This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft File: TyESy_bcyN00ROTs7ShEVzEPcNI.mft (raw, json) Hash identifier: b+jT1g50Xtanl7FouM4uW0Axjw4L8xQGl1wH0GSpNh8= Subject key identifier: 6B:86:18:45:0A:11:00:55:A6:C4:F4:12:A8:3C:EE:68:5D:D1:B5:48 Authority key identifier: 4F:21:12:CB:F6:DC:C8:DD:34:44:E4:EC:ED:28:44:57:31:0F:70:D2 Certificate issuer: /CN=4f2112cbf6dcc8dd3444e4eced284457310f70d2 Certificate serial: 019B3D90C994957CD227FE07B5B4D65E4249 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft Manifest number: 0CB6 Signing time: Sat 20 Dec 2025 21:00:57 +0000 Manifest this update: Sat 20 Dec 2025 21:00:57 +0000 Manifest next update: Sun 21 Dec 2025 21:00:57 +0000 Files and hashes: 1: TyESy_bcyN00ROTs7ShEVzEPcNI.crl (hash: Pj4G3xib/yiWnoLwvBS8MxwFwYKwmdv6DrUd8m171/s=) 2: zMi5Kc-tpOMXc_ZTzrnudYI3V1w.roa (hash: gNyfXx018kULloOwGFLfmzefXCbqCOiY4gpRitRdbz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:c9:94:95:7c:d2:27:fe:07:b5:b4:d6:5e:42:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f2112cbf6dcc8dd3444e4eced284457310f70d2 Validity Not Before: Dec 20 21:00:57 2025 GMT Not After : Dec 21 21:00:57 2025 GMT Subject: CN=6b8618450a110055a6c4f412a83cee685dd1b548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:59:11:8f:cb:65:9d:a6:a5:97:f9:2c:8e:f1: d9:5d:f4:2a:dd:b5:b9:0d:74:4f:cb:24:fe:ae:c8: 05:35:63:09:28:ce:d4:10:e4:0e:ef:23:ed:09:1a: 7c:08:dd:37:f0:68:13:e0:ec:04:6e:90:bd:a3:29: 5b:c7:35:7d:73:4c:e9:79:15:20:10:4b:62:7f:67: 55:2f:58:fb:4a:96:f6:4d:a4:d1:5c:12:09:66:f0: 7e:f9:bd:6d:ce:74:2c:48:4f:aa:2a:fc:05:32:54: 1c:b1:f9:b6:8a:aa:42:e7:06:68:3f:bc:00:fa:4f: 2a:01:9d:7c:10:3b:e8:5e:1d:f5:80:69:c3:b4:f8: e6:a2:88:3f:57:ef:10:f8:f0:3a:9e:e4:fd:db:52: 4a:15:6e:3f:63:83:62:b9:81:4b:32:b2:1f:04:de: f5:1a:eb:bf:cf:3b:24:03:4d:e2:1b:cb:21:6b:5c: 2a:b4:41:85:3b:0c:54:10:3b:4a:47:e2:9b:ac:db: 11:e4:c0:e6:08:19:14:c5:6d:fb:2a:f6:21:77:cb: 35:0c:5b:d8:71:2f:d4:1d:83:96:7a:7e:5e:92:5c: 93:55:93:71:54:57:23:3f:c4:25:fb:b2:2f:75:7d: 55:60:f2:24:2f:4f:8e:a6:74:3c:8b:bd:da:3b:00: 6c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:86:18:45:0A:11:00:55:A6:C4:F4:12:A8:3C:EE:68:5D:D1:B5:48 X509v3 Authority Key Identifier: keyid:4F:21:12:CB:F6:DC:C8:DD:34:44:E4:EC:ED:28:44:57:31:0F:70:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c9:19:a3:33:33:53:ef:17:38:98:a3:3f:2f:3e:ee:3e:40: 