This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft File: t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft (raw, json) Hash identifier: OhW0WyUPQE2uBR4scinexrerdIvLKgRI/kmq2AHylBk= Subject key identifier: 92:76:F1:A6:C8:01:BF:34:7C:9A:5A:B0:C8:8E:8A:7B:D5:C8:5B:00 Authority key identifier: B7:6C:BF:59:27:C4:76:90:5F:ED:A3:4E:11:40:14:8B:F8:05:D9:B0 Certificate issuer: /CN=b76cbf5927c476905feda34e1140148bf805d9b0 Certificate serial: 019B405B9900BBD2B2066D25BCBBC8EFA5F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft Manifest number: 1785 Signing time: Sun 21 Dec 2025 10:01:43 +0000 Manifest this update: Sun 21 Dec 2025 10:01:43 +0000 Manifest next update: Mon 22 Dec 2025 10:01:43 +0000 Files and hashes: 1: t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl (hash: TxiVOyRfqt+1aCJwzRlO9JknARZE8+XOhdCA+WAQhw8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:99:00:bb:d2:b2:06:6d:25:bc:bb:c8:ef:a5:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76cbf5927c476905feda34e1140148bf805d9b0 Validity Not Before: Dec 21 10:01:43 2025 GMT Not After : Dec 22 10:01:43 2025 GMT Subject: CN=9276f1a6c801bf347c9a5ab0c88e8a7bd5c85b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:92:c8:71:c8:11:4a:a6:1e:46:1c:28:85:dd: 01:4f:d5:e5:1c:db:8c:9b:05:39:a4:d0:49:33:47: 8e:ad:c4:93:2e:0c:75:58:7c:90:72:c5:3e:35:55: 72:62:3c:22:2f:91:b3:84:3e:2e:71:9f:bb:a6:37: 34:eb:32:b4:e5:d7:00:8b:ca:4b:bc:69:0f:74:e2: 58:10:fd:44:58:5f:7b:f5:8a:bf:97:c0:1f:56:61: 41:39:f7:28:1f:97:04:a2:39:44:53:a2:69:47:27: fb:01:c3:8d:bf:cf:8a:6e:03:fe:e8:a2:53:b9:e5: 0e:83:87:70:17:7f:a1:3b:ac:7d:4c:66:64:96:32: 3d:05:03:8b:0b:fa:c7:7a:41:0c:ed:6c:23:73:60: f7:82:22:27:3b:7f:e2:d0:41:b7:b2:b3:68:34:5e: 8f:82:b8:ea:32:49:b0:c6:08:2c:0f:5d:f4:60:69: 40:38:74:c2:dd:5e:3a:a1:7d:39:db:fe:17:41:af: 5c:dd:48:b1:4d:b7:2a:c0:19:d5:ed:3b:dc:35:5b: e9:22:e6:a1:11:45:f0:8b:1c:63:b6:07:cb:ec:7d: eb:54:df:a4:d8:c1:1c:23:78:ca:7c:da:3a:43:f1: 96:6d:75:04:7d:b6:a0:a6:07:89:f3:28:9d:ac:d3: ed:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:76:F1:A6:C8:01:BF:34:7C:9A:5A:B0:C8:8E:8A:7B:D5:C8:5B:00 X509v3 Authority Key Identifier: keyid:B7:6C:BF:59:27:C4:76:90:5F:ED:A3:4E:11:40:14:8B:F8:05:D9:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:d1:6a:cb:a7:29:62:11:79:54:a8:29:9c:3c:a7:5f:7e:6a: a6:17:62:cc:62:f2:3a:6f:72:71:6b:49:4f:da:40:e0:4e:f9: 