This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft File: PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft (raw, json) Hash identifier: I8+MdrneVQBdyMCAzudQdqRk0PIC6mbI1LRy86mlEB8= Subject key identifier: 41:D7:BF:9E:2B:C7:D4:7E:64:9A:DB:8D:CE:4B:82:84:62:F6:41:3C Authority key identifier: 3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE Certificate issuer: /CN=3d8500bcde496899c5d1fa924de4e7827d9916ce Certificate serial: 019B337B53FBB34DF704AD8B154EF734EA43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft Manifest number: 0F1D Signing time: Thu 18 Dec 2025 22:01:18 +0000 Manifest this update: Thu 18 Dec 2025 22:01:18 +0000 Manifest next update: Fri 19 Dec 2025 22:01:18 +0000 Files and hashes: 1: PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl (hash: T5F1e25Zv2Qg12+1mPnGG9VggYwA8p84iKmpQq7wZr8=) 2: soI28UokBEmUA5YZ7-2YS-kO60w.roa (hash: x5boSWZM+Eb4DeBF9MHFVGtkPRePQy7kYVWQIl5DODM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:53:fb:b3:4d:f7:04:ad:8b:15:4e:f7:34:ea:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8500bcde496899c5d1fa924de4e7827d9916ce Validity Not Before: Dec 18 22:01:18 2025 GMT Not After : Dec 19 22:01:18 2025 GMT Subject: CN=41d7bf9e2bc7d47e649adb8dce4b828462f6413c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bd:f9:48:f2:c5:9d:ab:34:10:1c:91:5e:be: 42:29:da:d1:a3:0c:78:5a:76:2a:3e:42:f7:2a:7e: 47:93:73:07:6b:71:f1:ad:2c:3e:76:7d:7c:13:f4: 44:f2:e7:3c:4b:ec:e4:14:6e:af:4c:98:bc:6d:9f: 54:cb:4f:f0:62:75:04:73:2c:72:b0:ce:d1:ee:a7: 5f:2c:b6:ea:e9:51:6e:d0:b9:4e:68:e8:22:16:ae: 58:b0:6f:4b:b0:1b:1f:d0:2d:d0:ee:47:56:29:61: 71:c6:0c:35:c4:c2:fa:05:20:c1:46:5f:2c:c5:1a: e8:b7:ce:04:59:17:a3:ab:ec:5e:9d:28:8c:2e:94: 16:61:80:a1:3c:b8:80:ab:6a:12:a6:30:5d:ef:6c: c1:1f:ac:ee:c1:f4:50:d1:f9:49:76:a4:0b:fc:b1: d7:dd:94:1f:03:16:0b:f6:54:e4:c8:b9:f7:d5:46: bd:4e:79:05:49:88:2e:2f:03:e6:5b:d5:cc:7a:9f: 02:9f:82:18:f9:b4:ab:20:2c:19:0c:6c:7d:a2:3c: b5:00:98:79:57:e9:43:c5:ca:47:81:af:ca:06:e4: 79:00:19:73:a4:09:40:2e:c9:45:91:8f:c9:0f:a8: e1:a4:72:61:b1:a8:af:19:f7:0f:46:cc:e8:d6:69: 69:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:D7:BF:9E:2B:C7:D4:7E:64:9A:DB:8D:CE:4B:82:84:62:F6:41:3C X509v3 Authority Key Identifier: keyid:3D:85:00:BC:DE:49:68:99:C5:D1:FA:92:4D:E4:E7:82:7D:99:16:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYUAvN5JaJnF0fqSTeTngn2ZFs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/419b5d-14aa-4e36-9df7-7526c9f05cd8/1/PYUAvN5JaJnF0fqSTeTngn2ZFs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:e4:2d:e5:5b:82:dd:f5:7f:14:d9:69:e2:47:e6:5a:8e:5a: 