This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft File: tkslytxMSBZvqbvV3oZxwiBBW2c.mft (raw, json) Hash identifier: RsHmbZgu5/qhS7zM919ArmplMUhTHLTMv8C4ut1heQE= Subject key identifier: 23:6E:75:9E:08:F8:B7:6D:14:95:80:A8:CF:33:67:87:B0:D7:C5:B4 Authority key identifier: B6:4B:25:CA:DC:4C:48:16:6F:A9:BB:D5:DE:86:71:C2:20:41:5B:67 Certificate issuer: /CN=b64b25cadc4c48166fa9bbd5de8671c220415b67 Certificate serial: 019AF3898967BA1899BD58C7E112DEA9F1E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 12:01:08 +0000 Manifest this update: Sat 06 Dec 2025 12:01:08 +0000 Manifest next update: Sun 07 Dec 2025 12:01:08 +0000 Files and hashes: 1: aukRHD8l-CzLFavsBPTv5yM79Jw.roa (hash: BD1zrmwEMXI9wpH63Ap+J+Es9tKCXkCD5LLyNx9ue10=) 2: tkslytxMSBZvqbvV3oZxwiBBW2c.crl (hash: qQ4IF/Dc2DeLCclkBwbk6ihxelxI8BqV9fszMRVudCg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:89:67:ba:18:99:bd:58:c7:e1:12:de:a9:f1:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b64b25cadc4c48166fa9bbd5de8671c220415b67 Validity Not Before: Dec 6 12:01:08 2025 GMT Not After : Dec 7 12:01:08 2025 GMT Subject: CN=236e759e08f8b76d149580a8cf336787b0d7c5b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f3:3e:76:89:e9:d9:75:54:3c:84:ed:4e:fe: 35:47:f1:80:21:77:aa:0c:9d:f4:64:b8:a6:2a:6f: 84:19:07:d2:20:47:0b:56:c0:ee:7c:88:c3:48:77: 64:67:fd:0e:e8:c9:22:ed:93:3b:4f:f4:e8:25:5a: 68:9d:fd:6a:d9:52:be:f0:08:c0:b6:72:ae:3a:3b: f8:95:20:e0:24:ff:9f:23:4f:78:1e:4a:81:b9:8b: 5a:85:99:b5:ef:9b:37:a1:80:d2:00:9d:42:ad:37: 40:d9:78:c8:04:77:ef:12:97:97:80:df:a3:e0:45: 6a:8b:b6:67:16:84:42:24:06:bc:a1:b2:05:e9:77: b5:83:fd:e1:71:f7:55:5a:4a:6d:6e:3e:80:23:63: 08:d0:7b:f9:a6:0e:fd:43:b7:73:76:b0:a8:cb:c6: 3a:71:47:36:0e:c0:67:ed:1c:13:c2:19:f6:1e:50: 22:f6:5c:2d:b6:f7:07:46:d0:25:4c:7d:e0:e4:00: 33:66:b9:ec:69:2e:42:db:ef:91:34:24:af:cf:a8: ba:a6:d7:c4:e7:3f:08:36:57:9c:c5:f7:ba:83:30: 5e:62:ba:41:77:b1:93:ca:ae:ba:da:1d:f7:f7:2f: eb:38:85:dd:2b:52:bf:78:dc:13:ab:e9:11:6f:6d: 52:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:6E:75:9E:08:F8:B7:6D:14:95:80:A8:CF:33:67:87:B0:D7:C5:B4 X509v3 Authority Key Identifier: keyid:B6:4B:25:CA:DC:4C:48:16:6F:A9:BB:D5:DE:86:71:C2:20:41:5B:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:22:57:49:8b:98:3f:33:67:3a:ed:68:e6:03:f7:08:bc:f6: fa:a3:19:ba:04:36:9f:98:ee:f5:be:b7:f2:28:27:90:b0:55: 