This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft File: t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft (raw, json) Hash identifier: PiK3zuNM9SzK7YYY90rAMjXHw/CY6IBsrIbW4grVoxY= Subject key identifier: D6:95:C1:CA:38:ED:6E:87:48:73:4F:0D:C4:DE:C5:A2:25:C4:2C:7F Authority key identifier: B7:6C:BF:59:27:C4:76:90:5F:ED:A3:4E:11:40:14:8B:F8:05:D9:B0 Certificate issuer: /CN=b76cbf5927c476905feda34e1140148bf805d9b0 Certificate serial: 019B59768E4F633B02CBD24D0B3C153D0039 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft Manifest number: 1792 Signing time: Fri 26 Dec 2025 07:01:40 +0000 Manifest this update: Fri 26 Dec 2025 07:01:40 +0000 Manifest next update: Sat 27 Dec 2025 07:01:40 +0000 Files and hashes: 1: t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl (hash: MpiaUveUgJRhR8Sg32y3NzXtKFNIHVXgK56byzm5VjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:8e:4f:63:3b:02:cb:d2:4d:0b:3c:15:3d:00:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76cbf5927c476905feda34e1140148bf805d9b0 Validity Not Before: Dec 26 07:01:40 2025 GMT Not After : Dec 27 07:01:40 2025 GMT Subject: CN=d695c1ca38ed6e8748734f0dc4dec5a225c42c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ac:91:60:35:e3:cd:d6:d0:05:df:a8:18:c1: de:a0:8a:af:a3:6b:cc:71:c4:25:bb:4f:ea:4e:24: fa:67:0d:c2:88:93:54:6f:95:51:36:ad:14:b8:ed: 41:66:4d:9d:40:d0:92:1f:c3:d0:b1:dc:86:10:8d: 34:79:37:c2:fa:26:b0:4b:b0:aa:95:c4:f2:94:e9: dd:6a:66:e4:71:28:5f:4a:f4:ef:ff:02:d3:48:40: db:6c:fa:e9:94:f8:74:98:48:89:7e:fb:b3:f2:6d: 43:c2:6f:34:88:f5:65:0f:8f:04:8f:52:c6:54:07: 08:ac:02:4a:50:b4:69:42:ec:80:15:78:25:7b:82: ca:98:4b:0e:d0:90:83:0f:1a:44:06:72:78:90:0d: 88:b0:c3:38:b5:ce:06:09:3a:f6:16:23:8c:7f:bb: 66:bc:18:0d:84:a2:f6:2b:06:60:1d:f6:dd:6d:29: c7:f7:7e:a5:0a:58:7a:db:c4:01:66:06:17:a8:8e: b3:af:21:58:ab:bc:b1:a9:fa:94:e8:43:61:59:bd: c9:41:cd:e2:89:8f:f8:63:38:48:d5:e2:ae:14:27: cd:be:8d:5f:3c:1d:c1:27:2e:9c:bc:aa:8a:7d:36: ce:d9:6e:bc:7f:75:3f:ea:02:1e:c6:e5:26:72:f4: 2b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:95:C1:CA:38:ED:6E:87:48:73:4F:0D:C4:DE:C5:A2:25:C4:2C:7F X509v3 Authority Key Identifier: keyid:B7:6C:BF:59:27:C4:76:90:5F:ED:A3:4E:11:40:14:8B:F8:05:D9:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f9:78:0a:2a:56:86:37:81:95:b9:75:73:a1:db:28:a6:53: 17:67:8e:61:9c:3b:96:11:7f:ce:13:8b:c9:40:ff:eb:c2:96: ff:e9:00:79:2a:ff:8c:a2:bf:c6:44:1f:28:2f:d3:06:4f:d7: fd:8c:0c:e5:b5:a5:1a:8f:db:c0:62:d4:a4:48:a4:30:74:8f: a1:fc:a2:34:fc:0a:38:a6:a9:83:77:70:53:97:3a:59:76:d7: af:da:e9:b9:21:cb:47:7a:ca:fa:50:73:1d:c2:3c:b7:1e:aa: 33:1b:b6:8d:61:ec:c8:d4:a8:5f:62:e5:e8:c3:35:00:f8:df: bf:0d:9b:8d:22:50:ad:e4:a7:9c:d6:97:63:d2:70:73:62:6a: d3:a8:df:c4:4c:5a:23:21:20:7e:c5:78:58:2c:c4:f1:71:3c: 6f:ed:e0:1a:25:bb:f1:78:e5:ad:3a:dc:d5:a0:3e:0f:1e:55: 67:80:90:6c:8f:3c:c4:a5:a1:64:fc:ee:d9:f8:db:7f:80:f5: d8:ee:5a:bd:58:3d:e8:80:02:96:43:96:76:76:81:8b:ad:2b: 8e:60:a9:97:38:f4:36:f6:78:bd:02:80:95:eb:e4:aa:8d:c5: 60:e2:ba:98:bf:8f:8c:d1:ca:31:7e:04:69:a8:d9:e1:4f:d7: d8:7b:cb:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdo5PYzsCy9JNCzwVPQA5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NmNiZjU5MjdjNDc2OTA1ZmVkYTM0ZTExNDAxNDhiZjgw NWQ5YjAwHhcNMjUxMjI2MDcwMTQwWhcNMjUxMjI3MDcwMTQwWjAzMTEwLwYDVQQD EyhkNjk1YzFjYTM4ZWQ2ZTg3NDg3MzRmMGRjNGRlYzVhMjI1YzQyYzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqyRYDXjzdbQBd+oGMHeoIqvo2vM ccQlu0/qTiT6Zw3CiJNUb5VRNq0UuO1BZk2dQNCSH8PQsdyGEI00eTfC+iawS7Cq lcTylOndambkcShfSvTv/wLTSEDbbPrplPh0mEiJfvuz8m1Dwm80iPVlD48Ej1LG VAcIrAJKULRpQuyAFXgle4LKmEsO0JCDDxpEBnJ4kA2IsMM4tc4GCTr2FiOMf7tm vBgNhKL2KwZgHfbdbSnH936lClh628QBZgYXqI6zryFYq7yxqfqU6ENhWb3JQc3i iY/4YzhI1eKuFCfNvo1fPB3BJy6cvKqKfTbO2W68f3U/6gIexuUmcvQrOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNaVwco47W6HSHNPDcTexaIlxCx/MB8GA1UdIwQY MBaAFLdsv1knxHaQX+2jThFAFIv4BdmwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDJ5X1dTZkVkcEJmN2FOT0VVQVVpX2dGMmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81NDdlOGUtNDFiYS00MjcyLWEyOTQt MGFlMmI5ZDlkNDQ3LzEvdDJ5X1dTZkVkcEJmN2FOT0VVQVVpX2dGMmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS81NDdlOGUtNDFiYS00MjcyLWEyOTQtMGFlMmI5ZDlkNDQ3 LzEvdDJ5X1dTZkVkcEJmN2FOT0VVQVVpX2dGMmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjvl4CipW hjeBlbl1c6HbKKZTF2eOYZw7lhF/zhOLyUD/68KW/+kAeSr/jKK/xkQfKC/TBk/X /YwM5bWlGo/bwGLUpEikMHSPofyiNPwKOKapg3dwU5c6WXbXr9rpuSHLR3rK+lBz HcI8tx6qMxu2jWHsyNSoX2Ll6MM1APjfvw2bjSJQreSnnNaXY9Jwc2Jq06jfxExa IyEgfsV4WCzE8XE8b+3gGiW78XjlrTrc1aA+Dx5VZ4CQbI88xKWhZPzu2fjbf4D1 2O5avVg96IAClkOWdnaBi60rjmCplzj0NvZ4vQKAlevkqo3FYOK6mL+PjNHKMX4E aajZ4U/X2HvLfg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:07 2025 by rpki-client