This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft File: RYzFKgcHzDQKycf26QKLZLcCZ7w.mft (raw, json) Hash identifier: wqF8u5tNg+aHwLl05RaEaH6/4Xz51ifSaj0RxJUsPyE= Subject key identifier: 73:80:27:11:03:09:38:A0:96:DB:8E:E7:9D:F6:34:3A:C3:8C:7F:6E Authority key identifier: 45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC Certificate issuer: /CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc Certificate serial: 019B1125E53F85D2B7EF19EDAA66FA6CAFAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft Manifest number: 08C9 Signing time: Fri 12 Dec 2025 06:00:54 +0000 Manifest this update: Fri 12 Dec 2025 06:00:54 +0000 Manifest next update: Sat 13 Dec 2025 06:00:54 +0000 Files and hashes: 1: IkNC-TUcCoYBxsQeLh6_eg3WO0Y.roa (hash: FzBKtoxKdAzZGhoYpGryWwHPZ5WZpqNHKyLplIOiPAU=) 2: RYzFKgcHzDQKycf26QKLZLcCZ7w.crl (hash: JLHsW03NRW3xokPFrYJQmAbf2HmJI7HZynC7k7oyZ00=) 3: _5WIvJfKyXPt7q3eDEUV4dqzXLc.roa (hash: WY6kQSCLPQqO6U8inB26YKVMLyQQktJDfS2xbDWHzWw=) 4: uDI0D6qr7-usCDL-fgv2aBY_bUU.roa (hash: H5Mm89vS+5YR+a0XeYRvNkRodKD27aIsyfCqNBxXQhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:25:e5:3f:85:d2:b7:ef:19:ed:aa:66:fa:6c:af:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc Validity Not Before: Dec 12 06:00:54 2025 GMT Not After : Dec 13 06:00:54 2025 GMT Subject: CN=73802711030938a096db8ee79df6343ac38c7f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:42:68:91:c2:9d:96:b7:97:a6:27:82:5a:72: 85:88:0f:d7:6b:c9:a2:db:fb:7f:4a:d7:73:59:7a: 88:a7:35:63:ea:77:41:17:69:bb:1e:60:50:8a:e7: 93:fa:4b:ff:1b:e1:c2:2d:ea:38:76:1c:a9:9e:58: f6:ed:9b:f5:b3:98:35:3f:ee:ff:f1:4b:34:f9:40: 02:39:ed:a3:e6:12:d8:5d:78:d2:23:68:69:21:99: 2d:64:63:75:d3:ca:b1:4d:28:b7:85:23:e9:4d:04: cd:ee:cc:e8:9e:44:51:d3:b9:06:7c:e7:73:cb:92: d1:d4:74:ba:a5:71:a0:54:fe:ac:cb:9a:78:c2:a7: 04:c2:96:ef:c5:25:b7:09:fa:fc:9c:76:7b:7e:87: 9a:cb:c6:31:32:2d:5e:3c:ee:59:20:53:a8:14:ef: e5:55:46:89:4c:7a:70:56:f3:cc:77:ac:06:63:9f: 5d:a4:5b:37:07:b4:82:ad:b0:4c:24:ea:83:02:fb: e3:43:7e:f9:aa:c0:7c:ec:24:4c:2b:98:ef:c6:f7: c3:02:9e:e6:01:d8:29:ee:6b:73:76:ec:46:47:44: 6f:80:bf:41:6f:a6:4f:9d:da:62:9e:bb:10:c0:29: 8f:80:cd:fc:e6:3f:e7:7c:82:ed:d2:94:56:25:b7: a7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:80:27:11:03:09:38:A0:96:DB:8E:E7:9D:F6:34:3A:C3:8C:7F:6E X509v3 Authority Key Identifier: keyid:45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:78:c9:a3:2f:7d:44:f7:d1:cb:74:32:3b:ff:25:87:b6:e6: 