This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft File: RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft (raw, json) Hash identifier: 2xnhn1x1MDODnA7zT1Q38q7eqUhdW5vAiQZmpxw4vZ8= Subject key identifier: 13:9D:C7:01:2B:D1:D0:06:BF:E0:26:E4:03:A1:A8:38:42:27:BD:5B Authority key identifier: 47:21:BF:48:E4:01:66:0E:E9:61:1B:35:C0:4B:5D:1D:1F:3F:AB:FA Certificate issuer: /CN=4721bf48e401660ee9611b35c04b5d1d1f3fabfa Certificate serial: 019B2EFA9662A10BAD108D4617073AE9087F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft Manifest number: 0914 Signing time: Thu 18 Dec 2025 01:02:12 +0000 Manifest this update: Thu 18 Dec 2025 01:02:12 +0000 Manifest next update: Fri 19 Dec 2025 01:02:12 +0000 Files and hashes: 1: Q0tX8C3mAUGr4XLZlc4tVpO7Am4.roa (hash: hVicWWTtt7YlyO3V3zzscqDP1fMclWoLBHVq6weE/Lo=) 2: RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl (hash: W8+5euBGVpAczpADSqPVji77xIRI7yrj7wbQawPeWpk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:96:62:a1:0b:ad:10:8d:46:17:07:3a:e9:08:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4721bf48e401660ee9611b35c04b5d1d1f3fabfa Validity Not Before: Dec 18 01:02:12 2025 GMT Not After : Dec 19 01:02:12 2025 GMT Subject: CN=139dc7012bd1d006bfe026e403a1a8384227bd5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d3:66:85:69:16:58:f6:73:b6:c0:13:ab:8c: cc:9a:80:c4:17:1d:52:e6:da:15:ee:fd:5a:8b:a2: 4b:ed:1d:73:83:75:ed:18:4e:55:24:d4:6f:2f:8e: d0:bd:97:79:c7:04:74:d2:c8:c9:a4:7e:1d:6a:cb: a5:3d:8a:5a:5c:2b:a0:71:79:59:49:13:5a:40:74: 78:77:e9:ad:61:e1:77:a6:09:d8:e9:5b:86:cd:22: ea:dd:e5:ab:fd:5b:ab:b3:9a:59:93:11:37:6f:7c: a7:0c:69:7a:f7:26:fa:68:bf:9f:dd:bd:84:cb:7c: ac:7f:36:52:07:07:a0:7d:4f:85:22:93:aa:b3:55: 43:11:26:ac:1e:79:b2:4d:8c:43:87:32:b0:0b:81: 84:09:f4:66:e7:e7:7a:a3:53:fd:54:ba:3e:df:38: 73:42:21:4a:db:c2:e1:77:01:e1:a0:bb:18:89:37: 25:5b:c7:8d:c6:2d:05:17:75:e6:e4:fb:05:d0:63: 2b:36:08:2f:06:aa:a6:af:f1:c7:ba:a0:e6:15:16: e5:af:93:ee:31:5c:0f:b3:43:e6:ab:38:2e:50:7e: b3:24:28:3b:db:7e:1e:74:85:c9:51:b8:c0:88:9f: ec:9f:7d:c0:a0:5a:11:53:ff:16:9e:48:e0:69:ec: eb:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:9D:C7:01:2B:D1:D0:06:BF:E0:26:E4:03:A1:A8:38:42:27:BD:5B X509v3 Authority Key Identifier: keyid:47:21:BF:48:E4:01:66:0E:E9:61:1B:35:C0:4B:5D:1D:1F:3F:AB:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:fe:28:17:81:06:0f:c9:5e:88:24:c3:bf:90:7c:06:81:4e: 