This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft File: t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft (raw, json) Hash identifier: MMyn7ZThoXtYvUHDXFvg3CzqjoYY2j0Vo5DYRX3ABXs= Subject key identifier: 28:6E:40:A2:5E:22:74:D7:61:24:98:2B:4B:3D:0F:40:A9:E2:68:BC Authority key identifier: B7:6C:BF:59:27:C4:76:90:5F:ED:A3:4E:11:40:14:8B:F8:05:D9:B0 Certificate issuer: /CN=b76cbf5927c476905feda34e1140148bf805d9b0 Certificate serial: 019B30E9273D1A83225D9031EAE5D57865DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft Manifest number: 177D Signing time: Thu 18 Dec 2025 10:02:24 +0000 Manifest this update: Thu 18 Dec 2025 10:02:24 +0000 Manifest next update: Fri 19 Dec 2025 10:02:24 +0000 Files and hashes: 1: t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl (hash: R0jJvA7mAeislWS4O0OMx7Fed+0HS5WciC+54f8tnbs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e9:27:3d:1a:83:22:5d:90:31:ea:e5:d5:78:65:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b76cbf5927c476905feda34e1140148bf805d9b0 Validity Not Before: Dec 18 10:02:24 2025 GMT Not After : Dec 19 10:02:24 2025 GMT Subject: CN=286e40a25e2274d76124982b4b3d0f40a9e268bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:42:9e:bc:99:41:4f:cb:22:58:99:bc:b1:58: ea:e3:ea:23:40:fb:04:7f:3e:f1:e9:a7:0f:af:dd: ad:13:c8:5a:60:58:83:d7:11:14:10:d4:c1:03:59: 7e:14:42:ee:9b:74:0b:92:ef:47:d5:c8:c0:27:c2: b8:35:a8:c7:0d:e7:73:d8:72:a7:2b:b4:ea:4b:fb: e4:81:7e:ec:04:86:39:bd:87:be:75:7c:a8:e3:ef: cc:0e:38:98:87:f5:c8:ee:c1:e0:92:ce:c9:17:70: 0c:61:14:48:fa:62:1c:76:72:11:d2:7d:56:fe:2d: 11:9f:0f:36:2d:78:76:da:2b:c1:f8:55:f9:c3:ae: 19:18:2a:82:37:47:c8:ab:81:45:d1:d3:a3:63:8a: cd:65:5e:12:23:99:49:05:99:2f:f6:db:1e:bf:2c: 7c:bc:49:7c:dc:73:da:71:34:8b:fc:df:2f:15:0c: 3e:cf:e3:72:c0:7d:00:27:3b:76:fe:af:6b:3d:ee: 68:7f:4d:09:09:23:03:a8:1d:1c:79:ad:f3:b6:0b: 55:cb:e3:97:7a:43:96:3f:d2:8e:25:da:9c:ce:75: ce:cb:80:55:68:73:fd:7d:db:a8:76:25:94:63:c1: 03:c3:5f:0c:a7:00:0a:14:d5:20:9c:f3:53:23:d7: d4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6E:40:A2:5E:22:74:D7:61:24:98:2B:4B:3D:0F:40:A9:E2:68:BC X509v3 Authority Key Identifier: keyid:B7:6C:BF:59:27:C4:76:90:5F:ED:A3:4E:11:40:14:8B:F8:05:D9:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:7e:a2:79:7b:86:1f:ac:87:60:71:04:2f:a7:3f:24:21:58: 9d:50:36:7d:97:55:ad:4e:b0:d4:70:93:76:30:0c:33:9d:ad: 