This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft File: ryv4L9oo4I9iKUYLouJBQUZDMeU.mft (raw, json) Hash identifier: fabdDcvk7BlcH0pKkTK3tYjJbxPlT9X6X9Sa5ZOc4GE= Subject key identifier: B9:F6:B5:4C:F5:47:0D:2C:85:9E:3F:AC:8B:1E:49:9C:E4:B1:D6:9E Authority key identifier: AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5 Certificate issuer: /CN=af2bf82fda28e08f6229460ba2e24141464331e5 Certificate serial: 019B5AF67F48B965ED992FA63175504FDFA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft Manifest number: 1785 Signing time: Fri 26 Dec 2025 14:01:02 +0000 Manifest this update: Fri 26 Dec 2025 14:01:02 +0000 Manifest next update: Sat 27 Dec 2025 14:01:02 +0000 Files and hashes: 1: TCLTZN7AGKUB7xzA7aAzZJCLGEY.roa (hash: eeX0IhSYNZ9FE4vi+lYEY7nwkpcGZsK3aVToAyhv5yM=) 2: ryv4L9oo4I9iKUYLouJBQUZDMeU.crl (hash: iGBY5/I4C7b4RvX1hmk8zOopE2FEDrPBuQCwC5a30y0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:7f:48:b9:65:ed:99:2f:a6:31:75:50:4f:df:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af2bf82fda28e08f6229460ba2e24141464331e5 Validity Not Before: Dec 26 14:01:02 2025 GMT Not After : Dec 27 14:01:02 2025 GMT Subject: CN=b9f6b54cf5470d2c859e3fac8b1e499ce4b1d69e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c3:fa:07:59:8c:08:6f:63:e6:c4:6b:c7:54: 5c:64:89:98:38:94:71:ad:67:1d:90:b8:71:f4:49: b4:1b:a5:1d:38:2a:47:ef:11:bd:5f:56:10:28:89: 7a:8b:c5:56:c6:19:32:d2:2e:ed:6e:5c:1d:58:12: 5f:54:d7:d9:47:bd:d2:f5:a0:4a:d5:66:4f:5c:6b: e8:d4:59:57:b5:90:64:c6:34:a3:75:89:38:e0:5e: b2:1a:09:3b:6c:8b:01:6a:84:7b:40:5c:ce:2a:90: 7d:7f:ea:ae:ff:74:c5:0d:b5:91:a3:61:f2:76:65: dc:9c:c2:b4:c8:34:56:15:30:c1:23:b4:b5:30:34: b5:70:6a:ad:7b:76:09:eb:69:50:6a:07:0d:44:ea: df:7c:3d:1e:fa:b8:dc:ee:a9:b3:1d:19:39:9d:f0: 14:e0:eb:fe:cf:f8:85:8c:2d:36:a6:de:c3:0d:44: 80:58:dc:96:9a:db:df:c4:dd:7d:80:54:5b:10:8b: 22:39:66:32:ee:bb:44:96:0e:b3:4c:fd:ed:e5:93: 3d:ae:69:64:1c:8b:9d:6f:f4:0b:f4:10:34:d7:83: 22:54:5d:a4:11:3d:e4:07:08:be:38:09:e0:f1:b6: d4:a5:60:69:63:cd:5d:1f:a2:9a:61:26:34:69:7c: b6:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F6:B5:4C:F5:47:0D:2C:85:9E:3F:AC:8B:1E:49:9C:E4:B1:D6:9E X509v3 Authority Key Identifier: keyid:AF:2B:F8:2F:DA:28:E0:8F:62:29:46:0B:A2:E2:41:41:46:43:31:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ryv4L9oo4I9iKUYLouJBQUZDMeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3b91a2-d2a7-4e69-9c86-bdf3917a9267/1/ryv4L9oo4I9iKUYLouJBQUZDMeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:e7:f6:aa:d9:c2:b2:f8:39:8b:a2:a2:56:7e:ce:88:23:fd: ef:46:c4:8c:67:c5:3f:a6:4d:46:83:01:a5:60:35:d4:3d:e2: 6e:05:68:b9:e9:02:41:c8:3d:5f:21:c4:8c:f1:39:41:4f:33: ed:42:1c:31:8d:11:c7:a9:f5:99:5d:b9:7c:f5:cb:5a:90:82: da:de:ce:23:90:3f:eb:6e:71:b5:99:58:9f:4c:67:a6:28:30: b0:f2:8c:4d:57:fd:c1:fb:48:92:99:a7:1d:e4:62:42:91:35: f3:e2:80:97:8f:cd:0e:18:83:1f:21:f9:31:28:e1:43:21:8f: d0:bf:8b:39:a3:e5:0c:3d:68:3a:3d:fe:1f:91:d5:7c:e0:4a: 33:d4:6e:63:62:65:a7:a5:09:dc:77:09:b1:26:a9:02:91:9e: 83:33:1f:f2:72:e5:57:42:a7:af:22:50:6d:56:79:39:1e:27: 64:98:c4:90:d8:49:39:9f:5b:86:d5:a0:e2:93:b8:c9:55:15: 2b:b0:7d:82:fc:f7:7c:50:1d:e2:d4:29:a6:9a:c6:ed:cb:e8: 27:b1:ed:38:50:3e:03:56:32:1e:b1:d7:17:cd:93:35:fd:29: a3:1a:1a:57:f2:8b:fd:27:b5:24:82:a1:b0:f9:f7:73:9e:ae: 7a:88:47:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9n9IuWXtmS+mMXVQT9+iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMmJmODJmZGEyOGUwOGY2MjI5NDYwYmEyZTI0MTQxNDY0 MzMxZTUwHhcNMjUxMjI2MTQwMTAyWhcNMjUxMjI3MTQwMTAyWjAzMTEwLwYDVQQD EyhiOWY2YjU0Y2Y1NDcwZDJjODU5ZTNmYWM4YjFlNDk5Y2U0YjFkNjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMP6B1mMCG9j5sRrx1RcZImYOJRx rWcdkLhx9Em0G6UdOCpH7xG9X1YQKIl6i8VWxhky0i7tblwdWBJfVNfZR73S9aBK 1WZPXGvo1FlXtZBkxjSjdYk44F6yGgk7bIsBaoR7QFzOKpB9f+qu/3TFDbWRo2Hy dmXcnMK0yDRWFTDBI7S1MDS1cGqte3YJ62lQagcNROrffD0e+rjc7qmzHRk5nfAU 4Ov+z/iFjC02pt7DDUSAWNyWmtvfxN19gFRbEIsiOWYy7rtElg6zTP3t5ZM9rmlk HIudb/QL9BA014MiVF2kET3kBwi+OAng8bbUpWBpY81dH6KaYSY0aXy2awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLn2tUz1Rw0shZ4/rIseSZzksdaeMB8GA1UdIwQY MBaAFK8r+C/aKOCPYilGC6LiQUFGQzHlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnl2NEw5b280STlpS1VZTG91SkJRVVpETWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zYjkxYTItZDJhNy00ZTY5LTljODYt YmRmMzkxN2E5MjY3LzEvcnl2NEw5b280STlpS1VZTG91SkJRVVpETWVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8zYjkxYTItZDJhNy00ZTY5LTljODYtYmRmMzkxN2E5MjY3 LzEvcnl2NEw5b280STlpS1VZTG91SkJRVVpETWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmef2qtnC svg5i6KiVn7OiCP970bEjGfFP6ZNRoMBpWA11D3ibgVouekCQcg9XyHEjPE5QU8z 7UIcMY0Rx6n1mV25fPXLWpCC2t7OI5A/625xtZlYn0xnpigwsPKMTVf9wftIkpmn HeRiQpE18+KAl4/NDhiDHyH5MSjhQyGP0L+LOaPlDD1oOj3+H5HVfOBKM9RuY2Jl p6UJ3HcJsSapApGegzMf8nLlV0KnryJQbVZ5OR4nZJjEkNhJOZ9bhtWg4pO4yVUV K7B9gvz3fFAd4tQppprG7cvoJ7HtOFA+A1YyHrHXF82TNf0poxoaV/KL/Se1JIKh sPn3c56ueohHNg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:53 2025 by rpki-client