This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft File: Ty87yZp5UD4JdXR36O9kPhGIbIs.mft (raw, json) Hash identifier: +VngNNKQAUkQDVWaLQx9wF3/5eEc2q7KmWjvES2POCc= Subject key identifier: FC:14:82:43:57:59:D9:EE:E8:77:2E:CF:04:B2:BC:FE:6D:A2:11:48 Authority key identifier: 4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B Certificate issuer: /CN=4f2f3bc99a79503e09757477e8ef643e11886c8b Certificate serial: 019AF31D4FA122CF56AE9D7EC2E1BF727124 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft Manifest number: 1613 Signing time: Sat 06 Dec 2025 10:02:55 +0000 Manifest this update: Sat 06 Dec 2025 10:02:55 +0000 Manifest next update: Sun 07 Dec 2025 10:02:55 +0000 Files and hashes: 1: DmY4OlpSGtRwQGNkVI6pwwKmQOM.roa (hash: QsmPHxvFnUbBb8Hdz5mPLnRJfO8cxjGYjuC9mmKC/hY=) 2: Ty87yZp5UD4JdXR36O9kPhGIbIs.crl (hash: 98knHKGjONTaw+suhEDaV4V0Oz3OPy4YGi9XSv0p57Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:4f:a1:22:cf:56:ae:9d:7e:c2:e1:bf:72:71:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f2f3bc99a79503e09757477e8ef643e11886c8b Validity Not Before: Dec 6 10:02:55 2025 GMT Not After : Dec 7 10:02:55 2025 GMT Subject: CN=fc1482435759d9eee8772ecf04b2bcfe6da21148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d5:35:3e:05:ec:17:13:28:76:2b:77:d7:e8: 47:f1:ee:49:e6:d6:3e:f8:b7:5d:d3:61:df:ff:c6: 14:f1:3d:3c:72:66:18:c6:7d:80:9a:b6:db:c1:82: eb:dd:ff:35:cb:e0:6b:51:e5:de:0f:37:97:c3:d1: 97:09:91:e4:fa:69:3f:9d:0e:c4:af:5b:8a:0a:d6: 34:b8:f5:82:e0:9a:2d:6e:ba:68:ca:a4:5c:d5:39: 13:17:fb:3c:1e:92:62:99:4d:91:82:49:58:63:7b: fc:4c:24:5f:b3:7d:cb:36:d4:e9:a5:54:09:ff:11: 6c:1f:b8:01:1b:a9:94:00:ad:7f:62:b8:0e:5b:f9: 3c:c3:ea:e2:50:f9:90:ea:87:89:cd:9e:ed:1b:8e: 0e:90:7c:bc:de:2e:37:74:71:f7:73:b8:47:a0:2c: b6:0c:27:c2:95:fd:75:d2:f2:f6:aa:a9:fa:e9:89: 77:c2:b0:b8:1f:08:44:5f:52:6c:36:50:9f:5e:fc: a2:56:bb:4f:ba:2c:5c:e1:c4:35:cb:db:d1:ad:2d: c7:ee:bd:f5:48:1d:55:57:ee:69:47:a7:ee:a8:b5: 41:b9:a4:69:ca:2f:d2:e4:03:36:d7:24:e3:4d:bd: 6b:34:aa:82:e9:6e:5a:8e:e4:4d:3b:80:5b:62:56: 0e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:14:82:43:57:59:D9:EE:E8:77:2E:CF:04:B2:BC:FE:6D:A2:11:48 X509v3 Authority Key Identifier: keyid:4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:8a:71:81:31:2b:c4:b4:8a:2a:43:ba:47:c3:67:59:41:c4: 0c:d6:90:86:c4:19:95:9a:5b:cf:90:91:2f:35:ad:b8:15:c9: 