This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft File: tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json) Hash identifier: f/Ya7XOGKBLpiIPBGQwFJjXCSPB84CypciAkuBA096I= Subject key identifier: 03:B2:05:AF:F4:B8:7F:29:66:F5:64:BC:EE:E7:F6:92:29:5E:5B:9E Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 019B3C1067B4D8AC9AA2B11BFF22FF1B782A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft Manifest number: 179D Signing time: Sat 20 Dec 2025 14:01:06 +0000 Manifest this update: Sat 20 Dec 2025 14:01:06 +0000 Manifest next update: Sun 21 Dec 2025 14:01:06 +0000 Files and hashes: 1: 30BxK6_jpie3YrLCVwh_L1trwzk.roa (hash: X9FbkEMlA2QphV+O7rBHZ0meCsmOLXe9r7nPMvJuQcE=) 2: Dbj9xuGjig4FQD4z5CtOr-cvTeI.roa (hash: Kh8CzaShn4hw0xJ/eT2H0TnUMB7Vdu0F94Rtfvnict8=) 3: F-P_HvBB3WeH7KniyH81o28KKbo.roa (hash: 8sYaDjHEHJUFW2fXpmzCzQDMt9L045SyDdjIlOEUNco=) 4: Il7zmHjI6jj-0rEtM_yBLvYuye4.roa (hash: de+WYdahLIsSTArl8Hy+qPN/PBIbGPDv82xXs+xKdZY=) 5: WR7z7m7JZCweB81LV8VsoLwZDDI.roa (hash: n+zNUpOUwgPN3iy+Ul6bCia4Bw0P9Lb0d3EbTWyw+/I=) 6: YFB0sTsYozvjrXhjBJ2amnZ2V7w.roa (hash: uPWSw73oxcAUAyBDtV6WPoCMHLjlUYY+eFM926F5KGA=) 7: eNRtwGVQ1VdkNKBRZ8o9uf4Ec24.roa (hash: syspd0kan424RvhNNvOMRktLryIova5s5SuLnxOMs4I=) 8: inKVgfg6tkDW3-Ko2Fj1q9U9rjM.roa (hash: m3IZ4E9iTFBEvHgMwMmb/F3F5jQFINfkwm1zng7j3wE=) 9: iwI7hmhd9ihd7UmcAizhleam4bs.roa (hash: qU+X8QQY8YLA+awtFYkGwQlLWhcUcwrt2BLiSdzVeG8=) 10: jmu-RUwAGlfdjyuIX4pdgwp2S_c.roa (hash: 0w/XwzNScEN/vprJx5SJRgxW5WArgctvQM2YSDSFtog=) 11: tLlGubJJap72E2l8gRh9Uuu4S8A.roa (hash: jBh5pu7FnbvAeJHH3DMpIfaMMsMyb9LyPf0qd9sE/90=) 12: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: tt2REjXvHbkT5t1PRuHBaTiDybwNJignqQWXBLQMF1s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:67:b4:d8:ac:9a:a2:b1:1b:ff:22:ff:1b:78:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Dec 20 14:01:06 2025 GMT Not After : Dec 21 14:01:06 2025 GMT Subject: CN=03b205aff4b87f2966f564bceee7f692295e5b9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b7:13:87:ac:2f:7a:67:57:79:40:6b:bb:14: b1:01:4a:15:0c:42:e4:5a:fd:ba:15:9d:e4:8a:e6: a0:6c:e6:a1:74:0e:86:d0:75:90:57:16:38:6f:18: c6:3e:5d:81:b6:0d:15:78:5f:bf:cd:cb:01:aa:86: 68:45:cb:72:ca:45:c0:f1:fc:1a:48:eb:03:53:27: 9a:78:8b:f8:f9:8e:62:3d:12:86:69:a8:09:94:3a: f1:45:7b:38:30:ee:93:a8:d6:c6:5f:a8:19:fe:39: 96:8f:6a:0d:19:98:c3:55:e0:f1:bf:cd:51:2b:1c: b8:2b:88:a4:8e:02:df:7b:30:8f:08:b7:48:b9:64: 2b:10:0e:4d:bb:2e:43:e0:98:01:a9:63:ee:92:a1: 