This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft File: tyWIwA7vcVgJ61_dbWcXzCjA36w.mft (raw, json) Hash identifier: Dv1a4ik8HRExbz7yp5uhGF3b3DA01TgyfoJgGgMUhuY= Subject key identifier: A8:67:43:0F:0C:07:F0:19:1E:D9:D8:31:B5:90:88:50:66:63:98:CE Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 019AF2AD65E29BA0CB1A00702599702B65FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft Manifest number: 1777 Signing time: Sat 06 Dec 2025 08:00:41 +0000 Manifest this update: Sat 06 Dec 2025 08:00:41 +0000 Manifest next update: Sun 07 Dec 2025 08:00:41 +0000 Files and hashes: 1: 30BxK6_jpie3YrLCVwh_L1trwzk.roa (hash: X9FbkEMlA2QphV+O7rBHZ0meCsmOLXe9r7nPMvJuQcE=) 2: Dbj9xuGjig4FQD4z5CtOr-cvTeI.roa (hash: Kh8CzaShn4hw0xJ/eT2H0TnUMB7Vdu0F94Rtfvnict8=) 3: F-P_HvBB3WeH7KniyH81o28KKbo.roa (hash: 8sYaDjHEHJUFW2fXpmzCzQDMt9L045SyDdjIlOEUNco=) 4: Il7zmHjI6jj-0rEtM_yBLvYuye4.roa (hash: de+WYdahLIsSTArl8Hy+qPN/PBIbGPDv82xXs+xKdZY=) 5: WR7z7m7JZCweB81LV8VsoLwZDDI.roa (hash: n+zNUpOUwgPN3iy+Ul6bCia4Bw0P9Lb0d3EbTWyw+/I=) 6: YFB0sTsYozvjrXhjBJ2amnZ2V7w.roa (hash: uPWSw73oxcAUAyBDtV6WPoCMHLjlUYY+eFM926F5KGA=) 7: eNRtwGVQ1VdkNKBRZ8o9uf4Ec24.roa (hash: syspd0kan424RvhNNvOMRktLryIova5s5SuLnxOMs4I=) 8: inKVgfg6tkDW3-Ko2Fj1q9U9rjM.roa (hash: m3IZ4E9iTFBEvHgMwMmb/F3F5jQFINfkwm1zng7j3wE=) 9: iwI7hmhd9ihd7UmcAizhleam4bs.roa (hash: qU+X8QQY8YLA+awtFYkGwQlLWhcUcwrt2BLiSdzVeG8=) 10: jmu-RUwAGlfdjyuIX4pdgwp2S_c.roa (hash: 0w/XwzNScEN/vprJx5SJRgxW5WArgctvQM2YSDSFtog=) 11: tLlGubJJap72E2l8gRh9Uuu4S8A.roa (hash: jBh5pu7FnbvAeJHH3DMpIfaMMsMyb9LyPf0qd9sE/90=) 12: tyWIwA7vcVgJ61_dbWcXzCjA36w.crl (hash: vuEGpJPPhumWnuIhxypkTeqFOR2xPv2cmn8vEhKu+zk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:65:e2:9b:a0:cb:1a:00:70:25:99:70:2b:65:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Dec 6 08:00:41 2025 GMT Not After : Dec 7 08:00:41 2025 GMT Subject: CN=a867430f0c07f0191ed9d831b5908850666398ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9e:44:0a:bc:db:62:c9:a4:72:41:60:fe:c1: 1d:c2:ef:00:4e:b5:26:91:c7:ef:07:be:93:2a:5c: ab:b6:c1:6a:dd:6b:eb:e8:1e:97:c2:d3:54:64:1b: b0:c0:ac:e4:67:e2:f4:b9:3f:e1:6b:ca:db:b2:1b: e9:5a:65:38:3e:cb:d3:9f:66:1d:72:8d:ba:01:72: 85:52:f1:b8:ab:67:ab:c9:7f:e6:73:80:25:02:99: 7f:ff:c3:d2:91:7a:53:7b:af:05:c6:85:8e:56:6b: 67:34:78:f5:5a:bb:f7:57:ee:45:8c:e8:75:ec:b6: ce:c8:2d:4c:6b:79:70:2c:db:89:3c:fc:93:56:43: 7a:bc:32:73:84:f2:6e:9f:b9:09:a4:4e:5c:c6:ff: 