This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft File: RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft (raw, json) Hash identifier: j7jpYFsSslMOGEfNIbh7IgMSqKWLkuTSXdcuQdIMtPg= Subject key identifier: A6:AD:86:23:4A:59:8E:B5:7B:B4:AE:8A:1C:30:0A:6B:52:F5:4F:BB Authority key identifier: 47:21:BF:48:E4:01:66:0E:E9:61:1B:35:C0:4B:5D:1D:1F:3F:AB:FA Certificate issuer: /CN=4721bf48e401660ee9611b35c04b5d1d1f3fabfa Certificate serial: 019AF12E14AC72BD3E0D8D615033F08C728C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft Manifest number: 08F4 Signing time: Sat 06 Dec 2025 01:02:00 +0000 Manifest this update: Sat 06 Dec 2025 01:02:00 +0000 Manifest next update: Sun 07 Dec 2025 01:02:00 +0000 Files and hashes: 1: Q0tX8C3mAUGr4XLZlc4tVpO7Am4.roa (hash: hVicWWTtt7YlyO3V3zzscqDP1fMclWoLBHVq6weE/Lo=) 2: RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl (hash: hSEFN+PRWBfMkrS4gyEV2O+6LkQ6fVm43spakmX/ELY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:14:ac:72:bd:3e:0d:8d:61:50:33:f0:8c:72:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4721bf48e401660ee9611b35c04b5d1d1f3fabfa Validity Not Before: Dec 6 01:02:00 2025 GMT Not After : Dec 7 01:02:00 2025 GMT Subject: CN=a6ad86234a598eb57bb4ae8a1c300a6b52f54fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:98:86:56:a0:f6:31:bb:d1:82:db:aa:2d:23: 30:86:50:df:fa:fc:35:2b:84:38:3e:61:92:ff:e9: 48:22:03:50:8b:8f:db:60:64:81:57:d6:96:fc:f8: 43:cc:36:58:c1:43:72:19:09:7e:8b:ac:b0:f7:df: 36:94:71:b3:ca:75:05:53:83:23:6d:d8:fb:6e:75: 6e:c5:e3:66:63:12:23:6e:04:03:c5:f4:e7:91:1c: 3c:7f:35:1e:2d:5c:31:2a:53:f9:62:f8:83:15:a5: 9e:a1:f3:31:09:0f:11:f1:f4:1c:f1:86:3d:6d:98: 90:96:3a:36:cf:d6:f6:a7:ec:cf:6b:f7:e7:4f:cf: 82:40:dd:6a:13:23:f5:da:f6:64:29:45:e4:4e:78: e0:ea:2a:05:a5:de:0c:66:ea:a5:c9:fd:65:42:57: 5c:3d:69:33:09:8a:bd:00:ed:3e:65:df:f8:4f:74: ff:9f:03:7c:38:de:c1:b5:56:d8:ca:f7:87:5d:78: 63:46:6a:c6:2f:28:b2:67:0a:5e:fc:c8:08:22:c6: a5:d8:ec:e4:2e:c1:8e:a4:f8:67:40:74:57:88:07: 72:52:55:cd:ee:ce:89:37:98:f8:a5:3b:6d:0a:21: 42:f5:41:9a:ee:57:7f:05:76:46:76:b1:86:71:10: df:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AD:86:23:4A:59:8E:B5:7B:B4:AE:8A:1C:30:0A:6B:52:F5:4F:BB X509v3 Authority Key Identifier: keyid:47:21:BF:48:E4:01:66:0E:E9:61:1B:35:C0:4B:5D:1D:1F:3F:AB:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:b8:43:3f:e2:69:f7:6b:04:1b:b1:0e:70:f7:00:3c:01:23: 