This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft File: tDycG90eFSiKuTDUAFGzZTywnno.mft (raw, json) Hash identifier: B+VA+e6FpekFHhwTtZmwwbEU+kXuV4wtJvo87o/uqGs= Subject key identifier: 79:36:1B:84:4B:9E:EF:3B:5B:AD:F5:71:B0:4E:D2:B8:16:54:56:90 Authority key identifier: B4:3C:9C:1B:DD:1E:15:28:8A:B9:30:D4:00:51:B3:65:3C:B0:9E:7A Certificate issuer: /CN=b43c9c1bdd1e15288ab930d40051b3653cb09e7a Certificate serial: 019AF19AF6F4C14A72309709BE4DE1FE41B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:00:56 +0000 Manifest this update: Sat 06 Dec 2025 03:00:56 +0000 Manifest next update: Sun 07 Dec 2025 03:00:56 +0000 Files and hashes: 1: tDycG90eFSiKuTDUAFGzZTywnno.crl (hash: SfRRToV0o8YgwUN6rLJiT1sUPcHeYIqlCjWAV6HiSog=) 2: yUpCnFh46Tqx7sCXg4QHc_cNe3o.roa (hash: cp+PmQthE9hblxpquCO9Uz9at9P5Zu4kvGvMw6tU+Ug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.crl rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:f6:f4:c1:4a:72:30:97:09:be:4d:e1:fe:41:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b43c9c1bdd1e15288ab930d40051b3653cb09e7a Validity Not Before: Dec 6 03:00:56 2025 GMT Not After : Dec 7 03:00:56 2025 GMT Subject: CN=79361b844b9eef3b5badf571b04ed2b816545690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a5:16:ac:77:89:21:11:fc:49:74:70:79:19: a6:47:bc:90:9f:50:f2:62:49:70:31:8f:ab:a4:ae: 92:95:6e:f7:4c:dc:58:9e:12:04:e1:60:ab:80:5b: 5c:aa:83:39:d9:d8:1b:39:88:f0:fb:66:c5:3b:80: 8e:96:69:5a:c6:a1:3e:25:6a:97:a7:d4:1b:63:a9: 44:29:df:12:01:21:38:a9:fa:af:3e:f1:02:f4:3c: 3a:2a:b2:aa:be:f1:f3:14:d4:92:95:e5:0e:20:53: 8c:a7:3d:3a:bb:ad:c3:d0:b4:45:8a:28:0a:f9:c4: e3:d4:e7:60:d3:d2:2c:68:81:59:ce:7d:87:47:74: 67:79:49:de:ad:86:a7:70:ec:7d:e5:1f:e3:2c:77: fc:15:b5:c5:42:4f:a1:54:6f:bd:5d:91:96:b2:08: df:30:92:86:80:4f:53:45:2a:e6:2a:50:d9:bd:5b: d2:0f:f2:16:42:63:44:6f:5a:af:0b:f4:a2:ef:52: 42:f0:7d:bb:28:18:bf:97:af:12:3c:38:3d:77:57: be:04:66:d3:99:85:3d:73:1c:a6:f2:ea:56:13:52: 93:e3:83:24:b5:d3:97:ca:0e:b5:2f:dd:6b:65:c6: 6d:0a:33:cc:d8:c4:f5:ad:b8:46:cd:e9:ec:e8:fe: 90:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:36:1B:84:4B:9E:EF:3B:5B:AD:F5:71:B0:4E:D2:B8:16:54:56:90 X509v3 Authority Key Identifier: keyid:B4:3C:9C:1B:DD:1E:15:28:8A:B9:30:D4:00:51:B3:65:3C:B0:9E:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:03:6d:d2:06:8c:59:60:3e:e8:84:63:5f:d1:aa:c6:02:a8: 