This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft File: PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft (raw, json) Hash identifier: 0Vd7g7W8Ho7ELC7FzP69XXqMp77Jrm9l0wldFylYd0w= Subject key identifier: 4A:2B:B6:69:FD:A2:0E:18:38:56:74:00:D0:03:C9:BA:9E:C2:7B:87 Authority key identifier: 3F:23:07:52:F3:BA:00:26:FB:B2:0C:5E:4C:96:3B:11:29:AC:9D:34 Certificate issuer: /CN=3f230752f3ba0026fbb20c5e4c963b1129ac9d34 Certificate serial: 019AF6F95E62D3B4D1725B5A2DE3ED56D1FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft Manifest number: 106B Signing time: Sun 07 Dec 2025 04:02:08 +0000 Manifest this update: Sun 07 Dec 2025 04:02:08 +0000 Manifest next update: Mon 08 Dec 2025 04:02:08 +0000 Files and hashes: 1: PyMHUvO6ACb7sgxeTJY7ESmsnTQ.crl (hash: N+/ct0ooGiJf/ELz0Q3WZ8voiJnqvzce8ZsNAiuYX5M=) 2: nMra-Jnuy1-KF59c3gHNl4k3BGo.roa (hash: E6H4x/vSs6tKPKP20pzl8TJ2cP6miiiqM+CoQMRhnI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:5e:62:d3:b4:d1:72:5b:5a:2d:e3:ed:56:d1:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f230752f3ba0026fbb20c5e4c963b1129ac9d34 Validity Not Before: Dec 7 04:02:08 2025 GMT Not After : Dec 8 04:02:08 2025 GMT Subject: CN=4a2bb669fda20e1838567400d003c9ba9ec27b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:da:d7:55:8f:ce:87:48:53:99:8f:21:77:d8: 4f:67:6d:6b:e2:8b:8b:07:23:95:db:5e:06:b3:6c: 94:3a:66:84:fa:e9:c7:ac:ae:45:0b:2a:a7:bd:05: 0b:76:b3:78:84:2d:d5:20:33:a6:16:19:9f:ee:05: 97:b0:e6:4a:76:bd:e9:2f:ab:86:3a:49:69:1c:87: 43:85:2f:6f:55:56:a2:f9:20:3d:50:3b:09:98:bf: b2:3c:51:ac:03:17:62:c0:51:48:3f:e3:1e:e4:a8: 6a:53:86:fc:34:5d:86:4d:3e:a0:6d:bd:93:92:16: cd:08:6e:e6:d0:c5:87:69:48:aa:85:ea:48:4e:40: 30:23:1b:5b:0a:55:24:ff:91:ab:96:2c:a1:87:da: 0d:cd:20:db:e0:4d:b8:fb:b4:08:25:ee:d7:f3:bd: 29:64:5a:4b:4b:c5:9d:46:c7:17:13:15:2f:b3:90: bd:e8:bd:65:26:2c:18:4e:b0:95:de:dc:ee:02:37: fc:58:50:39:e9:10:45:a5:7f:a9:5a:fb:10:c0:c5: e5:39:db:95:35:19:c5:ab:39:52:f9:ad:cc:91:5d: e4:c0:6a:27:c6:f3:17:79:f0:c4:e9:ea:0e:82:5b: 31:bf:8a:c8:1c:2a:e7:23:84:05:78:0f:d4:90:f5: 98:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2B:B6:69:FD:A2:0E:18:38:56:74:00:D0:03:C9:BA:9E:C2:7B:87 X509v3 Authority Key Identifier: keyid:3F:23:07:52:F3:BA:00:26:FB:B2:0C:5E:4C:96:3B:11:29:AC:9D:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/51f9a1-4368-4568-b029-dd22530e15a4/1/PyMHUvO6ACb7sgxeTJY7ESmsnTQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:63:6c:a1:45:7c:5a:96:18:d8:91:c1:05:65:6e:e0:aa:4a: 