This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft File: tYUi2sa83oxIEzNZkTKhYgDmpb4.mft (raw, json) Hash identifier: yJ4P4mDOrTng8Q7Ut8cvVn6nuqp1qxP66Ev0uRngLxE= Subject key identifier: 66:39:96:C6:F6:9A:D0:FD:5A:38:CC:E8:9F:E0:AF:F2:3C:76:2E:7C Authority key identifier: B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE Certificate issuer: /CN=b58522dac6bcde8c481333599132a16200e6a5be Certificate serial: 019B3E355A09FE8DF969A4D1D714814FBFD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft Manifest number: 0AE3 Signing time: Sun 21 Dec 2025 00:00:42 +0000 Manifest this update: Sun 21 Dec 2025 00:00:42 +0000 Manifest next update: Mon 22 Dec 2025 00:00:42 +0000 Files and hashes: 1: 5moGvKAoN95-3rdirRXOwCahhvs.roa (hash: SkhAzMm5Jb5vcIiM14h4SYz3DQTRyqaR2eF+qq4Rdl0=) 2: RuuQV8FVAOprAh_8jcQjyKszeBc.roa (hash: kX89cdA0JPKtfSqgIarOumMCZ1cTxgD0uR8aSG1ObUs=) 3: tYUi2sa83oxIEzNZkTKhYgDmpb4.crl (hash: arbUfJFbboJSUta3KTlSI1k9D+nRuIY4eQD8DTMzYxs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:5a:09:fe:8d:f9:69:a4:d1:d7:14:81:4f:bf:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b58522dac6bcde8c481333599132a16200e6a5be Validity Not Before: Dec 21 00:00:42 2025 GMT Not After : Dec 22 00:00:42 2025 GMT Subject: CN=663996c6f69ad0fd5a38cce89fe0aff23c762e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:21:6b:2e:ef:f5:9a:52:84:e4:e8:46:82:df: 2b:2d:21:88:5f:73:6b:64:bd:88:df:fc:97:bd:52: dd:f0:c1:a9:d4:be:b5:5f:d4:e0:0a:18:d5:0a:a8: 3c:7a:7a:78:37:45:c8:5b:95:04:82:25:3b:8a:95: 12:32:18:fb:db:dc:a5:a0:b7:5b:93:33:b7:c3:e3: b7:66:72:28:4a:fe:6b:e0:0b:af:36:f0:1f:39:04: 9b:cf:d0:96:ac:e5:5b:c0:85:ed:d8:91:e6:10:9c: 40:02:91:b9:fa:4d:c2:87:41:e9:b7:2a:47:fe:ac: d9:36:2b:ed:32:ba:6b:09:f2:c8:c8:be:6b:a0:4b: ba:77:0c:a4:b9:0b:f0:ad:60:38:cb:1b:06:dc:3b: dc:3c:d2:3e:27:c1:05:98:fc:44:f8:97:57:74:97: 7e:ea:fc:35:d3:3c:9c:a0:cc:57:98:5d:a9:8c:fc: 00:41:2d:e5:b7:51:d6:99:cf:6e:e2:11:04:9c:4b: 00:7f:17:f2:49:b5:b6:08:af:a5:a4:74:dd:15:a8: 40:d8:2a:a7:fc:c3:0b:56:67:7c:90:74:2a:a9:9e: e6:8b:c6:9f:e5:e8:8f:9d:01:4b:83:88:fe:00:c8: 78:40:f7:27:4c:42:ef:ee:6d:a1:c1:41:2c:94:cd: 39:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:39:96:C6:F6:9A:D0:FD:5A:38:CC:E8:9F:E0:AF:F2:3C:76:2E:7C X509v3 Authority Key Identifier: keyid:B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ee:9f:14:29:4c:16:88:61:86:e4:f1:ba:34:82:b3:6a:ec: 