79:d3:cb:f6:52:af:65:4b:bb:bd:f2:d1:a8:4b:4c:43:54:18: f2:bd:ed:87:81:3f:ff:cb:00:b6:31:a8:53:c2:65:33:b1:2c: a2:54:f1:08:45:0f:f2:a6:91:30:53:3d:25:50:51:bd:8e:bd: 79:51:05:9b:81:1a:39:39:8e:68:2f:d4:c7:96:2c:8a:9e:61: 5a:f4:eb:c6:91:0b:f0:f7:ed:7b:f5:13:df:1d:c6:79:ce:c0: 92:a6:d0:23:27:31:9e:14:f8:d1:28:ea:b6:e7:65:09:9b:b1: c0:f5:e0:92:1b:b8:c3:a7:70:8b:1a:ff:eb:b5:c1:51:02:2e: bd:a6:66:0c:fa:de:85:9c:ec:76:ba:6f:6c:95:23:cb:f2:57: fc:42:cf:e3:67:cc:93:c5:09:24:25:00:6d:05:0b:6d:f2:eb: bc:59:4e:5f:4f:f8:47:97:58:a6:d3:57:06:5d:08:de:c3:3c: d9:e6:71:4e:ac:86:46:17:3b:ef:1e:7b:8d:79:10:39:89:d5: f7:3a:5a:11:b8:7e:e1:a6:41:ce:71:5f:0f:26:d6:3e:6e:d0: ba:a8:e1:1e:9c:8c:db:9e:42:1c:ec:48:61:f0:7a:59:47:ea: e5:94:1e:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmvb0wUpyMJcJvk3h/kG3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0M2M5YzFiZGQxZTE1Mjg4YWI5MzBkNDAwNTFiMzY1M2Ni MDllN2EwHhcNMjUxMjA2MDMwMDU2WhcNMjUxMjA3MDMwMDU2WjAzMTEwLwYDVQQD Eyg3OTM2MWI4NDRiOWVlZjNiNWJhZGY1NzFiMDRlZDJiODE2NTQ1NjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKUWrHeJIRH8SXRweRmmR7yQn1Dy YklwMY+rpK6SlW73TNxYnhIE4WCrgFtcqoM52dgbOYjw+2bFO4COlmlaxqE+JWqX p9QbY6lEKd8SASE4qfqvPvEC9Dw6KrKqvvHzFNSSleUOIFOMpz06u63D0LRFiigK +cTj1Odg09IsaIFZzn2HR3RneUnerYancOx95R/jLHf8FbXFQk+hVG+9XZGWsgjf MJKGgE9TRSrmKlDZvVvSD/IWQmNEb1qvC/Si71JC8H27KBi/l68SPDg9d1e+BGbT mYU9cxym8upWE1KT44MktdOXyg61L91rZcZtCjPM2MT1rbhGzens6P6QpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHk2G4RLnu87W631cbBO0rgWVFaQMB8GA1UdIwQY MBaAFLQ8nBvdHhUoirkw1ABRs2U8sJ56MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdER5Y0c5MGVGU2lLdVREVUFGR3paVHl3bm5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8wM2I3OWEtMzBlZC00ZDI2LTg1ODUt OWM1ZDM1MTUyNmIzLzEvdER5Y0c5MGVGU2lLdVREVUFGR3paVHl3bm5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8wM2I3OWEtMzBlZC00ZDI2LTg1ODUtOWM1ZDM1MTUyNmIz LzEvdER5Y0c5MGVGU2lLdVREVUFGR3paVHl3bm5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHANt0gaM WWA+6IRjX9GqxgKoedPL9lKvZUu7vfLRqEtMQ1QY8r3th4E//8sAtjGoU8JlM7Es olTxCEUP8qaRMFM9JVBRvY69eVEFm4EaOTmOaC/Ux5Ysip5hWvTrxpEL8Pfte/UT 3x3Gec7AkqbQIycxnhT40SjqtudlCZuxwPXgkhu4w6dwixr/67XBUQIuvaZmDPre hZzsdrpvbJUjy/JX/ELP42fMk8UJJCUAbQULbfLrvFlOX0/4R5dYptNXBl0I3sM8 2eZxTqyGRhc77x57jXkQOYnV9zpaEbh+4aZBznFfDybWPm7QuqjhHpyM255CHOxI YfB6WUfq5ZQegA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:32 2025 by rpki-client