This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft File: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft (raw, json) Hash identifier: JCksKRUTS7PMZUsw82okcdtJEMhdrrjlPr2vyB5O1ys= Subject key identifier: 40:66:29:AD:28:76:1D:3F:C1:7B:51:0E:4D:40:B1:62:5D:A2:A0:CD Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81 Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81 Certificate serial: 019AF088082B39F6931E2D3F5D7075572FDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft Manifest number: 09C8 Signing time: Fri 05 Dec 2025 22:00:38 +0000 Manifest this update: Fri 05 Dec 2025 22:00:38 +0000 Manifest next update: Sat 06 Dec 2025 22:00:38 +0000 Files and hashes: 1: Gm9NfecPR-RUq_slL2NKmzGqQ1c.roa (hash: tkU2/2KHzDAlfUyxsnryBif6WpEicFze6N39RJoBTkM=) 2: IdcqQLaLPNCQJzdTXpACnqYscnI.roa (hash: H+1S4n+OyXlFrQgh9A84gwVt0xMSOKKs5oiKIXtOgjU=) 3: OVQ5uPkYukiV8dv56D7X8vrwp8E.roa (hash: OWeiLtMHum8JXxqxvdWPi5crevEaVFFy1EtOqegV6tI=) 4: P8VDh_9fdYN8xXLvtJMOKaqZaBs.roa (hash: nMTrg+lyYaQ59OMP8FwWXirKWOtKtrNaOkuqtu/tSjc=) 5: Pq__l0a6HrBOcCXhEDnn7AV0g54.roa (hash: A1mBB7bcRpMOwkOKXDY7TtCFDZr1ayBKUG0wvvr/Zlw=) 6: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl (hash: zfNBSLNE2y43YvdYqRaK9/LD95S9zOwM3RCF+6D+tWQ=) 7: qqV4lt6FTPnmuHdRaoUeaEC2b8U.roa (hash: HtCD/Cd4hhljqddcvUw+6pkmRGrV8qPj/FjkfpsV+Jw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:08:2b:39:f6:93:1e:2d:3f:5d:70:75:57:2f:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81 Validity Not Before: Dec 5 22:00:38 2025 GMT Not After : Dec 6 22:00:38 2025 GMT Subject: CN=406629ad28761d3fc17b510e4d40b1625da2a0cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:56:06:2e:f8:14:79:a2:7f:64:ac:ef:c0:e8: 54:f1:ae:27:8e:c1:41:b6:6c:92:8f:73:7a:25:1f: 25:fb:1d:55:19:59:16:e6:0b:b4:7e:75:3d:05:32: dc:d2:e0:f9:08:a3:7a:5a:52:86:0a:60:ab:24:f4: d4:77:de:fa:b8:ab:5d:05:40:ed:a2:b2:11:6c:0b: 46:bd:fb:99:8b:84:38:fa:64:2e:f1:07:1d:ea:76: 95:04:fd:36:83:56:7a:c3:8e:2d:69:ca:2f:49:6b: c9:6c:81:cf:8f:f7:e6:84:da:d4:12:6a:05:68:68: 3d:12:76:95:0d:54:86:0f:94:3b:83:99:ea:d5:fa: f6:a2:3b:e7:57:20:38:d1:1b:e7:73:37:d3:a5:8a: c9:07:2b:94:8f:6f:87:dd:1c:69:3b:59:ff:33:79: b4:58:c9:3b:43:62:92:9d:27:cb:16:21:ba:02:44: a4:8d:50:50:c2:32:98:73:dc:61:9f:4e:62:6d:ad: 3f:63:ed:83:18:c8:b0:bd:bb:c1:dd:4f:a0:54:e9: 0b:8b:b7:20:49:66:b4:e2:f3:67:5b:7f:82:2b:c8: 0d:c6:08:57:64:93:6e:ab:c2:39:30:60:6a:1d:02: 0e:50:9d:ef:b4:1c:02:b5:63:a4:df:44:8a:7b:39: