This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft File: tbYylyVHZz3w91qryDmiQihUoio.mft (raw, json) Hash identifier: cF5Th1uFHRvCpZnbFnRAwf1QTfdmZfMTcB9a1GQfyNM= Subject key identifier: BC:64:D5:2F:B6:99:74:B0:79:94:3D:4F:6E:1D:8F:63:BC:DA:8D:A1 Authority key identifier: B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A Certificate issuer: /CN=b5b632972547673df0f75aabc839a2422854a22a Certificate serial: 019B3C1084B70CF534E7665AE910FA45A1B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 14:01:13 +0000 Manifest this update: Sat 20 Dec 2025 14:01:13 +0000 Manifest next update: Sun 21 Dec 2025 14:01:13 +0000 Files and hashes: 1: cUeWbg23uzdb5xSz99WNI9WtnoI.roa (hash: s+577iLuT/1Ct4G1mVjBy6TiewUwm3DkGU10CzpZuFE=) 2: tbYylyVHZz3w91qryDmiQihUoio.crl (hash: gCwLBVaUcpV1ppv0WqqN+Mnrn5hlrqjyssXq98bFpbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:84:b7:0c:f5:34:e7:66:5a:e9:10:fa:45:a1:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5b632972547673df0f75aabc839a2422854a22a Validity Not Before: Dec 20 14:01:13 2025 GMT Not After : Dec 21 14:01:13 2025 GMT Subject: CN=bc64d52fb69974b079943d4f6e1d8f63bcda8da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:44:c0:52:bd:52:19:da:6d:21:a8:28:b1:7e: 52:ce:fa:14:c7:4e:de:52:ac:a0:54:b1:58:1d:36: 27:40:fa:ee:7a:26:88:e0:90:58:aa:89:6f:94:85: 8c:0e:e1:de:29:df:8c:cf:32:57:b5:be:fa:25:d1: 9a:f7:fc:22:22:06:af:d0:d3:d3:c1:0b:4f:98:00: 10:83:8a:d3:6e:85:c4:a2:77:f6:3c:a3:f0:96:eb: a6:8f:58:fe:20:68:81:06:f2:fd:b5:3a:86:6f:c8: f1:10:5a:39:5a:5f:8d:b6:f8:86:1a:26:b6:58:31: 09:c2:09:be:42:df:29:d8:7a:10:bd:6d:7f:aa:1a: 79:16:82:fd:ff:22:64:4f:82:3e:50:be:7c:8d:37: 8e:a8:00:7f:a7:d7:c9:e9:16:55:04:3e:6f:5e:0d: 57:e3:25:74:27:7b:0d:0d:04:40:11:73:c4:2a:a8: bd:db:78:4f:63:05:4f:f8:6a:12:04:2a:ca:49:a7: f7:05:26:3f:88:19:25:ef:15:50:cd:46:2c:34:74: cb:d7:d3:b0:f9:ec:ff:d8:c4:6e:30:8d:60:56:18: 1e:07:6d:b6:34:e1:4b:6d:40:8e:32:3d:f7:1f:31: 88:7d:b2:0b:d6:09:ba:73:92:1e:27:46:7e:fd:e9: fb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:64:D5:2F:B6:99:74:B0:79:94:3D:4F:6E:1D:8F:63:BC:DA:8D:A1 X509v3 Authority Key Identifier: keyid:B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:e2:ce:0a:ad:86:69:1d:f5:62:ad:03:0f:15:3a:2e:c7:e6: 0b:ee:f2:67:71:93:3a:e4:62:60:5c:b0:ab:d4:5f:ee:2e:88: 82:00:49:33:39:2b:77:4f:27:a7:bd:2c:5d:26:03:47:e2:67: c1:27:81:0b:a4:90:1a:17:ce:9f:36:7c:a5:3b:a7:68:49:d7: 8a:e6:d9:34:36:2f:bf:6b:7e:d6:74:82:44:36:f1:2f:f2:73: 92:3d:bf:c7:7f:ee:10:29:c5:da:76:60:2f:ff:93:cc:53:5f: 0a:2a:ca:89:e6:81:e5:4c:e9:dd:5a:ec:3e:92:02:76:50:5d: b1:0e:3a:15:c6:a1:99:68:c9:cd:3b:3f:09:ae:fc:bc:b3:f4: f0:c4:b0:5c:ba:e0:4b:1a:8e:f3:38:46:e1:53:6e:a2:6f:f4: b7:cb:24:aa:e2:ab:4b:d3:63:0b:a5:e2:d0:cf:f2:18:86:ff: 80:d9:72:c4:0b:e9:f7:a2:e2:d0:c4:9a:4e:1c:ec:65:56:81: 59:2f:9a:cd:e6:67:c5:94:2a:9c:e3:47:9d:e1:9a:ea:74:49: d0:63:3f:a9:df:97:47:49:78:03:f9:82:3e:03:f2:f3:bd:87: 5f:94:48:5e:42:2c:4a:32:c6:82:9f:74:7f:1c:14:69:65:2b: 51:06:23:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EIS3DPU052Za6RD6RaGzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YjYzMjk3MjU0NzY3M2RmMGY3NWFhYmM4MzlhMjQyMjg1 NGEyMmEwHhcNMjUxMjIwMTQwMTEzWhcNMjUxMjIxMTQwMTEzWjAzMTEwLwYDVQQD EyhiYzY0ZDUyZmI2OTk3NGIwNzk5NDNkNGY2ZTFkOGY2M2JjZGE4ZGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukTAUr1SGdptIagosX5SzvoUx07e UqygVLFYHTYnQPrueiaI4JBYqolvlIWMDuHeKd+MzzJXtb76JdGa9/wiIgav0NPT wQtPmAAQg4rTboXEonf2PKPwluumj1j+IGiBBvL9tTqGb8jxEFo5Wl+NtviGGia2 WDEJwgm+Qt8p2HoQvW1/qhp5FoL9/yJkT4I+UL58jTeOqAB/p9fJ6RZVBD5vXg1X 4yV0J3sNDQRAEXPEKqi923hPYwVP+GoSBCrKSaf3BSY/iBkl7xVQzUYsNHTL19Ow +ez/2MRuMI1gVhgeB222NOFLbUCOMj33HzGIfbIL1gm6c5IeJ0Z+/en75QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxk1S+2mXSweZQ9T24dj2O82o2hMB8GA1UdIwQY MBaAFLW2MpclR2c98Pdaq8g5okIoVKIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xYzA2OGUtODg5Yy00MmJlLWJkOGIt YTZhYmIxMjE1ZGVjLzEvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xYzA2OGUtODg5Yy00MmJlLWJkOGItYTZhYmIxMjE1ZGVj LzEvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn+LOCq2G aR31Yq0DDxU6LsfmC+7yZ3GTOuRiYFywq9Rf7i6IggBJMzkrd08np70sXSYDR+Jn wSeBC6SQGhfOnzZ8pTunaEnXiubZNDYvv2t+1nSCRDbxL/Jzkj2/x3/uECnF2nZg L/+TzFNfCirKieaB5Uzp3VrsPpICdlBdsQ46FcahmWjJzTs/Ca78vLP08MSwXLrg SxqO8zhG4VNuom/0t8skquKrS9NjC6Xi0M/yGIb/gNlyxAvp96Li0MSaThzsZVaB WS+azeZnxZQqnONHneGa6nRJ0GM/qd+XR0l4A/mCPgPy872HX5RIXkIsSjLGgp90 fxwUaWUrUQYjhQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:33:21 2025 by rpki-client