55:2e:c4:8d:b5:6b:00:c1:03:df:61:39:aa:25:df:6d:39:13: 04:4e:dd:72:04:a3:5e:37:67:fa:c8:a4:85:b2:f9:be:a2:cc: 9e:20:9f:1b:99:36:ec:ce:f0:ab:52:c0:92:5a:46:c8:ac:55: 0d:c2:9d:2c:f1:58:a3:dc:5f:fe:63:25:2d:ec:89:30:59:d0: 5a:8a:6f:9b:0e:b3:be:d2:6a:75:47:82:5f:5f:9d:6d:cf:76: 67:6b:39:a3:a1:a2:a2:0f:60:1b:75:cd:58:ac:33:fe:7a:d2: da:38:7c:88:de:ee:fa:fe:a0:c6:9e:e2:7c:4e:b2:7e:81:c4: dc:f8:39:2c:72:cf:63:52:25:fe:1a:92:04:12:3a:61:75:a0: 7e:00:46:f1:6b:20:81:c9:0f:ec:b7:fc:9f:02:62:de:f1:62: c3:1f:93:a0:4e:84:3d:63:2d:57:38:e8:82:5a:13:00:50:96: af:e4:eb:8e:fe:f7:ba:59:9d:37:bc:af:49:e8:96:0a:a4:a8: 74:37:f6:a4:71:d6:e9:a4:ca:d6:02:62:a7:e5:32:d7:15:ca: 73:f3:c5:63:1f:82:4e:c9:7a:f6:6a:25:47:7f:1c:70:93:76: ff:c6:21:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze1P7s033BK2LFU73NOpDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkODUwMGJjZGU0OTY4OTljNWQxZmE5MjRkZTRlNzgyN2Q5 OTE2Y2UwHhcNMjUxMjE4MjIwMTE4WhcNMjUxMjE5MjIwMTE4WjAzMTEwLwYDVQQD Eyg0MWQ3YmY5ZTJiYzdkNDdlNjQ5YWRiOGRjZTRiODI4NDYyZjY0MTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2L35SPLFnas0EByRXr5CKdrRowx4 WnYqPkL3Kn5Hk3MHa3HxrSw+dn18E/RE8uc8S+zkFG6vTJi8bZ9Uy0/wYnUEcyxy sM7R7qdfLLbq6VFu0LlOaOgiFq5YsG9LsBsf0C3Q7kdWKWFxxgw1xML6BSDBRl8s xRrot84EWRejq+xenSiMLpQWYYChPLiAq2oSpjBd72zBH6zuwfRQ0flJdqQL/LHX 3ZQfAxYL9lTkyLn31Ua9TnkFSYguLwPmW9XMep8Cn4IY+bSrICwZDGx9ojy1AJh5 V+lDxcpHga/KBuR5ABlzpAlALslFkY/JD6jhpHJhsaivGfcPRszo1mlp/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHXv54rx9R+ZJrbjc5LgoRi9kE8MB8GA1UdIwQY MBaAFD2FALzeSWiZxdH6kk3k54J9mRbOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFlVQXZONUphSm5GMGZxU1RlVG5nbjJaRnM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80MTliNWQtMTRhYS00ZTM2LTlkZjct NzUyNmM5ZjA1Y2Q4LzEvUFlVQXZONUphSm5GMGZxU1RlVG5nbjJaRnM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi80MTliNWQtMTRhYS00ZTM2LTlkZjctNzUyNmM5ZjA1Y2Q4 LzEvUFlVQXZONUphSm5GMGZxU1RlVG5nbjJaRnM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKOQt5VuC 3fV/FNlp4kfmWo5aVS7EjbVrAMED32E5qiXfbTkTBE7dcgSjXjdn+sikhbL5vqLM niCfG5k27M7wq1LAklpGyKxVDcKdLPFYo9xf/mMlLeyJMFnQWopvmw6zvtJqdUeC X1+dbc92Z2s5o6Giog9gG3XNWKwz/nrS2jh8iN7u+v6gxp7ifE6yfoHE3Pg5LHLP Y1Il/hqSBBI6YXWgfgBG8WsggckP7Lf8nwJi3vFiwx+ToE6EPWMtVzjogloTAFCW r+Trjv73ulmdN7yvSeiWCqSodDf2pHHW6aTK1gJip+Uy1xXKc/PFYx+CTsl69mol R38ccJN2/8Yhkg== -----END CERTIFICATE-----Generated at Fri Dec 19 01:45:40 2025 by rpki-client