This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft File: tDycG90eFSiKuTDUAFGzZTywnno.mft (raw, json) Hash identifier: GdC3zn6tXdOWnqo7NbnZIbVVr11P7qoCg9pi0nuX/Oo= Subject key identifier: 01:4F:02:D7:14:47:4A:84:1C:59:04:B5:8F:02:0B:D7:57:8E:C4:9D Authority key identifier: B4:3C:9C:1B:DD:1E:15:28:8A:B9:30:D4:00:51:B3:65:3C:B0:9E:7A Certificate issuer: /CN=b43c9c1bdd1e15288ab930d40051b3653cb09e7a Certificate serial: 019B23D15CB884719AA1F343EF52F61E4FB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft Manifest number: 177B Signing time: Mon 15 Dec 2025 21:01:21 +0000 Manifest this update: Mon 15 Dec 2025 21:01:21 +0000 Manifest next update: Tue 16 Dec 2025 21:01:21 +0000 Files and hashes: 1: tDycG90eFSiKuTDUAFGzZTywnno.crl (hash: 2dHhZAq44a9msUS+yIiZFEdZPbOSNZRBPB9lvn39a70=) 2: yUpCnFh46Tqx7sCXg4QHc_cNe3o.roa (hash: cp+PmQthE9hblxpquCO9Uz9at9P5Zu4kvGvMw6tU+Ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.crl rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 21:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:d1:5c:b8:84:71:9a:a1:f3:43:ef:52:f6:1e:4f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b43c9c1bdd1e15288ab930d40051b3653cb09e7a Validity Not Before: Dec 15 21:01:21 2025 GMT Not After : Dec 16 21:01:21 2025 GMT Subject: CN=014f02d714474a841c5904b58f020bd7578ec49d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ca:75:0b:54:f5:7a:6b:af:1b:d0:d7:db:06: fa:64:88:44:83:4b:68:4c:ec:54:29:e4:91:f6:65: 35:9c:e7:8d:88:8a:a6:42:70:bf:21:11:bd:27:ae: 9e:c0:e7:5e:e5:af:3f:6a:d6:8b:4e:14:b7:3a:36: b3:89:17:67:89:14:8a:d1:e4:3a:c9:66:c2:60:9b: 1d:f8:d3:e7:e4:5d:8f:20:08:4a:f2:16:47:28:93: a4:73:9a:7f:01:a5:dc:d8:68:5f:f2:a0:0d:26:98: b6:f3:78:d3:fc:df:ff:c0:6d:9b:cc:e2:b1:70:9f: e0:40:81:cf:e4:55:36:b4:4c:d1:d2:fa:a3:9b:c1: f6:60:8f:ff:10:1e:9e:4d:76:ea:01:8f:49:ad:40: f2:d5:3b:97:b8:8b:d1:a9:be:17:84:ae:1c:b7:c3: 1a:99:ca:6f:78:b6:56:ee:77:fc:c1:d9:00:01:a4: 7b:4a:5b:08:9f:d0:84:2e:33:05:95:75:84:b9:28: 7d:1d:e6:33:ee:d7:fa:c8:d8:9b:17:e1:6f:fc:28: fc:a0:75:c4:81:53:7d:00:13:58:85:f3:52:d5:d8: ae:f6:2e:61:d6:25:a0:4f:75:d1:f4:e7:8b:20:7c: 57:99:15:15:dc:41:1d:bf:68:e4:b9:91:f7:dd:d3: 55:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:4F:02:D7:14:47:4A:84:1C:59:04:B5:8F:02:0B:D7:57:8E:C4:9D X509v3 Authority Key Identifier: keyid:B4:3C:9C:1B:DD:1E:15:28:8A:B9:30:D4:00:51:B3:65:3C:B0:9E:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e7:65:ee:76:62:0b:b0:a8:a6:eb:30:36:b1:03:c0:a0:1e: 