This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft File: PYugpSxCEprx1PdD_rM7sUTUu1w.mft (raw, json) Hash identifier: Ky9e1oy9XD+lvjYMaX82j6WhgOlhIBzDetC7f8eMUcQ= Subject key identifier: 2B:37:D1:06:6C:A2:61:37:8E:94:DF:23:B2:B1:EB:13:A0:39:CF:04 Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 019AF3898269C71E715C3EA096ED1C2AD707 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 12:01:06 +0000 Manifest this update: Sat 06 Dec 2025 12:01:06 +0000 Manifest next update: Sun 07 Dec 2025 12:01:06 +0000 Files and hashes: 1: 9AkjaJRYRIOTmgf4F3gyV6pdFkQ.roa (hash: N1lZUtbJEJkRSUYDq/VJK4cR/RojBk8ALOORTw9wVk8=) 2: DUER2OIxuLfteK-5s9p125aHbHQ.roa (hash: MKxlsAlXCfnz4va2JwSTTtP5lv2QEgVXIYiD1U0P1iM=) 3: I5Dlj2iBXR78bV2NI4oXxT6DVcQ.roa (hash: pUPvPv3IMdPMN3mngjSRkbMNdszUqvQ/W+9CudZep1s=) 4: IKxEFfN_KNz819jDJF02u6P6vks.roa (hash: M1gfdLv0XPFzxrEqEMyJ47aUP/+uDTO64SIkdj54NaA=) 5: JcqV5Zbt-7BBvR25dnt58sZOVRw.roa (hash: Jyex6OZ5W2eO7E9m8v2xcJSNJuYcw9eBRYzL8fzsuKg=) 6: PYugpSxCEprx1PdD_rM7sUTUu1w.crl (hash: STj4ALfXmzAdbtC5CyQN3fm9gonJyIC3CSEZJNo74gg=) 7: QeFtXb_2Jy97mUDOpmxAN1O437Q.roa (hash: pGsLweLJqx/P4hTPUc5m5Veo+2vG7HsRtDbmA1rHXlQ=) 8: YPwqy-r5Ds6zjUqs83c9wSrz4Xo.roa (hash: /OBWcwiTOuByZ0CFtuxP3jPnYcDQxuxVogbCk4BaZIM=) 9: _z_sTvwtZQKHpvup9rFWqFFhFKY.roa (hash: JVM6qUA4ZtDkSX81zJfuU5jJmnu8pCK2PaUHasgHRME=) 10: kUvUMMUm6A2S-PsLFuOoxFGjL2g.roa (hash: 43KKo4hB/OsGlhMLYdFrQhlx6kBqniKw+U0iCAYg2Qg=) 11: pOvELxmVMCJOREXgcbJwYPWQcLY.roa (hash: 8NAO5qgs1zoQcDKNETGRxihZubfEYTFA3QAx7BgtdEo=) 12: stpJENpG1HfxaYzx679NTwZFpZY.roa (hash: EMcugxArWnP7J9sItxl3gZsFeM8qrAvUxjSeKkZ4oao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:82:69:c7:1e:71:5c:3e:a0:96:ed:1c:2a:d7:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Dec 6 12:01:06 2025 GMT Not After : Dec 7 12:01:06 2025 GMT Subject: CN=2b37d1066ca261378e94df23b2b1eb13a039cf04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:47:cf:58:ff:c7:79:c0:69:2a:08:a8:8f:f4: c0:dd:9d:5d:82:cf:9f:ef:93:49:08:d5:d9:d6:28: 04:54:d9:10:36:6a:1b:09:6f:da:b3:d5:19:10:e5: 89:0b:56:91:ac:83:b4:74:82:ff:03:d5:31:8e:3f: 25:5d:ae:eb:0d:8e:ce:9e:de:63:1b:a1:88:34:56: 8b:65:32:32:a0:9b:24:2f:7a:76:8d:da:58:cf:87: 21:69:cc:ff:3a:95:bc:a4:57:aa:fd:b9:e0:a4:3c: 98:bc:c2:4f:0c:85:c1:25:f6:fc:45:ab:50:22:7b: 86:32:7a:98:a2:d8:fb:2b:1b:1c:29:d5:8f:36:6e: b5:6c:93:ae:e3:0d:82:b2:69:8f:b4:55:40:6c:15: 2d:2a:ff:a8:be:10:20:26:86:45:1b:1a:ce:19:72: 