This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft File: PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft (raw, json) Hash identifier: O41YJpkLIVNir6YeCeDizYdpfjex3lnIoq9czJOoHoY= Subject key identifier: 9A:7F:10:C7:6F:D0:A9:80:31:6D:A0:10:98:B3:3C:54:FD:7E:85:E3 Authority key identifier: 3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07 Certificate issuer: /CN=3d82f1fce008bcc725ddbbe7067451dd82059307 Certificate serial: 019B1382BE8F13B7B8D9341D4A5D87409429 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft Manifest number: 01C5 Signing time: Fri 12 Dec 2025 17:01:34 +0000 Manifest this update: Fri 12 Dec 2025 17:01:34 +0000 Manifest next update: Sat 13 Dec 2025 17:01:34 +0000 Files and hashes: 1: PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl (hash: 3PKXSg3FAqaagiQvZt/TGVjajxzSTuWGbcO4L8ZbklU=) 2: TonV6li5yUkoZ-CnaxO8HKBagJ8.roa (hash: XnEwLGsQ6FECYx0FnlaZRoMgPrGS5ObC7JCUywQQ//c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 16:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:82:be:8f:13:b7:b8:d9:34:1d:4a:5d:87:40:94:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d82f1fce008bcc725ddbbe7067451dd82059307 Validity Not Before: Dec 12 17:01:34 2025 GMT Not After : Dec 13 17:01:34 2025 GMT Subject: CN=9a7f10c76fd0a980316da01098b33c54fd7e85e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:09:0e:c5:5f:b9:7a:17:0c:b9:b1:30:8b:a5: 56:33:38:68:66:47:62:cb:ec:8e:c5:2e:98:67:a3: fb:1d:cf:73:ff:68:44:8a:7d:e1:66:55:2b:f7:ba: 00:fe:97:c1:ce:04:2e:f4:2a:4c:22:02:f5:28:f5: 10:95:d3:44:39:08:c4:63:25:10:06:31:de:65:9c: d3:c6:18:17:64:32:82:27:52:8e:8c:45:5e:39:c9: 86:51:48:01:8d:5a:da:c9:db:4b:8f:72:06:d1:70: 52:46:60:6c:b7:b9:67:c3:b2:f6:5b:28:57:8e:88: 96:72:1c:ac:e2:d8:67:b7:37:ac:86:9c:d9:b6:50: 63:77:81:e3:81:90:10:ac:5e:6e:22:ff:d5:02:ad: e0:06:92:c4:52:8c:49:6e:5e:12:51:3f:f4:8b:b5: 25:78:bb:fa:49:59:6b:7e:33:53:64:2b:bd:3e:9a: 36:c4:4e:08:16:04:b5:2d:11:c6:f0:cf:7b:0f:7b: e9:79:8b:32:d2:bd:db:e2:67:e3:b5:b7:ab:04:33: 59:50:72:1b:97:de:6d:b3:7b:d7:aa:fd:a4:36:27: 7c:04:79:c6:57:59:0e:b4:92:bc:43:3a:d2:13:96: be:57:b1:4a:4c:11:fc:20:82:9d:cb:f9:cc:43:ad: 45:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7F:10:C7:6F:D0:A9:80:31:6D:A0:10:98:B3:3C:54:FD:7E:85:E3 X509v3 Authority Key Identifier: keyid:3D:82:F1:FC:E0:08:BC:C7:25:DD:BB:E7:06:74:51:DD:82:05:93:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYLx_OAIvMcl3bvnBnRR3YIFkwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9c4a77-0c7e-494c-a231-bf1e99c0cf3f/1/PYLx_OAIvMcl3bvnBnRR3YIFkwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:82:69:66:6f:d8:37:7b:1c:26:9b:14:13:74:9c:d6:ef:99: af:c0:1f:d1:0f:12:54:e7:f7:db:a6:4a:b3:ee:d4:67:fb:28: a3:30:e7:46:6d:02:68:28:e6:7b:ea:4a:a1:c4:5b:c5:dc:ea: 43:82:0a:e2:12:38:09:79:ac:28:83:cc:4a:ba:ad:64:50:f6: 64:c2:2b:80:88:96:d9:4c:93:ac:14:21:25:2a:9f:75:40:61: b0:81:97:d8:19:a0:c2:97:24:c0:c1:fe:03:d6:33:65:26:80: 36:ef:c3:72:da:a8:79:8d:16:00:2c:29:91:4e:da:81:f3:ba: d4:de:b2:65:82:91:7b:85:24:d1:50:b0:04:21:d7:d5:77:17: 93:7b:cf:a2:40:49:59:f1:06:c8:14:5b:9b:18:db:76:45:7b: a0:80:1a:1a:b6:f4:7e:2f:5a:3e:08:8c:3c:9a:11:62:76:64: b6:a2:78:1d:c2:e6:bb:3b:7e:28:4e:6f:0d:fa:c8:16:42:df: a5:37:e7:99:ae:39:40:39:32:ee:e7:07:ce:c2:c1:d1:e2:01: a1:44:5d:f4:79:96:f4:34:13:7f:8f:c4:da:0c:00:99:9c:60: 2f:20:1c:d0:7b:47:ce:2b:11:33:4c:07:38:e4:c2:c1:57:b2: 1d:2f:51:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsTgr6PE7e42TQdSl2HQJQpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkODJmMWZjZTAwOGJjYzcyNWRkYmJlNzA2NzQ1MWRkODIw NTkzMDcwHhcNMjUxMjEyMTcwMTM0WhcNMjUxMjEzMTcwMTM0WjAzMTEwLwYDVQQD Eyg5YTdmMTBjNzZmZDBhOTgwMzE2ZGEwMTA5OGIzM2M1NGZkN2U4NWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAkOxV+5ehcMubEwi6VWMzhoZkdi y+yOxS6YZ6P7Hc9z/2hEin3hZlUr97oA/pfBzgQu9CpMIgL1KPUQldNEOQjEYyUQ BjHeZZzTxhgXZDKCJ1KOjEVeOcmGUUgBjVraydtLj3IG0XBSRmBst7lnw7L2WyhX joiWchys4thntzeshpzZtlBjd4HjgZAQrF5uIv/VAq3gBpLEUoxJbl4SUT/0i7Ul eLv6SVlrfjNTZCu9Ppo2xE4IFgS1LRHG8M97D3vpeYsy0r3b4mfjtberBDNZUHIb l95ts3vXqv2kNid8BHnGV1kOtJK8QzrSE5a+V7FKTBH8IIKdy/nMQ61FtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJp/EMdv0KmAMW2gEJizPFT9foXjMB8GA1UdIwQY MBaAFD2C8fzgCLzHJd275wZ0Ud2CBZMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFlMeF9PQUl2TWNsM2J2bkJuUlIzWUlGa3djLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85YzRhNzctMGM3ZS00OTRjLWEyMzEt YmYxZTk5YzBjZjNmLzEvUFlMeF9PQUl2TWNsM2J2bkJuUlIzWUlGa3djLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi85YzRhNzctMGM3ZS00OTRjLWEyMzEtYmYxZTk5YzBjZjNm LzEvUFlMeF9PQUl2TWNsM2J2bkJuUlIzWUlGa3djLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIYJpZm/Y N3scJpsUE3Sc1u+Zr8Af0Q8SVOf326ZKs+7UZ/soozDnRm0CaCjme+pKocRbxdzq Q4IK4hI4CXmsKIPMSrqtZFD2ZMIrgIiW2UyTrBQhJSqfdUBhsIGX2BmgwpckwMH+ A9YzZSaANu/DctqoeY0WACwpkU7agfO61N6yZYKRe4Uk0VCwBCHX1XcXk3vPokBJ WfEGyBRbmxjbdkV7oIAaGrb0fi9aPgiMPJoRYnZktqJ4HcLmuzt+KE5vDfrIFkLf pTfnma45QDky7ucHzsLB0eIBoURd9HmW9DQTf4/E2gwAmZxgLyAc0HtHzisRM0wH OOTCwVeyHS9RoQ== -----END CERTIFICATE-----Generated at Sat Dec 13 02:16:24 2025 by rpki-client