This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft File: tyC-m1eyWx7aP4EJLgC0U4vosp0.mft (raw, json) Hash identifier: UdwD4ku/ezPgMbKbK37IO3rjRKQoWPGbvd2VZ87esSU= Subject key identifier: 07:10:C3:E1:FB:29:BB:EB:FC:7C:78:86:03:04:AA:D2:C5:21:31:B2 Authority key identifier: B7:20:BE:9B:57:B2:5B:1E:DA:3F:81:09:2E:00:B4:53:8B:E8:B2:9D Certificate issuer: /CN=b720be9b57b25b1eda3f81092e00b4538be8b29d Certificate serial: 019B1EE1C38745A2029683915EF0D21193FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft Manifest number: 1705 Signing time: Sun 14 Dec 2025 22:01:10 +0000 Manifest this update: Sun 14 Dec 2025 22:01:10 +0000 Manifest next update: Mon 15 Dec 2025 22:01:10 +0000 Files and hashes: 1: 2bQPYE6C1xPKacn71h7uNUfwW5k.asa (hash: S/35bcKz6xhuKu6KdcMaM7TFCVzuh91pCLHJRPyRwag=) 2: tyC-m1eyWx7aP4EJLgC0U4vosp0.crl (hash: gszOGTdoAHF/l4r6GiF7tO+UD7aw6N/ruoto850Z8iI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 22:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:e1:c3:87:45:a2:02:96:83:91:5e:f0:d2:11:93:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b720be9b57b25b1eda3f81092e00b4538be8b29d Validity Not Before: Dec 14 22:01:10 2025 GMT Not After : Dec 15 22:01:10 2025 GMT Subject: CN=0710c3e1fb29bbebfc7c78860304aad2c52131b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ca:a2:b6:34:cc:fe:c6:a6:de:66:2b:1d:56: 08:e6:0f:48:81:bd:b9:61:36:de:db:ce:e4:16:da: 65:01:2b:12:ae:c3:ac:a7:dd:56:80:a8:bc:39:ff: 52:79:81:f0:10:80:b8:c8:1e:bd:93:45:67:be:c1: af:05:0c:b5:5c:c0:ab:56:e0:db:4e:6b:81:52:9d: fc:1a:06:29:0b:84:fe:c5:11:77:4e:68:ca:c0:41: 7c:c9:ca:56:7b:96:7f:60:4f:96:fa:c5:61:72:c5: c7:82:5c:f8:22:9a:67:0c:8c:89:8c:32:0e:c6:87: d2:d9:33:e9:cf:d3:4c:93:1b:86:cb:a5:16:e3:49: aa:7a:c2:a3:30:72:71:c7:21:ff:c4:25:6c:99:df: 56:d0:b3:5e:34:08:1f:d5:9c:25:8b:06:4e:15:d2: f3:c3:d0:db:2e:5e:a3:1d:88:68:bd:2e:61:10:25: 99:9e:7a:89:57:39:77:e2:b6:f7:35:26:00:50:c6: af:3a:c2:0b:50:00:06:6a:19:18:4a:c8:64:6e:3b: 20:64:fe:01:a2:82:b6:43:d2:9f:64:e8:d1:83:b2: f5:2a:f9:3d:36:f2:7d:96:28:ac:91:85:c5:2a:cb: e0:8f:96:46:b9:46:17:ef:6b:0b:36:77:4b:6c:4a: 4c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:10:C3:E1:FB:29:BB:EB:FC:7C:78:86:03:04:AA:D2:C5:21:31:B2 X509v3 Authority Key Identifier: keyid:B7:20:BE:9B:57:B2:5B:1E:DA:3F:81:09:2E:00:B4:53:8B:E8:B2:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyC-m1eyWx7aP4EJLgC0U4vosp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/d1f89c-1909-4995-8dd1-a1056f589354/1/tyC-m1eyWx7aP4EJLgC0U4vosp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:d6:04:ab:fe:9d:99:f4:ca:be:ff:eb:47:6c:d8:48:ba:1a: 