This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft File: Ty_D6GA1oLjpOA_7I_I_V0MLess.mft (raw, json) Hash identifier: TcL0tUTjaoe5WPiPlPvO8nSfUEJc1TxmfdTncflGX0w= Subject key identifier: 00:A1:C4:E4:97:89:75:4F:8C:BF:E8:47:35:7F:61:92:09:E7:A1:41 Authority key identifier: 4F:2F:C3:E8:60:35:A0:B8:E9:38:0F:FB:23:F2:3F:57:43:0B:7A:CB Certificate issuer: /CN=4f2fc3e86035a0b8e9380ffb23f23f57430b7acb Certificate serial: 019B6DD7E0D27C07793C8025EE5160D7B18B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft Manifest number: 1011 Signing time: Tue 30 Dec 2025 06:00:22 +0000 Manifest this update: Tue 30 Dec 2025 06:00:22 +0000 Manifest next update: Wed 31 Dec 2025 06:00:22 +0000 Files and hashes: 1: Ty_D6GA1oLjpOA_7I_I_V0MLess.crl (hash: FKK4hPqaqICSo9VsNKxO8Pf68SRegmU0mETm6nf61fs=) 2: WjR-M02WnGrf1hvkkNo0bZEQvnQ.roa (hash: CW8wqMfi/RZSfPuGRw3DqaK3c0hn412Beo4u95KUkQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 06:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:d7:e0:d2:7c:07:79:3c:80:25:ee:51:60:d7:b1:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f2fc3e86035a0b8e9380ffb23f23f57430b7acb Validity Not Before: Dec 30 06:00:22 2025 GMT Not After : Dec 31 06:00:22 2025 GMT Subject: CN=00a1c4e49789754f8cbfe847357f619209e7a141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:53:57:5b:f7:16:ee:0a:92:56:16:5f:fd:2e: dc:10:e7:ec:5a:20:ea:3d:0b:96:e0:43:8d:16:3d: 92:c5:b1:5c:1d:86:98:07:5b:4e:b2:5b:1f:00:04: 85:c6:b3:e6:09:11:76:f7:8a:9a:53:48:6a:0a:88: 49:70:3b:81:d0:3f:4b:3f:09:d3:3e:97:04:b8:42: b7:22:ce:83:35:f7:c0:2f:67:23:db:54:96:e6:68: e5:4f:0e:b3:3e:69:21:91:7d:6b:fa:24:f1:ea:5c: a8:13:a6:cf:b2:78:f9:94:da:4c:3c:3f:de:69:f7: ce:27:52:2f:d7:d0:e1:ba:89:00:e5:1d:2f:a5:e7: 04:a1:7d:dd:0c:1c:a4:91:05:53:ec:f6:a0:c3:1a: a8:e7:0e:08:cd:cf:df:65:70:62:0b:08:c3:86:2a: 66:46:9a:59:78:02:cc:5a:e5:c7:19:91:d5:23:1e: 6d:3a:11:5d:cc:0e:66:a1:89:d9:e1:f2:a4:bb:8b: c7:6b:f7:1d:53:70:df:88:54:08:9d:a6:f0:ad:26: fb:8d:65:c9:8f:bd:93:00:a7:3b:aa:78:40:17:07: 56:21:bf:27:3c:c7:ea:65:89:dd:ff:c5:87:76:f7: d7:87:aa:ff:ed:85:6a:da:e0:39:f1:b2:f3:58:db: c2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A1:C4:E4:97:89:75:4F:8C:BF:E8:47:35:7F:61:92:09:E7:A1:41 X509v3 Authority Key Identifier: keyid:4F:2F:C3:E8:60:35:A0:B8:E9:38:0F:FB:23:F2:3F:57:43:0B:7A:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:c2:10:fd:e4:ba:0e:48:33:50:2e:61:ef:dd:e3:79:e4:36: e0:93:6a:8a:58:60:24:13:1c:68:ba:92:0a:13:6f:6d:4b:d1: c8:98:12:37:15:2c:fd:a1:b7:f3:55:70:26:91:e1:56:a8:33: c6:67:32:d7:dd:1a:36:cc:e3:cc:55:b8:ed:31:6c:84:c1:fc: ce:46:38:d3:46:f5:4f:a9:11:93:88:6a:21:a4:c6:a9:c8:c8: b0:23:10:0b:3f:ec:e2:e2:95:1d:d0:ae:78:e3:6b:93:6b:b3: d6:47:17:4a:fa:93:3c:cf:8c:6e:c6:f8:7c:ef:dd:8c:93:24: 9e:ef:1a:58:72:4b:44:d4:76:68:23:09:f9:11:2f:21:30:c5: d0:46:d5:ac:16:49:2b:95:92:ca:c1:06:32:41:d6:2b:35:0c: 82:d1:73:8b:58:9e:76:e0:6b:e3:ca:e0:58:c1:28:39:98:38: 02:3c:d1:83:71:55:37:30:23:63:00:95:9e:8b:70:a7:c0:51: 06:60:f8:24:1c:3a:22:2c:01:30:d4:6d:e9:99:45:48:a6:84: 94:e6:2b:8f:9b:96:9c:5e:bd:5e:29:dd:83:a1:b5:86:29:88: d9:52:34:94:57:21:7d:8e:23:67:dc:14:97:2e:00:69:8c:c4: 73:d9:af:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtt1+DSfAd5PIAl7lFg17GLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMmZjM2U4NjAzNWEwYjhlOTM4MGZmYjIzZjIzZjU3NDMw YjdhY2IwHhcNMjUxMjMwMDYwMDIyWhcNMjUxMjMxMDYwMDIyWjAzMTEwLwYDVQQD EygwMGExYzRlNDk3ODk3NTRmOGNiZmU4NDczNTdmNjE5MjA5ZTdhMTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFNXW/cW7gqSVhZf/S7cEOfsWiDq PQuW4EONFj2SxbFcHYaYB1tOslsfAASFxrPmCRF294qaU0hqCohJcDuB0D9LPwnT PpcEuEK3Is6DNffAL2cj21SW5mjlTw6zPmkhkX1r+iTx6lyoE6bPsnj5lNpMPD/e affOJ1Iv19DhuokA5R0vpecEoX3dDBykkQVT7Pagwxqo5w4Izc/fZXBiCwjDhipm RppZeALMWuXHGZHVIx5tOhFdzA5moYnZ4fKku4vHa/cdU3DfiFQInabwrSb7jWXJ j72TAKc7qnhAFwdWIb8nPMfqZYnd/8WHdvfXh6r/7YVq2uA58bLzWNvCtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAChxOSXiXVPjL/oRzV/YZIJ56FBMB8GA1UdIwQY MBaAFE8vw+hgNaC46TgP+yPyP1dDC3rLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHlfRDZHQTFvTGpwT0FfN0lfSV9WME1MZXNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8xZTM2ZTgtOGZhNi00YzE3LWEyNDAt MzJlNTdiYzU0NzRiLzEvVHlfRDZHQTFvTGpwT0FfN0lfSV9WME1MZXNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8xZTM2ZTgtOGZhNi00YzE3LWEyNDAtMzJlNTdiYzU0NzRi LzEvVHlfRDZHQTFvTGpwT0FfN0lfSV9WME1MZXNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWcIQ/eS6 DkgzUC5h793jeeQ24JNqilhgJBMcaLqSChNvbUvRyJgSNxUs/aG381VwJpHhVqgz xmcy190aNszjzFW47TFshMH8zkY400b1T6kRk4hqIaTGqcjIsCMQCz/s4uKVHdCu eONrk2uz1kcXSvqTPM+Mbsb4fO/djJMknu8aWHJLRNR2aCMJ+REvITDF0EbVrBZJ K5WSysEGMkHWKzUMgtFzi1ieduBr48rgWMEoOZg4AjzRg3FVNzAjYwCVnotwp8BR BmD4JBw6IiwBMNRt6ZlFSKaElOYrj5uWnF69Xindg6G1himI2VI0lFchfY4jZ9wU ly4AaYzEc9mv/w== -----END CERTIFICATE-----Generated at Tue Dec 30 10:48:27 2025 by rpki-client