9b:87:bc:8d:ef:93:da:03:d1:40:0c:e1:dc:27:5b: a6:5d:95:8e:d9:7e:ce:eb:57:93:a9:f4:c9:64:43: 15:48:bf:85:b0:8e:e1:56:6b:ea:fe:76:97:a5:43: 65:fe:83:84:0f:60:fc:ef:2d:4e:11:22:fa:e1:75: d3:8a:85:d2:ab:b7:86:92:0a:63:53:d3:1d:66:0a: 81:a9:70:ec:d3:25:73:e3:0e:6b:2f:9a:18:d7:80: c4:23:c3:7c:38:e6:33:14:e6:c7:79:c3:61:8f:63: bf:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:67:43:0F:0C:07:F0:19:1E:D9:D8:31:B5:90:88:50:66:63:98:CE X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:68:65:09:fc:25:c9:4d:dd:4a:d3:b7:42:07:b6:bb:28:d0: ca:90:57:a8:a5:63:95:38:7e:70:ef:ad:fc:bb:d5:2e:79:37: ff:3f:e9:40:fa:d6:61:2a:3b:a3:63:dc:f0:aa:74:b9:0f:65: a9:48:1d:47:0f:9d:ec:8c:f4:b7:e7:41:34:10:4d:b8:64:01: 84:f3:e0:6a:4f:b5:64:9c:8b:8d:20:fd:40:7d:a3:2d:0d:48: 90:8a:f0:d2:e6:16:81:29:96:be:f9:3a:49:89:3f:55:53:51: 56:50:1f:b0:18:fc:e0:99:b7:e5:ad:06:34:99:c9:41:9a:58: 6d:cd:de:e5:4f:43:ee:46:76:c5:f4:f4:92:ec:0e:54:2b:69: b4:92:5d:15:6a:9d:3f:25:a4:89:d8:8d:4d:ea:4d:6b:c2:a2: dc:e2:93:58:b3:ee:fb:f8:22:8d:96:3c:9c:cc:39:95:fa:69: e9:a2:93:6b:cb:77:7c:8b:0c:9c:60:7d:12:ca:a2:ec:22:4a: d7:73:2c:9a:1d:e9:0e:c7:fa:be:d9:75:7b:37:38:c8:22:ef: 05:51:e8:ef:ac:62:30:3c:8a:98:e6:eb:cc:69:c4:cd:b4:66: 4d:c9:61:95:16:8a:ec:0b:51:5b:8f:1f:81:4c:b9:d7:da:a6: d4:97:07:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWXim6DLGgBwJZlwK2X+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjUxMjA2MDgwMDQxWhcNMjUxMjA3MDgwMDQxWjAzMTEwLwYDVQQD EyhhODY3NDMwZjBjMDdmMDE5MWVkOWQ4MzFiNTkwODg1MDY2NjM5OGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr55ECrzbYsmkckFg/sEdwu8ATrUm kcfvB76TKlyrtsFq3Wvr6B6XwtNUZBuwwKzkZ+L0uT/ha8rbshvpWmU4PsvTn2Yd co26AXKFUvG4q2eryX/mc4AlApl//8PSkXpTe68FxoWOVmtnNHj1Wrv3V+5FjOh1 7LbOyC1Ma3lwLNuJPPyTVkN6vDJzhPJun7kJpE5cxv+bh7yN75PaA9FADOHcJ1um XZWO2X7O61eTqfTJZEMVSL+FsI7hVmvq/naXpUNl/oOED2D87y1OESL64XXTioXS q7eGkgpjU9MdZgqBqXDs0yVz4w5rL5oY14DEI8N8OOYzFObHecNhj2O/IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKhnQw8MB/AZHtnYMbWQiFBmY5jOMB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2hlCfwl yU3dStO3Qge2uyjQypBXqKVjlTh+cO+t/LvVLnk3/z/pQPrWYSo7o2Pc8Kp0uQ9l qUgdRw+d7Iz0t+dBNBBNuGQBhPPgak+1ZJyLjSD9QH2jLQ1IkIrw0uYWgSmWvvk6 SYk/VVNRVlAfsBj84Jm35a0GNJnJQZpYbc3e5U9D7kZ2xfT0kuwOVCtptJJdFWqd PyWkidiNTepNa8Ki3OKTWLPu+/gijZY8nMw5lfpp6aKTa8t3fIsMnGB9Esqi7CJK 13Msmh3pDsf6vtl1ezc4yCLvBVHo76xiMDyKmObrzGnEzbRmTclhlRaK7AtRW48f gUy519qm1JcHEw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:00 2025 by rpki-client