This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft File: tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft (raw, json) Hash identifier: Ewo6Q+xGDBafN7LUAeSgO9fCK6p4HIYJP6td9fHP1Es= Subject key identifier: F9:C7:08:B9:AD:D7:1C:0C:84:BD:13:BE:D0:F4:E3:97:0B:38:6C:1E Authority key identifier: B6:9D:B2:78:9B:A8:C7:FF:18:8B:79:DD:E4:28:6A:A6:E1:F0:37:EE Certificate issuer: /CN=b69db2789ba8c7ff188b79dde4286aa6e1f037ee Certificate serial: 019B3569E1D7D337E87B7F8D0CCB0ACFD0AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 07:01:30 +0000 Manifest this update: Fri 19 Dec 2025 07:01:30 +0000 Manifest next update: Sat 20 Dec 2025 07:01:30 +0000 Files and hashes: 1: 6vMVm2zjHnS6jWGvj_JPBPoIejQ.roa (hash: WRnwpfl8kuTVj7apaEiYFn6tm3l6ZkpWo7ENQmbJBXw=) 2: tp2yeJuox_8Yi3nd5ChqpuHwN-4.crl (hash: 71DGOdL3bw7Ts8ISFWVTbYF/Ga0VE0RN+NCljUgBUM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.crl rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:e1:d7:d3:37:e8:7b:7f:8d:0c:cb:0a:cf:d0:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b69db2789ba8c7ff188b79dde4286aa6e1f037ee Validity Not Before: Dec 19 07:01:30 2025 GMT Not After : Dec 20 07:01:30 2025 GMT Subject: CN=f9c708b9add71c0c84bd13bed0f4e3970b386c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:09:3a:f1:fa:1f:9e:9b:db:7a:a1:99:3a:5d: cd:43:60:61:3d:32:d9:d7:1b:76:f2:d9:75:99:e7: b9:88:39:47:4b:da:e3:8d:d5:ea:0b:cb:82:a5:6c: 51:19:9f:c0:4f:ca:b4:af:23:0c:91:4e:f8:30:06: 3d:b0:39:7f:1a:54:7e:b5:c4:e2:cc:d8:e6:6f:79: b3:3e:44:4c:ba:13:b6:83:6b:53:8c:0d:a0:11:76: 97:0d:5b:75:eb:8d:78:ec:4c:f3:a8:3d:2e:ed:70: 7b:72:01:2c:3c:da:b0:a7:0f:ca:14:9e:d2:39:14: 70:2a:e8:c6:30:e6:70:75:48:99:10:07:f6:1c:59: 6b:81:eb:9a:b9:81:6b:bb:ed:8e:6b:7b:0c:54:05: be:02:87:00:5b:c1:54:6c:b1:c9:d4:ec:c6:cf:bb: 67:ee:05:f2:fd:3b:67:b6:6a:38:ba:f6:68:22:c3: 62:53:ec:f2:cb:3d:f8:df:1c:fb:2b:61:e3:0d:da: 35:8a:8f:20:e2:7f:a0:f9:2a:0e:fe:92:34:25:38: 6a:c5:6b:13:47:cc:76:13:dc:57:e6:4a:01:6c:7d: cc:77:4b:dc:79:eb:d7:82:07:e4:8b:cd:57:64:88: 88:90:88:39:8c:01:66:82:60:89:cf:19:63:6b:0c: 17:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C7:08:B9:AD:D7:1C:0C:84:BD:13:BE:D0:F4:E3:97:0B:38:6C:1E X509v3 Authority Key Identifier: keyid:B6:9D:B2:78:9B:A8:C7:FF:18:8B:79:DD:E4:28:6A:A6:E1:F0:37:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp2yeJuox_8Yi3nd5ChqpuHwN-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d58ed6-0460-4631-a063-a0ce5bd83715/1/tp2yeJuox_8Yi3nd5ChqpuHwN-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:36:ca:73:d3:6d:ff:08:2f:0b:fb:33:97:7d:99:23:1f:4d: 