This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft File: TyESy_bcyN00ROTs7ShEVzEPcNI.mft (raw, json) Hash identifier: DcfHBnoY08yj4eh3MBaz16WA07PCw8B7RYXnDKB2vUk= Subject key identifier: 82:C3:99:E4:15:62:D3:2F:40:AB:39:62:0A:EA:02:7C:16:F3:BD:62 Authority key identifier: 4F:21:12:CB:F6:DC:C8:DD:34:44:E4:EC:ED:28:44:57:31:0F:70:D2 Certificate issuer: /CN=4f2112cbf6dcc8dd3444e4eced284457310f70d2 Certificate serial: 019AF23FD0DE3F21E8AA756D3155F6DC8934 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft Manifest number: 0C8F Signing time: Sat 06 Dec 2025 06:00:59 +0000 Manifest this update: Sat 06 Dec 2025 06:00:59 +0000 Manifest next update: Sun 07 Dec 2025 06:00:59 +0000 Files and hashes: 1: TyESy_bcyN00ROTs7ShEVzEPcNI.crl (hash: e+yqJ/6cJ6oBzrqaaPX9FLSQ2LfLPScPBb84mJZlJpc=) 2: zMi5Kc-tpOMXc_ZTzrnudYI3V1w.roa (hash: gNyfXx018kULloOwGFLfmzefXCbqCOiY4gpRitRdbz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d0:de:3f:21:e8:aa:75:6d:31:55:f6:dc:89:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f2112cbf6dcc8dd3444e4eced284457310f70d2 Validity Not Before: Dec 6 06:00:59 2025 GMT Not After : Dec 7 06:00:59 2025 GMT Subject: CN=82c399e41562d32f40ab39620aea027c16f3bd62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fa:e5:c4:91:66:50:d7:fb:2f:fb:9f:c9:6e: b3:31:c5:23:58:5a:2b:a2:e9:9a:b0:f7:05:c4:22: 1a:cf:ff:d3:cd:4a:d5:79:d4:35:d2:d9:3d:09:5e: 1a:d2:ea:92:14:fa:84:8f:23:de:a7:30:fc:8d:e9: c1:76:70:99:9b:41:03:1c:4b:b7:4d:e5:d7:e4:c6: 6a:10:55:8e:f9:0b:58:85:6d:fc:70:05:fe:a4:98: c5:61:9c:2d:9f:78:c0:34:e6:62:06:a3:69:f3:24: 99:67:f5:06:d7:a5:8e:79:23:22:40:ff:16:5c:80: b3:9d:38:6a:79:36:0a:da:1c:e4:43:a3:95:20:72: 45:3c:e9:ae:f5:a5:9c:29:e9:c6:86:e7:75:e6:90: 62:3a:fa:43:ef:c8:73:9b:99:3a:e3:15:e1:dd:d1: ba:48:f9:d6:ce:56:8e:61:3b:62:30:dd:f2:7b:9e: 3d:ac:88:e3:91:32:a6:54:a3:27:22:73:26:8f:e6: 8a:1b:f2:d1:91:1f:d7:5d:e3:ca:83:07:79:15:f9: db:eb:ed:c7:22:27:3b:1c:b7:87:e3:0d:bc:45:d2: fb:f1:d2:15:87:c6:d9:03:ba:87:60:6a:8f:bd:3e: 72:c8:f4:61:f7:dc:ab:5d:48:3c:53:29:0b:24:1d: cf:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C3:99:E4:15:62:D3:2F:40:AB:39:62:0A:EA:02:7C:16:F3:BD:62 X509v3 Authority Key Identifier: keyid:4F:21:12:CB:F6:DC:C8:DD:34:44:E4:EC:ED:28:44:57:31:0F:70:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TyESy_bcyN00ROTs7ShEVzEPcNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/e080b6-4e09-42d8-b91c-b2798c1a0327/1/TyESy_bcyN00ROTs7ShEVzEPcNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:95:a9:f8:03:9c:67:dd:6b:cf:ad:6e:08:78:12:23:56:47: 