This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft File: RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft (raw, json) Hash identifier: dPVbRqYkHTqyq/PrKxeZJJ67942pXdDU5AAYt5ml4mU= Subject key identifier: 59:32:1A:63:20:64:15:26:D4:B5:2F:34:85:15:9E:B6:43:09:B5:83 Authority key identifier: 47:21:BF:48:E4:01:66:0E:E9:61:1B:35:C0:4B:5D:1D:1F:3F:AB:FA Certificate issuer: /CN=4721bf48e401660ee9611b35c04b5d1d1f3fabfa Certificate serial: 019B5B648E5EC0C8C1921D20555AFAE1C0B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft Manifest number: 092B Signing time: Fri 26 Dec 2025 16:01:15 +0000 Manifest this update: Fri 26 Dec 2025 16:01:15 +0000 Manifest next update: Sat 27 Dec 2025 16:01:15 +0000 Files and hashes: 1: Q0tX8C3mAUGr4XLZlc4tVpO7Am4.roa (hash: hVicWWTtt7YlyO3V3zzscqDP1fMclWoLBHVq6weE/Lo=) 2: RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl (hash: ZhEUqe6M2dZ6aeMiPsNYhmPwKCeQXy8U/aXM14fONR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:64:8e:5e:c0:c8:c1:92:1d:20:55:5a:fa:e1:c0:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4721bf48e401660ee9611b35c04b5d1d1f3fabfa Validity Not Before: Dec 26 16:01:15 2025 GMT Not After : Dec 27 16:01:15 2025 GMT Subject: CN=59321a6320641526d4b52f3485159eb64309b583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e8:3a:a3:3f:9c:9f:93:cd:13:c5:c0:bf:ba: 5d:f8:2a:c8:97:31:e7:b7:f7:b7:42:33:f0:9e:f1: c7:7a:d4:7b:bc:22:52:a1:f0:e7:bb:fd:b7:9a:fe: 4f:d7:b5:e2:f5:cf:91:a6:0b:82:20:b4:f1:6b:ee: 73:18:a6:5b:0a:14:22:72:db:3a:c5:68:b3:e0:35: 1b:2f:42:dc:a3:2e:42:8c:70:80:95:6a:c7:fd:d6: 09:38:92:c7:5a:45:19:93:12:7b:fc:1d:55:13:52: 22:15:e6:e8:92:c5:af:eb:45:ce:86:2e:0a:48:b2: 61:0f:5c:7b:d2:cc:56:7e:d7:6b:83:4c:fd:7a:0d: 34:f3:e1:a9:f5:af:e3:dd:10:81:86:6a:11:34:74: 1d:99:b0:9b:8a:b0:8f:b2:c6:06:4d:1a:8f:c7:0e: d6:21:41:38:f7:5c:25:52:66:67:a1:ee:55:a0:37: 96:27:4c:15:74:7e:fa:ba:b1:d9:50:16:ef:4b:fc: 9b:2e:7d:ef:70:35:ec:3e:c2:04:78:db:65:66:38: 2d:b0:b3:45:13:af:38:ba:76:e4:14:cb:a7:55:b0: d1:d0:57:09:97:f0:30:1a:05:0b:f1:67:59:f0:08: 98:1a:3e:72:0c:c0:7b:52:8d:d8:93:80:ce:63:b9: 6e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:32:1A:63:20:64:15:26:D4:B5:2F:34:85:15:9E:B6:43:09:B5:83 X509v3 Authority Key Identifier: keyid:47:21:BF:48:E4:01:66:0E:E9:61:1B:35:C0:4B:5D:1D:1F:3F:AB:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyG_SOQBZg7pYRs1wEtdHR8_q_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e6ba81-b38e-4bb3-b005-56fde5e715b1/1/RyG_SOQBZg7pYRs1wEtdHR8_q_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:73:d7:68:e0:19:3d:c4:40:aa:1c:2f:a4:96:12:c0:b7:66: e5:87:56:6c:5c:85:a4:c9:26:d9:47:0c:8a:68:aa:19:8c:bc: 6a:90:52:15:b1:f5:7f:ca:a0:29:41:81:47:9b:61:a9:2b:55: fe:d1:c5:a8:13:81:2c:4e:0e:6b:00:2a:fd:61:a4:fb:2e:0f: 4a:1f:46:2d:41:55:e4:62:0b:25:73:92:57:46:1e:da:2b:21: 6e:b2:4e:2b:3c:a7:6b:ec:bb:dd:fc:24:c5:71:28:71:02:c7: f1:1f:5a:7f:4f:12:7a:f6:c5:f8:e7:41:f7:c7:a7:4e:af:c5: e2:48:e4:09:ec:a0:f6:db:30:94:3f:83:ea:22:e8:6a:8b:05: cd:cf:57:6f:f3:76:1b:b0:af:67:a1:0e:73:49:08:c9:e9:64: 57:01:8a:e2:21:6c:c9:fa:12:fb:f9:dd:1a:f4:28:d3:7b:c8: cd:48:5f:89:84:82:f1:3f:86:3a:28:d8:bc:f6:77:da:31:2d: cd:20:53:3d:90:2d:a3:9c:21:53:88:47:a2:7d:43:c9:f1:7a: ab:6d:ee:5c:b0:9a:00:f2:1e:3c:04:32:15:51:03:71:9c:76: 8e:f0:e3:ec:fd:3b:43:09:1c:58:f7:a8:52:d1:20:6a:0d:3c: ed:91:06:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZI5ewMjBkh0gVVr64cCzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MjFiZjQ4ZTQwMTY2MGVlOTYxMWIzNWMwNGI1ZDFkMWYz ZmFiZmEwHhcNMjUxMjI2MTYwMTE1WhcNMjUxMjI3MTYwMTE1WjAzMTEwLwYDVQQD Eyg1OTMyMWE2MzIwNjQxNTI2ZDRiNTJmMzQ4NTE1OWViNjQzMDliNTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxug6oz+cn5PNE8XAv7pd+CrIlzHn t/e3QjPwnvHHetR7vCJSofDnu/23mv5P17Xi9c+RpguCILTxa+5zGKZbChQicts6 xWiz4DUbL0Lcoy5CjHCAlWrH/dYJOJLHWkUZkxJ7/B1VE1IiFeboksWv60XOhi4K SLJhD1x70sxWftdrg0z9eg008+Gp9a/j3RCBhmoRNHQdmbCbirCPssYGTRqPxw7W IUE491wlUmZnoe5VoDeWJ0wVdH76urHZUBbvS/ybLn3vcDXsPsIEeNtlZjgtsLNF E684unbkFMunVbDR0FcJl/AwGgUL8WdZ8AiYGj5yDMB7Uo3Yk4DOY7luSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkyGmMgZBUm1LUvNIUVnrZDCbWDMB8GA1UdIwQY MBaAFEchv0jkAWYO6WEbNcBLXR0fP6v6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnlHX1NPUUJaZzdwWVJzMXdFdGRIUjhfcV9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9lNmJhODEtYjM4ZS00YmIzLWIwMDUt NTZmZGU1ZTcxNWIxLzEvUnlHX1NPUUJaZzdwWVJzMXdFdGRIUjhfcV9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9lNmJhODEtYjM4ZS00YmIzLWIwMDUtNTZmZGU1ZTcxNWIx LzEvUnlHX1NPUUJaZzdwWVJzMXdFdGRIUjhfcV9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANHPXaOAZ PcRAqhwvpJYSwLdm5YdWbFyFpMkm2UcMimiqGYy8apBSFbH1f8qgKUGBR5thqStV /tHFqBOBLE4OawAq/WGk+y4PSh9GLUFV5GILJXOSV0Ye2ishbrJOKzyna+y73fwk xXEocQLH8R9af08SevbF+OdB98enTq/F4kjkCeyg9tswlD+D6iLoaosFzc9Xb/N2 G7CvZ6EOc0kIyelkVwGK4iFsyfoS+/ndGvQo03vIzUhfiYSC8T+GOijYvPZ32jEt zSBTPZAto5whU4hHon1DyfF6q23uXLCaAPIePAQyFVEDcZx2jvDj7P07QwkcWPeo UtEgag087ZEG+w== -----END CERTIFICATE-----Generated at Fri Dec 26 17:40:51 2025 by rpki-client