This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft File: TYqYddfQ0SvEenC37emjymTYLTI.mft (raw, json) Hash identifier: vjUPZA1tBKSgkjlDcDjtv7njqkwQs6CrbgTB/tfeJ5g= Subject key identifier: 99:62:2F:D2:4A:8B:31:7F:2D:64:65:6A:C4:90:78:8D:F9:E2:8B:E1 Authority key identifier: 4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32 Certificate issuer: /CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32 Certificate serial: 019AF509DF416CE269E1CB1837F0E62DA3A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft Manifest number: 0DDC Signing time: Sat 06 Dec 2025 19:00:56 +0000 Manifest this update: Sat 06 Dec 2025 19:00:56 +0000 Manifest next update: Sun 07 Dec 2025 19:00:56 +0000 Files and hashes: 1: Qkkirv8lLJuTeoHE2XBshzOic18.roa (hash: JXSnxQgZnKW02ndUqgQ4ahHIPbZr+aCryUo1lSsSpVM=) 2: TYqYddfQ0SvEenC37emjymTYLTI.crl (hash: rGeTa6kGscB/R2eyWD9FCwOL2rOQBXjZ8mqvATgPSOU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:df:41:6c:e2:69:e1:cb:18:37:f0:e6:2d:a3:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32 Validity Not Before: Dec 6 19:00:56 2025 GMT Not After : Dec 7 19:00:56 2025 GMT Subject: CN=99622fd24a8b317f2d64656ac490788df9e28be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fc:19:63:52:62:aa:91:b9:ca:61:2c:0e:fe: 46:f5:2a:73:5b:18:3d:85:b9:ab:fc:f5:4d:f9:a8: 37:45:d8:e5:1e:83:cf:5d:0f:24:90:30:5e:80:cf: eb:33:f1:69:08:5c:a5:63:8b:69:5e:cc:60:24:8b: f1:23:09:63:82:53:61:3a:07:3f:ec:d3:65:00:da: fb:c9:31:bb:b5:fe:a8:fc:1a:f7:ef:61:11:3c:eb: 13:21:6c:fe:b6:59:fe:68:af:23:94:00:1a:8d:06: 19:4d:ef:64:8b:00:57:7e:5f:88:89:ed:05:86:c0: 23:8a:5c:33:32:2a:b3:ed:0c:af:54:8e:0d:7f:fe: 83:76:92:84:01:06:49:de:cd:dd:f5:10:9d:20:79: 2d:a0:dc:fd:d0:59:9b:f8:81:ee:84:f3:45:ba:22: 85:0a:f6:31:60:bb:86:15:02:df:96:85:0a:d4:41: d6:41:1c:52:22:d1:c5:db:f7:4e:f0:d9:b5:e3:24: 05:a4:e9:24:5d:51:e0:aa:62:af:94:48:87:90:a9: 08:e0:a6:e1:1c:d6:98:33:5d:e4:5b:69:f4:10:81: ee:bf:a1:1d:a0:91:bd:a1:33:a3:8a:26:ca:0a:d5: a0:7e:15:90:d8:ec:a7:1e:97:15:c4:56:f4:d6:e6: 90:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:62:2F:D2:4A:8B:31:7F:2D:64:65:6A:C4:90:78:8D:F9:E2:8B:E1 X509v3 Authority Key Identifier: keyid:4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:4c:61:0f:4d:0c:1c:3b:1d:42:35:4c:1c:97:0c:d4:45:b6: f1:9b:86:52:db:1e:1c:d5:27:d2:b1:34:c0:55:2c:7a:f7:35: cb:76:23:f4:5f:b7:cf:10:b9:64:b5:d6:56:7a:66:0f:6c:13: 48:72:f2:90:8e:3a:80:4e:ad:3c:89:7c:5e:4f:3c:0e:c4:0b: d8:03:d0:f5:ed:72:1b:85:44:70:59:5c:cb:c4:18:18:2c:ab: 92:80:76:96:ab:41:3b:73:8f:07:6a:d3:bd:bc:4e:e2:44:43: 86:e2:6f:ae:4d:79:65:68:42:45:d0:a9:f0:0e:be:91:7b:c5: 18:b8:12:1e:30:09:b9:d9:57:97:56:6a:38:90:46:c4:58:b3: 23:e9:bd:a6:81:78:6b:c8:16:eb:80:5c:72:a5:d6:cd:f0:8e: 96:5b:d6:d8:26:74:f7:dc:7e:b7:c5:aa:8b:72:1d:6f:a5:54: cf:fd:c2:62:83:6e:ef:2e:b9:53:3f:8a:5a:9f:01:f5:64:8b: 09:13:f8:7a:0d:26:a0:e3:91:de:52:db:cb:e0:01:98:06:a6: 7a:a7:93:7c:18:2e:8f:bb:cb:81:16:a7:5f:35:8f:3f:75:1c: 5d:41:fc:6d:f8:87:77:f7:4d:3c:b9:c5:94:28:d0:e2:c0:36: 69:70:72:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cd9BbOJp4csYN/DmLaOnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkOGE5ODc1ZDdkMGQxMmJjNDdhNzBiN2VkZTlhM2NhNjRk ODJkMzIwHhcNMjUxMjA2MTkwMDU2WhcNMjUxMjA3MTkwMDU2WjAzMTEwLwYDVQQD Eyg5OTYyMmZkMjRhOGIzMTdmMmQ2NDY1NmFjNDkwNzg4ZGY5ZTI4YmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvwZY1JiqpG5ymEsDv5G9SpzWxg9 hbmr/PVN+ag3RdjlHoPPXQ8kkDBegM/rM/FpCFylY4tpXsxgJIvxIwljglNhOgc/ 7NNlANr7yTG7tf6o/Br372ERPOsTIWz+tln+aK8jlAAajQYZTe9kiwBXfl+Iie0F hsAjilwzMiqz7QyvVI4Nf/6DdpKEAQZJ3s3d9RCdIHktoNz90Fmb+IHuhPNFuiKF CvYxYLuGFQLfloUK1EHWQRxSItHF2/dO8Nm14yQFpOkkXVHgqmKvlEiHkKkI4Kbh HNaYM13kW2n0EIHuv6EdoJG9oTOjiibKCtWgfhWQ2OynHpcVxFb01uaQsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJliL9JKizF/LWRlasSQeI354ovhMB8GA1UdIwQY MBaAFE2KmHXX0NErxHpwt+3po8pk2C0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFlxWWRkZlEwU3ZFZW5DMzdlbWp5bVRZTFRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi85NWQ3ODAtYmFhZC00ZGI3LWJlYjUt NDU0NTk5YTRkMjJjLzEvVFlxWWRkZlEwU3ZFZW5DMzdlbWp5bVRZTFRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi85NWQ3ODAtYmFhZC00ZGI3LWJlYjUtNDU0NTk5YTRkMjJj LzEvVFlxWWRkZlEwU3ZFZW5DMzdlbWp5bVRZTFRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0xhD00M HDsdQjVMHJcM1EW28ZuGUtseHNUn0rE0wFUsevc1y3Yj9F+3zxC5ZLXWVnpmD2wT SHLykI46gE6tPIl8Xk88DsQL2APQ9e1yG4VEcFlcy8QYGCyrkoB2lqtBO3OPB2rT vbxO4kRDhuJvrk15ZWhCRdCp8A6+kXvFGLgSHjAJudlXl1ZqOJBGxFizI+m9poF4 a8gW64BccqXWzfCOllvW2CZ099x+t8Wqi3Idb6VUz/3CYoNu7y65Uz+KWp8B9WSL CRP4eg0moOOR3lLby+ABmAameqeTfBguj7vLgRanXzWPP3UcXUH8bfiHd/dNPLnF lCjQ4sA2aXByBA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:40:59 2025 by rpki-client