4d:14:0e:d2:c1:b6:38:bc:44:a5:99:c1:0a:06:5b:5b:d6:09: d1:5d:ab:b9:c1:33:5c:cc:63:4c:73:6c:e9:b6:87:14:be:80: 02:67:e5:d8:e7:74:55:b8:ac:4c:f5:9b:db:88:ba:d2:b5:58: 2a:ac:02:bf:71:09:d6:44:1f:35:e0:86:86:30:6c:e0:01:24: 48:c6:9a:1e:2e:25:c2:f2:d3:11:d7:ca:17:b3:f8:ae:6b:d5: 06:79:0d:5d:ee:2e:66:eb:b1:45:47:8a:eb:99:a0:cc:74:24: 36:1e:66:7c:b3:ec:91:7c:77:66:97:1a:f3:19:8e:01:1b:71: 64:36:ab:bc:c5:60:4c:94:e8:e0:80:43:bc:1e:6f:b5:2e:e6: a1:d3:ff:4f:08:0e:ce:79:cf:90:0d:06:74:ed:4e:1e:df:34: 3f:c5:7c:25:49:7d:dc:c0:34:22:e2:aa:ae:fc:15:18:99:31: bb:e7:7f:40:95:19:3d:a0:3d:f8:80:1a:21:8c:91:d3:71:b6: 29:b7:dc:bf:55:64:d7:68:a9:c2:4f:a2:b6:0b:61:c1:d8:6d: 88:93:88:e0:0b:83:5e:f1:f9:a6:a6:d8:bb:1d:64:76:d9:f0: 83:8f:f5:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9DePyHoqnVtMVX23Ik0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMjExMmNiZjZkY2M4ZGQzNDQ0ZTRlY2VkMjg0NDU3MzEw ZjcwZDIwHhcNMjUxMjA2MDYwMDU5WhcNMjUxMjA3MDYwMDU5WjAzMTEwLwYDVQQD Eyg4MmMzOTllNDE1NjJkMzJmNDBhYjM5NjIwYWVhMDI3YzE2ZjNiZDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvrlxJFmUNf7L/ufyW6zMcUjWFor oumasPcFxCIaz//TzUrVedQ10tk9CV4a0uqSFPqEjyPepzD8jenBdnCZm0EDHEu3 TeXX5MZqEFWO+QtYhW38cAX+pJjFYZwtn3jANOZiBqNp8ySZZ/UG16WOeSMiQP8W XICznThqeTYK2hzkQ6OVIHJFPOmu9aWcKenGhud15pBiOvpD78hzm5k64xXh3dG6 SPnWzlaOYTtiMN3ye549rIjjkTKmVKMnInMmj+aKG/LRkR/XXePKgwd5Ffnb6+3H Iic7HLeH4w28RdL78dIVh8bZA7qHYGqPvT5yyPRh99yrXUg8UykLJB3PEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILDmeQVYtMvQKs5YgrqAnwW871iMB8GA1UdIwQY MBaAFE8hEsv23MjdNETk7O0oRFcxD3DSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHlFU3lfYmN5TjAwUk9UczdTaEVWekVQY05JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9lMDgwYjYtNGUwOS00MmQ4LWI5MWMt YjI3OThjMWEwMzI3LzEvVHlFU3lfYmN5TjAwUk9UczdTaEVWekVQY05JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9lMDgwYjYtNGUwOS00MmQ4LWI5MWMtYjI3OThjMWEwMzI3 LzEvVHlFU3lfYmN5TjAwUk9UczdTaEVWekVQY05JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5Wp+AOc Z91rz61uCHgSI1ZHTRQO0sG2OLxEpZnBCgZbW9YJ0V2rucEzXMxjTHNs6baHFL6A Amfl2Od0VbisTPWb24i60rVYKqwCv3EJ1kQfNeCGhjBs4AEkSMaaHi4lwvLTEdfK F7P4rmvVBnkNXe4uZuuxRUeK65mgzHQkNh5mfLPskXx3Zpca8xmOARtxZDarvMVg TJTo4IBDvB5vtS7modP/TwgOznnPkA0GdO1OHt80P8V8JUl93MA0IuKqrvwVGJkx u+d/QJUZPaA9+IAaIYyR03G2Kbfcv1Vk12ipwk+itgthwdhtiJOI4AuDXvH5pqbY ux1kdtnwg4/1rg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:01:05 2025 by rpki-client