3c:7b:d2:4f:61:16:0b:05:bb:8c:63:cf:8d:af:1e:21:e8:25: e3:ad:56:18:b3:39:aa:43:3f:b8:38:72:f4:e4:81:2d:4d:1c: 17:7a:f1:52:e0:ee:11:34:96:9b:b2:1b:d4:92:94:69:f6:b8: 4a:e0:5e:f0:d0:34:67:04:63:ee:2f:a1:b5:43:fb:cc:aa:7b: 09:bd:4e:bd:99:d1:76:38:c3:91:26:e9:24:30:0f:4c:d5:72: c4:41:41:15:63:24:9a:00:58:8c:57:79:5b:90:d2:84:52:a2: e3:26:77:8b:e9:70:e2:9b:c7:61:a1:f0:d7:6b:79:17:e2:6f: 71:27:cc:ee:cc:bf:93:d1:14:d8:f1:d2:9e:92:cf:c0:e0:38: 13:81:1f:f0:ec:de:38:e3:48:05:ce:b2:10:ea:44:af:8c:ca: 53:ea:76:a4:6b:7b:37:73:83:2a:1d:48:86:62:39:2a:14:c9: c5:46:0b:78:83:b8:dd:f4:98:ee:e7:4e:ea:6a:89:17:ee:6d: 75:4f:26:63:39:2d:e6:dc:19:4a:7a:03:2d:34:c3:7a:8d:93: 82:59:3d:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW5kAu9KyBm0lvLvI76X0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NmNiZjU5MjdjNDc2OTA1ZmVkYTM0ZTExNDAxNDhiZjgw NWQ5YjAwHhcNMjUxMjIxMTAwMTQzWhcNMjUxMjIyMTAwMTQzWjAzMTEwLwYDVQQD Eyg5Mjc2ZjFhNmM4MDFiZjM0N2M5YTVhYjBjODhlOGE3YmQ1Yzg1YjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JLIccgRSqYeRhwohd0BT9XlHNuM mwU5pNBJM0eOrcSTLgx1WHyQcsU+NVVyYjwiL5GzhD4ucZ+7pjc06zK05dcAi8pL vGkPdOJYEP1EWF979Yq/l8AfVmFBOfcoH5cEojlEU6JpRyf7AcONv8+KbgP+6KJT ueUOg4dwF3+hO6x9TGZkljI9BQOLC/rHekEM7Wwjc2D3giInO3/i0EG3srNoNF6P grjqMkmwxggsD130YGlAOHTC3V46oX052/4XQa9c3UixTbcqwBnV7TvcNVvpIuah EUXwixxjtgfL7H3rVN+k2MEcI3jKfNo6Q/GWbXUEfbagpgeJ8yidrNPtQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJ28abIAb80fJpasMiOinvVyFsAMB8GA1UdIwQY MBaAFLdsv1knxHaQX+2jThFAFIv4BdmwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDJ5X1dTZkVkcEJmN2FOT0VVQVVpX2dGMmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81NDdlOGUtNDFiYS00MjcyLWEyOTQt MGFlMmI5ZDlkNDQ3LzEvdDJ5X1dTZkVkcEJmN2FOT0VVQVVpX2dGMmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS81NDdlOGUtNDFiYS00MjcyLWEyOTQtMGFlMmI5ZDlkNDQ3 LzEvdDJ5X1dTZkVkcEJmN2FOT0VVQVVpX2dGMmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdFqy6cp YhF5VKgpnDynX35qphdizGLyOm9ycWtJT9pA4E75PHvST2EWCwW7jGPPja8eIegl 461WGLM5qkM/uDhy9OSBLU0cF3rxUuDuETSWm7Ib1JKUafa4SuBe8NA0ZwRj7i+h tUP7zKp7Cb1OvZnRdjjDkSbpJDAPTNVyxEFBFWMkmgBYjFd5W5DShFKi4yZ3i+lw 4pvHYaHw12t5F+JvcSfM7sy/k9EU2PHSnpLPwOA4E4Ef8OzeOONIBc6yEOpEr4zK U+p2pGt7N3ODKh1IhmI5KhTJxUYLeIO43fSY7udO6mqJF+5tdU8mYzkt5twZSnoD LTTDeo2Tglk9Xg== -----END CERTIFICATE-----Generated at Sun Dec 21 15:49:37 2025 by rpki-client