This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft File: Ty_D6GA1oLjpOA_7I_I_V0MLess.mft (raw, json) Hash identifier: tpXNrDRnWguCpDkz30z+jR/7x0/nuTVeh7t7XyIpqno= Subject key identifier: 4D:9C:8A:3A:B0:F7:31:4F:0F:01:50:C1:5D:80:0D:50:E5:AA:80:DD Authority key identifier: 4F:2F:C3:E8:60:35:A0:B8:E9:38:0F:FB:23:F2:3F:57:43:0B:7A:CB Certificate issuer: /CN=4f2fc3e86035a0b8e9380ffb23f23f57430b7acb Certificate serial: 019AF23F70B4755740A4D797E83DE0133D8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft Manifest number: 0FD1 Signing time: Sat 06 Dec 2025 06:00:35 +0000 Manifest this update: Sat 06 Dec 2025 06:00:35 +0000 Manifest next update: Sun 07 Dec 2025 06:00:35 +0000 Files and hashes: 1: Ty_D6GA1oLjpOA_7I_I_V0MLess.crl (hash: ATmD6QWRay5SZIqKHhvPxdF+2u6xQzvxbAln19f1AIU=) 2: WjR-M02WnGrf1hvkkNo0bZEQvnQ.roa (hash: CW8wqMfi/RZSfPuGRw3DqaK3c0hn412Beo4u95KUkQA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:70:b4:75:57:40:a4:d7:97:e8:3d:e0:13:3d:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f2fc3e86035a0b8e9380ffb23f23f57430b7acb Validity Not Before: Dec 6 06:00:35 2025 GMT Not After : Dec 7 06:00:35 2025 GMT Subject: CN=4d9c8a3ab0f7314f0f0150c15d800d50e5aa80dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:56:59:67:0a:b3:1b:27:8c:6a:6a:62:26:a6: 44:36:2d:74:21:ca:33:08:8f:7c:cb:05:f9:c0:64: b3:f6:94:a6:d3:40:22:a8:5d:45:bf:5f:2b:5e:66: a6:b5:92:00:52:b9:b8:6f:38:0f:57:04:1b:3f:d6: 15:f6:5f:16:b3:c2:50:58:ed:39:62:79:6d:e3:9d: 7b:41:e4:0f:dd:ce:b4:18:95:35:93:d5:49:9f:fe: 69:67:14:20:5b:55:7e:46:e1:19:27:ad:10:98:d0: 2d:30:32:a2:b6:0e:48:26:a0:31:c5:7b:b0:c0:45: 3b:26:ff:f3:45:6a:3a:84:d2:7c:fe:1b:65:12:fc: e2:f3:be:df:3d:cc:41:c5:15:70:f4:9a:c3:4a:a8: 21:9b:45:d2:f0:94:f3:c2:10:cd:84:39:b1:14:53: 41:55:d1:cd:5c:e1:9f:b4:99:16:c0:9f:b1:97:0e: 51:2c:37:05:09:9c:4c:63:9f:3e:a6:59:ee:11:94: 26:14:8d:50:eb:f5:5b:29:de:30:0c:c0:3f:ba:31: 12:5e:92:8c:b5:21:af:b1:bb:02:c2:43:1b:35:5d: 9f:d6:a0:08:a7:fd:c2:76:0c:c2:a7:e7:2a:62:7e: 43:cd:94:75:8d:59:93:31:66:50:4e:6d:1f:cf:0a: 6c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:9C:8A:3A:B0:F7:31:4F:0F:01:50:C1:5D:80:0D:50:E5:AA:80:DD X509v3 Authority Key Identifier: keyid:4F:2F:C3:E8:60:35:A0:B8:E9:38:0F:FB:23:F2:3F:57:43:0B:7A:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty_D6GA1oLjpOA_7I_I_V0MLess.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e36e8-8fa6-4c17-a240-32e57bc5474b/1/Ty_D6GA1oLjpOA_7I_I_V0MLess.