02:96:d3:95:a4:65:79:66:12:84:50:e1:0e:41:de: d6:38:ae:75:ec:f7:49:81:0b:a4:13:ef:e2:ff:eb: 6e:ff:0d:79:59:58:4b:1d:29:d6:1d:6b:91:cc:bd: fb:d9:22:43:7b:51:1e:c4:66:6d:3d:92:1d:e9:a6: db:0e:47:49:1d:59:25:50:6e:52:b2:73:79:93:45: 41:21:ad:42:fa:51:cf:cb:26:c4:c2:91:0e:38:40: 9b:d4:e6:25:c2:37:d3:bc:71:a0:65:6a:d9:e2:52: 68:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B2:05:AF:F4:B8:7F:29:66:F5:64:BC:EE:E7:F6:92:29:5E:5B:9E X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:37:04:53:13:c4:6d:4b:66:17:bd:43:fc:e5:79:d7:af:39: a9:65:0c:b4:68:ac:67:e0:ea:f4:99:1e:6f:e7:12:63:5a:cd: b9:c6:66:64:8f:ec:67:8f:93:73:03:cb:dd:9f:18:0f:b6:60: a1:e6:3b:54:2f:ca:eb:3e:ab:84:ab:13:32:fc:f7:c5:76:86: 06:c3:a8:50:d8:c4:ce:81:1f:b2:26:f3:d2:57:2d:df:9d:64: 59:a4:43:f5:6a:a8:42:74:1a:f8:58:3a:25:3f:47:f9:04:45: 8e:d0:35:c2:31:6d:31:7b:ba:34:68:b9:db:75:74:27:27:97: 5f:01:ff:66:e0:5f:26:d5:e9:f5:db:95:9d:8e:42:b8:d8:86: 39:dc:a3:3d:47:c9:38:7a:26:9c:64:fa:db:1d:19:cd:c6:5a: ea:cc:a3:a5:47:31:25:70:97:af:d4:6f:88:16:df:7a:b5:89: b7:c5:ac:55:59:e8:81:15:e2:80:6d:ca:e0:50:d0:ec:88:2e: 88:3b:1c:fd:ad:b2:1d:a2:ff:74:08:17:05:33:ac:f3:a6:f4: b6:74:af:48:26:d5:40:34:47:c3:94:ad:26:54:0c:4f:a6:61: f2:5a:6e:32:cf:4c:14:77:48:b3:eb:c4:46:52:3d:21:35:30: ed:44:39:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EGe02KyaorEb/yL/G3gqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjUxMjIwMTQwMTA2WhcNMjUxMjIxMTQwMTA2WjAzMTEwLwYDVQQD EygwM2IyMDVhZmY0Yjg3ZjI5NjZmNTY0YmNlZWU3ZjY5MjI5NWU1YjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bcTh6wvemdXeUBruxSxAUoVDELk Wv26FZ3kiuagbOahdA6G0HWQVxY4bxjGPl2Btg0VeF+/zcsBqoZoRctyykXA8fwa SOsDUyeaeIv4+Y5iPRKGaagJlDrxRXs4MO6TqNbGX6gZ/jmWj2oNGZjDVeDxv81R Kxy4K4ikjgLfezCPCLdIuWQrEA5Nuy5D4JgBqWPukqECltOVpGV5ZhKEUOEOQd7W OK517PdJgQukE+/i/+tu/w15WVhLHSnWHWuRzL372SJDe1EexGZtPZId6abbDkdJ HVklUG5SsnN5k0VBIa1C+lHPyybEwpEOOECb1OYlwjfTvHGgZWrZ4lJojQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAOyBa/0uH8pZvVkvO7n9pIpXlueMB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTcEUxPE bUtmF71D/OV51685qWUMtGisZ+Dq9Jkeb+cSY1rNucZmZI/sZ4+TcwPL3Z8YD7Zg oeY7VC/K6z6rhKsTMvz3xXaGBsOoUNjEzoEfsibz0lct351kWaRD9WqoQnQa+Fg6 JT9H+QRFjtA1wjFtMXu6NGi523V0JyeXXwH/ZuBfJtXp9duVnY5CuNiGOdyjPUfJ OHomnGT62x0ZzcZa6syjpUcxJXCXr9RviBbferWJt8WsVVnogRXigG3K4FDQ7Igu iDsc/a2yHaL/dAgXBTOs86b0tnSvSCbVQDRHw5StJlQMT6Zh8lpuMs9MFHdIs+vE RlI9ITUw7UQ51w== -----END CERTIFICATE-----Generated at Sat Dec 20 16:18:50 2025 by rpki-client