3d:ef:ec:ab:57:41:e7:cf:ef:53:b6:05:69:b8:03:2c:b5:8b: af:c2:d5:2e:1c:3a:18:3c:a3:a1:65:36:22:4e:a3:1a:6b:2e: 9b:11:e5:92:08:70:a7:18:48:31:be:ca:95:90:83:8a:0e:fd: ac:cc:c3:fc:e4:35:37:b9:9c:15:ac:e4:af:6a:33:d4:c9:80: 90:20:ed:89:ba:84:37:da:dc:e2:4d:38:a3:13:d3:9b:58:52: 32:0a:1b:6d:ea:7a:cf:ad:ca:dc:b4:e2:a0:8a:23:e6:18:1b: 6c:3b:2e:9e:4a:82:50:a5:35:ec:e9:00:16:10:48:45:b8:94: 0e:4d:82:7d:46:dd:39:f5:64:2e:d9:7b:9c:bc:39:fa:f3:be: 9d:99:ad:35:34:76:14:c3:9f:0c:7d:19:01:92:d6:68:d0:68: ef:af:ce:88:b2:05:72:f6:13:63:4f:e8:9e:fe:6e:aa:46:4d: e8:e0:8e:fc:79:95:d1:24:b5:ff:ef:16:51:ca:c6:1e:90:18: 68:42:b2:e8:09:87:ba:0b:d8:e7:f2:c6:70:52:a9:99:19:48: 94:38:9c:98:53:e6:66:64:c1:50:48:53:81:21:ec:bd:54:77: b6:91:5c:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJeU/hdK37xntqmb6bK+sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGNjNTJhMDcwN2NjMzQwYWM5YzdmNmU5MDI4YjY0Yjcw MjY3YmMwHhcNMjUxMjEyMDYwMDU0WhcNMjUxMjEzMDYwMDU0WjAzMTEwLwYDVQQD Eyg3MzgwMjcxMTAzMDkzOGEwOTZkYjhlZTc5ZGY2MzQzYWMzOGM3ZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEJokcKdlreXpieCWnKFiA/Xa8mi 2/t/StdzWXqIpzVj6ndBF2m7HmBQiueT+kv/G+HCLeo4dhypnlj27Zv1s5g1P+7/ 8Us0+UACOe2j5hLYXXjSI2hpIZktZGN108qxTSi3hSPpTQTN7szonkRR07kGfOdz y5LR1HS6pXGgVP6sy5p4wqcEwpbvxSW3Cfr8nHZ7foeay8YxMi1ePO5ZIFOoFO/l VUaJTHpwVvPMd6wGY59dpFs3B7SCrbBMJOqDAvvjQ375qsB87CRMK5jvxvfDAp7m Adgp7mtzduxGR0RvgL9Bb6ZPndpinrsQwCmPgM385j/nfILt0pRWJbenwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOAJxEDCTigltuO5532NDrDjH9uMB8GA1UdIwQY MBaAFEWMxSoHB8w0CsnH9ukCi2S3Ame8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUll6RktnY0h6RFFLeWNmMjZRS0xaTGNDWjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81YTdkMmYtNTE2OC00NzIwLThjZTAt NzA0MTQ5NjE5YzQ2LzEvUll6RktnY0h6RFFLeWNmMjZRS0xaTGNDWjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS81YTdkMmYtNTE2OC00NzIwLThjZTAtNzA0MTQ5NjE5YzQ2 LzEvUll6RktnY0h6RFFLeWNmMjZRS0xaTGNDWjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANXjJoy99 RPfRy3QyO/8lh7bmPe/sq1dB58/vU7YFabgDLLWLr8LVLhw6GDyjoWU2Ik6jGmsu mxHlkghwpxhIMb7KlZCDig79rMzD/OQ1N7mcFazkr2oz1MmAkCDtibqEN9rc4k04 oxPTm1hSMgobbep6z63K3LTioIoj5hgbbDsunkqCUKU17OkAFhBIRbiUDk2CfUbd OfVkLtl7nLw5+vO+nZmtNTR2FMOfDH0ZAZLWaNBo76/OiLIFcvYTY0/onv5uqkZN 6OCO/HmV0SS1/+8WUcrGHpAYaEKy6AmHugvY5/LGcFKpmRlIlDicmFPmZmTBUEhT gSHsvVR3tpFciA== -----END CERTIFICATE-----Generated at Fri Dec 12 09:25:42 2025 by rpki-client