This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft File: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft (raw, json) Hash identifier: 24jqZTw5M5m02koIdltoHCm2vzMJloyQgDKTVi1X/As= Subject key identifier: 5E:12:99:EF:76:9B:7D:56:BE:80:E2:97:83:98:08:FC:4F:39:1B:F7 Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81 Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81 Certificate serial: 019B3BD8E94BC3931BADC913034373568E84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft Manifest number: 09EF Signing time: Sat 20 Dec 2025 13:00:29 +0000 Manifest this update: Sat 20 Dec 2025 13:00:29 +0000 Manifest next update: Sun 21 Dec 2025 13:00:29 +0000 Files and hashes: 1: Gm9NfecPR-RUq_slL2NKmzGqQ1c.roa (hash: tkU2/2KHzDAlfUyxsnryBif6WpEicFze6N39RJoBTkM=) 2: IdcqQLaLPNCQJzdTXpACnqYscnI.roa (hash: H+1S4n+OyXlFrQgh9A84gwVt0xMSOKKs5oiKIXtOgjU=) 3: OVQ5uPkYukiV8dv56D7X8vrwp8E.roa (hash: OWeiLtMHum8JXxqxvdWPi5crevEaVFFy1EtOqegV6tI=) 4: P8VDh_9fdYN8xXLvtJMOKaqZaBs.roa (hash: nMTrg+lyYaQ59OMP8FwWXirKWOtKtrNaOkuqtu/tSjc=) 5: Pq__l0a6HrBOcCXhEDnn7AV0g54.roa (hash: A1mBB7bcRpMOwkOKXDY7TtCFDZr1ayBKUG0wvvr/Zlw=) 6: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl (hash: YsVYn/jywaH+ukRKThFUXGuL9Rt2sf1DswupUIcFmT0=) 7: qqV4lt6FTPnmuHdRaoUeaEC2b8U.roa (hash: HtCD/Cd4hhljqddcvUw+6pkmRGrV8qPj/FjkfpsV+Jw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d8:e9:4b:c3:93:1b:ad:c9:13:03:43:73:56:8e:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81 Validity Not Before: Dec 20 13:00:29 2025 GMT Not After : Dec 21 13:00:29 2025 GMT Subject: CN=5e1299ef769b7d56be80e297839808fc4f391bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5e:b0:29:b5:9d:89:c7:af:a6:88:1f:a0:0c: 7a:c8:13:d2:a8:98:d3:16:98:cc:57:71:55:44:51: 0d:19:d4:90:d0:e8:9e:4f:2b:55:b2:3d:13:59:db: 96:d4:98:a4:1b:4c:78:92:2e:55:b9:cb:30:6e:5e: 09:9e:5a:52:42:8d:39:bf:45:53:74:45:7c:e7:2c: e9:69:85:b9:12:37:41:58:70:2b:c7:67:37:8c:d3: 55:ba:95:7a:af:3a:21:ce:58:f4:95:c8:de:1a:81: ad:1c:8c:40:33:d4:20:e5:7f:0e:1b:c1:ae:67:3b: 4a:dc:41:4a:5d:13:0d:6d:c8:eb:a0:e7:44:0c:3e: 70:f5:5e:ad:ee:27:4f:54:cc:46:90:39:d9:06:5b: f5:64:9e:02:5d:5c:d0:c5:99:3d:82:26:72:2f:c1: d4:f1:be:56:a0:d6:a8:76:14:50:91:77:2b:0a:6c: 21:86:a0:d5:1a:d5:de:5e:15:08:82:50:d1:33:8c: 2e:60:fd:3c:86:46:73:bf:8c:b2:b7:5f:f1:1b:42: 72:f8:54:40:26:30:23:f0:22:83:1b:af:17:f6:f8: 08:3b:40:77:87:01:13:06:3b:f4:76:87:33:a7:fe: 0f:34:71:6c:ec:fe:42:3d:c8:a9:86:7a:51:30:62: