This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft File: rtyPMnpGGWTAqHqceAlAHFfIbUE.mft (raw, json) Hash identifier: 5AbkrCiHtCK/l6887Rj8fxjHEdUgY9d3IXKUY0f6yIs= Subject key identifier: D9:2E:E2:C0:3C:55:7B:57:6B:7E:88:C8:50:33:A3:87:FD:89:6A:96 Authority key identifier: AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41 Certificate issuer: /CN=aedc8f327a461964c0a87a9c7809401c57c86d41 Certificate serial: 019AF0BEEEDAB62D1AB72E4EFD06E8ED1CA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft Manifest number: 1760 Signing time: Fri 05 Dec 2025 23:00:36 +0000 Manifest this update: Fri 05 Dec 2025 23:00:36 +0000 Manifest next update: Sat 06 Dec 2025 23:00:36 +0000 Files and hashes: 1: 2r5V-jLaZB51UHtAh-bFMsh9deI.roa (hash: MKCPJpuTtJZg9qISSN6i7GBsMIxb/Qe56YUG3zY4d1Q=) 2: rtyPMnpGGWTAqHqceAlAHFfIbUE.crl (hash: iM6UrvM3tCCUvUjOLKxiEHRwNSJvADfm9ZMNu5zY1EY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:ee:da:b6:2d:1a:b7:2e:4e:fd:06:e8:ed:1c:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aedc8f327a461964c0a87a9c7809401c57c86d41 Validity Not Before: Dec 5 23:00:36 2025 GMT Not After : Dec 6 23:00:36 2025 GMT Subject: CN=d92ee2c03c557b576b7e88c85033a387fd896a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2a:77:13:c1:96:9f:3f:7b:ea:4e:9f:80:8c: 0a:06:87:83:87:8f:ff:12:75:a7:4c:b7:59:65:62: fc:10:79:52:52:17:6f:79:92:7d:54:63:9e:1b:d6: 1f:51:92:f6:4b:57:81:bc:93:2c:24:ef:ae:6d:d3: 16:87:21:ec:96:9c:d6:08:8d:d1:ed:ff:e1:d2:dd: 10:4f:28:33:b6:a0:13:d8:16:43:05:0b:9d:81:b8: e4:27:7a:a7:c0:b3:d1:fd:19:e6:c0:3e:04:78:33: 0a:37:04:52:82:24:dc:41:ae:df:43:c0:9f:43:24: 8c:6c:c7:53:75:30:34:d3:c9:bb:ee:94:ba:90:fc: 1b:fd:72:79:e6:50:4f:64:b8:9e:4b:1f:5f:59:a7: 75:3f:aa:dd:21:e9:69:29:8e:b1:af:1e:60:c5:65: 98:fe:4b:ca:ac:e8:f7:99:04:5e:0a:e1:bb:b6:01: 4e:58:b8:bb:0e:fd:5d:62:a2:42:48:81:95:49:c1: 81:c1:9c:0c:b9:cf:9b:2d:de:70:d7:24:04:90:5e: eb:ad:01:72:da:89:fb:a2:23:55:b4:7d:63:aa:0f: 81:e8:0d:62:9a:f9:25:3e:e6:13:4e:94:22:1a:30: bf:9f:2e:0c:e4:cd:56:5d:40:4f:6d:3c:96:c1:b3: 30:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2E:E2:C0:3C:55:7B:57:6B:7E:88:C8:50:33:A3:87:FD:89:6A:96 X509v3 Authority Key Identifier: keyid:AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:93:2d:22:25:50:88:79:82:7b:54:10:6e:00:fe:35:8d:03: 90:53:1c:46:a7:bf:1f:33:3c:d7:5e:11:d1:86:82:fb:ca:59: 