This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft File: PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft (raw, json) Hash identifier: +6FUe2M/xjgwf2uT9B1aCWIuMekyMTAetroMc2xZ3hw= Subject key identifier: C0:A6:41:AE:5D:F6:0F:40:D3:A3:72:9D:FD:E5:8A:26:FE:90:10:E3 Authority key identifier: 3F:24:A4:32:2E:88:31:2C:81:F4:69:AC:9F:FA:73:0D:F1:4B:33:84 Certificate issuer: /CN=3f24a4322e88312c81f469ac9ffa730df14b3384 Certificate serial: 019AF389B20A320AA60364A2B09BE343081F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 12:01:18 +0000 Manifest this update: Sat 06 Dec 2025 12:01:18 +0000 Manifest next update: Sun 07 Dec 2025 12:01:18 +0000 Files and hashes: 1: PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl (hash: MxgOS+PvkUr0mgffYyKkoKyL1ytMx+A6UTwHirRXz6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:b2:0a:32:0a:a6:03:64:a2:b0:9b:e3:43:08:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f24a4322e88312c81f469ac9ffa730df14b3384 Validity Not Before: Dec 6 12:01:18 2025 GMT Not After : Dec 7 12:01:18 2025 GMT Subject: CN=c0a641ae5df60f40d3a3729dfde58a26fe9010e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:57:49:23:a3:c3:b9:b4:0b:ef:4c:7e:f7:5e: 3d:7d:98:38:c5:5b:bf:ab:70:d2:86:5c:c6:18:65: c0:36:7b:8d:e7:cd:4b:d3:ad:b5:1e:6d:16:45:39: c2:9f:03:a7:97:f8:b9:59:8e:0e:83:37:4a:0b:cb: f9:50:a9:0b:56:25:fd:07:42:c2:09:32:84:d5:15: 47:d8:74:24:06:ae:7d:5f:b5:2b:9c:28:4a:16:ed: 7c:90:b3:69:93:32:d1:3a:64:3e:2a:e4:81:ec:55: 77:97:3a:ea:a9:d6:16:73:39:2a:59:b8:a9:ff:d0: 60:b1:65:05:c6:82:51:03:4f:d7:31:59:cb:19:43: e0:ec:7f:6d:99:41:0b:65:ce:ce:7c:fe:8b:f2:45: e3:c9:7a:ea:f5:84:3b:7d:7a:c5:38:a1:0d:9f:01: d8:1e:7a:95:0c:dc:81:69:d2:b3:dd:2f:27:b0:3c: e4:9c:12:d6:d9:b2:f2:6b:f9:6c:6b:40:ab:b3:0f: 0c:a2:44:10:f0:63:64:fc:91:27:ef:c5:87:69:e4: 1b:59:e0:e3:07:fe:e0:ef:58:f7:8f:ae:8c:b9:60: 7a:58:c7:96:18:35:e8:58:0e:22:f3:5e:63:a7:e4: 50:e0:5a:7d:bc:01:74:a7:66:94:d3:e9:12:dc:c2: c7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A6:41:AE:5D:F6:0F:40:D3:A3:72:9D:FD:E5:8A:26:FE:90:10:E3 X509v3 Authority Key Identifier: keyid:3F:24:A4:32:2E:88:31:2C:81:F4:69:AC:9F:FA:73:0D:F1:4B:33:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d0fa99-c110-4609-8b09-892b5b82d664/1/PySkMi6IMSyB9Gmsn_pzDfFLM4Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:a8:71:2f:0f:f7:7b:94:d0:e0:87:13:ad:d2:9e:7b:fa:5f: ec:f6:77:f1:d8:f4:33:13:77:82:50:59:14:d4:96:d1:92:4b: c9:7e:c3:06:93:c5:56:9b:39:54:18:31:c7:0f:65:1a:ca:73: fb:14:d5:91:4d:80:9f:89:36:ac:e9:1a:62:c5:a3:73:8c:75: 71:a9:8c:63:c6:fd:24:4c:8f:d5:76:a6:4a:75:17:11:de:c7: 05:de:49:76:f8:70:da:42:d2:29:fe:dd:ff:c3:7d:fa:61:af: 98:fd:11:45:5a:0a:73:9b:a9:da:95:7d:c4:71:23:d8:43:f3: 3b:97:00:61:79:d8:1c:96:93:c6:c5:55:3b:26:43:30:f4:fa: 79:f5:04:98:08:c7:5f:74:0a:54:8a:03:f9:d5:d9:32:81:d5: f5:a5:7d:c9:fa:86:1a:c2:29:04:e0:aa:00:5e:b1:d4:26:7f: 26:06:49:e5:07:d1:4b:1d:bc:af:29:e8:f4:d2:0b:9f:55:f5: 96:03:3d:5f:84:d2:aa:73:dc:13:f3:25:cd:77:39:df:a7:28: 5f:11:07:83:5c:59:c6:e4:1d:2a:e1:27:84:62:4d:a2:08:b6: b4:bc:b3:7e:57:70:93:c4:b1:dc:63:06:1f:0b:09:20:ad:0b: f6:e9:14:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzibIKMgqmA2SisJvjQwgfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmMjRhNDMyMmU4ODMxMmM4MWY0NjlhYzlmZmE3MzBkZjE0 YjMzODQwHhcNMjUxMjA2MTIwMTE4WhcNMjUxMjA3MTIwMTE4WjAzMTEwLwYDVQQD EyhjMGE2NDFhZTVkZjYwZjQwZDNhMzcyOWRmZGU1OGEyNmZlOTAxMGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VdJI6PDubQL70x+9149fZg4xVu/ q3DShlzGGGXANnuN581L0621Hm0WRTnCnwOnl/i5WY4OgzdKC8v5UKkLViX9B0LC CTKE1RVH2HQkBq59X7UrnChKFu18kLNpkzLROmQ+KuSB7FV3lzrqqdYWczkqWbip /9BgsWUFxoJRA0/XMVnLGUPg7H9tmUELZc7OfP6L8kXjyXrq9YQ7fXrFOKENnwHY HnqVDNyBadKz3S8nsDzknBLW2bLya/lsa0Crsw8MokQQ8GNk/JEn78WHaeQbWeDj B/7g71j3j66MuWB6WMeWGDXoWA4i815jp+RQ4Fp9vAF0p2aU0+kS3MLHFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCmQa5d9g9A06Nynf3liib+kBDjMB8GA1UdIwQY MBaAFD8kpDIuiDEsgfRprJ/6cw3xSzOEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHlTa01pNklNU3lCOUdtc25fcHpEZkZMTTRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kMGZhOTktYzExMC00NjA5LThiMDkt ODkyYjViODJkNjY0LzEvUHlTa01pNklNU3lCOUdtc25fcHpEZkZMTTRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9kMGZhOTktYzExMC00NjA5LThiMDktODkyYjViODJkNjY0 LzEvUHlTa01pNklNU3lCOUdtc25fcHpEZkZMTTRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiKhxLw/3 e5TQ4IcTrdKee/pf7PZ38dj0MxN3glBZFNSW0ZJLyX7DBpPFVps5VBgxxw9lGspz +xTVkU2An4k2rOkaYsWjc4x1camMY8b9JEyP1XamSnUXEd7HBd5Jdvhw2kLSKf7d /8N9+mGvmP0RRVoKc5up2pV9xHEj2EPzO5cAYXnYHJaTxsVVOyZDMPT6efUEmAjH X3QKVIoD+dXZMoHV9aV9yfqGGsIpBOCqAF6x1CZ/JgZJ5QfRSx28ryno9NILn1X1 lgM9X4TSqnPcE/MlzXc536coXxEHg1xZxuQdKuEnhGJNogi2tLyzfldwk8Sx3GMG HwsJIK0L9ukU/A== -----END CERTIFICATE-----Generated at Sat Dec 6 21:33:54 2025 by rpki-client