This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft File: pyRyw_AEsLcfEY6HK5g4pODHIcc.mft (raw, json) Hash identifier: jnG0i0S8UEich5+X4n6/fAPMV8MzLdnfDH5gpJw9j14= Subject key identifier: 65:B3:1C:15:D2:1C:55:BF:E2:2A:E4:3E:7F:F5:F0:33:F0:5A:C3:05 Authority key identifier: A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7 Certificate issuer: /CN=a72472c3f004b0b71f118e872b9838a4e0c721c7 Certificate serial: 019B48B92D7C2F177972392A73D781E54230 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft Manifest number: 02DE Signing time: Tue 23 Dec 2025 01:00:53 +0000 Manifest this update: Tue 23 Dec 2025 01:00:53 +0000 Manifest next update: Wed 24 Dec 2025 01:00:53 +0000 Files and hashes: 1: 6DpWZbBL9E7B4j1aF-rxc-G8DWI.roa (hash: SV3cobOGrBeYAeMDxv8oIoNqGXu5Q+QcGtKFI/sHBB4=) 2: jSbiesDgF1BjYr1K6jnTWbKgx4o.roa (hash: Oe/Y66dWQyjSuf4Xd/fvNzxL7OXnyluh/diNnzBb2/g=) 3: pyRyw_AEsLcfEY6HK5g4pODHIcc.crl (hash: ughDZIyF+eWeKcKXzaGRDpyrQsL8L0hl9/oJVHjW7qQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:2d:7c:2f:17:79:72:39:2a:73:d7:81:e5:42:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a72472c3f004b0b71f118e872b9838a4e0c721c7 Validity Not Before: Dec 23 01:00:53 2025 GMT Not After : Dec 24 01:00:53 2025 GMT Subject: CN=65b31c15d21c55bfe22ae43e7ff5f033f05ac305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:90:0c:98:cf:b3:08:76:14:4f:96:e0:de:41: 72:d0:61:5f:cb:42:cf:8b:f0:58:2e:e1:af:12:c6: 7d:db:0a:b9:e9:e3:42:e5:65:8b:b7:43:0c:71:48: 37:bf:f3:09:7b:76:78:1f:63:21:7d:93:c0:a5:72: a5:08:18:0a:ec:8c:88:cd:ec:89:9c:63:e2:81:7b: bc:f0:fa:67:a6:08:8b:ea:8a:4a:88:d9:22:54:3b: 20:8e:f5:3c:f3:66:a9:5f:d2:cd:4f:35:90:5e:6e: 04:8a:56:0c:02:bf:64:10:fd:71:de:9f:8c:8d:82: 16:fa:c7:37:33:9e:64:ae:2b:55:ac:de:0d:70:01: 38:28:b0:c5:c5:12:c6:11:16:2e:fb:e0:c6:27:77: dd:29:d2:30:2a:b5:85:41:f1:e9:e7:0f:8e:6d:9e: 5d:05:47:80:f0:b7:32:58:c9:d8:58:33:31:0b:8b: 84:fc:5f:da:77:aa:46:30:c6:b3:1c:51:d3:10:75: c6:98:56:3a:25:c1:cb:9c:c2:6f:ea:24:ed:c8:90: 35:27:a9:f4:55:19:34:e7:d5:1a:f9:fe:6f:71:1b: 6e:35:31:00:e3:45:1e:fc:e9:a6:fb:62:d7:ed:73: 24:e1:46:a9:f0:8a:df:88:74:0f:59:a0:03:5d:1c: 1e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B3:1C:15:D2:1C:55:BF:E2:2A:E4:3E:7F:F5:F0:33:F0:5A:C3:05 X509v3 Authority Key Identifier: keyid:A7:24:72:C3:F0:04:B0:B7:1F:11:8E:87:2B:98:38:A4:E0:C7:21:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyRyw_AEsLcfEY6HK5g4pODHIcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/998a1d-3095-4643-873d-d8c950cacab5/1/pyRyw_AEsLcfEY6HK5g4pODHIcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:77:f5:17:92:e0:09:b6:a3:09:10:e7:53:63:bc:1a:da:9a: cf:e4:0e:81:06:4c:d4:af:6a:60:f9:53:54:98:fd:98:a9:c8: 3d:a4:a3:9e:ee:62:02:be:04:81:df:af:b9:f9:b3:c4:9a:10: 2e:30:03:0b:28:46:17:cd:dc:96:12:69:e8:94:3f:5a:67:7b: f3:5c:77:15:4b:a4:fe:06:fc:07:61:f1:57:63:a4:09:44:9f: af:5f:be:66:cb:f3:06:24:51:cf:83:e4:55:09:aa:e5:13:e1: 26:3e:83:a0:71:3f:8b:63:b7:bc:5d:65:e2:fc:46:21:b6:e7: a7:8c:a9:ad:5f:4d:0c:e1:97:23:27:d0:fb:1d:36:a2:da:15: ba:d2:0d:18:bf:2e:34:86:aa:0b:25:9b:44:e4:18:98:dc:9b: 4e:46:56:6e:26:a3:ca:31:6c:1e:6b:a8:cc:7a:6a:4b:ad:20: 27:0d:a9:5f:a3:1a:45:0f:6e:db:e0:de:71:22:98:d6:ba:0c: c1:34:f8:47:6b:61:96:52:18:a6:26:21:c0:50:79:a1:8a:3c: 52:88:e9:fa:36:4a:40:81:34:a9:5f:78:53:21:b1:da:1c:77: 5b:55:d8:ce:f4:15:e9:17:87:cb:61:79:0e:c6:83:43:2c:79: 0d:f4:57:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuS18Lxd5cjkqc9eB5UIwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MjQ3MmMzZjAwNGIwYjcxZjExOGU4NzJiOTgzOGE0ZTBj NzIxYzcwHhcNMjUxMjIzMDEwMDUzWhcNMjUxMjI0MDEwMDUzWjAzMTEwLwYDVQQD Eyg2NWIzMWMxNWQyMWM1NWJmZTIyYWU0M2U3ZmY1ZjAzM2YwNWFjMzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypAMmM+zCHYUT5bg3kFy0GFfy0LP i/BYLuGvEsZ92wq56eNC5WWLt0MMcUg3v/MJe3Z4H2MhfZPApXKlCBgK7IyIzeyJ nGPigXu88PpnpgiL6opKiNkiVDsgjvU882apX9LNTzWQXm4EilYMAr9kEP1x3p+M jYIW+sc3M55kritVrN4NcAE4KLDFxRLGERYu++DGJ3fdKdIwKrWFQfHp5w+ObZ5d BUeA8LcyWMnYWDMxC4uE/F/ad6pGMMazHFHTEHXGmFY6JcHLnMJv6iTtyJA1J6n0 VRk059Ua+f5vcRtuNTEA40Ue/Omm+2LX7XMk4Uap8IrfiHQPWaADXRweQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWzHBXSHFW/4irkPn/18DPwWsMFMB8GA1UdIwQY MBaAFKckcsPwBLC3HxGOhyuYOKTgxyHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHlSeXdfQUVzTGNmRVk2SEs1ZzRwT0RISWNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85OThhMWQtMzA5NS00NjQzLTg3M2Qt ZDhjOTUwY2FjYWI1LzEvcHlSeXdfQUVzTGNmRVk2SEs1ZzRwT0RISWNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS85OThhMWQtMzA5NS00NjQzLTg3M2QtZDhjOTUwY2FjYWI1 LzEvcHlSeXdfQUVzTGNmRVk2SEs1ZzRwT0RISWNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhnf1F5Lg CbajCRDnU2O8Gtqaz+QOgQZM1K9qYPlTVJj9mKnIPaSjnu5iAr4Egd+vufmzxJoQ LjADCyhGF83clhJp6JQ/Wmd781x3FUuk/gb8B2HxV2OkCUSfr1++ZsvzBiRRz4Pk VQmq5RPhJj6DoHE/i2O3vF1l4vxGIbbnp4yprV9NDOGXIyfQ+x02otoVutINGL8u NIaqCyWbROQYmNybTkZWbiajyjFsHmuozHpqS60gJw2pX6MaRQ9u2+DecSKY1roM wTT4R2thllIYpiYhwFB5oYo8Uojp+jZKQIE0qV94UyGx2hx3W1XYzvQV6ReHy2F5 DsaDQyx5DfRXhQ== -----END CERTIFICATE-----Generated at Tue Dec 23 04:08:15 2025 by rpki-client