This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft File: Ty87yZp5UD4JdXR36O9kPhGIbIs.mft (raw, json) Hash identifier: mt+pLL8Dlt+wyV8Gs6MOQtxyrWf0zq9y6G46gFzNUWk= Subject key identifier: 6C:19:58:4C:F5:9E:E6:AC:A1:56:DC:35:EF:91:BC:80:BE:14:E1:B0 Authority key identifier: 4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B Certificate issuer: /CN=4f2f3bc99a79503e09757477e8ef643e11886c8b Certificate serial: 019B27409E4A50262960F55E6BC6F09C243E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft Manifest number: 162E Signing time: Tue 16 Dec 2025 13:01:44 +0000 Manifest this update: Tue 16 Dec 2025 13:01:44 +0000 Manifest next update: Wed 17 Dec 2025 13:01:44 +0000 Files and hashes: 1: DmY4OlpSGtRwQGNkVI6pwwKmQOM.roa (hash: QsmPHxvFnUbBb8Hdz5mPLnRJfO8cxjGYjuC9mmKC/hY=) 2: Ty87yZp5UD4JdXR36O9kPhGIbIs.crl (hash: /MvZRF5wAgrgXOGFxUN/RX2UP77HB/jpLdbZ1rGg1ZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:40:9e:4a:50:26:29:60:f5:5e:6b:c6:f0:9c:24:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f2f3bc99a79503e09757477e8ef643e11886c8b Validity Not Before: Dec 16 13:01:44 2025 GMT Not After : Dec 17 13:01:44 2025 GMT Subject: CN=6c19584cf59ee6aca156dc35ef91bc80be14e1b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:55:2f:28:ac:87:ff:c3:39:a4:16:d7:ce:8e: c7:1c:a1:9b:27:0e:d7:c4:14:79:8f:41:81:7f:b1: 04:11:ec:de:9b:0a:89:e2:d0:a1:a9:27:6e:9e:60: e9:12:d3:c6:fc:de:af:ff:12:33:75:fa:51:3d:ff: 82:ed:b8:81:9d:72:34:6c:c4:d1:9f:a8:88:8c:86: 52:6d:c3:58:b4:33:5e:f0:f0:70:44:65:17:8d:29: 1d:c4:79:91:15:d7:6f:32:3f:6d:7c:b0:a2:b5:92: 6e:e7:7d:47:52:14:42:65:54:cd:2b:cc:bc:43:14: b8:de:a2:f3:c4:02:f2:0f:42:e4:4c:e3:9a:7b:88: ab:14:93:71:97:67:ae:30:b9:1e:43:b4:bd:a3:63: 48:36:61:b4:e4:ce:a3:f0:6c:f9:ac:a5:ac:0c:42: cd:67:fd:74:2b:b1:09:c6:44:7c:40:44:2e:b9:7f: ba:a8:b7:6a:11:64:a7:75:2e:a6:e6:44:b9:30:23: c8:0b:aa:80:07:9b:c1:e9:03:c5:be:43:14:12:cc: b7:df:73:c5:a7:69:31:61:08:3c:bf:82:42:4f:09: 3f:52:77:59:30:3f:bf:58:2d:0a:1e:b8:be:a7:3b: 4c:33:4b:34:06:f8:fb:d5:3e:b6:8f:79:ad:22:51: c2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:19:58:4C:F5:9E:E6:AC:A1:56:DC:35:EF:91:BC:80:BE:14:E1:B0 X509v3 Authority Key Identifier: keyid:4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:49:ff:ee:fe:66:f5:af:b2:9f:2a:cd:2f:0b:52:1c:7b:b3: 25:68:0c:a4:93:d1:59:7b:47:40:82:15:92:3a:62:c1:e2:53: 