This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft File: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft (raw, json) Hash identifier: fsG+UXgGiiPVSXtCNlE5/Btyvj8OZsA1Lf/tOj31hoQ= Subject key identifier: 83:41:49:D1:0A:A7:6E:5E:3D:12:D6:66:76:24:7B:BE:39:71:C3:98 Authority key identifier: B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5 Certificate issuer: /CN=b69cb709934b99f689dd1e99d72c1b000fd872c5 Certificate serial: 019B435C0B2F19315D2685E89FCF16ED7952 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 00:01:04 +0000 Manifest this update: Mon 22 Dec 2025 00:01:04 +0000 Manifest next update: Tue 23 Dec 2025 00:01:04 +0000 Files and hashes: 1: iRWK7zhmEqe5kSfNzw4pTeBGjvE.roa (hash: x9g5RUDfgJ6Mixu1OZfai6p4BgXIl99taX8ijSdqumo=) 2: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl (hash: JL5PxXU71YM+hhkG5rAFbaA/vQ+vdW9Gnoa58xekato=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5c:0b:2f:19:31:5d:26:85:e8:9f:cf:16:ed:79:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b69cb709934b99f689dd1e99d72c1b000fd872c5 Validity Not Before: Dec 22 00:01:04 2025 GMT Not After : Dec 23 00:01:04 2025 GMT Subject: CN=834149d10aa76e5e3d12d66676247bbe3971c398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:37:1e:f4:d5:b1:00:d9:45:37:de:83:bb:0a: c8:6a:26:06:29:7b:69:b8:49:9e:19:3f:c1:ea:75: 54:02:36:e3:1a:c1:67:b2:f0:52:5c:61:99:0c:1c: 7f:78:ff:ce:3d:f9:d8:4f:a6:d8:b9:c8:35:88:eb: 1c:85:3a:ac:c9:c5:43:19:a3:6b:02:db:2f:4f:f7: 0b:b4:aa:3b:18:94:4b:82:7b:64:03:6e:c0:e8:f4: fd:9d:2f:7f:4d:8b:38:04:d0:9d:1d:47:9a:da:93: 4f:ff:52:57:73:b7:58:89:a5:1c:81:19:b9:7d:84: ec:66:6d:75:2f:48:8d:53:af:9e:4c:07:d8:d3:1b: 5a:f1:67:42:7f:5c:bf:8d:59:be:10:35:69:c9:57: 5b:9e:b0:49:a0:4d:84:c9:2b:8f:f1:7c:d2:18:d7: aa:fd:7e:c2:34:d3:78:dc:1b:99:de:49:d1:67:20: c1:cd:7e:7a:42:bf:e7:9d:3c:89:bd:e2:b0:c3:fb: 34:de:64:93:13:d5:58:e9:ff:11:70:38:6b:85:09: 23:11:92:53:74:87:8b:11:ec:d1:ef:12:87:19:79: 09:c1:21:fc:5b:e2:5a:2a:ae:d8:23:3e:3f:d7:e8: 04:8e:a9:26:17:b4:90:fb:f3:e3:5e:0a:37:5b:93: 2a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:41:49:D1:0A:A7:6E:5E:3D:12:D6:66:76:24:7B:BE:39:71:C3:98 X509v3 Authority Key Identifier: keyid:B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:3a:45:5c:1a:42:37:55:3a:c0:5e:c7:08:06:f8:2e:a0:7b: 78:c9:da:fd:c4:ed:a2:06:e3:f7:e1:36:dc:34:54:64:17:51: 