This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft File: PYugpSxCEprx1PdD_rM7sUTUu1w.mft (raw, json) Hash identifier: byX2O2xHSGiesK1z/QiFFExPVRTT8B2oWMB1f2LPsi0= Subject key identifier: 05:67:80:47:46:1B:88:64:6A:CD:74:BB:1E:67:06:4D:DE:BB:F3:48 Authority key identifier: 3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C Certificate issuer: /CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Certificate serial: 019B0E935C917440702FD449A3CFEE5597F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft Manifest number: 1776 Signing time: Thu 11 Dec 2025 18:01:37 +0000 Manifest this update: Thu 11 Dec 2025 18:01:37 +0000 Manifest next update: Fri 12 Dec 2025 18:01:37 +0000 Files and hashes: 1: 9AkjaJRYRIOTmgf4F3gyV6pdFkQ.roa (hash: N1lZUtbJEJkRSUYDq/VJK4cR/RojBk8ALOORTw9wVk8=) 2: DUER2OIxuLfteK-5s9p125aHbHQ.roa (hash: MKxlsAlXCfnz4va2JwSTTtP5lv2QEgVXIYiD1U0P1iM=) 3: I5Dlj2iBXR78bV2NI4oXxT6DVcQ.roa (hash: pUPvPv3IMdPMN3mngjSRkbMNdszUqvQ/W+9CudZep1s=) 4: IKxEFfN_KNz819jDJF02u6P6vks.roa (hash: M1gfdLv0XPFzxrEqEMyJ47aUP/+uDTO64SIkdj54NaA=) 5: JcqV5Zbt-7BBvR25dnt58sZOVRw.roa (hash: Jyex6OZ5W2eO7E9m8v2xcJSNJuYcw9eBRYzL8fzsuKg=) 6: PYugpSxCEprx1PdD_rM7sUTUu1w.crl (hash: KwQiYwVE1ibmgIvHvEyg7tVkOGMqII+Q3ssQhCdPUMU=) 7: QeFtXb_2Jy97mUDOpmxAN1O437Q.roa (hash: pGsLweLJqx/P4hTPUc5m5Veo+2vG7HsRtDbmA1rHXlQ=) 8: YPwqy-r5Ds6zjUqs83c9wSrz4Xo.roa (hash: /OBWcwiTOuByZ0CFtuxP3jPnYcDQxuxVogbCk4BaZIM=) 9: _z_sTvwtZQKHpvup9rFWqFFhFKY.roa (hash: JVM6qUA4ZtDkSX81zJfuU5jJmnu8pCK2PaUHasgHRME=) 10: kUvUMMUm6A2S-PsLFuOoxFGjL2g.roa (hash: 43KKo4hB/OsGlhMLYdFrQhlx6kBqniKw+U0iCAYg2Qg=) 11: pOvELxmVMCJOREXgcbJwYPWQcLY.roa (hash: 8NAO5qgs1zoQcDKNETGRxihZubfEYTFA3QAx7BgtdEo=) 12: stpJENpG1HfxaYzx679NTwZFpZY.roa (hash: EMcugxArWnP7J9sItxl3gZsFeM8qrAvUxjSeKkZ4oao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:5c:91:74:40:70:2f:d4:49:a3:cf:ee:55:97:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d8ba0a52c42129af1d4f743feb33bb144d4bb5c Validity Not Before: Dec 11 18:01:37 2025 GMT Not After : Dec 12 18:01:37 2025 GMT Subject: CN=05678047461b88646acd74bb1e67064ddebbf348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:78:b9:ee:d0:f7:30:d0:87:ca:51:44:96:8e: c5:d0:94:8d:8e:1d:92:28:2d:2e:68:4d:8b:c7:4c: ba:a7:f2:9a:81:d6:79:d6:ec:f2:15:43:86:a0:7c: e5:2e:e0:d0:d7:2c:d2:e8:bd:2f:03:2a:00:1e:89: 95:fe:05:e3:2e:2c:25:1b:7a:b1:92:ba:50:0e:b3: f6:22:d8:be:47:fc:e3:ff:a7:d4:6d:ab:1a:15:d6: 37:51:1f:58:1a:04:1f:0c:f5:0c:3e:23:18:7c:ce: 33:8e:eb:56:a4:fc:f3:ce:3d:0e:d5:f9:a4:aa:a9: 42:72:a4:67:9a:41:ff:f0:c3:f7:09:eb:ee:3e:3d: ac:3d:e2:04:39:ee:fd:2d:6d:63:30:6b:dd:1d:59: 5e:90:d7:e5:90:a5:fa:84:c9:a2:31:3d:a4:32:94: c5:bc:c6:24:36:b5:08:b1:8a:ac:c0:f5:41:56:b3: 03:a7:a2:bd:3f:3f:ab:03:55:58:7a:96:e0:ab:82: 36:88:e0:a8:96:e3:a4:f3:6b:da:30:32:d0:23:b6: 2c:5f:f1:aa:5e:58:c3:05:74:b0:b6:a8:dc:7b:b3: a6:19:77:56:da:7d:03:23:d5:55:32:8c:e0:f6:b6: 35:44:02:2f:bb:0c:91:80:ba:f9:8b:c6:a5:1d:95: 10:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:67:80:47:46:1B:88:64:6A:CD:74:BB:1E:67:06:4D:DE:BB:F3:48 X509v3 Authority Key Identifier: keyid:3D:8B:A0:A5:2C:42:12:9A:F1:D4:F7:43:FE:B3:3B:B1:44:D4:BB:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYugpSxCEprx1PdD_rM7sUTUu1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ff6f4a-8d5f-45b2-875c-a5683844e792/1/PYugpSxCEprx1PdD_rM7sUTUu1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:0c:90:5c:2b:41:fa:f8:96:6e:8a:69:69:88:36:5b:a0:09: 96:08:fe:58:24:b7:16:4d:9c:aa:24:e7:63:23:04:38:64:21: 57:9b:10:6b:74:a8:bf:b8:72:00:97:82:a3:47:b4:0e:bb:b2: db:97:23:81:94:d3:0e:76:3e:86:fe:92:05:13:25:a0:a6:aa: ce:6f:2c:82:a0:f1:f5:3a:aa:02:c5:ec:61:71:4d:c5:61:f2: c5:5f:54:87:d5:20:57:be:f9:97:ba:11:d6:53:a7:38:b8:ab: 17:a2:60:85:f8:c3:63:1a:20:ff:9d:38:d0:34:d2:d3:b4:5b: 4f:33:f8:bc:e4:1e:f3:25:94:1f:a7:23:19:c6:d2:57:76:9f: 94:6f:cd:08:b4:1b:e2:30:bc:6e:e5:2c:2a:37:d3:8b:c1:42: 44:53:99:c2:71:e6:bb:f2:e8:b1:bb:35:d6:cc:ab:d7:e5:34: a4:a2:ab:83:68:e4:b5:32:f7:f1:0e:3f:dc:b4:fd:41:6f:dd: 21:c8:e9:b4:c9:72:c1:6f:ea:c7:b4:fb:b8:53:47:e6:3c:61: 98:a8:01:6f:a9:23:05:9e:61:3e:d4:89:a4:9f:31:7f:35:02: 01:55:81:eb:88:8e:86:12:b9:2e:95:df:fb:8c:07:fe:16:b8: 00:e0:68:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOk1yRdEBwL9RJo8/uVZf1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkOGJhMGE1MmM0MjEyOWFmMWQ0Zjc0M2ZlYjMzYmIxNDRk NGJiNWMwHhcNMjUxMjExMTgwMTM3WhcNMjUxMjEyMTgwMTM3WjAzMTEwLwYDVQQD EygwNTY3ODA0NzQ2MWI4ODY0NmFjZDc0YmIxZTY3MDY0ZGRlYmJmMzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ni57tD3MNCHylFElo7F0JSNjh2S KC0uaE2Lx0y6p/KagdZ51uzyFUOGoHzlLuDQ1yzS6L0vAyoAHomV/gXjLiwlG3qx krpQDrP2Iti+R/zj/6fUbasaFdY3UR9YGgQfDPUMPiMYfM4zjutWpPzzzj0O1fmk qqlCcqRnmkH/8MP3CevuPj2sPeIEOe79LW1jMGvdHVlekNflkKX6hMmiMT2kMpTF vMYkNrUIsYqswPVBVrMDp6K9Pz+rA1VYepbgq4I2iOColuOk82vaMDLQI7YsX/Gq XljDBXSwtqjce7OmGXdW2n0DI9VVMozg9rY1RAIvuwyRgLr5i8alHZUQuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVngEdGG4hkas10ux5nBk3eu/NIMB8GA1UdIwQY MBaAFD2LoKUsQhKa8dT3Q/6zO7FE1LtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMt YTU2ODM4NDRlNzkyLzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9mZjZmNGEtOGQ1Zi00NWIyLTg3NWMtYTU2ODM4NDRlNzky LzEvUFl1Z3BTeENFcHJ4MVBkRF9yTTdzVVRVdTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASAyQXCtB +viWboppaYg2W6AJlgj+WCS3Fk2cqiTnYyMEOGQhV5sQa3Sov7hyAJeCo0e0Druy 25cjgZTTDnY+hv6SBRMloKaqzm8sgqDx9TqqAsXsYXFNxWHyxV9Uh9UgV775l7oR 1lOnOLirF6JghfjDYxog/5040DTS07RbTzP4vOQe8yWUH6cjGcbSV3aflG/NCLQb 4jC8buUsKjfTi8FCRFOZwnHmu/Losbs11syr1+U0pKKrg2jktTL38Q4/3LT9QW/d IcjptMlywW/qx7T7uFNH5jxhmKgBb6kjBZ5hPtSJpJ8xfzUCAVWB64iOhhK5LpXf +4wH/ha4AOBo9Q== -----END CERTIFICATE-----Generated at Fri Dec 12 00:08:57 2025 by rpki-client