This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft File: tYe8Eust4poQJrj1a-jUafL1jPM.mft (raw, json) Hash identifier: KEpHwYyFrVT8WACT5ZMEG8zVXo/Ug5JmLGGwt9vK4vA= Subject key identifier: A3:3D:53:BB:CD:30:28:0D:DE:5F:02:BB:94:8F:21:C4:1C:C1:93:B6 Authority key identifier: B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3 Certificate issuer: /CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3 Certificate serial: 019AF0BF604F2C43AA6B518561AF4D656F26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft Manifest number: 1760 Signing time: Fri 05 Dec 2025 23:01:05 +0000 Manifest this update: Fri 05 Dec 2025 23:01:05 +0000 Manifest next update: Sat 06 Dec 2025 23:01:05 +0000 Files and hashes: 1: SRbcYTDvBK2K42GBZURfc-9owLk.roa (hash: ou7G18aw8/QVFexo/f3lobAxj/5Hzi02IWmge/V7dxQ=) 2: tYe8Eust4poQJrj1a-jUafL1jPM.crl (hash: Oyj641aZoxd35lpJGS4E3oQdUkstShbktitbZVZAY2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:60:4f:2c:43:aa:6b:51:85:61:af:4d:65:6f:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3 Validity Not Before: Dec 5 23:01:05 2025 GMT Not After : Dec 6 23:01:05 2025 GMT Subject: CN=a33d53bbcd30280dde5f02bb948f21c41cc193b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b5:9a:84:c7:a3:04:af:aa:50:b0:46:e8:fa: e2:86:c6:7b:60:a4:2f:fa:2c:b7:0b:a3:1d:75:cb: ad:cf:b6:23:2b:00:3d:44:78:85:11:09:06:99:05: 36:30:97:2f:6d:3b:94:1c:9d:b9:8d:30:a0:69:f8: f8:97:ab:34:46:95:bd:ac:fd:3a:e5:74:13:9a:e3: 17:63:da:0e:94:68:08:fd:8f:6f:68:04:58:f9:f5: af:59:fd:50:7c:b8:f1:32:71:ea:d0:3b:5b:8b:17: a8:f2:a3:b9:f2:2a:ba:e6:82:40:25:e9:4c:2b:ce: c2:8a:4d:1e:48:77:96:31:14:e4:46:56:ad:54:6d: 52:e9:3f:dc:f0:e4:59:af:2c:7c:6b:ef:35:53:25: 60:44:84:0f:a1:65:2d:f9:62:a8:e3:42:9a:81:54: 74:6c:87:b8:d3:ea:d2:13:c6:dc:ee:5c:e7:4d:2d: 56:d4:93:2e:da:25:ee:d3:50:a1:bb:a1:5d:e4:25: 0d:fa:77:c9:4b:03:09:c6:07:a1:7e:d3:0b:d1:2c: 40:63:3c:d1:f5:1e:33:f1:dc:64:24:9c:b7:3f:b8: 3c:4c:8b:bc:b8:02:20:95:da:31:46:2f:1e:b1:b0: 1f:b9:8f:a7:b4:cb:39:68:5f:be:f6:62:6a:7a:d8: 81:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:3D:53:BB:CD:30:28:0D:DE:5F:02:BB:94:8F:21:C4:1C:C1:93:B6 X509v3 Authority Key Identifier: keyid:B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:18:76:9b:f1:a9:c0:fd:a5:10:a6:5c:57:c3:23:ce:19:92: 3b:fd:41:2b:b4:70:90:e1:48:3f:c1:55:07:5c:d6:cd:a9:3b: 