9a:42:d5:c6:6d:19:0a:1c:b5:a7:c1:a0:a3:fe:85:84:b9:75: f7:41:1d:fe:a7:3c:ce:14:98:06:29:a8:0e:7d:4e:98:37:c0: fa:23:a1:d2:23:ea:6f:5d:5c:96:81:39:1f:07:ab:c5:59:9f: 40:a9:82:e1:d1:78:ba:ac:b9:69:07:85:46:df:78:59:aa:11: 3d:14:d7:73:c7:1b:c0:59:97:33:e2:1f:c2:70:85:fd:dd:ed: 19:54:04:2a:72:23:a5:7c:fb:02:5c:06:f1:f9:af:40:3c:14: da:ca:d3:d3:b7:e4:a4:f7:f9:78:87:66:ea:bc:54:21:e6:bb: 08:96:aa:2d:5d:4b:0f:0d:09:90:ec:80:84:d7:d5:3d:18:c2: e8:24:25:42:2e:04:39:d0:0f:7a:6d:8e:90:1f:28:ff:34:30: 17:9a:6f:d7:2c:0b:88:de:fb:80:5f:0a:e0:16:18:3f:63:74: 8d:c0:48:36:87:7c:6a:69:5b:9c:00:6e:71:7f:ed:18:9d:06: 8d:95:cd:c9:94:11:7d:d7:eb:20:2c:44:41:f8:27:06:5b:a6: b4:5a:f1:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvu7ati0aty5O/Qbo7RyjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZGM4ZjMyN2E0NjE5NjRjMGE4N2E5Yzc4MDk0MDFjNTdj ODZkNDEwHhcNMjUxMjA1MjMwMDM2WhcNMjUxMjA2MjMwMDM2WjAzMTEwLwYDVQQD EyhkOTJlZTJjMDNjNTU3YjU3NmI3ZTg4Yzg1MDMzYTM4N2ZkODk2YTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyp3E8GWnz976k6fgIwKBoeDh4// EnWnTLdZZWL8EHlSUhdveZJ9VGOeG9YfUZL2S1eBvJMsJO+ubdMWhyHslpzWCI3R 7f/h0t0QTygztqAT2BZDBQudgbjkJ3qnwLPR/RnmwD4EeDMKNwRSgiTcQa7fQ8Cf QySMbMdTdTA008m77pS6kPwb/XJ55lBPZLieSx9fWad1P6rdIelpKY6xrx5gxWWY /kvKrOj3mQReCuG7tgFOWLi7Dv1dYqJCSIGVScGBwZwMuc+bLd5w1yQEkF7rrQFy 2on7oiNVtH1jqg+B6A1imvklPuYTTpQiGjC/ny4M5M1WXUBPbTyWwbMwLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNku4sA8VXtXa36IyFAzo4f9iWqWMB8GA1UdIwQY MBaAFK7cjzJ6RhlkwKh6nHgJQBxXyG1BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnR5UE1ucEdHV1RBcUhxY2VBbEFIRmZJYlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iMGRjNTItNDE2ZS00YTAyLTg5OTMt ZmJjNWExZTM4MmM1LzEvcnR5UE1ucEdHV1RBcUhxY2VBbEFIRmZJYlVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iMGRjNTItNDE2ZS00YTAyLTg5OTMtZmJjNWExZTM4MmM1 LzEvcnR5UE1ucEdHV1RBcUhxY2VBbEFIRmZJYlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5MtIiVQ iHmCe1QQbgD+NY0DkFMcRqe/HzM8114R0YaC+8pZmkLVxm0ZChy1p8Ggo/6FhLl1 90Ed/qc8zhSYBimoDn1OmDfA+iOh0iPqb11cloE5HwerxVmfQKmC4dF4uqy5aQeF Rt94WaoRPRTXc8cbwFmXM+IfwnCF/d3tGVQEKnIjpXz7AlwG8fmvQDwU2srT07fk pPf5eIdm6rxUIea7CJaqLV1LDw0JkOyAhNfVPRjC6CQlQi4EOdAPem2OkB8o/zQw F5pv1ywLiN77gF8K4BYYP2N0jcBINod8amlbnABucX/tGJ0GjZXNyZQRfdfrICxE QfgnBlumtFrxFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:47 2025 by rpki-client