9a:76:1c:7c:d5:91:99:19:c3:40:7a:d1:06:ff:f7:46:a9:eb: 6a:ab:fd:2c:28:7e:b6:e9:96:64:16:c2:b7:84:3a:0d:67:b2: 79:a8:19:91:f0:d5:5d:21:cc:79:ad:2e:49:17:2d:3a:0f:a6: cc:67:14:96:48:da:65:90:d7:41:af:44:70:4b:24:17:d9:ac: 6e:ff:2e:11:e8:42:d6:3e:91:54:87:67:9a:84:ca:88:f0:2e: 92:9b:c1:60:0f:d2:aa:cf:8f:01:bd:cb:bd:1e:eb:e5:4e:17: e3:1b:ec:95:32:2c:18:62:97:f5:09:3a:ad:56:ed:7e:43:da: c3:99:3e:e7:6c:79:75:53:8a:d6:59:a1:5b:5f:17:da:11:ee: 3c:bf:45:3c:1a:52:2b:0f:4c:4e:c1:fe:4f:a5:85:fb:b5:fa: 4c:a2:55:c1:fe:4a:93:fb:15:b1:ee:3b:a1:ec:5b:df:40:f3: c3:35:9c:a0:94:76:3d:9e:5a:5a:19:f8:36:4c:14:29:0f:65: b4:1f:b0:41:d2:20:18:c5:a8:26:28:8e:74:7b:ef:dc:98:a8: 17:dc:20:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDXAsvGTFdJoXon88W7XlSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OWNiNzA5OTM0Yjk5ZjY4OWRkMWU5OWQ3MmMxYjAwMGZk ODcyYzUwHhcNMjUxMjIyMDAwMTA0WhcNMjUxMjIzMDAwMTA0WjAzMTEwLwYDVQQD Eyg4MzQxNDlkMTBhYTc2ZTVlM2QxMmQ2NjY3NjI0N2JiZTM5NzFjMzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zce9NWxANlFN96DuwrIaiYGKXtp uEmeGT/B6nVUAjbjGsFnsvBSXGGZDBx/eP/OPfnYT6bYucg1iOschTqsycVDGaNr AtsvT/cLtKo7GJRLgntkA27A6PT9nS9/TYs4BNCdHUea2pNP/1JXc7dYiaUcgRm5 fYTsZm11L0iNU6+eTAfY0xta8WdCf1y/jVm+EDVpyVdbnrBJoE2EySuP8XzSGNeq /X7CNNN43BuZ3knRZyDBzX56Qr/nnTyJveKww/s03mSTE9VY6f8RcDhrhQkjEZJT dIeLEezR7xKHGXkJwSH8W+JaKq7YIz4/1+gEjqkmF7SQ+/PjXgo3W5MqwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINBSdEKp25ePRLWZnYke745ccOYMB8GA1UdIwQY MBaAFLactwmTS5n2id0emdcsGwAP2HLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHB5M0NaTkxtZmFKM1I2WjF5d2JBQV9ZY3NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS80MWUyODctNTBiNC00NmVmLTgyY2Mt Y2EzYjcyNzhkZGUyLzEvdHB5M0NaTkxtZmFKM1I2WjF5d2JBQV9ZY3NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS80MWUyODctNTBiNC00NmVmLTgyY2MtY2EzYjcyNzhkZGUy LzEvdHB5M0NaTkxtZmFKM1I2WjF5d2JBQV9ZY3NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDpFXBpC N1U6wF7HCAb4LqB7eMna/cTtogbj9+E23DRUZBdRmnYcfNWRmRnDQHrRBv/3Rqnr aqv9LCh+tumWZBbCt4Q6DWeyeagZkfDVXSHMea0uSRctOg+mzGcUlkjaZZDXQa9E cEskF9msbv8uEehC1j6RVIdnmoTKiPAukpvBYA/Sqs+PAb3LvR7r5U4X4xvslTIs GGKX9Qk6rVbtfkPaw5k+52x5dVOK1lmhW18X2hHuPL9FPBpSKw9MTsH+T6WF+7X6 TKJVwf5Kk/sVse47oexb30DzwzWcoJR2PZ5aWhn4NkwUKQ9ltB+wQdIgGMWoJiiO dHvv3JioF9wgOg== -----END CERTIFICATE-----Generated at Mon Dec 22 03:05:09 2025 by rpki-client