f6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:12:99:EF:76:9B:7D:56:BE:80:E2:97:83:98:08:FC:4F:39:1B:F7 X509v3 Authority Key Identifier: keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b7:45:62:91:f2:6d:5a:10:95:fb:55:3b:da:0d:7e:4f:61: 70:c7:23:ef:30:73:35:84:6b:23:9a:af:d8:56:76:bb:1c:0e: 7e:47:cf:b3:03:5a:a0:cc:05:9b:11:9d:9e:43:e6:5f:10:2a: 97:c3:7e:d0:98:b5:29:0d:cb:d8:be:9e:88:c5:fb:9e:a7:5b: 06:3b:12:d1:9b:84:95:6a:81:03:8a:e3:af:07:c4:68:a5:1c: ca:b0:fa:81:d7:71:63:71:1c:e5:3f:62:26:9a:bc:01:15:cd: 0f:0b:26:0f:27:4a:94:72:fe:64:70:ac:77:cc:9a:5b:13:63: 94:71:fa:20:3f:76:a2:32:dc:96:96:1e:5f:7f:a9:6d:84:59: d0:ca:2f:83:2a:23:10:28:3a:10:4e:2c:7a:af:8c:5a:3f:53: 3a:52:ac:c5:da:e5:3a:07:d3:19:0d:a9:2c:a0:13:f8:7c:d8: cb:82:13:cd:6b:c5:4d:9d:07:ea:45:48:28:96:69:92:b7:61: c9:c4:6e:db:6c:06:11:b3:ad:62:a1:a2:65:06:90:dc:22:a7: 01:1c:1a:b7:6d:dc:0a:b4:cd:c0:91:4e:18:49:77:d8:22:33: 58:27:ae:b8:fd:0d:18:5d:d6:e4:e4:91:dc:19:dc:12:cf:c9: 84:94:74:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72OlLw5MbrckTA0NzVo6EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMmQzMGIwMTVlYzRlZjFiMGQzYzY0MzQ3YzhkMWI1OTgy OTNmODEwHhcNMjUxMjIwMTMwMDI5WhcNMjUxMjIxMTMwMDI5WjAzMTEwLwYDVQQD Eyg1ZTEyOTllZjc2OWI3ZDU2YmU4MGUyOTc4Mzk4MDhmYzRmMzkxYmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF6wKbWdicevpogfoAx6yBPSqJjT FpjMV3FVRFENGdSQ0OieTytVsj0TWduW1JikG0x4ki5Vucswbl4JnlpSQo05v0VT dEV85yzpaYW5EjdBWHArx2c3jNNVupV6rzohzlj0lcjeGoGtHIxAM9Qg5X8OG8Gu ZztK3EFKXRMNbcjroOdEDD5w9V6t7idPVMxGkDnZBlv1ZJ4CXVzQxZk9giZyL8HU 8b5WoNaodhRQkXcrCmwhhqDVGtXeXhUIglDRM4wuYP08hkZzv4yyt1/xG0Jy+FRA JjAj8CKDG68X9vgIO0B3hwETBjv0doczp/4PNHFs7P5CPciphnpRMGL2DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4Sme92m31WvoDil4OYCPxPORv3MB8GA1UdIwQY MBaAFE8tMLAV7E7xsNPGQ0fI0bWYKT+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85NjY4YjUtNWU5Mi00YzE4LTliYjkt NDM1MWJiZjc0YzBjLzEvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi85NjY4YjUtNWU5Mi00YzE4LTliYjktNDM1MWJiZjc0YzBj LzEvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK7dFYpHy bVoQlftVO9oNfk9hcMcj7zBzNYRrI5qv2FZ2uxwOfkfPswNaoMwFmxGdnkPmXxAq l8N+0Ji1KQ3L2L6eiMX7nqdbBjsS0ZuElWqBA4rjrwfEaKUcyrD6gddxY3Ec5T9i Jpq8ARXNDwsmDydKlHL+ZHCsd8yaWxNjlHH6ID92ojLclpYeX3+pbYRZ0Movgyoj ECg6EE4seq+MWj9TOlKsxdrlOgfTGQ2pLKAT+HzYy4ITzWvFTZ0H6kVIKJZpkrdh ycRu22wGEbOtYqGiZQaQ3CKnARwat23cCrTNwJFOGEl32CIzWCeuuP0NGF3W5OSR 3BncEs/JhJR0Pw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:55:41 2025 by rpki-client