This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft File: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft (raw, json) Hash identifier: M5J1WTk4Np0XyHDGPULfw1iYyP2qHdhCejBgHbxD67A= Subject key identifier: C3:C1:25:4F:92:00:F8:AF:36:42:E6:7C:02:C0:4F:BB:3B:87:53:D6 Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81 Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81 Certificate serial: 019B07B5501A8C8661B33418BAFE4B7CB479 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft Manifest number: 09D4 Signing time: Wed 10 Dec 2025 10:01:21 +0000 Manifest this update: Wed 10 Dec 2025 10:01:21 +0000 Manifest next update: Thu 11 Dec 2025 10:01:21 +0000 Files and hashes: 1: Gm9NfecPR-RUq_slL2NKmzGqQ1c.roa (hash: tkU2/2KHzDAlfUyxsnryBif6WpEicFze6N39RJoBTkM=) 2: IdcqQLaLPNCQJzdTXpACnqYscnI.roa (hash: H+1S4n+OyXlFrQgh9A84gwVt0xMSOKKs5oiKIXtOgjU=) 3: OVQ5uPkYukiV8dv56D7X8vrwp8E.roa (hash: OWeiLtMHum8JXxqxvdWPi5crevEaVFFy1EtOqegV6tI=) 4: P8VDh_9fdYN8xXLvtJMOKaqZaBs.roa (hash: nMTrg+lyYaQ59OMP8FwWXirKWOtKtrNaOkuqtu/tSjc=) 5: Pq__l0a6HrBOcCXhEDnn7AV0g54.roa (hash: A1mBB7bcRpMOwkOKXDY7TtCFDZr1ayBKUG0wvvr/Zlw=) 6: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl (hash: Eolsu1O4YLhLr6tVxT1TeAtA6wK90NpNRgF74W5V/CA=) 7: qqV4lt6FTPnmuHdRaoUeaEC2b8U.roa (hash: HtCD/Cd4hhljqddcvUw+6pkmRGrV8qPj/FjkfpsV+Jw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b5:50:1a:8c:86:61:b3:34:18:ba:fe:4b:7c:b4:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81 Validity Not Before: Dec 10 10:01:21 2025 GMT Not After : Dec 11 10:01:21 2025 GMT Subject: CN=c3c1254f9200f8af3642e67c02c04fbb3b8753d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9d:e9:a6:d2:77:18:d7:3e:4e:b4:07:fa:38: e3:f3:f7:5e:42:31:dd:fe:13:36:42:18:6a:a5:2f: 1d:ca:6d:2a:55:0f:4c:99:86:50:0a:97:aa:07:74: 4d:28:96:58:3a:49:8b:f8:13:7b:66:46:77:1f:33: 3d:cc:8f:62:1e:ce:18:03:93:c4:c0:90:5c:b5:4a: ff:2f:a8:18:e6:c0:a8:d1:53:e8:e1:a7:a0:c0:be: 0e:2b:60:c4:26:b6:0d:da:0c:23:01:9e:a4:6a:68: cc:cb:e0:ff:1f:1b:76:b6:ec:73:53:c4:b9:67:af: 90:ce:1a:14:6d:e7:93:f0:8b:2d:a3:9b:26:c2:07: 10:4a:fd:2a:20:25:e7:35:e8:0d:15:05:58:ff:15: fb:12:9f:06:13:16:f4:0e:5d:05:ff:69:35:0b:a2: 95:89:46:63:db:d6:5a:96:cf:07:a9:56:f4:a4:ca: 07:eb:51:1b:54:32:01:83:c0:23:48:ad:4f:d0:a0: ed:b4:f7:3f:f2:f2:7c:64:3b:0c:84:d8:5d:5d:1a: 88:fc:40:27:09:ec:2d:55:64:7f:27:d9:73:12:0b: c0:32:8c:97:cc:3a:7d:f8:35:70:43:89:13:ac:16: 06:3a:14:94:ec:ec:80:d6:63:65:cc:f9:75:14:39: e7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C1:25:4F:92:00:F8:AF:36:42:E6:7C:02:C0:4F:BB:3B:87:53:D6 X509v3 Authority Key Identifier: keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:35:53:c5:c0:be:d5:57:68:06:07:4e:87:e7:2e:ab:f8:4d: b6:ad:0b:59:16:59:cf:41:8d:a8:65:33:8f:b5:4d:17:3f:e4: c1:62:b6:c7:6a:e8:91:d8:a8:68:bb:b7:f8:1c:91:f8:3e:fa: 99:8e:72:96:b0:7a:01:f6:21:70:5e:13:c3:d3:e4:38:97:2a: b7:3d:46:ad:ff:10:91:60:08:f2:e1:25:ca:37:9f:5f:47:d6: de:9d:c9:ef:0f:00:b5:49:b3:9e:fd:0b:4f:7f:68:e3:0f:bc: a1:07:8e:97:e4:aa:d2:d4:b0:84:8d:4d:a3:f5:52:3b:f0:0f: 68:61:3e:ab:69:c6:59:d9:54:51:e4:fe:6e:ac:bc:60:f6:25: a2:f2:db:76:eb:17:e8:57:9b:9e:3a:2e:3b:b1:32:62:43:86: 3a:fc:19:6c:12:38:c6:3e:e4:19:20:62:6a:4a:18:82:5c:1d: f5:d7:e5:59:24:66:02:f7:fb:af:d6:5d:cc:bf:3f:d3:0f:0b: 12:8e:ca:95:d2:45:b1:3e:06:e7:b2:5d:e5:ba:78:10:26:df: ad:dc:de:11:9a:a1:d8:f0:85:23:4c:00:0c:3d:40:12:90:e3: bd:4a:d2:36:65:e5:d2:dd:1b:e4:d9:ae:68:11:2e:d8:25:30: 53:2d:f5:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHtVAajIZhszQYuv5LfLR5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMmQzMGIwMTVlYzRlZjFiMGQzYzY0MzQ3YzhkMWI1OTgy OTNmODEwHhcNMjUxMjEwMTAwMTIxWhcNMjUxMjExMTAwMTIxWjAzMTEwLwYDVQQD EyhjM2MxMjU0ZjkyMDBmOGFmMzY0MmU2N2MwMmMwNGZiYjNiODc1M2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqp3pptJ3GNc+TrQH+jjj8/deQjHd /hM2QhhqpS8dym0qVQ9MmYZQCpeqB3RNKJZYOkmL+BN7ZkZ3HzM9zI9iHs4YA5PE wJBctUr/L6gY5sCo0VPo4aegwL4OK2DEJrYN2gwjAZ6kamjMy+D/Hxt2tuxzU8S5 Z6+QzhoUbeeT8Isto5smwgcQSv0qICXnNegNFQVY/xX7Ep8GExb0Dl0F/2k1C6KV iUZj29Zals8HqVb0pMoH61EbVDIBg8AjSK1P0KDttPc/8vJ8ZDsMhNhdXRqI/EAn CewtVWR/J9lzEgvAMoyXzDp9+DVwQ4kTrBYGOhSU7OyA1mNlzPl1FDnn3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPBJU+SAPivNkLmfALAT7s7h1PWMB8GA1UdIwQY MBaAFE8tMLAV7E7xsNPGQ0fI0bWYKT+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85NjY4YjUtNWU5Mi00YzE4LTliYjkt NDM1MWJiZjc0YzBjLzEvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi85NjY4YjUtNWU5Mi00YzE4LTliYjktNDM1MWJiZjc0YzBj LzEvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjVTxcC+ 1VdoBgdOh+cuq/hNtq0LWRZZz0GNqGUzj7VNFz/kwWK2x2rokdioaLu3+ByR+D76 mY5ylrB6AfYhcF4Tw9PkOJcqtz1Grf8QkWAI8uElyjefX0fW3p3J7w8AtUmznv0L T39o4w+8oQeOl+Sq0tSwhI1No/VSO/APaGE+q2nGWdlUUeT+bqy8YPYlovLbdusX 6FebnjouO7EyYkOGOvwZbBI4xj7kGSBiakoYglwd9dflWSRmAvf7r9ZdzL8/0w8L Eo7KldJFsT4G57Jd5bp4ECbfrdzeEZqh2PCFI0wADD1AEpDjvUrSNmXl0t0b5Nmu aBEu2CUwUy31yQ== -----END CERTIFICATE-----Generated at Wed Dec 10 11:38:19 2025 by rpki-client