7c:58:3e:07:f8:a1:90:6e:fa:35:b1:34:53:52:f7:2e:c1:fe: 20:6c:d1:31:6e:ae:25:dc:6b:77:8a:83:29:33:6a:ab:9e:35: 8f:ef:76:fe:93:ef:33:32:83:b7:37:4e:fe:ce:ac:78:aa:f4: 2f:b6:56:62:44:25:72:9a:70:27:bb:24:45:71:bf:53:54:f9: 87:44:2d:ca:7d:ba:22:7a:44:80:55:58:6b:50:7e:1f:da:97: 82:dd:18:62:5a:79:55:66:25:57:7a:11:ad:08:16:d3:6e:af: 83:2c:43:35:d3:1d:ff:d5:b5:9d:d0:22:1c:2f:3d:85:7d:bf: 48:4d:4e:57:ed:e7:d7:4e:a8:14:4d:d5:58:fd:a8:98:cd:a7: c9:de:38:11:8e:ec:37:a7:76:f2:a0:cf:fb:b4:85:6c:32:4b: c1:3a:ba:a1:8b:87:4b:cb:82:8c:8b:54:3b:22:10:c0:1a:98: 97:ae:59:78:bb:1a:50:ca:d5:f3:a5:3a:8a:40:80:a8:09:4c: 8a:b2:1d:12:d0:c0:34:60:56:e5:1a:e6:5e:ff:38:70:88:60: c1:25:37:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6Sc9GoMiXZAx6uXVeGXdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3NmNiZjU5MjdjNDc2OTA1ZmVkYTM0ZTExNDAxNDhiZjgw NWQ5YjAwHhcNMjUxMjE4MTAwMjI0WhcNMjUxMjE5MTAwMjI0WjAzMTEwLwYDVQQD EygyODZlNDBhMjVlMjI3NGQ3NjEyNDk4MmI0YjNkMGY0MGE5ZTI2OGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEKevJlBT8siWJm8sVjq4+ojQPsE fz7x6acPr92tE8haYFiD1xEUENTBA1l+FELum3QLku9H1cjAJ8K4NajHDedz2HKn K7TqS/vkgX7sBIY5vYe+dXyo4+/MDjiYh/XI7sHgks7JF3AMYRRI+mIcdnIR0n1W /i0Rnw82LXh22ivB+FX5w64ZGCqCN0fIq4FF0dOjY4rNZV4SI5lJBZkv9tsevyx8 vEl83HPacTSL/N8vFQw+z+NywH0AJzt2/q9rPe5of00JCSMDqB0cea3ztgtVy+OX ekOWP9KOJdqcznXOy4BVaHP9fduodiWUY8EDw18MpwAKFNUgnPNTI9fUxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChuQKJeInTXYSSYK0s9D0Cp4mi8MB8GA1UdIwQY MBaAFLdsv1knxHaQX+2jThFAFIv4BdmwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDJ5X1dTZkVkcEJmN2FOT0VVQVVpX2dGMmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS81NDdlOGUtNDFiYS00MjcyLWEyOTQt MGFlMmI5ZDlkNDQ3LzEvdDJ5X1dTZkVkcEJmN2FOT0VVQVVpX2dGMmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS81NDdlOGUtNDFiYS00MjcyLWEyOTQtMGFlMmI5ZDlkNDQ3 LzEvdDJ5X1dTZkVkcEJmN2FOT0VVQVVpX2dGMmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAX6ieXuG H6yHYHEEL6c/JCFYnVA2fZdVrU6w1HCTdjAMM52tfFg+B/ihkG76NbE0U1L3LsH+ IGzRMW6uJdxrd4qDKTNqq541j+92/pPvMzKDtzdO/s6seKr0L7ZWYkQlcppwJ7sk RXG/U1T5h0Qtyn26InpEgFVYa1B+H9qXgt0YYlp5VWYlV3oRrQgW026vgyxDNdMd /9W1ndAiHC89hX2/SE1OV+3n106oFE3VWP2omM2nyd44EY7sN6d28qDP+7SFbDJL wTq6oYuHS8uCjItUOyIQwBqYl65ZeLsaUMrV86U6ikCAqAlMirIdEtDANGBW5Rrm Xv84cIhgwSU3kA== -----END CERTIFICATE-----Generated at Thu Dec 18 18:30:22 2025 by rpki-client