4c:b3:2c:8c:c1:38:a2:5d:db:e8:f1:de:1b:ed:f7: 9e:7e:b9:f5:c0:a5:6d:0e:34:82:40:c6:00:09:dd: 77:c3:0a:67:94:e5:00:39:0c:7c:62:80:1f:25:94: 09:93:c4:17:9a:56:36:f2:ff:46:86:1b:a6:1d:8b: 9a:2f:ea:67:8b:2e:9a:db:55:7b:5d:6d:68:c9:3a: ad:b0:aa:0f:57:e0:cf:81:3e:43:58:d8:b2:a4:d1: 6a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:37:D1:06:6C:A2:61:37:8E:94:DF:23:B2:B1:EB:13:A0:39:CF:04 X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:55:9e:f1:e4:a6:d0:90:b5:3b:45:03:8a:de:34:8c:6d:44: a7:af:b6:c5:3d:27:c9:77:8c:ae:8e:e6:1a:57:27:eb:69:23: 3a:fd:c6:89:ea:4f:7c:c9:63:46:1c:6d:d2:55:d6:7c:50:78: e8:6b:95:91:9c:c7:89:0b:23:5a:a0:42:96:41:36:57:a2:37: c8:68:0f:89:97:1f:22:8a:3a:fd:f5:4a:47:a6:15:c5:63:32: ed:9c:a2:c0:43:a4:9b:08:ef:9d:38:7d:b4:f9:22:6c:5a:eb: c5:80:15:aa:bd:4a:27:6a:4d:ff:fd:cd:97:72:9c:5a:dd:75: f5:03:41:a1:d2:46:9d:54:59:b2:cf:18:ec:3c:4e:2d:ed:f3: d0:6e:df:cd:7c:a0:94:12:af:be:04:b3:fd:38:7e:89:11:b4: 06:d3:2f:ee:29:86:fa:4c:d7:df:c6:4c:e4:7b:eb:17:0a:14: c9:7b:c3:cc:bf:6c:7c:94:ee:ba:c9:14:05:9b:1e:1f:1f:ed: cf:42:aa:c5:10:f9:1b:5b:9f:93:af:34:d3:47:a8:41:f2:5b: 26:29:b8:dc:20:cf:12:69:10:eb:2c:73:f1:e5:f6:0f:6f:36: bd:42:85:29:7c:0f:cf:65:58:ed:a5:69:0e:a2:3f:da:db:0f: 16:2a:b9:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziYJpxx5xXD6glu0cKtcHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjUxMjA2MTIwMTA2WhcNMjUxMjA3MTIwMTA2WjAzMTEwLwYDVQQD EygyYjM3ZDEwNjZjYTI2MTM3OGU5NGRmMjNiMmIxZWIxM2EwMzljZjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkfPWP/HecBpKgioj/TA3Z1dgs+f 75NJCNXZ1igEVNkQNmobCW/as9UZEOWJC1aRrIO0dIL/A9Uxjj8lXa7rDY7Ont5j G6GINFaLZTIyoJskL3p2jdpYz4chacz/OpW8pFeq/bngpDyYvMJPDIXBJfb8RatQ InuGMnqYotj7KxscKdWPNm61bJOu4w2CsmmPtFVAbBUtKv+ovhAgJoZFGxrOGXJM syyMwTiiXdvo8d4b7feefrn1wKVtDjSCQMYACd13wwpnlOUAOQx8YoAfJZQJk8QX mlY28v9GhhumHYuaL+pniy6a21V7XW1oyTqtsKoPV+DPgT5DWNiypNFqOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCs30QZsomE3jpTfI7Kx6xOgOc8EMB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFWe8eSm 0JC1O0UDit40jG1Ep6+2xT0nyXeMro7mGlcn62kjOv3GiepPfMljRhxt0lXWfFB4 6GuVkZzHiQsjWqBClkE2V6I3yGgPiZcfIoo6/fVKR6YVxWMy7ZyiwEOkmwjvnTh9 tPkibFrrxYAVqr1KJ2pN//3Nl3KcWt119QNBodJGnVRZss8Y7DxOLe3z0G7fzXyg lBKvvgSz/Th+iRG0BtMv7imG+kzX38ZM5HvrFwoUyXvDzL9sfJTuuskUBZseHx/t z0KqxRD5G1ufk68000eoQfJbJim43CDPEmkQ6yxz8eX2D282vUKFKXwPz2VY7aVp DqI/2tsPFiq5aQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:53:53 2025 by rpki-client