1e:9e:19:db:7b:0a:c9:a1:af:89:b1:eb:0d:e9:b7:73:86:37: 96:fd:70:56:28:82:e8:37:99:33:0d:57:be:f2:59:fe:6f:0c: 8f:61:db:79:c9:c2:ea:41:e2:7d:61:b4:15:a6:c0:37:87:50: 07:f9:6e:b1:50:c5:da:cb:71:bc:ba:28:f2:59:cd:f5:39:5e: 03:e6:c3:5d:42:02:e4:4d:7a:61:86:40:07:15:4a:b7:01:11: 4f:97:6c:7d:66:42:6d:b0:ce:69:3c:83:cd:9a:88:17:ae:e8: f4:54:01:1b:9b:a8:c5:37:1b:2d:4b:07:08:c7:89:3a:fd:79: 49:0d:e7:7d:da:52:62:54:89:28:ea:ba:26:3c:67:6f:6e:88: 96:5c:74:fd:74:8c:1e:98:48:46:f6:8c:1c:eb:b0:ec:5a:a6: 09:da:54:e1:de:31:b3:b0:b1:1a:a6:93:fe:13:b1:30:75:e3: 75:f6:88:4c:a7:c0:ca:0e:35:ad:83:4d:cd:ab:e9:f2:98:a4: 72:e5:e8:ca:63:78:7e:a1:fd:fb:a2:0d:ed:8a:c0:e1:98:c2: 7c:39:8e:3f:fb:83:1f:9f:a6:4b:56:80:78:65:21:4b:d6:10: 78:00:9b:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+V5i07TRcltaLePtVtH+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMjMwNzUyZjNiYTAwMjZmYmIyMGM1ZTRjOTYzYjExMjlh YzlkMzQwHhcNMjUxMjA3MDQwMjA4WhcNMjUxMjA4MDQwMjA4WjAzMTEwLwYDVQQD Eyg0YTJiYjY2OWZkYTIwZTE4Mzg1Njc0MDBkMDAzYzliYTllYzI3Yjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndrXVY/Oh0hTmY8hd9hPZ21r4ouL ByOV214Gs2yUOmaE+unHrK5FCyqnvQULdrN4hC3VIDOmFhmf7gWXsOZKdr3pL6uG OklpHIdDhS9vVVai+SA9UDsJmL+yPFGsAxdiwFFIP+Me5KhqU4b8NF2GTT6gbb2T khbNCG7m0MWHaUiqhepITkAwIxtbClUk/5Grliyhh9oNzSDb4E24+7QIJe7X870p ZFpLS8WdRscXExUvs5C96L1lJiwYTrCV3tzuAjf8WFA56RBFpX+pWvsQwMXlOduV NRnFqzlS+a3MkV3kwGonxvMXefDE6eoOglsxv4rIHCrnI4QFeA/UkPWY3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEortmn9og4YOFZ0ANADybqewnuHMB8GA1UdIwQY MBaAFD8jB1LzugAm+7IMXkyWOxEprJ00MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHlNSFV2TzZBQ2I3c2d4ZVRKWTdFU21zblRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81MWY5YTEtNDM2OC00NTY4LWIwMjkt ZGQyMjUzMGUxNWE0LzEvUHlNSFV2TzZBQ2I3c2d4ZVRKWTdFU21zblRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81MWY5YTEtNDM2OC00NTY4LWIwMjktZGQyMjUzMGUxNWE0 LzEvUHlNSFV2TzZBQ2I3c2d4ZVRKWTdFU21zblRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQmNsoUV8 WpYY2JHBBWVu4KpKHp4Z23sKyaGvibHrDem3c4Y3lv1wViiC6DeZMw1XvvJZ/m8M j2HbecnC6kHifWG0FabAN4dQB/lusVDF2stxvLoo8lnN9TleA+bDXUIC5E16YYZA BxVKtwERT5dsfWZCbbDOaTyDzZqIF67o9FQBG5uoxTcbLUsHCMeJOv15SQ3nfdpS YlSJKOq6Jjxnb26Illx0/XSMHphIRvaMHOuw7FqmCdpU4d4xs7CxGqaT/hOxMHXj dfaITKfAyg41rYNNzavp8pikcuXoymN4fqH9+6IN7YrA4ZjCfDmOP/uDH5+mS1aA eGUhS9YQeACbMg== -----END CERTIFICATE-----Generated at Sun Dec 7 06:59:46 2025 by rpki-client