25:71:05:0d:21:ee:df:aa:da:a3:eb:80:b9:dd:67:92:64:93: 23:c3:94:9c:43:e8:fe:74:7b:31:6a:be:de:47:70:dc:e3:68: 15:6a:31:dd:c3:fa:59:49:ec:65:3f:c0:0e:9d:37:c1:b1:34: 18:2a:22:94:8a:59:3c:48:74:e2:19:3e:2e:7c:5b:ef:89:be: 9f:06:b5:d8:43:cf:bd:ac:61:c3:29:f7:19:ef:68:4f:36:da: 48:d9:c9:db:48:51:4f:ff:ee:65:6a:7e:31:16:39:a1:7a:e5: c3:13:09:36:22:47:91:b5:97:e7:51:97:a9:29:e1:d7:2e:ff: b9:10:74:19:7a:11:bb:8b:0b:39:c5:be:81:47:a8:32:16:d2: a6:3e:f5:96:17:59:54:ea:6d:5d:45:13:cd:e7:46:c6:56:bb: 3b:88:3d:e7:db:a2:fa:0f:cf:3a:b4:52:2d:75:3f:b8:0e:b7: 46:5b:be:9f:c6:00:73:f5:15:cd:54:64:75:e7:25:62:25:42: aa:ba:06:f7:a7:1e:70:06:d1:c5:46:8e:4e:bf:f2:bd:44:7c: 7f:f4:d6:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQJ5KUCYpYPVea8bwnCQ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMmYzYmM5OWE3OTUwM2UwOTc1NzQ3N2U4ZWY2NDNlMTE4 ODZjOGIwHhcNMjUxMjE2MTMwMTQ0WhcNMjUxMjE3MTMwMTQ0WjAzMTEwLwYDVQQD Eyg2YzE5NTg0Y2Y1OWVlNmFjYTE1NmRjMzVlZjkxYmM4MGJlMTRlMWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01UvKKyH/8M5pBbXzo7HHKGbJw7X xBR5j0GBf7EEEezemwqJ4tChqSdunmDpEtPG/N6v/xIzdfpRPf+C7biBnXI0bMTR n6iIjIZSbcNYtDNe8PBwRGUXjSkdxHmRFddvMj9tfLCitZJu531HUhRCZVTNK8y8 QxS43qLzxALyD0LkTOOae4irFJNxl2euMLkeQ7S9o2NINmG05M6j8Gz5rKWsDELN Z/10K7EJxkR8QEQuuX+6qLdqEWSndS6m5kS5MCPIC6qAB5vB6QPFvkMUEsy333PF p2kxYQg8v4JCTwk/UndZMD+/WC0KHri+pztMM0s0Bvj71T62j3mtIlHCRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwZWEz1nuasoVbcNe+RvIC+FOGwMB8GA1UdIwQY MBaAFE8vO8maeVA+CXV0d+jvZD4RiGyLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHk4N3lacDVVRDRKZFhSMzZPOWtQaEdJYklzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8xZTFhYzYtZmNkNi00YWU4LWFkNzct NTFlNGJiYTZiZjViLzEvVHk4N3lacDVVRDRKZFhSMzZPOWtQaEdJYklzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8xZTFhYzYtZmNkNi00YWU4LWFkNzctNTFlNGJiYTZiZjVi LzEvVHk4N3lacDVVRDRKZFhSMzZPOWtQaEdJYklzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb0n/7v5m 9a+ynyrNLwtSHHuzJWgMpJPRWXtHQIIVkjpiweJTJXEFDSHu36rao+uAud1nkmST I8OUnEPo/nR7MWq+3kdw3ONoFWox3cP6WUnsZT/ADp03wbE0GCoilIpZPEh04hk+ Lnxb74m+nwa12EPPvaxhwyn3Ge9oTzbaSNnJ20hRT//uZWp+MRY5oXrlwxMJNiJH kbWX51GXqSnh1y7/uRB0GXoRu4sLOcW+gUeoMhbSpj71lhdZVOptXUUTzedGxla7 O4g959ui+g/POrRSLXU/uA63Rlu+n8YAc/UVzVRkdeclYiVCqroG96cecAbRxUaO Tr/yvUR8f/TWOA== -----END CERTIFICATE-----Generated at Tue Dec 16 21:05:49 2025 by rpki-client