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:dd:be:51:dc:31:c6:4c:98:9d:47:02:27:7f:c8:40:40:1c: 68:87:a9:71:6a:93:80:f8:1c:a0:4a:76:17:8e:28:0d:52:bf: 08:33:66:41:53:a4:4d:30:91:1f:a7:73:0a:d2:ba:92:3c:82: ca:04:c3:eb:ef:f7:a2:1e:ac:54:b8:e8:2a:93:9f:8b:9e:06: cb:5d:70:d8:3e:7a:5b:a0:e4:41:cb:c6:bd:61:71:8a:d6:33: 0f:14:66:44:b7:4e:8d:d6:b2:04:ee:bd:b6:39:48:ab:94:e6: ac:46:91:82:12:b8:fb:b2:e2:63:a1:ae:e0:97:af:fa:e2:f5: a3:46:da:88:05:51:5d:16:30:69:cc:d5:91:ce:df:ae:a1:87: 27:b3:7c:75:bb:84:50:bc:45:ed:c1:e1:a7:9a:6c:0d:84:0e: 8f:ca:3e:67:1e:ff:fa:9a:ab:f1:a7:fa:39:9d:c7:9f:43:79: 69:20:bc:e6:b4:77:d4:d3:f9:46:0f:66:a9:d7:e6:23:ee:0a: 7f:b9:59:fd:b8:c6:f6:07:61:e2:e3:88:0a:c2:a0:38:af:ca: 2b:1f:bf:21:26:62:57:79:b2:a0:9c:1b:aa:17:af:ee:cf:e5: ea:96:33:3c:8b:9b:9a:8e:a8:b9:ce:e8:58:52:73:a9:f5:9b: 2e:3a:97:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3C0dVdApNeX6D3gEz2LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMmZjM2U4NjAzNWEwYjhlOTM4MGZmYjIzZjIzZjU3NDMw YjdhY2IwHhcNMjUxMjA2MDYwMDM1WhcNMjUxMjA3MDYwMDM1WjAzMTEwLwYDVQQD Eyg0ZDljOGEzYWIwZjczMTRmMGYwMTUwYzE1ZDgwMGQ1MGU1YWE4MGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71ZZZwqzGyeMampiJqZENi10Icoz CI98ywX5wGSz9pSm00AiqF1Fv18rXmamtZIAUrm4bzgPVwQbP9YV9l8Ws8JQWO05 Ynlt4517QeQP3c60GJU1k9VJn/5pZxQgW1V+RuEZJ60QmNAtMDKitg5IJqAxxXuw wEU7Jv/zRWo6hNJ8/htlEvzi877fPcxBxRVw9JrDSqghm0XS8JTzwhDNhDmxFFNB VdHNXOGftJkWwJ+xlw5RLDcFCZxMY58+plnuEZQmFI1Q6/VbKd4wDMA/ujESXpKM tSGvsbsCwkMbNV2f1qAIp/3CdgzCp+cqYn5DzZR1jVmTMWZQTm0fzwpsOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2cijqw9zFPDwFQwV2ADVDlqoDdMB8GA1UdIwQY MBaAFE8vw+hgNaC46TgP+yPyP1dDC3rLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHlfRDZHQTFvTGpwT0FfN0lfSV9WME1MZXNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8xZTM2ZTgtOGZhNi00YzE3LWEyNDAt MzJlNTdiYzU0NzRiLzEvVHlfRDZHQTFvTGpwT0FfN0lfSV9WME1MZXNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8xZTM2ZTgtOGZhNi00YzE3LWEyNDAtMzJlNTdiYzU0NzRi LzEvVHlfRDZHQTFvTGpwT0FfN0lfSV9WME1MZXNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABN2+Udwx xkyYnUcCJ3/IQEAcaIepcWqTgPgcoEp2F44oDVK/CDNmQVOkTTCRH6dzCtK6kjyC ygTD6+/3oh6sVLjoKpOfi54Gy11w2D56W6DkQcvGvWFxitYzDxRmRLdOjdayBO69 tjlIq5TmrEaRghK4+7LiY6Gu4Jev+uL1o0baiAVRXRYwaczVkc7frqGHJ7N8dbuE ULxF7cHhp5psDYQOj8o+Zx7/+pqr8af6OZ3Hn0N5aSC85rR31NP5Rg9mqdfmI+4K f7lZ/bjG9gdh4uOICsKgOK/KKx+/ISZiV3myoJwbqhev7s/l6pYzPIubmo6ouc7o WFJzqfWbLjqXhQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:31 2025 by rpki-client