This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft File: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft (raw, json) Hash identifier: HZkBNctHXDrqI7BY8DvBUaU6UybEMKx11g5JY1Pyaz0= Subject key identifier: FB:7B:65:A4:57:0E:1D:81:13:D7:93:82:5D:0F:16:BD:2D:33:C3:1B Authority key identifier: A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4 Certificate issuer: /CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4 Certificate serial: 019AF31CD97803CF7553FC0551D8DBCA781E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 10:02:25 +0000 Manifest this update: Sat 06 Dec 2025 10:02:25 +0000 Manifest next update: Sun 07 Dec 2025 10:02:25 +0000 Files and hashes: 1: 1-GwxGdQdSDv0GNH37kCGFbw_26Q.roa (hash: 8CUzx4XPAhE8seJ5BK68QhEaKNzFZcIoKPr1Lhqpte4=) 2: pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl (hash: FCaE98JfGNln3NEvJGmtddL4dO9T0owJITeygs2Kvnk=) 3: tLZE9xN0wEMlciA44LFiADYH8LI.roa (hash: wSS87TjmYV1lgJuaVAo3xUhNdr4f/voSLt3pqfbBM5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:d9:78:03:cf:75:53:fc:05:51:d8:db:ca:78:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a588604d25b87b82fd1259dfe294cd8fb9ff49b4 Validity Not Before: Dec 6 10:02:25 2025 GMT Not After : Dec 7 10:02:25 2025 GMT Subject: CN=fb7b65a4570e1d8113d793825d0f16bd2d33c31b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b9:d5:36:f9:50:a9:62:03:1c:13:c1:bf:94: 30:f7:17:ae:1a:6f:3b:d9:1f:a9:b7:dd:55:43:c6: cc:c6:34:1b:16:09:d2:57:ce:9c:a9:e1:a9:25:dc: 94:23:91:91:cf:cf:5d:95:95:ed:a9:99:57:4f:01: 4d:a5:03:22:b7:dc:78:f5:80:78:a6:1a:4c:e3:51: c2:74:ef:41:26:f1:4b:63:c6:93:d4:36:ae:1f:f3: 0b:6e:c5:5b:7c:83:7c:68:01:da:7c:15:f9:11:5e: 24:fe:53:82:70:e8:69:e3:af:8e:dc:ce:86:9e:71: 2f:01:ad:70:61:bd:dc:71:b6:5b:b3:fc:e8:d1:f2: 1a:dc:47:c2:f6:19:24:42:34:90:66:bf:99:b0:5c: 4d:28:98:47:6d:e3:50:da:c1:78:65:79:d7:84:53: be:48:da:0c:ab:08:01:55:94:72:1a:bf:50:2e:ab: a0:68:fd:1a:69:e6:e5:9f:3d:a0:cc:9d:0c:3e:d2: 4f:03:69:d2:c9:01:79:d4:20:6b:ab:28:7e:3b:35: 6f:64:28:56:dc:5b:3b:d4:d8:cf:88:f5:50:0d:a6: 67:33:c3:eb:c6:0b:28:c7:90:8f:fe:db:60:5a:79: db:d6:3c:ec:2b:d3:ad:fc:f6:92:f3:27:b7:a8:a8: 22:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:7B:65:A4:57:0E:1D:81:13:D7:93:82:5D:0F:16:BD:2D:33:C3:1B X509v3 Authority Key Identifier: keyid:A5:88:60:4D:25:B8:7B:82:FD:12:59:DF:E2:94:CD:8F:B9:FF:49:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/510a4e-66ef-4dc1-803b-20dddbc1281d/1/pYhgTSW4e4L9Elnf4pTNj7n_SbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:53:3c:c3:0c:07:ab:bf:da:4d:ac:8f:8e:a4:44:8b:20:4f: 24:d4:d7:ce:93:fa:03:81:1b:54:ef:24:2f:ea:07:bd:f3:12: e6:cf:ef:fc:6e:6b:98:d7:23:a0:4c:51:d9:02:cf:35:30:00: 63:4a:cc:27:0a:3a:d6:2f:d5:90:ed:11:56:c5:f7:f0:f2:e2: 44:0f:6f:a3:ec:0e:c4:d0:0e:9a:c9:98:e4:13:80:dd:8f:15: 08:c0:0f:5a:b3:55:cd:a4:24:47:ba:d6:1e:5e:dc:82:1a:e4: 77:f9:da:32:01:1c:db:61:91:34:b5:8d:5d:3c:00:a5:7a:22: 53:9a:68:b5:82:c5:4f:ba:20:1f:8b:b7:99:80:2b:cd:c8:58: cc:95:6d:95:b4:9d:8f:60:3d:95:4f:7c:4d:9b:f0:48:71:f1: b2:b6:05:3f:cf:02:5f:55:aa:17:10:4b:be:1a:a1:e5:7d:b4: 7f:cb:b6:2b:a5:f6:4c:51:35:bd:e7:0b:22:6a:de:2c:1b:67: b6:91:39:94:42:99:ba:22:13:8d:4e:11:5e:1d:1a:82:d4:28: 65:8d:0a:10:59:54:b8:e8:69:09:8c:73:33:23:53:84:c4:6e: b0:aa:4b:86:ea:93:59:3b:93:87:6c:48:d9:b4:24:cf:8a:21: 0c:6e:a3:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHNl4A891U/wFUdjbyngeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1ODg2MDRkMjViODdiODJmZDEyNTlkZmUyOTRjZDhmYjlm ZjQ5YjQwHhcNMjUxMjA2MTAwMjI1WhcNMjUxMjA3MTAwMjI1WjAzMTEwLwYDVQQD EyhmYjdiNjVhNDU3MGUxZDgxMTNkNzkzODI1ZDBmMTZiZDJkMzNjMzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrnVNvlQqWIDHBPBv5Qw9xeuGm87 2R+pt91VQ8bMxjQbFgnSV86cqeGpJdyUI5GRz89dlZXtqZlXTwFNpQMit9x49YB4 phpM41HCdO9BJvFLY8aT1DauH/MLbsVbfIN8aAHafBX5EV4k/lOCcOhp46+O3M6G nnEvAa1wYb3ccbZbs/zo0fIa3EfC9hkkQjSQZr+ZsFxNKJhHbeNQ2sF4ZXnXhFO+ SNoMqwgBVZRyGr9QLqugaP0aaeblnz2gzJ0MPtJPA2nSyQF51CBrqyh+OzVvZChW 3Fs71NjPiPVQDaZnM8Prxgsox5CP/ttgWnnb1jzsK9Ot/PaS8ye3qKgiTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPt7ZaRXDh2BE9eTgl0PFr0tM8MbMB8GA1UdIwQY MBaAFKWIYE0luHuC/RJZ3+KUzY+5/0m0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC81MTBhNGUtNjZlZi00ZGMxLTgwM2It MjBkZGRiYzEyODFkLzEvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC81MTBhNGUtNjZlZi00ZGMxLTgwM2ItMjBkZGRiYzEyODFk LzEvcFloZ1RTVzRlNEw5RWxuZjRwVE5qN25fU2JRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVM8wwwH q7/aTayPjqREiyBPJNTXzpP6A4EbVO8kL+oHvfMS5s/v/G5rmNcjoExR2QLPNTAA Y0rMJwo61i/VkO0RVsX38PLiRA9vo+wOxNAOmsmY5BOA3Y8VCMAPWrNVzaQkR7rW Hl7cghrkd/naMgEc22GRNLWNXTwApXoiU5potYLFT7ogH4u3mYArzchYzJVtlbSd j2A9lU98TZvwSHHxsrYFP88CX1WqFxBLvhqh5X20f8u2K6X2TFE1vecLImreLBtn tpE5lEKZuiITjU4RXh0agtQoZY0KEFlUuOhpCYxzMyNThMRusKpLhuqTWTuTh2xI 2bQkz4ohDG6jgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:55:14 2025 by rpki-client