6 Validity Not Before: Dec 6 04:01:35 2025 GMT Not After : Dec 7 04:01:35 2025 GMT Subject: CN=bfbb92a42be9a24728d0d150122ccc2794781964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b9:8a:4e:2c:b9:61:eb:38:7a:b6:d8:8a:03: ec:99:cb:63:58:81:e2:21:45:01:4e:ae:77:58:70: bc:8f:dd:81:63:31:8b:3f:63:11:09:3d:0e:a0:01: 57:ae:f4:e5:d7:4b:6b:b0:06:8a:16:de:d5:0b:43: fe:90:10:2f:a7:ad:b7:4c:dc:6a:a8:d2:59:ab:33: dc:2d:b7:99:48:22:ca:4f:e8:d4:ea:5e:a8:2d:4c: 4a:7d:0f:7f:ea:30:01:d5:87:af:f2:1c:f3:16:4d: 09:31:b8:42:9c:2f:56:c4:87:c9:05:21:bf:c9:6a: 49:45:28:c5:14:bb:c2:2b:ad:77:1d:31:59:53:c7: bc:4b:c7:ea:a8:97:af:cf:78:c9:6e:dd:df:2a:5c: 20:5d:b7:29:c2:3f:5c:c7:db:cf:db:23:7b:80:96: 43:ae:22:79:ee:59:9b:06:5a:7d:e6:62:2d:07:06: 0d:6a:83:d9:e1:4b:d8:b3:e1:34:e9:2a:18:e7:de: 33:f5:d6:0d:01:fc:71:e6:21:1d:b4:30:3a:61:d5: 69:28:50:00:84:17:2e:3b:c9:b1:c1:b4:cd:1b:4f: 6d:45:93:d2:0f:64:0e:db:77:ee:8f:ee:f2:af:55: 24:c1:a3:91:53:eb:cf:d7:e7:ba:98:42:82:ec:2d: b4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BB:92:A4:2B:E9:A2:47:28:D0:D1:50:12:2C:CC:27:94:78:19:64 X509v3 Authority Key Identifier: keyid:AF:23:58:5B:FC:DD:06:1C:A9:46:E2:D9:EA:8B:97:E4:5B:9C:31:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryNYW_zdBhypRuLZ6ouX5FucMdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f36d5-3080-4a0e-9d63-79344da3a2e6/1/ryNYW_zdBhypRuLZ6ouX5FucMdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:e6:47:37:96:2f:c4:c7:80:66:f4:97:19:5a:b3:53:c4:da: 05:ce:22:51:c0:b4:f2:1a:d1:96:55:5d:d4:8a:82:ee:9d:8f: eb:c1:61:c6:16:4c:29:fb:0f:3a:3b:45:c6:91:c8:c1:4f:97: 56:13:a0:ee:a1:ec:d7:cc:dd:12:e4:68:28:ab:cf:df:da:7e: b0:71:91:fc:d4:b1:7f:58:db:df:7d:b5:c0:31:21:e9:6e:07: f7:51:18:4a:df:db:45:49:e7:d6:a4:7a:52:b9:30:42:ad:f3: 5c:6b:d7:5b:11:11:93:1b:59:2e:31:9f:d0:46:0d:f4:d9:68: 82:c2:2c:d2:6f:6e:f0:98:17:62:8c:ee:d9:8a:b5:ef:11:07: be:1f:a7:db:30:d6:03:94:5a:1c:9d:c9:0b:34:2a:e2:61:93: 82:10:7c:3c:cb:c0:06:dc:72:8f:e5:27:d3:f3:aa:b2:07:a1: 52:64:cd:d6:1b:75:bd:2d:c3:4f:f8:e5:a8:64:96:84:ad:55: f0:29:16:f7:f7:5b:8c:18:90:7a:c8:da:5f:06:da:b8:7a:c2: b1:56:0c:38:72:6a:81:a0:35:3b:24:57:c9:5f:99:9e:7c:39: e6:29:62:48:60:e1:eb:3e:41:43:f3:54:99:82:b7:3a:1b:4d: bc:94:fb:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0n8jO7yTV+j5o1Rp1aZPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMjM1ODViZmNkZDA2MWNhOTQ2ZTJkOWVhOGI5N2U0NWI5 YzMxZDYwHhcNMjUxMjA2MDQwMTM1WhcNMjUxMjA3MDQwMTM1WjAzMTEwLwYDVQQD EyhiZmJiOTJhNDJiZTlhMjQ3MjhkMGQxNTAxMjJjY2MyNzk0NzgxOTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrmKTiy5Yes4erbYigPsmctjWIHi IUUBTq53WHC8j92BYzGLP2MRCT0OoAFXrvTl10trsAaKFt7VC0P+kBAvp623TNxq qNJZqzPcLbeZSCLKT+jU6l6oLUxKfQ9/6jAB1Yev8hzzFk0JMbhCnC9WxIfJBSG/ yWpJRSjFFLvCK613HTFZU8e8S8fqqJevz3jJbt3fKlwgXbcpwj9cx9vP2yN7gJZD riJ57lmbBlp95mItBwYNaoPZ4UvYs+E06SoY594z9dYNAfxx5iEdtDA6YdVpKFAA hBcuO8mxwbTNG09tRZPSD2QO23fuj+7yr1UkwaORU+vP1+e6mEKC7C20/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+7kqQr6aJHKNDRUBIszCeUeBlkMB8GA1UdIwQY MBaAFK8jWFv83QYcqUbi2eqLl+RbnDHWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnlOWVdfemRCaHlwUnVMWjZvdVg1RnVjTWRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xZjM2ZDUtMzA4MC00YTBlLTlkNjMt NzkzNDRkYTNhMmU2LzEvcnlOWVdfemRCaHlwUnVMWjZvdVg1RnVjTWRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8xZjM2ZDUtMzA4MC00YTBlLTlkNjMtNzkzNDRkYTNhMmU2 LzEvcnlOWVdfemRCaHlwUnVMWjZvdVg1RnVjTWRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOZHN5Yv xMeAZvSXGVqzU8TaBc4iUcC08hrRllVd1IqC7p2P68FhxhZMKfsPOjtFxpHIwU+X VhOg7qHs18zdEuRoKKvP39p+sHGR/NSxf1jb3321wDEh6W4H91EYSt/bRUnn1qR6 UrkwQq3zXGvXWxERkxtZLjGf0EYN9NlogsIs0m9u8JgXYozu2Yq17xEHvh+n2zDW A5RaHJ3JCzQq4mGTghB8PMvABtxyj+Un0/OqsgehUmTN1ht1vS3DT/jlqGSWhK1V 8CkW9/dbjBiQesjaXwbauHrCsVYMOHJqgaA1OyRXyV+Znnw55iliSGDh6z5BQ/NU mYK3OhtNvJT7Yg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:07 2025 by rpki-client