b1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:66:29:AD:28:76:1D:3F:C1:7B:51:0E:4D:40:B1:62:5D:A2:A0:CD X509v3 Authority Key Identifier: keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:a4:57:9c:4d:55:81:95:c4:81:09:7f:0e:cc:78:72:e5:61: 22:ab:c5:35:64:1b:77:c4:c1:b8:a2:69:86:3d:89:11:a6:7b: ba:e7:29:2d:eb:8c:b4:2d:d8:29:de:6c:83:c6:ae:1e:3d:a2: ac:d5:53:68:b2:ba:3a:05:89:26:ea:ae:c3:ba:79:ee:29:c3: 17:98:cd:95:d7:3b:28:ba:38:c1:67:e4:da:f0:99:3b:c9:bf: ec:bf:65:b6:99:0f:b9:e2:39:64:10:52:bb:a0:2a:6e:48:f6: 6b:2d:0e:3f:86:91:5e:8e:10:2f:5d:8e:51:06:69:ca:f1:e2: 36:06:af:13:28:c4:d3:5d:63:a2:e8:70:4f:2e:f5:5f:c7:9b: c9:d0:36:a5:3b:64:b0:02:c7:62:41:c2:07:58:c5:e6:9f:8b: 38:bd:3d:5b:ec:f6:99:a1:3b:3e:11:51:fe:7b:c4:4e:5e:5d: 98:92:43:63:97:8d:d2:dc:96:fd:f0:68:67:a7:02:b3:7f:46: 2b:a7:a8:b0:a0:dd:60:6d:a5:bf:57:1a:ba:5b:a7:01:4d:07: cd:45:1f:07:af:3b:93:fd:36:90:98:08:41:46:99:1c:06:e3: d7:79:6f:f5:8c:5c:72:a8:8a:48:48:7e:81:d4:ba:3e:1d:d4: 8a:d8:a8:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiAgrOfaTHi0/XXB1Vy/dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMmQzMGIwMTVlYzRlZjFiMGQzYzY0MzQ3YzhkMWI1OTgy OTNmODEwHhcNMjUxMjA1MjIwMDM4WhcNMjUxMjA2MjIwMDM4WjAzMTEwLwYDVQQD Eyg0MDY2MjlhZDI4NzYxZDNmYzE3YjUxMGU0ZDQwYjE2MjVkYTJhMGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFYGLvgUeaJ/ZKzvwOhU8a4njsFB tmySj3N6JR8l+x1VGVkW5gu0fnU9BTLc0uD5CKN6WlKGCmCrJPTUd976uKtdBUDt orIRbAtGvfuZi4Q4+mQu8Qcd6naVBP02g1Z6w44tacovSWvJbIHPj/fmhNrUEmoF aGg9EnaVDVSGD5Q7g5nq1fr2ojvnVyA40RvnczfTpYrJByuUj2+H3RxpO1n/M3m0 WMk7Q2KSnSfLFiG6AkSkjVBQwjKYc9xhn05iba0/Y+2DGMiwvbvB3U+gVOkLi7cg SWa04vNnW3+CK8gNxghXZJNuq8I5MGBqHQIOUJ3vtBwCtWOk30SKezmxcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBmKa0odh0/wXtRDk1AsWJdoqDNMB8GA1UdIwQY MBaAFE8tMLAV7E7xsNPGQ0fI0bWYKT+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85NjY4YjUtNWU5Mi00YzE4LTliYjkt NDM1MWJiZjc0YzBjLzEvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi85NjY4YjUtNWU5Mi00YzE4LTliYjktNDM1MWJiZjc0YzBj LzEvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxKRXnE1V gZXEgQl/Dsx4cuVhIqvFNWQbd8TBuKJphj2JEaZ7uucpLeuMtC3YKd5sg8auHj2i rNVTaLK6OgWJJuquw7p57inDF5jNldc7KLo4wWfk2vCZO8m/7L9ltpkPueI5ZBBS u6Aqbkj2ay0OP4aRXo4QL12OUQZpyvHiNgavEyjE011jouhwTy71X8ebydA2pTtk sALHYkHCB1jF5p+LOL09W+z2maE7PhFR/nvETl5dmJJDY5eN0tyW/fBoZ6cCs39G K6eosKDdYG2lv1caulunAU0HzUUfB687k/02kJgIQUaZHAbj13lv9YxccqiKSEh+ gdS6Ph3UitioAA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:04 2025 by rpki-client