This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft File: pyRyw_AEsLcfEY6HK5g4pODHIcc.mft (raw, json) Hash identifier: taIL/8CMDZ6dPR+YpCBiY27X1TnKe3xvvwIVtDtfNwo= Subject key identifier: 4A:6E:62:CD:42:E0:BD:E7:3D:99:0B:BA:CE:B9:22:ED:21:8B:1D:F1 Authority key identifier: A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7 Certificate issuer: /CN=a72472c3f004b0b71f118e872b9838a4e0c721c7 Certificate serial: 019AF1D1EFF451AE7E546D7FF315F53C8C6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft Manifest number: 02B1 Signing time: Sat 06 Dec 2025 04:00:58 +0000 Manifest this update: Sat 06 Dec 2025 04:00:58 +0000 Manifest next update: Sun 07 Dec 2025 04:00:58 +0000 Files and hashes: 1: 6DpWZbBL9E7B4j1aF-rxc-G8DWI.roa (hash: SV3cobOGrBeYAeMDxv8oIoNqGXu5Q+QcGtKFI/sHBB4=) 2: jSbiesDgF1BjYr1K6jnTWbKgx4o.roa (hash: Oe/Y66dWQyjSuf4Xd/fvNzxL7OXnyluh/diNnzBb2/g=) 3: pyRyw_AEsLcfEY6HK5g4pODHIcc.crl (hash: 9cqq4PzHljUn45+wKIHOq5GNXnmIylQ9aet/LNsuEmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ef:f4:51:ae:7e:54:6d:7f:f3:15:f5:3c:8c:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a72472c3f004b0b71f118e872b9838a4e0c721c7 Validity Not Before: Dec 6 04:00:58 2025 GMT Not After : Dec 7 04:00:58 2025 GMT Subject: CN=4a6e62cd42e0bde73d990bbaceb922ed218b1df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:48:4d:93:32:8c:97:aa:20:4f:52:ee:29:7a: 86:e6:d1:f6:5a:c7:33:3c:c5:0b:96:4a:d9:0f:95: 53:51:7d:a7:c5:81:3e:fe:41:e9:e2:65:98:0d:67: e4:c5:96:91:d2:25:e2:1a:0d:71:48:0e:c1:4f:81: a7:ff:87:64:51:bd:9c:31:c9:14:95:39:2c:07:b1: d6:f4:7a:16:69:6a:fe:f1:31:8f:70:94:a1:a0:70: 5c:a7:d5:14:ae:92:13:69:34:40:5a:c5:75:08:8d: 0e:ae:96:ca:37:db:73:1c:b5:a1:ce:af:c0:99:de: 67:67:f2:c2:48:00:71:f6:e0:e7:4e:ec:97:a9:1f: 86:1b:5e:8c:0f:16:2c:e7:1b:32:88:51:bd:9c:23: d4:08:33:0c:07:8e:90:23:49:db:e0:48:71:8f:b6: 22:c7:b2:89:be:11:7a:04:8c:a6:9c:d1:d0:58:6d: 6c:61:4c:cd:78:31:09:b5:05:df:77:44:0f:bc:54: a9:26:50:74:d5:1a:e5:23:82:69:15:a7:bc:95:21: 7d:f1:0a:ad:f5:90:c7:9f:d5:06:2e:8d:f9:75:dd: fb:39:97:87:e2:6f:cd:3e:e8:71:63:f7:7d:89:43: aa:60:67:d7:27:56:c9:da:18:f7:d9:3c:36:db:0a: 96:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6E:62:CD:42:E0:BD:E7:3D:99:0B:BA:CE:B9:22:ED:21:8B:1D:F1 X509v3 Authority Key Identifier: keyid:A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:1b:76:84:9a:54:39:82:7b:7b:86:23:da:14:00:83:e6:d9: 