94:a2:ed:78:44:3c:ed:45:42:70:e3:3b:2a:12:fe:6f:e1:d1: af:37:a7:48:10:7b:ec:4e:98:f5:ec:bf:df:95:02:91:fa:cf: 2a:6d:3f:0e:66:8f:83:b7:ac:b8:24:5e:d0:9c:7e:31:c6:b6: de:d2:45:e5:0a:71:6e:cc:a4:a7:89:23:e4:6a:53:7b:36:02: 04:42:af:20:9e:4b:e0:4b:55:80:6e:dd:5b:79:e6:c4:b8:4f: ed:51:98:1d:e2:3e:c4:6d:8a:3d:ca:4d:7b:92:92:1e:ab:96: fa:d4:c5:a9:69:35:60:37:e9:7a:f3:27:d3:2e:97:ab:5e:37: 48:9d:0a:db:b9:58:db:78:fb:58:0b:2f:1b:1b:73:93:0a:97: 4c:d0:89:81:56:c8:fd:07:97:4c:1e:2b:de:ac:4b:58:65:e6: c2:80:f5:f9:99:90:99:b2:fd:ed:3b:b6:27:80:f0:e3:6b:f8: a6:5e:94:b1:33:fe:af:43:05:ab:02:c3:ab:d0:c8:73:a9:0d: e4:9f:d8:c8:10:26:56:2e:6b:cd:b9:75:55:24:05:fd:38:a6: f3:34:9a:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv2BPLEOqa1GFYa9NZW8mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ODdiYzEyZWIyZGUyOWExMDI2YjhmNTZiZThkNDY5ZjJm NThjZjMwHhcNMjUxMjA1MjMwMTA1WhcNMjUxMjA2MjMwMTA1WjAzMTEwLwYDVQQD EyhhMzNkNTNiYmNkMzAyODBkZGU1ZjAyYmI5NDhmMjFjNDFjYzE5M2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7WahMejBK+qULBG6PrihsZ7YKQv +iy3C6Mddcutz7YjKwA9RHiFEQkGmQU2MJcvbTuUHJ25jTCgafj4l6s0RpW9rP06 5XQTmuMXY9oOlGgI/Y9vaARY+fWvWf1QfLjxMnHq0Dtbixeo8qO58iq65oJAJelM K87Cik0eSHeWMRTkRlatVG1S6T/c8ORZryx8a+81UyVgRIQPoWUt+WKo40KagVR0 bIe40+rSE8bc7lznTS1W1JMu2iXu01Chu6Fd5CUN+nfJSwMJxgehftML0SxAYzzR 9R4z8dxkJJy3P7g8TIu8uAIgldoxRi8esbAfuY+ntMs5aF++9mJqetiBDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKM9U7vNMCgN3l8Cu5SPIcQcwZO2MB8GA1UdIwQY MBaAFLWHvBLrLeKaECa49Wvo1Gny9YzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFllOEV1c3Q0cG9RSnJqMWEtalVhZkwxalBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80YzNlMTktYTQ4OS00ZTNhLWEzYTIt N2U1MmU3NDljM2FkLzEvdFllOEV1c3Q0cG9RSnJqMWEtalVhZkwxalBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi80YzNlMTktYTQ4OS00ZTNhLWEzYTItN2U1MmU3NDljM2Fk LzEvdFllOEV1c3Q0cG9RSnJqMWEtalVhZkwxalBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhh2m/Gp wP2lEKZcV8MjzhmSO/1BK7RwkOFIP8FVB1zWzak7lKLteEQ87UVCcOM7KhL+b+HR rzenSBB77E6Y9ey/35UCkfrPKm0/DmaPg7esuCRe0Jx+Mca23tJF5Qpxbsykp4kj 5GpTezYCBEKvIJ5L4EtVgG7dW3nmxLhP7VGYHeI+xG2KPcpNe5KSHquW+tTFqWk1 YDfpevMn0y6Xq143SJ0K27lY23j7WAsvGxtzkwqXTNCJgVbI/QeXTB4r3qxLWGXm woD1+ZmQmbL97Tu2J4Dw42v4pl6UsTP+r0MFqwLDq9DIc6kN5J/YyBAmVi5rzbl1 VSQF/Tim8zSa7w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:42 2025 by rpki-client