71:7c:1d:9c:8a:cf:e3:8c:b8:d4:62:2c:f6:df:df:d8:68:46: eb:49:b8:3e:75:2d:f3:9b:e2:2d:d3:8d:b8:e4:a6:0e:e9:fe: a6:cc:f0:92:cf:f2:7e:1d:a2:e3:f7:8e:9f:b5:13:9f:7c:49: 63:62:0b:ff:c1:15:e3:dd:0a:21:ab:46:ca:a8:2c:2e:1b:e8: cb:a6:f0:17:e6:88:61:00:85:6a:0e:50:fa:3b:6c:24:fc:0d: 0a:3c:ea:b6:5f:eb:7b:b6:a5:95:3e:e1:c5:e7:02:42:37:74: 88:59:30:d7:ba:f6:2a:83:73:01:a0:3d:e9:66:7e:fa:e3:94: 97:03:08:6f:83:30:1f:1a:a9:ac:7c:97:4e:f0:20:da:aa:51: b2:7c:42:37:b4:d1:e6:f6:f8:7a:f7:41:5f:f8:96:2f:87:e1: d7:de:b9:0a:83:43:de:10:03:40:03:6c:ad:6d:87:de:2b:7e: 41:21:5a:87:a0:59:9c:57:78:74:2b:ef:4c:34:1a:71:04:07: 5d:3a:37:f4:ed:2f:29:4b:12:b9:e2:c9:42:3a:49:d5:c8:11: 5c:c2:df:bb:b0:d5:5f:71:fd:b0:cf:00:85:3d:37:f3:e4:bc: db:98:69:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NVoJ/o35aaTR1xSBT7/VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ODUyMmRhYzZiY2RlOGM0ODEzMzM1OTkxMzJhMTYyMDBl NmE1YmUwHhcNMjUxMjIxMDAwMDQyWhcNMjUxMjIyMDAwMDQyWjAzMTEwLwYDVQQD Eyg2NjM5OTZjNmY2OWFkMGZkNWEzOGNjZTg5ZmUwYWZmMjNjNzYyZTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSFrLu/1mlKE5OhGgt8rLSGIX3Nr ZL2I3/yXvVLd8MGp1L61X9TgChjVCqg8enp4N0XIW5UEgiU7ipUSMhj729yloLdb kzO3w+O3ZnIoSv5r4AuvNvAfOQSbz9CWrOVbwIXt2JHmEJxAApG5+k3Ch0HptypH /qzZNivtMrprCfLIyL5roEu6dwykuQvwrWA4yxsG3DvcPNI+J8EFmPxE+JdXdJd+ 6vw10zycoMxXmF2pjPwAQS3lt1HWmc9u4hEEnEsAfxfySbW2CK+lpHTdFahA2Cqn /MMLVmd8kHQqqZ7mi8af5eiPnQFLg4j+AMh4QPcnTELv7m2hwUEslM05gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGY5lsb2mtD9WjjM6J/gr/I8di58MB8GA1UdIwQY MBaAFLWFItrGvN6MSBMzWZEyoWIA5qW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFlVaTJzYTgzb3hJRXpOWmtUS2hZZ0RtcGI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84YjVkMmEtNGJjNC00MDZmLTk3ZDUt YmEzOTQ3YzliMjJiLzEvdFlVaTJzYTgzb3hJRXpOWmtUS2hZZ0RtcGI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC84YjVkMmEtNGJjNC00MDZmLTk3ZDUtYmEzOTQ3YzliMjJi LzEvdFlVaTJzYTgzb3hJRXpOWmtUS2hZZ0RtcGI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcu6fFClM FohhhuTxujSCs2rscXwdnIrP44y41GIs9t/f2GhG60m4PnUt85viLdONuOSmDun+ pszwks/yfh2i4/eOn7UTn3xJY2IL/8EV490KIatGyqgsLhvoy6bwF+aIYQCFag5Q +jtsJPwNCjzqtl/re7allT7hxecCQjd0iFkw17r2KoNzAaA96WZ++uOUlwMIb4Mw HxqprHyXTvAg2qpRsnxCN7TR5vb4evdBX/iWL4fh1965CoND3hADQANsrW2H3it+ QSFah6BZnFd4dCvvTDQacQQHXTo39O0vKUsSueLJQjpJ1cgRXMLfu7DVX3H9sM8A hT038+S825hpRw== -----END CERTIFICATE-----Generated at Sun Dec 21 10:16:34 2025 by rpki-client