9b:4c:da:4f:f6:b8:0e:b5:43:3e:80:fc:cc:d4:60:e6:03:12: 9c:cc:f4:1f:a0:21:71:17:65:8e:b5:f4:06:dc:a2:4e:00:51: e2:3f:e3:42:94:86:f3:fd:61:b4:78:73:64:52:ba:c5:6b:94: f9:99:06:4c:7c:88:86:f7:99:2d:a2:3f:39:9c:f2:88:4b:50: bb:85:9b:35:13:2e:3e:49:3f:22:86:1e:ff:4e:93:16:96:2a: c1:36:17:89:0f:61:47:21:3f:6e:69:16:33:06:71:02:46:ac: 9a:a3:c3:55:8a:ef:70:e5:77:f0:53:8d:a7:16:7f:48:96:1f: 38:aa:7f:4f:a9:4e:cb:ca:08:93:9c:57:19:b5:ec:0c:2b:24: 7e:10:9c:02:02:ca:50:3a:99:23:1a:b3:f2:b3:aa:8d:c8:bb: 52:20:7d:1b:e2:f1:3f:0e:32:f1:ab:84:df:b4:b8:f1:15:87: 49:c3:ce:73:c2:62:45:22:6b:15:b1:61:17:90:f6:52:24:74: eb:2b:d1:80:24:be:6b:6f:77:d7:a2:22:72:64:6e:fc:1c:7d: 98:8f:f4:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziYlnuhiZvVjH4RLeqfHjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2NGIyNWNhZGM0YzQ4MTY2ZmE5YmJkNWRlODY3MWMyMjA0 MTViNjcwHhcNMjUxMjA2MTIwMTA4WhcNMjUxMjA3MTIwMTA4WjAzMTEwLwYDVQQD EygyMzZlNzU5ZTA4ZjhiNzZkMTQ5NTgwYThjZjMzNjc4N2IwZDdjNWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfM+donp2XVUPITtTv41R/GAIXeq DJ30ZLimKm+EGQfSIEcLVsDufIjDSHdkZ/0O6Mki7ZM7T/ToJVponf1q2VK+8AjA tnKuOjv4lSDgJP+fI094HkqBuYtahZm175s3oYDSAJ1CrTdA2XjIBHfvEpeXgN+j 4EVqi7ZnFoRCJAa8obIF6Xe1g/3hcfdVWkptbj6AI2MI0Hv5pg79Q7dzdrCoy8Y6 cUc2DsBn7RwTwhn2HlAi9lwttvcHRtAlTH3g5AAzZrnsaS5C2++RNCSvz6i6ptfE 5z8INlecxfe6gzBeYrpBd7GTyq662h339y/rOIXdK1K/eNwTq+kRb21ShQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNudZ4I+LdtFJWAqM8zZ4ew18W0MB8GA1UdIwQY MBaAFLZLJcrcTEgWb6m71d6GccIgQVtnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGtzbHl0eE1TQlp2cWJ2VjNvWnh3aUJCVzJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83ODBkODYtNGViZC00ZDZiLThkOGYt MGU0MTg2MWJlYjJmLzEvdGtzbHl0eE1TQlp2cWJ2VjNvWnh3aUJCVzJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS83ODBkODYtNGViZC00ZDZiLThkOGYtMGU0MTg2MWJlYjJm LzEvdGtzbHl0eE1TQlp2cWJ2VjNvWnh3aUJCVzJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZSJXSYuY PzNnOu1o5gP3CLz2+qMZugQ2n5ju9b638ignkLBVm0zaT/a4DrVDPoD8zNRg5gMS nMz0H6AhcRdljrX0BtyiTgBR4j/jQpSG8/1htHhzZFK6xWuU+ZkGTHyIhveZLaI/ OZzyiEtQu4WbNRMuPkk/IoYe/06TFpYqwTYXiQ9hRyE/bmkWMwZxAkasmqPDVYrv cOV38FONpxZ/SJYfOKp/T6lOy8oIk5xXGbXsDCskfhCcAgLKUDqZIxqz8rOqjci7 UiB9G+LxPw4y8auE37S48RWHScPOc8JiRSJrFbFhF5D2UiR06yvRgCS+a29316Ii cmRu/Bx9mI/0HA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:21:24 2025 by rpki-client