91:29:89:28:48:a9:99:44:bf:22:49:35:74:e0:bd:9a:db:55: a0:db:47:b9:65:97:d6:9d:a5:80:d3:9f:b6:05:c7:4b:f1:a5: 73:d8:74:99:3e:9e:e3:fd:a3:3b:cf:f5:b9:0b:8e:30:ed:fe: eb:33:61:e2:f2:5f:ba:94:e8:ae:13:59:18:fc:92:0c:fc:81: 01:24:84:5d:a6:ef:eb:58:ab:3f:46:49:a9:5c:f0:90:8c:dd: 54:62:07:7b:d7:89:0d:22:f1:40:f8:0e:e8:6e:35:82:c9:91: 5b:7e:e0:59:10:c1:38:31:a4:ca:3e:fe:4e:4b:df:43:08:b5: 99:92:48:24:44:ca:86:48:78:56:c7:1a:ff:d3:b0:cf:75:ab: e2:2e:4b:4a:c0:be:a7:37:af:28:5c:9c:eb:0f:62:fa:26:15: cd:94:c0:03:96:5b:9f:b9:36:03:1e:7f:6e:fe:23:a7:45:f6: cf:55:0c:56:3e:8f:69:4f:03:7f:37:53:da:22:8b:14:ad:0d: 7d:70:95:32:f5:26:8f:b7:78:f6:89:0d:64:b8:68:2b:b7:46: 66:fd:cd:76:8f:00:d7:f0:ee:5e:c2:b9:e3:61:98:67:e0:73: c2:89:ee:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+pZioQutEI1GFwc66Qh/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MjFiZjQ4ZTQwMTY2MGVlOTYxMWIzNWMwNGI1ZDFkMWYz ZmFiZmEwHhcNMjUxMjE4MDEwMjEyWhcNMjUxMjE5MDEwMjEyWjAzMTEwLwYDVQQD EygxMzlkYzcwMTJiZDFkMDA2YmZlMDI2ZTQwM2ExYTgzODQyMjdiZDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29NmhWkWWPZztsATq4zMmoDEFx1S 5toV7v1ai6JL7R1zg3XtGE5VJNRvL47QvZd5xwR00sjJpH4dasulPYpaXCugcXlZ SRNaQHR4d+mtYeF3pgnY6VuGzSLq3eWr/Vurs5pZkxE3b3ynDGl69yb6aL+f3b2E y3ysfzZSBwegfU+FIpOqs1VDESasHnmyTYxDhzKwC4GECfRm5+d6o1P9VLo+3zhz QiFK28LhdwHhoLsYiTclW8eNxi0FF3Xm5PsF0GMrNggvBqqmr/HHuqDmFRblr5Pu MVwPs0PmqzguUH6zJCg7234edIXJUbjAiJ/sn33AoFoRU/8WnkjgaezrvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOdxwEr0dAGv+Am5AOhqDhCJ71bMB8GA1UdIwQY MBaAFEchv0jkAWYO6WEbNcBLXR0fP6v6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnlHX1NPUUJaZzdwWVJzMXdFdGRIUjhfcV9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9lNmJhODEtYjM4ZS00YmIzLWIwMDUt NTZmZGU1ZTcxNWIxLzEvUnlHX1NPUUJaZzdwWVJzMXdFdGRIUjhfcV9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9lNmJhODEtYjM4ZS00YmIzLWIwMDUtNTZmZGU1ZTcxNWIx LzEvUnlHX1NPUUJaZzdwWVJzMXdFdGRIUjhfcV9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlf4oF4EG D8leiCTDv5B8BoFOkSmJKEipmUS/Ikk1dOC9mttVoNtHuWWX1p2lgNOftgXHS/Gl c9h0mT6e4/2jO8/1uQuOMO3+6zNh4vJfupTorhNZGPySDPyBASSEXabv61irP0ZJ qVzwkIzdVGIHe9eJDSLxQPgO6G41gsmRW37gWRDBODGkyj7+TkvfQwi1mZJIJETK hkh4Vsca/9Owz3Wr4i5LSsC+pzevKFyc6w9i+iYVzZTAA5Zbn7k2Ax5/bv4jp0X2 z1UMVj6PaU8DfzdT2iKLFK0NfXCVMvUmj7d49okNZLhoK7dGZv3Ndo8A1/DuXsK5 42GYZ+Bzwonu3w== -----END CERTIFICATE-----Generated at Thu Dec 18 11:27:06 2025 by rpki-client