This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft File: tbYylyVHZz3w91qryDmiQihUoio.mft (raw, json) Hash identifier: 2xlUqIj8WxH2J0GY/uXwfvB+7YTLkQos20Bmg2Yrayk= Subject key identifier: 4D:66:BF:37:9E:9C:A4:F9:43:81:01:37:B4:59:26:94:FA:0B:BF:55 Authority key identifier: B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A Certificate issuer: /CN=b5b632972547673df0f75aabc839a2422854a22a Certificate serial: 019AF2ADCCDCFA59A5BD319AE886546C1CC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 08:01:07 +0000 Manifest this update: Sat 06 Dec 2025 08:01:07 +0000 Manifest next update: Sun 07 Dec 2025 08:01:07 +0000 Files and hashes: 1: cUeWbg23uzdb5xSz99WNI9WtnoI.roa (hash: s+577iLuT/1Ct4G1mVjBy6TiewUwm3DkGU10CzpZuFE=) 2: tbYylyVHZz3w91qryDmiQihUoio.crl (hash: Woufr/T1Mao4Gq7COHM948UuFnZoTC6tDP4dRcV4eSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:cc:dc:fa:59:a5:bd:31:9a:e8:86:54:6c:1c:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5b632972547673df0f75aabc839a2422854a22a Validity Not Before: Dec 6 08:01:07 2025 GMT Not After : Dec 7 08:01:07 2025 GMT Subject: CN=4d66bf379e9ca4f943810137b4592694fa0bbf55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1b:b0:8c:2d:f2:4d:cf:c3:b1:79:eb:ba:0c: 1c:98:f2:28:38:a5:32:e1:46:fb:a2:14:2b:76:fb: d8:b3:91:a3:e6:c3:f9:2f:6f:61:c1:af:7a:2d:be: aa:e0:4d:49:f3:63:85:ca:d9:2f:f4:20:46:4c:7b: 64:23:25:71:1d:ad:59:7f:a1:1e:dc:ec:23:66:e3: 40:2a:97:f1:68:22:1f:9c:1f:ac:ba:bf:05:ed:d6: 7a:18:df:e3:20:ff:1b:0a:8e:4b:57:c4:69:65:33: a5:0c:41:af:36:88:5e:4d:08:ea:95:8a:a3:4c:cc: 8f:0e:46:6f:bb:d5:91:54:0e:96:a1:c4:df:6c:3b: 14:37:a6:3b:3c:f7:73:27:5c:9e:fd:85:99:99:c5: 4f:ba:af:31:15:0f:21:88:de:7c:2b:00:c8:79:a4: 62:3e:b4:17:47:df:79:24:c8:d1:d7:f8:e9:38:5b: f2:0e:a6:5e:fe:8d:51:c7:a6:dc:45:2f:70:15:09: 42:f6:a4:69:0c:87:7b:85:ff:31:3c:40:dd:6b:6d: ad:fd:88:7e:b3:ea:e2:9d:76:ee:a3:a5:69:89:ec: 2a:49:ac:20:14:cc:a0:cf:f6:e1:7a:b1:f4:42:14: 1a:0c:55:85:f6:80:f4:97:27:0c:b4:4a:08:c4:0c: 85:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:66:BF:37:9E:9C:A4:F9:43:81:01:37:B4:59:26:94:FA:0B:BF:55 X509v3 Authority Key Identifier: keyid:B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:97:72:3e:bb:07:31:ca:2d:6b:97:6b:e6:38:32:35:b4:af: 1a:81:f0:5f:0e:2f:7f:93:8c:15:67:4e:dd:2d:bd:57:e9:bd: 23:de:f2:c2:3b:a1:2f:ac:f8:5f:08:81:34:37:2e:a1:38:fa: 18:94:c6:3b:10:ae:8a:9a:2b:58:a9:02:82:de:59:8f:65:9f: a9:29:9c:38:ba:c9:3e:55:3d:18:a8:12:60:d5:25:b1:10:c6: 99:44:ec:9f:65:02:75:63:12:f1:9b:d3:8d:53:b4:0e:c2:92: 77:47:1b:40:26:cf:bd:65:b4:7a:02:c0:d2:6f:a8:f7:6f:98: 76:c9:9e:38:95:db:19:f6:27:ac:46:57:36:c4:39:85:76:0f: 08:df:4e:aa:9e:ad:bf:4d:d8:f0:09:e0:c6:bf:25:47:4f:53: c2:7a:a6:02:bb:c6:52:ab:82:93:fa:51:3f:0b:1a:fb:ca:6e: d2:2f:d7:fa:a4:6c:fc:f5:1b:ad:af:af:fa:d8:5f:31:7a:34: bb:5b:fc:07:cc:45:19:a3:9a:7b:0a:28:19:b9:be:cb:b1:9d: 0d:08:7d:1f:80:90:4f:f4:dd:69:85:d8:85:5b:4f:9f:71:d3: c5:a1:9c:b2:ba:d3:12:fe:07:53:f8:19:c5:c9:eb:1b:60:9a: 91:74:cc:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrczc+lmlvTGa6IZUbBzEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1YjYzMjk3MjU0NzY3M2RmMGY3NWFhYmM4MzlhMjQyMjg1 NGEyMmEwHhcNMjUxMjA2MDgwMTA3WhcNMjUxMjA3MDgwMTA3WjAzMTEwLwYDVQQD Eyg0ZDY2YmYzNzllOWNhNGY5NDM4MTAxMzdiNDU5MjY5NGZhMGJiZjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6huwjC3yTc/DsXnrugwcmPIoOKUy 4Ub7ohQrdvvYs5Gj5sP5L29hwa96Lb6q4E1J82OFytkv9CBGTHtkIyVxHa1Zf6Ee 3OwjZuNAKpfxaCIfnB+sur8F7dZ6GN/jIP8bCo5LV8RpZTOlDEGvNoheTQjqlYqj TMyPDkZvu9WRVA6WocTfbDsUN6Y7PPdzJ1ye/YWZmcVPuq8xFQ8hiN58KwDIeaRi PrQXR995JMjR1/jpOFvyDqZe/o1Rx6bcRS9wFQlC9qRpDId7hf8xPEDda22t/Yh+ s+rinXbuo6VpiewqSawgFMygz/bherH0QhQaDFWF9oD0lycMtEoIxAyFMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1mvzeenKT5Q4EBN7RZJpT6C79VMB8GA1UdIwQY MBaAFLW2MpclR2c98Pdaq8g5okIoVKIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xYzA2OGUtODg5Yy00MmJlLWJkOGIt YTZhYmIxMjE1ZGVjLzEvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8xYzA2OGUtODg5Yy00MmJlLWJkOGItYTZhYmIxMjE1ZGVj LzEvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZdyPrsH Mcota5dr5jgyNbSvGoHwXw4vf5OMFWdO3S29V+m9I97ywjuhL6z4XwiBNDcuoTj6 GJTGOxCuiporWKkCgt5Zj2WfqSmcOLrJPlU9GKgSYNUlsRDGmUTsn2UCdWMS8ZvT jVO0DsKSd0cbQCbPvWW0egLA0m+o92+YdsmeOJXbGfYnrEZXNsQ5hXYPCN9Oqp6t v03Y8Angxr8lR09TwnqmArvGUquCk/pRPwsa+8pu0i/X+qRs/PUbra+v+thfMXo0 u1v8B8xFGaOaewooGbm+y7GdDQh9H4CQT/TdaYXYhVtPn3HTxaGcsrrTEv4HU/gZ xcnrG2CakXTMdA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:02 2025 by rpki-client