0c:8e:ba:56:21:35:58:09:dd:3b:25:2d:42:e6:f8:05:d4:03: 0f:56:f7:67:fe:68:9c:71:c6:c7:ad:3a:98:fe:70:72:fb:3c: 94:2b:a8:41:65:97:17:b0:25:51:6f:99:a1:5d:0c:ae:ee:f6: 4a:d5:f8:00:1d:09:50:57:b4:03:63:98:d8:7c:46:ce:2f:1d: 13:85:93:08:d2:8f:65:43:68:17:2b:b2:31:44:fa:07:aa:09: 8c:a7:0d:3e:75:70:ca:d5:a4:70:18:7e:e5:2c:c5:39:1e:b7: cd:29:bd:42:2e:76:31:f7:c7:2b:98:22:96:42:f8:2d:f6:b7: 86:4c:1c:33:09:0b:98:af:60:b9:88:6c:75:b5:a8:2d:8d:60: 6d:52:b7:af:79:ed:82:60:a1:82:04:44:0e:de:17:94:1f:78: 52:02:ea:f3:2f:88:6e:e4:70:5e:92:a4:85:04:5f:64:ed:53: 17:3c:af:54:03:37:c0:a2:d6:17:8e:20:ff:6f:55:e7:9d:41: 4b:f1:6d:88:10:57:fe:b7:76:32:4a:2c:11:96:a7:73:57:c9: bc:e5:fd:82:1c:94:cf:eb:18:fe:87:a3:af:f7:62:1a:1b:dc: 4a:fb:3b:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aeHX0zfoe3+NDMsKz9CqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2OWRiMjc4OWJhOGM3ZmYxODhiNzlkZGU0Mjg2YWE2ZTFm MDM3ZWUwHhcNMjUxMjE5MDcwMTMwWhcNMjUxMjIwMDcwMTMwWjAzMTEwLwYDVQQD EyhmOWM3MDhiOWFkZDcxYzBjODRiZDEzYmVkMGY0ZTM5NzBiMzg2YzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowk68fofnpvbeqGZOl3NQ2BhPTLZ 1xt28tl1mee5iDlHS9rjjdXqC8uCpWxRGZ/AT8q0ryMMkU74MAY9sDl/GlR+tcTi zNjmb3mzPkRMuhO2g2tTjA2gEXaXDVt164147EzzqD0u7XB7cgEsPNqwpw/KFJ7S ORRwKujGMOZwdUiZEAf2HFlrgeuauYFru+2Oa3sMVAW+AocAW8FUbLHJ1OzGz7tn 7gXy/Ttntmo4uvZoIsNiU+zyyz343xz7K2HjDdo1io8g4n+g+SoO/pI0JThqxWsT R8x2E9xX5koBbH3Md0vceevXggfki81XZIiIkIg5jAFmgmCJzxljawwXmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnHCLmt1xwMhL0TvtD045cLOGweMB8GA1UdIwQY MBaAFLadsnibqMf/GIt53eQoaqbh8DfuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHAyeWVKdW94XzhZaTNuZDVDaHFwdUh3Ti00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kNThlZDYtMDQ2MC00NjMxLWEwNjMt YTBjZTViZDgzNzE1LzEvdHAyeWVKdW94XzhZaTNuZDVDaHFwdUh3Ti00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9kNThlZDYtMDQ2MC00NjMxLWEwNjMtYTBjZTViZDgzNzE1 LzEvdHAyeWVKdW94XzhZaTNuZDVDaHFwdUh3Ti00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFjbKc9Nt /wgvC/szl32ZIx9NDI66ViE1WAndOyUtQub4BdQDD1b3Z/5onHHGx606mP5wcvs8 lCuoQWWXF7AlUW+ZoV0Mru72StX4AB0JUFe0A2OY2HxGzi8dE4WTCNKPZUNoFyuy MUT6B6oJjKcNPnVwytWkcBh+5SzFOR63zSm9Qi52MffHK5gilkL4Lfa3hkwcMwkL mK9guYhsdbWoLY1gbVK3r3ntgmChggREDt4XlB94UgLq8y+IbuRwXpKkhQRfZO1T FzyvVAM3wKLWF44g/29V551BS/FtiBBX/rd2MkosEZanc1fJvOX9ghyUz+sY/oej r/diGhvcSvs7GA== -----END CERTIFICATE-----Generated at Fri Dec 19 15:46:58 2025 by rpki-client