85:1a:ef:da:de:d0:b4:d6:05:28:f8:b6:76:3b:5d:60:1a:ff: e4:fe:fd:ba:73:73:e0:59:c4:27:2f:f3:e0:ac:c2:62:c3:8a: 13:3f:13:92:dc:28:a2:cc:57:d7:23:66:1a:0e:88:38:64:0b: b9:fb:67:83:5d:74:ef:02:b2:7c:ed:67:52:27:95:b7:dc:af: ce:6d:33:78:ff:e8:4b:f6:79:41:11:f7:3d:f1:4d:a1:cf:10: 63:27:30:04:f8:b1:20:7d:94:0a:a4:f7:ea:3d:38:48:82:9a: d9:4d:ea:63:3d:73:03:93:98:a0:b1:00:c0:81:6a:f8:a0:83: 5f:c8:1d:0d:13:90:77:85:91:f4:a8:4b:71:6f:ca:48:83:a0: e9:eb:73:ba:25:b6:0a:4f:b8:e7:46:5b:34:ad:10:bc:56:75: af:2a:79:8a:eb:aa:ef:db:81:07:39:12:a3:b8:c4:32:9c:35: db:ff:11:4e:e7:a9:8c:f8:90:2a:ee:e7:73:d9:ca:6d:c3:b6: 3b:dc:e7:33:5c:17:97:7a:3c:4d:32:47:6e:fe:18:76:f2:e6: 4c:23:07:50:32:93:fa:40:8e:60:e1:47:02:7f:17:06:bb:d9: 19:2c:1a:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZse4cOHRaICloORXvDSEZP7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjBiZTliNTdiMjViMWVkYTNmODEwOTJlMDBiNDUzOGJl OGIyOWQwHhcNMjUxMjE0MjIwMTEwWhcNMjUxMjE1MjIwMTEwWjAzMTEwLwYDVQQD EygwNzEwYzNlMWZiMjliYmViZmM3Yzc4ODYwMzA0YWFkMmM1MjEzMWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzcqitjTM/sam3mYrHVYI5g9Igb25 YTbe287kFtplASsSrsOsp91WgKi8Of9SeYHwEIC4yB69k0VnvsGvBQy1XMCrVuDb TmuBUp38GgYpC4T+xRF3TmjKwEF8ycpWe5Z/YE+W+sVhcsXHglz4IppnDIyJjDIO xofS2TPpz9NMkxuGy6UW40mqesKjMHJxxyH/xCVsmd9W0LNeNAgf1ZwliwZOFdLz w9DbLl6jHYhovS5hECWZnnqJVzl34rb3NSYAUMavOsILUAAGahkYSshkbjsgZP4B ooK2Q9KfZOjRg7L1Kvk9NvJ9liiskYXFKsvgj5ZGuUYX72sLNndLbEpM6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAcQw+H7Kbvr/Hx4hgMEqtLFITGyMB8GA1UdIwQY MBaAFLcgvptXslse2j+BCS4AtFOL6LKdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlDLW0xZXlXeDdhUDRFSkxnQzBVNHZvc3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9kMWY4OWMtMTkwOS00OTk1LThkZDEt YTEwNTZmNTg5MzU0LzEvdHlDLW0xZXlXeDdhUDRFSkxnQzBVNHZvc3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9kMWY4OWMtMTkwOS00OTk1LThkZDEtYTEwNTZmNTg5MzU0 LzEvdHlDLW0xZXlXeDdhUDRFSkxnQzBVNHZvc3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGdYEq/6d mfTKvv/rR2zYSLoahRrv2t7QtNYFKPi2djtdYBr/5P79unNz4FnEJy/z4KzCYsOK Ez8TktwoosxX1yNmGg6IOGQLuftng1107wKyfO1nUieVt9yvzm0zeP/oS/Z5QRH3 PfFNoc8QYycwBPixIH2UCqT36j04SIKa2U3qYz1zA5OYoLEAwIFq+KCDX8gdDROQ d4WR9KhLcW/KSIOg6etzuiW2Ck+450ZbNK0QvFZ1ryp5iuuq79uBBzkSo7jEMpw1 2/8RTuepjPiQKu7nc9nKbcO2O9znM1wXl3o8TTJHbv4YdvLmTCMHUDKT+kCOYOFH An8XBrvZGSwavQ== -----END CERTIFICATE-----Generated at Mon Dec 15 04:57:04 2025 by rpki-client