52:16:7f:8e:be:2d:32:e6:5b:62:c8:d5:21:5a:44:3a:02:99: f8:d5:c5:b1:ad:ba:49:4a:17:ea:79:cc:6f:e7:99:67:e1:10: bd:21:1c:c8:9a:07:69:bc:6e:aa:a2:d8:a0:0b:a7:4f:59:14: cb:42:ea:43:03:02:02:82:94:94:87:c5:a9:66:01:f2:dc:61: 3f:0b:dc:86:f6:b7:82:f6:73:53:54:2c:77:e6:b3:26:7f:97: b2:9a:45:60:87:93:94:70:cc:cb:18:71:66:c3:42:ba:98:11: 57:91:42:fe:b4:89:27:f3:72:74:f0:ef:0a:a9:a1:b3:8d:80: e4:b8:80:6d:94:fa:d6:7a:55:04:1d:3a:db:c3:2a:0b:9b:f7: fa:35:ff:72:c4:a8:66:65:40:11:1b:40:90:76:83:89:bb:3d: d3:20:2b:4d:06:65:51:8a:1b:b9:28:1f:e0:88:ec:0d:7d:c2: 0c:ba:23:2e:b0:d3:87:ec:a2:29:04:fd:dd:83:81:7b:87:a5: 2d:f2:4d:ad:bd:48:18:74:49:75:39:3a:a8:68:f6:da:3e:2a: c4:14:f9:c2:eb:33:ac:e3:d0:5c:73:6d:52:b2:ed:81:f5:e6: 5e:8d:84:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0e/0Ua5+VG1/8xX1PIxqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MjQ3MmMzZjAwNGIwYjcxZjExOGU4NzJiOTgzOGE0ZTBj NzIxYzcwHhcNMjUxMjA2MDQwMDU4WhcNMjUxMjA3MDQwMDU4WjAzMTEwLwYDVQQD Eyg0YTZlNjJjZDQyZTBiZGU3M2Q5OTBiYmFjZWI5MjJlZDIxOGIxZGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0hNkzKMl6ogT1LuKXqG5tH2Wscz PMULlkrZD5VTUX2nxYE+/kHp4mWYDWfkxZaR0iXiGg1xSA7BT4Gn/4dkUb2cMckU lTksB7HW9HoWaWr+8TGPcJShoHBcp9UUrpITaTRAWsV1CI0OrpbKN9tzHLWhzq/A md5nZ/LCSABx9uDnTuyXqR+GG16MDxYs5xsyiFG9nCPUCDMMB46QI0nb4Ehxj7Yi x7KJvhF6BIymnNHQWG1sYUzNeDEJtQXfd0QPvFSpJlB01RrlI4JpFae8lSF98Qqt 9ZDHn9UGLo35dd37OZeH4m/NPuhxY/d9iUOqYGfXJ1bJ2hj32Tw22wqWgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpuYs1C4L3nPZkLus65Iu0hix3xMB8GA1UdIwQY MBaAFKckcsPwBLC3HxGOhyuYOKTgxyHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHlSeXdfQUVzTGNmRVk2SEs1ZzRwT0RISWNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85OThhMWQtMzA5NS00NjQzLTg3M2Qt ZDhjOTUwY2FjYWI1LzEvcHlSeXdfQUVzTGNmRVk2SEs1ZzRwT0RISWNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS85OThhMWQtMzA5NS00NjQzLTg3M2QtZDhjOTUwY2FjYWI1 LzEvcHlSeXdfQUVzTGNmRVk2SEs1ZzRwT0RISWNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORt2hJpU OYJ7e4Yj2hQAg+bZUhZ/jr4tMuZbYsjVIVpEOgKZ+NXFsa26SUoX6nnMb+eZZ+EQ vSEcyJoHabxuqqLYoAunT1kUy0LqQwMCAoKUlIfFqWYB8txhPwvchva3gvZzU1Qs d+azJn+XsppFYIeTlHDMyxhxZsNCupgRV5FC/rSJJ/NydPDvCqmhs42A5LiAbZT6 1npVBB0628MqC5v3+jX/csSoZmVAERtAkHaDibs90yArTQZlUYobuSgf4IjsDX3C DLojLrDTh+yiKQT93YOBe4elLfJNrb1IGHRJdTk6qGj22j4qxBT5wuszrOPQXHNt UrLtgfXmXo2E0g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:06 2025 by rpki-client