91:0e:ac:4a:c7:6a:68:86:e6:1a:4b:e2:e1:5f:02:8c:56:63: f6:31:42:53:70:66:ee:52:46:6a:a5:d3:92:d4:2a:67:48:10: b0:f4:84:25:17:c5:ef:10:b5:06:7d:e7:0e:ad:4e:5b:e9:b6: af:e0:f9:33:f8:61:3e:cb:1f:1e:e4:24:72:06:d2:84:30:4c: ac:a6:87:06:5c:b4:00:7c:0a:d0:e5:ad:fc:dd:72:9e:70:6f: a8:dc:7e:8d:45:a5:f8:d8:08:ee:6e:ca:c2:7e:ad:ee:d2:37: 5e:d9:7e:3d:2d:bc:1d:1c:9a:ac:5c:50:8c:37:e5:e8:97:71: a9:fe:d7:e2:d6:b4:cf:b4:8b:ba:2c:56:f8:28:03:e3:d4:1b: ed:6b:78:6b:a4:d2:6f:d3:b3:49:c9:ec:8a:c6:22:c9:6e:af: 56:3d:9d:c3:7e:90:20:01:d5:77:4f:73:c2:08:e7:50:10:8f: d2:1e:d4:fe:80:b1:63:d2:ce:50:a3:b0:3c:47:5b:d5:ab:69: 56:55:4c:d7:f1:af:72:27:81:33:88:6c:c5:98:c1:8d:68:ec: 75:47:ad:dd:4e:5e:03:d9:51:42:c4:77:ce:8a:58:76:18:37: 96:b6:a0:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhSscr0+DY1hUDPwjHKMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MjFiZjQ4ZTQwMTY2MGVlOTYxMWIzNWMwNGI1ZDFkMWYz ZmFiZmEwHhcNMjUxMjA2MDEwMjAwWhcNMjUxMjA3MDEwMjAwWjAzMTEwLwYDVQQD EyhhNmFkODYyMzRhNTk4ZWI1N2JiNGFlOGExYzMwMGE2YjUyZjU0ZmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZiGVqD2MbvRgtuqLSMwhlDf+vw1 K4Q4PmGS/+lIIgNQi4/bYGSBV9aW/PhDzDZYwUNyGQl+i6yw9982lHGzynUFU4Mj bdj7bnVuxeNmYxIjbgQDxfTnkRw8fzUeLVwxKlP5YviDFaWeofMxCQ8R8fQc8YY9 bZiQljo2z9b2p+zPa/fnT8+CQN1qEyP12vZkKUXkTnjg6ioFpd4MZuqlyf1lQldc PWkzCYq9AO0+Zd/4T3T/nwN8ON7BtVbYyveHXXhjRmrGLyiyZwpe/MgIIsal2Ozk LsGOpPhnQHRXiAdyUlXN7s6JN5j4pTttCiFC9UGa7ld/BXZGdrGGcRDfFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKathiNKWY61e7SuihwwCmtS9U+7MB8GA1UdIwQY MBaAFEchv0jkAWYO6WEbNcBLXR0fP6v6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnlHX1NPUUJaZzdwWVJzMXdFdGRIUjhfcV9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9lNmJhODEtYjM4ZS00YmIzLWIwMDUt NTZmZGU1ZTcxNWIxLzEvUnlHX1NPUUJaZzdwWVJzMXdFdGRIUjhfcV9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9lNmJhODEtYjM4ZS00YmIzLWIwMDUtNTZmZGU1ZTcxNWIx LzEvUnlHX1NPUUJaZzdwWVJzMXdFdGRIUjhfcV9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMLhDP+Jp 92sEG7EOcPcAPAEjkQ6sSsdqaIbmGkvi4V8CjFZj9jFCU3Bm7lJGaqXTktQqZ0gQ sPSEJRfF7xC1Bn3nDq1OW+m2r+D5M/hhPssfHuQkcgbShDBMrKaHBly0AHwK0OWt /N1ynnBvqNx+jUWl+NgI7m7Kwn6t7tI3Xtl+PS28HRyarFxQjDfl6Jdxqf7X4ta0 z7SLuixW+CgD49Qb7Wt4a6TSb9OzScnsisYiyW6vVj2dw36QIAHVd09zwgjnUBCP 0h7U/oCxY9LOUKOwPEdb1atpVlVM1/GvcieBM4hsxZjBjWjsdUet3U5eA9lRQsR3 zopYdhg3lragVQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:36 2025 by rpki-client