35:b6:56:06:64:27:91:35:02:48:a4:a1:e1:c7:f9:1b:2d:f6: d4:22:c6:a8:0b:e8:34:ce:65:85:97:f3:f7:b2:5c:07:89:88: df:5c:c0:6b:60:21:f9:35:b1:76:6a:32:cd:19:f8:f7:22:ca: 8f:06:7d:39:e3:ad:75:35:b7:fa:c6:10:d9:e0:f1:bb:ba:f6: 62:ee:a8:ac:5c:83:0a:f5:7e:44:f0:82:c0:0f:54:c6:b8:b6: 55:be:4f:15:f8:74:08:7d:66:7b:f8:cb:1b:29:58:5e:f3:01: b2:de:c5:82:a9:6f:23:19:c0:7a:78:89:7f:9b:34:1d:98:c2: 06:20:29:f9:10:96:7f:8c:fa:ba:ec:aa:90:fe:0d:63:68:9d: c9:01:30:58:2d:c9:d4:53:42:dc:80:a6:9d:a7:3d:07:a9:6c: fc:b3:a3:95:2c:eb:8c:45:20:b8:09:c3:ef:3a:38:7d:91:c7: c5:3b:bb:bf:f3:f5:38:7f:35:4c:9a:9f:05:fa:cc:c7:a7:e6: 3e:ac:a9:f3:b3:76:c5:c2:78:ec:41:fd:28:1b:a9:24:fe:6a: 3a:1f:fc:24:a6:4e:21:b6:7b:eb:8b:df:1d:fc:52:06:ac:8f: dd:c4:d6:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsj0Vy4hHGaofND71L2Hk+5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0M2M5YzFiZGQxZTE1Mjg4YWI5MzBkNDAwNTFiMzY1M2Ni MDllN2EwHhcNMjUxMjE1MjEwMTIxWhcNMjUxMjE2MjEwMTIxWjAzMTEwLwYDVQQD EygwMTRmMDJkNzE0NDc0YTg0MWM1OTA0YjU4ZjAyMGJkNzU3OGVjNDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8p1C1T1emuvG9DX2wb6ZIhEg0to TOxUKeSR9mU1nOeNiIqmQnC/IRG9J66ewOde5a8/ataLThS3OjaziRdniRSK0eQ6 yWbCYJsd+NPn5F2PIAhK8hZHKJOkc5p/AaXc2Ghf8qANJpi283jT/N//wG2bzOKx cJ/gQIHP5FU2tEzR0vqjm8H2YI//EB6eTXbqAY9JrUDy1TuXuIvRqb4XhK4ct8Ma mcpveLZW7nf8wdkAAaR7SlsIn9CELjMFlXWEuSh9HeYz7tf6yNibF+Fv/Cj8oHXE gVN9ABNYhfNS1diu9i5h1iWgT3XR9OeLIHxXmRUV3EEdv2jkuZH33dNVmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFPAtcUR0qEHFkEtY8CC9dXjsSdMB8GA1UdIwQY MBaAFLQ8nBvdHhUoirkw1ABRs2U8sJ56MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdER5Y0c5MGVGU2lLdVREVUFGR3paVHl3bm5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8wM2I3OWEtMzBlZC00ZDI2LTg1ODUt OWM1ZDM1MTUyNmIzLzEvdER5Y0c5MGVGU2lLdVREVUFGR3paVHl3bm5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8wM2I3OWEtMzBlZC00ZDI2LTg1ODUtOWM1ZDM1MTUyNmIz LzEvdER5Y0c5MGVGU2lLdVREVUFGR3paVHl3bm5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGudl7nZi C7CopuswNrEDwKAeNbZWBmQnkTUCSKSh4cf5Gy321CLGqAvoNM5lhZfz97JcB4mI 31zAa2Ah+TWxdmoyzRn49yLKjwZ9OeOtdTW3+sYQ2eDxu7r2Yu6orFyDCvV+RPCC wA9Uxri2Vb5PFfh0CH1me/jLGylYXvMBst7FgqlvIxnAeniJf5s0HZjCBiAp+RCW f4z6uuyqkP4NY2idyQEwWC3J1FNC3ICmnac9B6ls/LOjlSzrjEUguAnD7zo4fZHH xTu7v/P1OH81TJqfBfrMx6fmPqyp87N2xcJ47EH9KBupJP5qOh/8JKZOIbZ764vf HfxSBqyP3cTWfA== -----END CERTIFICATE-----Generated at Tue Dec 16 03:46:26 2025 by rpki-client