This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft File: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft (raw, json) Hash identifier: EvCPPEraJMYSeEN5EL8mUk10lDYc1XOBLgBby/YPVQg= Subject key identifier: 92:45:CE:85:A4:75:75:5C:A2:FF:57:9A:C7:3D:EF:88:BC:FC:E0:5A Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81 Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81 Certificate serial: 019B4F28EC9F27B92A1CE45287996C589284 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft Manifest number: 09F9 Signing time: Wed 24 Dec 2025 07:00:40 +0000 Manifest this update: Wed 24 Dec 2025 07:00:40 +0000 Manifest next update: Thu 25 Dec 2025 07:00:40 +0000 Files and hashes: 1: Gm9NfecPR-RUq_slL2NKmzGqQ1c.roa (hash: tkU2/2KHzDAlfUyxsnryBif6WpEicFze6N39RJoBTkM=) 2: IdcqQLaLPNCQJzdTXpACnqYscnI.roa (hash: H+1S4n+OyXlFrQgh9A84gwVt0xMSOKKs5oiKIXtOgjU=) 3: OVQ5uPkYukiV8dv56D7X8vrwp8E.roa (hash: OWeiLtMHum8JXxqxvdWPi5crevEaVFFy1EtOqegV6tI=) 4: P8VDh_9fdYN8xXLvtJMOKaqZaBs.roa (hash: nMTrg+lyYaQ59OMP8FwWXirKWOtKtrNaOkuqtu/tSjc=) 5: Pq__l0a6HrBOcCXhEDnn7AV0g54.roa (hash: A1mBB7bcRpMOwkOKXDY7TtCFDZr1ayBKUG0wvvr/Zlw=) 6: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl (hash: iiuiOZZQtc/kRm1MG1Cj47NxjpCVIM4TTT3msIbreT8=) 7: qqV4lt6FTPnmuHdRaoUeaEC2b8U.roa (hash: HtCD/Cd4hhljqddcvUw+6pkmRGrV8qPj/FjkfpsV+Jw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:28:ec:9f:27:b9:2a:1c:e4:52:87:99:6c:58:92:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81 Validity Not Before: Dec 24 07:00:40 2025 GMT Not After : Dec 25 07:00:40 2025 GMT Subject: CN=9245ce85a475755ca2ff579ac73def88bcfce05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8e:4f:09:e6:59:6e:d4:16:96:6b:95:b0:6d: 68:db:78:a7:29:d7:c7:db:b1:a5:ce:3d:3d:1c:44: 60:32:fd:02:c2:b5:41:71:b6:b1:93:d8:a1:88:c4: 7d:f9:0c:a6:e9:da:4f:d0:11:d9:ca:92:b7:48:ab: 34:51:c3:b4:8b:00:aa:a8:f0:ef:af:28:b3:8e:a2: f7:0c:af:c1:51:d4:92:5a:84:e8:0a:9b:61:e5:d1: 63:02:bd:d5:63:c9:18:46:4b:75:92:49:4d:1a:57: 91:70:54:8a:a6:41:af:b8:08:36:bf:32:6d:76:eb: f3:e8:9e:7f:64:06:1d:06:9a:28:62:e0:f8:b5:06: 69:a4:07:fd:18:9e:cc:b3:5a:a6:b5:1b:c0:e1:14: 54:bd:24:c2:98:78:cd:e2:91:dd:6e:f8:ab:84:24: e8:29:59:19:f3:6b:c4:86:49:6e:b7:cf:53:22:82: ca:3b:44:93:82:2a:81:9d:83:e1:e9:32:77:3e:c4: 9a:2d:6d:3d:b0:be:eb:fc:a9:a6:da:b4:c4:0f:d5: b8:ef:59:f7:ea:3b:e1:b7:10:d8:b9:dc:d9:bd:7d: 3b:10:2a:64:72:b1:04:e1:3a:1c:ff:1c:24:26:66: bf:05:61:ed:26:a2:0a:d1:25:20:02:c9:2d:c6:66: e0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:45:CE:85:A4:75:75:5C:A2:FF:57:9A:C7:3D:EF:88:BC:FC:E0:5A X509v3 Authority Key Identifier: keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:5f:31:c2:40:7e:6b:30:45:8b:09:7f:69:3a:82:13:ed:66: e8:b4:fd:68:8c:50:b8:5f:16:10:83:84:2d:ba:30:6b:30:08: cd:c5:e3:71:72:8b:a6:90:65:dd:65:cb:33:1f:13:2f:eb:f0: 3d:2d:1b:6e:7b:d4:8e:9c:ce:ca:90:8f:88:7e:c8:ae:5a:92: c3:a6:64:71:d4:3b:9e:ea:4f:ca:c0:ac:ed:63:c8:47:e7:6b: 56:69:a5:05:9b:d2:8d:3b:d2:e8:ca:bf:b2:f3:e0:4e:8c:b5: 79:ab:e1:2c:a6:bd:a3:30:c6:43:2b:1a:74:46:84:d4:ba:cf: 65:0b:0a:2a:da:40:d4:91:53:58:55:83:93:11:77:06:a0:34: 9b:b6:f8:c7:f1:92:2f:10:39:82:33:88:50:3e:08:05:ab:58: 70:b2:f2:8b:54:d8:64:32:07:d8:b1:06:9b:83:74:79:57:ee: b9:9e:72:3c:e8:3a:06:dd:0f:1e:cb:c1:09:99:d0:fe:34:c2: 23:99:18:ab:7c:86:d8:25:d0:b1:5e:09:3a:73:0c:e8:1a:01: f8:3b:7e:17:d4:f9:a6:f5:04:9c:31:15:35:fb:1c:7d:66:0e: 38:0f:e5:46:d7:ad:5a:ab:31:d7:85:ea:99:92:b2:ac:c8:b9: 61:b4:3e:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKOyfJ7kqHORSh5lsWJKEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMmQzMGIwMTVlYzRlZjFiMGQzYzY0MzQ3YzhkMWI1OTgy OTNmODEwHhcNMjUxMjI0MDcwMDQwWhcNMjUxMjI1MDcwMDQwWjAzMTEwLwYDVQQD Eyg5MjQ1Y2U4NWE0NzU3NTVjYTJmZjU3OWFjNzNkZWY4OGJjZmNlMDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Y5PCeZZbtQWlmuVsG1o23inKdfH 27Glzj09HERgMv0CwrVBcbaxk9ihiMR9+Qym6dpP0BHZypK3SKs0UcO0iwCqqPDv ryizjqL3DK/BUdSSWoToCpth5dFjAr3VY8kYRkt1kklNGleRcFSKpkGvuAg2vzJt duvz6J5/ZAYdBpooYuD4tQZppAf9GJ7Ms1qmtRvA4RRUvSTCmHjN4pHdbvirhCTo KVkZ82vEhklut89TIoLKO0STgiqBnYPh6TJ3PsSaLW09sL7r/Kmm2rTED9W471n3 6jvhtxDYudzZvX07ECpkcrEE4Toc/xwkJma/BWHtJqIK0SUgAsktxmbgXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJFzoWkdXVcov9Xmsc974i8/OBaMB8GA1UdIwQY MBaAFE8tMLAV7E7xsNPGQ0fI0bWYKT+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85NjY4YjUtNWU5Mi00YzE4LTliYjkt NDM1MWJiZjc0YzBjLzEvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi85NjY4YjUtNWU5Mi00YzE4LTliYjktNDM1MWJiZjc0YzBj LzEvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW18xwkB+ azBFiwl/aTqCE+1m6LT9aIxQuF8WEIOELbowazAIzcXjcXKLppBl3WXLMx8TL+vw PS0bbnvUjpzOypCPiH7IrlqSw6ZkcdQ7nupPysCs7WPIR+drVmmlBZvSjTvS6Mq/ svPgToy1eavhLKa9ozDGQysadEaE1LrPZQsKKtpA1JFTWFWDkxF3BqA0m7b4x/GS LxA5gjOIUD4IBatYcLLyi1TYZDIH2LEGm4N0eVfuuZ5yPOg6Bt0PHsvBCZnQ/jTC I5kYq3yG2CXQsV4JOnMM6BoB+Dt+F9T5pvUEnDEVNfscfWYOOA/lRtetWqsx14Xq mZKyrMi5YbQ+TA== -----END CERTIFICATE-----Generated at Wed Dec 24 08:47:30 2025 by rpki-client