This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft File: ryto8Mg63Zo6O4arJPuRCpYCYsY.mft (raw, json) Hash identifier: iNohyqJtY7q8K4BmPjNq4Wp4i74W8OcFcKfoYWDbBf4= Subject key identifier: E3:B3:F7:8C:1B:D4:F4:99:F6:5C:55:52:EE:CE:A7:B2:DB:6D:41:7F Authority key identifier: AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6 Certificate issuer: /CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6 Certificate serial: 019AF23F79FF10AF54CC672E810D8AB9E8A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft Manifest number: 12D3 Signing time: Sat 06 Dec 2025 06:00:37 +0000 Manifest this update: Sat 06 Dec 2025 06:00:37 +0000 Manifest next update: Sun 07 Dec 2025 06:00:37 +0000 Files and hashes: 1: oS-zf8LykP6dfOwgBh2b6irIbAA.roa (hash: es5RiKPg30TZ9v6YIMiSfrSdGJ7vWC4nZhRx1zHM27Q=) 2: ryto8Mg63Zo6O4arJPuRCpYCYsY.crl (hash: LBOssFsJj/S7sE9ZcOaIucsaVvccm40lFNguYoSy1Ew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:79:ff:10:af:54:cc:67:2e:81:0d:8a:b9:e8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af2b68f0c83add9a3a3b86ab24fb910a960262c6 Validity Not Before: Dec 6 06:00:37 2025 GMT Not After : Dec 7 06:00:37 2025 GMT Subject: CN=e3b3f78c1bd4f499f65c5552eecea7b2db6d417f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:07:00:56:99:0c:49:04:f9:25:cb:46:7b:8f: 48:50:50:a6:2d:8a:db:d9:84:bb:87:52:02:3b:93: c7:ce:00:45:b3:08:6d:49:05:3e:02:30:38:7c:70: a7:e0:10:a8:19:67:1d:73:5a:c3:fa:6f:7f:6c:1c: 53:b9:04:56:be:e4:88:c2:ed:0c:de:e4:7f:4b:12: 1b:18:d6:08:79:3c:f9:ca:e4:37:56:76:c3:46:7f: d5:b7:5f:47:d2:68:93:fd:bf:42:15:36:77:dc:db: 20:05:67:4c:f1:94:72:c9:73:0f:46:56:96:e4:07: 6d:b9:fc:8d:7a:33:44:b8:37:b8:79:2c:c1:d2:aa: 01:4a:7d:72:db:7a:6f:8a:b9:4d:24:a7:75:6c:66: 61:e3:31:c9:fa:74:a1:7c:1f:ed:e2:89:12:1f:9e: e8:42:42:17:cc:93:cd:4f:65:c0:ec:bb:85:2d:94: 45:8c:41:d5:59:4e:fc:4f:1c:67:46:90:2b:69:b9: 8c:31:38:9c:a0:f0:4d:e3:a4:d8:a5:7f:cf:a1:a2: b3:89:3b:53:86:1d:fe:89:00:cf:2d:8d:05:68:5c: d9:85:ee:32:2b:d9:d6:06:7d:c3:6f:7d:bc:84:f2: d8:e0:f2:7d:d2:6f:44:76:8f:b2:ae:30:58:97:9d: fc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B3:F7:8C:1B:D4:F4:99:F6:5C:55:52:EE:CE:A7:B2:DB:6D:41:7F X509v3 Authority Key Identifier: keyid:AF:2B:68:F0:C8:3A:DD:9A:3A:3B:86:AB:24:FB:91:0A:96:02:62:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryto8Mg63Zo6O4arJPuRCpYCYsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/793e00-0c53-49c4-a51b-eda316a2afb8/1/ryto8Mg63Zo6O4arJPuRCpYCYsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:74:6a:67:c6:fc:db:fe:00:d1:96:90:30:f6:5d:21:14:27: 