66:4d:9c:d8:27:3f:c0:92:a7:94:60:49:7e:0d:46:3a:ff:6e: 5b:53:f9:8d:15:e4:7d:d5:10:54:ca:72:4c:d6:46:aa:f8:98: 2a:1f:a0:47:bf:00:9c:e1:06:2c:8a:99:a8:03:66:d2:07:91: 89:96:45:c4:43:00:9c:66:0b:85:0c:03:43:d0:3c:b7:67:b0: 57:17:19:f9:cd:d5:7c:a7:ad:29:17:fa:a7:e7:69:c3:4d:d3: 89:60:3c:9f:8a:80:06:d0:e6:54:3e:48:27:07:ad:01:5e:11: 57:f3:19:58:c2:3f:33:8b:62:14:40:3d:22:50:ce:14:7f:0c: dd:54:54:37:0a:93:27:f9:19:d9:c3:0d:73:c2:64:ec:9a:c7: b8:96:81:f6:4f:03:7c:3e:5e:da:b0:75:a3:84:01:b2:7f:d9: 17:45:fa:0a:85:02:65:b0:aa:02:ce:0a:cd:df:e1:dc:d2:9b: 4c:e2:c3:34:21:e0:be:66:d7:38:5e:4e:f9:84:34:3c:56:0b: a2:4c:1c:dc:d5:90:fa:31:ca:4e:00:0a:32:f6:74:ee:8e:db: 80:26:ec:ee:c1:e3:c1:01:d5:d5:6c:1b:97:93:43:0d:89:7e: 57:79:a3:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kMmUlXzSJ/4HtbTWXkJJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMjExMmNiZjZkY2M4ZGQzNDQ0ZTRlY2VkMjg0NDU3MzEw ZjcwZDIwHhcNMjUxMjIwMjEwMDU3WhcNMjUxMjIxMjEwMDU3WjAzMTEwLwYDVQQD Eyg2Yjg2MTg0NTBhMTEwMDU1YTZjNGY0MTJhODNjZWU2ODVkZDFiNTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlkRj8tlnaall/ksjvHZXfQq3bW5 DXRPyyT+rsgFNWMJKM7UEOQO7yPtCRp8CN038GgT4OwEbpC9oylbxzV9c0zpeRUg EEtif2dVL1j7Spb2TaTRXBIJZvB++b1tznQsSE+qKvwFMlQcsfm2iqpC5wZoP7wA +k8qAZ18EDvoXh31gGnDtPjmoog/V+8Q+PA6nuT921JKFW4/Y4NiuYFLMrIfBN71 Guu/zzskA03iG8sha1wqtEGFOwxUEDtKR+KbrNsR5MDmCBkUxW37KvYhd8s1DFvY cS/UHYOWen5eklyTVZNxVFcjP8Ql+7IvdX1VYPIkL0+OpnQ8i73aOwBsiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGuGGEUKEQBVpsT0Eqg87mhd0bVIMB8GA1UdIwQY MBaAFE8hEsv23MjdNETk7O0oRFcxD3DSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHlFU3lfYmN5TjAwUk9UczdTaEVWekVQY05JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9lMDgwYjYtNGUwOS00MmQ4LWI5MWMt YjI3OThjMWEwMzI3LzEvVHlFU3lfYmN5TjAwUk9UczdTaEVWekVQY05JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9lMDgwYjYtNGUwOS00MmQ4LWI5MWMtYjI3OThjMWEwMzI3 LzEvVHlFU3lfYmN5TjAwUk9UczdTaEVWekVQY05JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALMkZozMz U+8XOJijPy8+7j5AZk2c2Cc/wJKnlGBJfg1GOv9uW1P5jRXkfdUQVMpyTNZGqviY Kh+gR78AnOEGLIqZqANm0geRiZZFxEMAnGYLhQwDQ9A8t2ewVxcZ+c3VfKetKRf6 p+dpw03TiWA8n4qABtDmVD5IJwetAV4RV/MZWMI/M4tiFEA9IlDOFH8M3VRUNwqT J/kZ2cMNc8Jk7JrHuJaB9k8DfD5e2rB1o4QBsn/ZF0X6CoUCZbCqAs4Kzd/h3NKb TOLDNCHgvmbXOF5O+YQ0PFYLokwc3NWQ+jHKTgAKMvZ07o7bgCbs7sHjwQHV1Wwb l5NDDYl+V3mjhw== -----END CERTIFICATE-----Generated at Sun Dec 21 01:15:36 2025 by rpki-client