2a:25:37:7f:88:fc:7e:1f:16:36:74:d7:8b:51:83:80:ec:2d: aa:c0:9c:ae:97:69:88:3d:36:23:db:6a:6d:59:ff:6a:bb:c3: a5:05:d6:94:9e:c5:15:23:30:c5:40:c6:f3:0d:b2:f5:72:db: df:e2:c8:5b:fc:e8:86:bd:47:2a:89:01:88:53:8a:05:f7:5a: 1a:47:0e:61:60:a0:3a:41:3c:fd:24:85:bf:b3:7f:70:08:8d: d8:bc:ed:69:c6:1b:b1:c4:fe:34:28:5c:70:ff:cf:3c:a5:1f: ca:8d:a3:59:e5:c7:54:3d:61:92:e8:d4:10:e3:d3:07:8d:c2: 43:2a:a7:55:38:55:f8:d8:1c:ca:1d:3e:19:16:78:e5:3e:1c: db:ed:18:26:d6:40:46:83:6c:05:e4:ca:1e:3d:06:69:1b:c5: 59:39:6b:be:84:89:c9:80:1f:75:4a:34:fe:fb:af:e3:4e:ec: a5:ff:d3:36:7c:b5:19:3e:08:c0:5e:17:c1:ec:30:5c:c1:1a: 42:2d:29:e4:56:c3:21:14:a3:93:f9:d7:1c:d5:7e:43:7f:15: b4:35:e8:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHU+hIs9Wrp1+wuG/cnEkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMmYzYmM5OWE3OTUwM2UwOTc1NzQ3N2U4ZWY2NDNlMTE4 ODZjOGIwHhcNMjUxMjA2MTAwMjU1WhcNMjUxMjA3MTAwMjU1WjAzMTEwLwYDVQQD EyhmYzE0ODI0MzU3NTlkOWVlZTg3NzJlY2YwNGIyYmNmZTZkYTIxMTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9U1PgXsFxModit31+hH8e5J5tY+ +Ldd02Hf/8YU8T08cmYYxn2AmrbbwYLr3f81y+BrUeXeDzeXw9GXCZHk+mk/nQ7E r1uKCtY0uPWC4JotbrpoyqRc1TkTF/s8HpJimU2RgklYY3v8TCRfs33LNtTppVQJ /xFsH7gBG6mUAK1/YrgOW/k8w+riUPmQ6oeJzZ7tG44OkHy83i43dHH3c7hHoCy2 DCfClf110vL2qqn66Yl3wrC4HwhEX1JsNlCfXvyiVrtPuixc4cQ1y9vRrS3H7r31 SB1VV+5pR6fuqLVBuaRpyi/S5AM21yTjTb1rNKqC6W5ajuRNO4BbYlYO0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwUgkNXWdnu6HcuzwSyvP5tohFIMB8GA1UdIwQY MBaAFE8vO8maeVA+CXV0d+jvZD4RiGyLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHk4N3lacDVVRDRKZFhSMzZPOWtQaEdJYklzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8xZTFhYzYtZmNkNi00YWU4LWFkNzct NTFlNGJiYTZiZjViLzEvVHk4N3lacDVVRDRKZFhSMzZPOWtQaEdJYklzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8xZTFhYzYtZmNkNi00YWU4LWFkNzctNTFlNGJiYTZiZjVi LzEvVHk4N3lacDVVRDRKZFhSMzZPOWtQaEdJYklzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlYpxgTEr xLSKKkO6R8NnWUHEDNaQhsQZlZpbz5CRLzWtuBXJKiU3f4j8fh8WNnTXi1GDgOwt qsCcrpdpiD02I9tqbVn/arvDpQXWlJ7FFSMwxUDG8w2y9XLb3+LIW/zohr1HKokB iFOKBfdaGkcOYWCgOkE8/SSFv7N/cAiN2LztacYbscT+NChccP/PPKUfyo2jWeXH VD1hkujUEOPTB43CQyqnVThV+Ngcyh0+GRZ45T4c2+0YJtZARoNsBeTKHj0GaRvF WTlrvoSJyYAfdUo0/vuv407spf/TNny1GT4IwF4XwewwXMEaQi0p5FbDIRSjk/nX HNV+Q38VtDXoAQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:39:01 2025 by rpki-client