This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft File: RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft (raw, json) Hash identifier: RjogyeZDoxtt60/Q0RTjQZDLtATJWyg7SvZXo9+la9M= Subject key identifier: 86:FF:7B:94:19:07:8C:AC:A9:C9:23:03:A5:D2:FB:AC:F1:03:4B:ED Authority key identifier: 47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41 Certificate issuer: /CN=472694d8a399a3a66f442ec72295c754acbbad41 Certificate serial: 019B112584EE2885B929C539E0C5F7D2DEAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft Manifest number: 164A Signing time: Fri 12 Dec 2025 06:00:29 +0000 Manifest this update: Fri 12 Dec 2025 06:00:29 +0000 Manifest next update: Sat 13 Dec 2025 06:00:29 +0000 Files and hashes: 1: HDxSohX-IDNPW8pjacRSI1H_PKk.roa (hash: LmMZXQdXNsqjvcfV+qIzu55UsIszcW5rLny8ykXmqHQ=) 2: RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl (hash: tZ4xeEPXyvtunDHh9Gsn8/SBS0JsURbyPpGT8Lo2MfI=) 3: ZTfX1eIYwu2teEKHLHrabIZkJWw.roa (hash: XbM05VStZazqLzFaHm9tyYba1eH2G3CcfziDsh45rsc=) 4: cOeYrSQu-ObbQyfYQeLjcuYaLQ0.roa (hash: GdluFLbgNrS7xoyapuqIK4cx1yZ3FPC1FpSx8lT9u+Y=) 5: jCdWeScDFXpWXYVASAbWW6Vizq0.roa (hash: 0snKT5LdHK0wV53UVPxEtQMU5HqJbqkJ3jy1nr8IbbU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:25:84:ee:28:85:b9:29:c5:39:e0:c5:f7:d2:de:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=472694d8a399a3a66f442ec72295c754acbbad41 Validity Not Before: Dec 12 06:00:29 2025 GMT Not After : Dec 13 06:00:29 2025 GMT Subject: CN=86ff7b9419078caca9c92303a5d2fbacf1034bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7f:28:fa:56:08:bf:10:c8:1f:e6:e4:bd:3c: 5f:11:5a:00:a9:be:96:12:f2:e0:9c:83:aa:46:e6: 48:80:8a:c2:3c:79:17:8c:f3:bc:3c:e3:e9:19:38: 39:5a:36:be:de:38:63:7e:63:d9:8d:e3:98:37:a1: 74:9f:c6:6e:7b:32:c9:cf:61:08:18:58:3b:9d:ff: 70:a1:ca:d8:ba:cb:38:3a:e7:00:ae:85:b1:69:34: aa:5a:ca:8c:d3:3b:df:bc:8a:b5:40:3e:ce:eb:e8: ee:ad:19:18:ef:d1:f0:70:b5:35:f3:34:81:2e:a5: d9:39:1f:e2:16:d3:39:4e:8d:e5:b5:b8:e9:a3:f5: 80:f5:41:2d:94:14:e6:28:0e:78:ad:56:4a:ee:df: bf:15:c2:fc:80:3a:67:86:5a:27:ab:69:43:70:dd: b4:aa:a8:d2:e5:d4:00:39:ba:df:fa:86:7e:a3:12: 95:c0:dd:9a:18:23:eb:28:d8:16:7c:69:9e:de:6f: 2c:55:2a:bb:02:84:bd:6b:c8:76:4c:6e:c9:24:76: 7d:4c:37:c8:ed:e1:f3:fd:50:88:17:80:d3:b1:15: 97:c2:19:07:ff:8d:4c:4d:09:51:b0:9e:7c:3c:90: fc:71:47:a6:8b:ec:cb:bc:bd:24:af:9b:35:c3:2e: 1e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FF:7B:94:19:07:8C:AC:A9:C9:23:03:A5:D2:FB:AC:F1:03:4B:ED X509v3 Authority Key Identifier: keyid:47:26:94:D8:A3:99:A3:A6:6F:44:2E:C7:22:95:C7:54:AC:BB:AD:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ddc26e-31da-43dd-b4d1-063a0881a6d2/1/RyaU2KOZo6ZvRC7HIpXHVKy7rUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:63:6a:67:ee:3b:a5:26:d2:48:30:99:31:11:5c:83:2d:e7: bc:c4:78:1b:e7:45:6d:95:b5:55:eb:c1:bd:05:51:da:c8:50: 58:86:03:32:ec:37:85:14:21:5e:f9:92:d7:1b:1d:f8:8d:b3: 03:31:1d:95:d5:3c:15:c5:cf:a0:5f:30:cd:c7:0e:34:89:90: 62:07:67:a8:85:5f:a1:d0:d7:43:c6:b6:1b:5f:e6:2e:f4:83: d8:ee:9f:95:0e:40:50:7f:54:f2:54:72:8d:9f:da:cb:b2:19: b1:f9:d7:9b:d3:a4:07:59:2a:38:32:70:70:6d:b6:7a:45:20: c9:80:da:8d:ac:9f:fc:5d:c5:72:94:c0:f5:48:d9:de:70:51: 15:7e:d2:e3:19:99:74:72:85:29:61:ed:2e:e2:b1:bf:4c:96: b9:27:3b:ec:1a:8d:ab:70:be:0a:c0:40:e8:19:eb:2c:9b:a5: 76:5f:20:31:d2:e8:88:7a:d2:4e:2a:f8:1e:9c:a5:a0:94:3a: 1d:ef:20:c4:60:c4:3b:7c:78:99:28:49:8a:04:d8:ea:cf:73: 24:ba:d6:30:92:3e:56:79:de:7b:70:7a:b6:d8:26:6a:85:68: 49:36:41:42:44:16:5e:e2:9b:60:0a:2c:14:3e:96:b3:29:ed: a7:95:16:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJYTuKIW5KcU54MX30t6uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MjY5NGQ4YTM5OWEzYTY2ZjQ0MmVjNzIyOTVjNzU0YWNi YmFkNDEwHhcNMjUxMjEyMDYwMDI5WhcNMjUxMjEzMDYwMDI5WjAzMTEwLwYDVQQD Eyg4NmZmN2I5NDE5MDc4Y2FjYTljOTIzMDNhNWQyZmJhY2YxMDM0YmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH8o+lYIvxDIH+bkvTxfEVoAqb6W EvLgnIOqRuZIgIrCPHkXjPO8POPpGTg5Wja+3jhjfmPZjeOYN6F0n8ZuezLJz2EI GFg7nf9wocrYuss4OucAroWxaTSqWsqM0zvfvIq1QD7O6+jurRkY79HwcLU18zSB LqXZOR/iFtM5To3ltbjpo/WA9UEtlBTmKA54rVZK7t+/FcL8gDpnhlonq2lDcN20 qqjS5dQAObrf+oZ+oxKVwN2aGCPrKNgWfGme3m8sVSq7AoS9a8h2TG7JJHZ9TDfI 7eHz/VCIF4DTsRWXwhkH/41MTQlRsJ58PJD8cUemi+zLvL0kr5s1wy4eXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIb/e5QZB4ysqckjA6XS+6zxA0vtMB8GA1UdIwQY MBaAFEcmlNijmaOmb0QuxyKVx1Ssu61BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnlhVTJLT1pvNlp2UkM3SElwWEhWS3k3clVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9kZGMyNmUtMzFkYS00M2RkLWI0ZDEt MDYzYTA4ODFhNmQyLzEvUnlhVTJLT1pvNlp2UkM3SElwWEhWS3k3clVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9kZGMyNmUtMzFkYS00M2RkLWI0ZDEtMDYzYTA4ODFhNmQy LzEvUnlhVTJLT1pvNlp2UkM3SElwWEhWS3k3clVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjWNqZ+47 pSbSSDCZMRFcgy3nvMR4G+dFbZW1VevBvQVR2shQWIYDMuw3hRQhXvmS1xsd+I2z AzEdldU8FcXPoF8wzccONImQYgdnqIVfodDXQ8a2G1/mLvSD2O6flQ5AUH9U8lRy jZ/ay7IZsfnXm9OkB1kqODJwcG22ekUgyYDajayf/F3FcpTA9UjZ3nBRFX7S4xmZ dHKFKWHtLuKxv0yWuSc77BqNq3C+CsBA6BnrLJuldl8gMdLoiHrSTir4HpyloJQ6 He8gxGDEO3x4mShJigTY6s9zJLrWMJI+Vnnee3B6ttgmaoVoSTZBQkQWXuKbYAos FD6Wsyntp5UWpg== -----END CERTIFICATE-----Generated at Fri Dec 12 08:02:28 2025 by rpki-client