0b:f1:54:24:43:65:3a:4d:bd:6a:4b:3e:5e:01:05:58:b2:67: cb:76:db:ac:c0:b2:98:82:de:68:ad:e6:cb:ed:d8:28:96:32: 39:7d:0c:da:0d:18:63:82:6b:73:a6:2d:ee:9b:c4:be:2f:a1: f4:f5:db:85:e7:ac:c8:c4:bb:95:fa:fb:06:4f:a4:49:c8:25: 2c:95:26:e8:8d:f7:3d:d2:88:d1:11:8d:46:65:d4:eb:7a:74: 9f:b5:5c:c5:8d:23:7f:4f:a1:a8:8b:ad:06:34:cb:94:e9:48: 1c:58:fe:c7:3b:40:16:62:7d:24:56:82:26:1d:d1:b7:99:a2: c2:3b:e3:99:ba:c9:ec:1b:00:4e:68:90:22:d4:b7:ce:fe:ef: 97:fd:aa:fa:c8:28:5b:b0:f6:69:8e:ab:ea:0d:34:11:01:77: 9a:b6:32:16:19:e0:e1:9e:b0:a2:7b:fb:56:58:6b:9d:69:b5: bc:7e:d6:a6:b8:f4:a1:54:b5:be:3d:59:b4:5b:9c:e7:4b:13: 7f:5b:41:00:bf:d4:f5:c1:24:19:66:ac:ad:d1:c4:29:07:95: d1:66:62:ae:52:60:f3:9a:b3:ef:4d:71:cd:e3:1f:1c:c5:20: 68:df:7b:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3n/EK9UzGcugQ2KueigMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMmI2OGYwYzgzYWRkOWEzYTNiODZhYjI0ZmI5MTBhOTYw MjYyYzYwHhcNMjUxMjA2MDYwMDM3WhcNMjUxMjA3MDYwMDM3WjAzMTEwLwYDVQQD EyhlM2IzZjc4YzFiZDRmNDk5ZjY1YzU1NTJlZWNlYTdiMmRiNmQ0MTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQcAVpkMSQT5JctGe49IUFCmLYrb 2YS7h1ICO5PHzgBFswhtSQU+AjA4fHCn4BCoGWcdc1rD+m9/bBxTuQRWvuSIwu0M 3uR/SxIbGNYIeTz5yuQ3VnbDRn/Vt19H0miT/b9CFTZ33NsgBWdM8ZRyyXMPRlaW 5AdtufyNejNEuDe4eSzB0qoBSn1y23pvirlNJKd1bGZh4zHJ+nShfB/t4okSH57o QkIXzJPNT2XA7LuFLZRFjEHVWU78TxxnRpArabmMMTicoPBN46TYpX/PoaKziTtT hh3+iQDPLY0FaFzZhe4yK9nWBn3Db328hPLY4PJ90m9Edo+yrjBYl538bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOz94wb1PSZ9lxVUu7Op7LbbUF/MB8GA1UdIwQY MBaAFK8raPDIOt2aOjuGqyT7kQqWAmLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnl0bzhNZzYzWm82TzRhckpQdVJDcFlDWXNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83OTNlMDAtMGM1My00OWM0LWE1MWIt ZWRhMzE2YTJhZmI4LzEvcnl0bzhNZzYzWm82TzRhckpQdVJDcFlDWXNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy83OTNlMDAtMGM1My00OWM0LWE1MWItZWRhMzE2YTJhZmI4 LzEvcnl0bzhNZzYzWm82TzRhckpQdVJDcFlDWXNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu3RqZ8b8 2/4A0ZaQMPZdIRQnC/FUJENlOk29aks+XgEFWLJny3bbrMCymILeaK3my+3YKJYy OX0M2g0YY4Jrc6Yt7pvEvi+h9PXbheesyMS7lfr7Bk+kScglLJUm6I33PdKI0RGN RmXU63p0n7VcxY0jf0+hqIutBjTLlOlIHFj+xztAFmJ9JFaCJh3Rt5miwjvjmbrJ 7BsATmiQItS3zv7vl/2q+sgoW7D2aY6r6g00EQF3mrYyFhng4Z6wonv7VlhrnWm1 vH7Wprj0oVS1vj1ZtFuc50sTf1tBAL/U9cEkGWasrdHEKQeV0WZirlJg85qz701x zeMfHMUgaN976w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:17 2025 by rpki-client