This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft File: tkslytxMSBZvqbvV3oZxwiBBW2c.mft (raw, json) Hash identifier: CLLGxl9wXi4UjcDZ2Zb8434RSmhlwE5HLwO5yvkq38E= Subject key identifier: F3:F5:B6:FA:2C:8E:AF:42:74:59:81:10:98:01:8E:EF:E7:96:24:84 Authority key identifier: B6:4B:25:CA:DC:4C:48:16:6F:A9:BB:D5:DE:86:71:C2:20:41:5B:67 Certificate issuer: /CN=b64b25cadc4c48166fa9bbd5de8671c220415b67 Certificate serial: 019B2F67CDED878EA43A78E66A03B85D1849 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 03:01:30 +0000 Manifest this update: Thu 18 Dec 2025 03:01:30 +0000 Manifest next update: Fri 19 Dec 2025 03:01:30 +0000 Files and hashes: 1: aukRHD8l-CzLFavsBPTv5yM79Jw.roa (hash: BD1zrmwEMXI9wpH63Ap+J+Es9tKCXkCD5LLyNx9ue10=) 2: tkslytxMSBZvqbvV3oZxwiBBW2c.crl (hash: 5MhD72DiBo3m+uOCYLPpnMUxK1mAjPrrNR+GlfDeN/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:cd:ed:87:8e:a4:3a:78:e6:6a:03:b8:5d:18:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b64b25cadc4c48166fa9bbd5de8671c220415b67 Validity Not Before: Dec 18 03:01:30 2025 GMT Not After : Dec 19 03:01:30 2025 GMT Subject: CN=f3f5b6fa2c8eaf427459811098018eefe7962484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:59:41:c8:c1:b0:de:5c:97:11:8d:23:d7:26: df:89:e4:60:06:6e:45:e0:f1:44:24:28:9c:dd:2b: 22:36:ee:a8:b7:a9:0d:2f:bb:dd:1f:fd:b0:2b:e4: 10:4b:21:59:8b:8b:b8:82:db:00:2e:d8:69:aa:89: 35:c9:81:ae:a0:59:a1:10:f5:1b:7a:b4:c8:74:6e: 2f:14:a4:49:6e:26:1a:b5:c6:45:83:3d:a1:cd:aa: 03:33:cc:f0:2e:05:1a:78:67:77:c6:ce:f5:9d:ad: 83:63:5d:86:33:db:84:93:24:f8:b9:54:5f:dd:c8: 56:fa:b2:db:a1:ef:3d:57:a8:f5:03:f4:cb:16:8e: 0f:ab:3a:80:f3:c4:23:96:5b:87:ab:e3:03:33:d9: df:e9:a8:3d:fa:c2:69:8d:ef:1d:b6:16:2b:1f:3d: 07:93:1d:91:1c:1d:32:39:8d:b5:61:07:e3:98:55: 4d:a7:47:0c:50:b6:1d:fd:ee:0a:7c:70:3a:83:d8: 19:5a:89:21:b7:b9:30:99:11:ba:cb:72:ba:3b:98: 99:aa:0a:81:11:24:60:5b:3c:7e:f9:89:cb:cc:04: ed:e1:6b:88:16:ec:6a:be:52:0c:ae:1e:64:62:6b: 90:02:35:79:29:eb:b8:48:94:37:b5:29:47:22:c2: ee:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F5:B6:FA:2C:8E:AF:42:74:59:81:10:98:01:8E:EF:E7:96:24:84 X509v3 Authority Key Identifier: keyid:B6:4B:25:CA:DC:4C:48:16:6F:A9:BB:D5:DE:86:71:C2:20:41:5B:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkslytxMSBZvqbvV3oZxwiBBW2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/780d86-4ebd-4d6b-8d8f-0e41861beb2f/1/tkslytxMSBZvqbvV3oZxwiBBW2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:fc:e0:ed:29:de:8b:94:28:27:33:50:49:a7:91:73:a9:24: f3:8e:80:15:bb:41:df:87:56:dd:5a:91:3d:00:4e:90:07:a2: 24:c5:44:ae:f2:c0:46:02:6f:9e:82:dd:93:61:a4:2b:6e:aa: 67:a3:f6:6d:f9:7c:4f:3a:41:94:0b:ed:eb:25:a9:a7:22:e4: 09:7a:04:6c:3e:20:33:9c:79:fc:f5:40:e1:af:82:61:aa:41: 24:93:cf:b2:cc:07:a4:2c:e5:a8:ef:f1:98:3d:4c:6d:8c:1c: a6:40:cd:83:3c:f9:93:fc:e7:3f:5e:de:64:7e:9b:b2:b5:9f: d2:f4:d2:0f:29:4d:c7:de:b6:b8:5c:59:8a:4b:1e:a6:72:35: 3b:d5:a1:b5:6f:5c:8c:1c:72:54:e1:55:e5:1d:22:73:5e:ab: 3c:9f:e8:36:b1:3e:28:1e:56:23:21:fa:e0:3b:af:a8:4d:cc: 15:dd:d3:3b:da:95:0a:af:50:8a:fb:8f:f8:59:07:11:cd:2a: 79:42:80:18:bb:60:a5:be:4d:e1:85:ea:37:bc:ea:86:ec:f4: e9:56:59:61:43:26:9d:c2:9b:85:7d:cd:a8:55:a8:51:57:1c: 87:11:86:d6:29:c5:29:55:fe:cb:6e:e0:34:73:66:7a:da:e4: 9d:10:80:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ83th46kOnjmagO4XRhJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2NGIyNWNhZGM0YzQ4MTY2ZmE5YmJkNWRlODY3MWMyMjA0 MTViNjcwHhcNMjUxMjE4MDMwMTMwWhcNMjUxMjE5MDMwMTMwWjAzMTEwLwYDVQQD EyhmM2Y1YjZmYTJjOGVhZjQyNzQ1OTgxMTA5ODAxOGVlZmU3OTYyNDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6llByMGw3lyXEY0j1ybfieRgBm5F 4PFEJCic3SsiNu6ot6kNL7vdH/2wK+QQSyFZi4u4gtsALthpqok1yYGuoFmhEPUb erTIdG4vFKRJbiYatcZFgz2hzaoDM8zwLgUaeGd3xs71na2DY12GM9uEkyT4uVRf 3chW+rLboe89V6j1A/TLFo4PqzqA88QjlluHq+MDM9nf6ag9+sJpje8dthYrHz0H kx2RHB0yOY21YQfjmFVNp0cMULYd/e4KfHA6g9gZWokht7kwmRG6y3K6O5iZqgqB ESRgWzx++YnLzATt4WuIFuxqvlIMrh5kYmuQAjV5Keu4SJQ3tSlHIsLu5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPP1tvosjq9CdFmBEJgBju/nliSEMB8GA1UdIwQY MBaAFLZLJcrcTEgWb6m71d6GccIgQVtnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGtzbHl0eE1TQlp2cWJ2VjNvWnh3aUJCVzJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83ODBkODYtNGViZC00ZDZiLThkOGYt MGU0MTg2MWJlYjJmLzEvdGtzbHl0eE1TQlp2cWJ2VjNvWnh3aUJCVzJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS83ODBkODYtNGViZC00ZDZiLThkOGYtMGU0MTg2MWJlYjJm LzEvdGtzbHl0eE1TQlp2cWJ2VjNvWnh3aUJCVzJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPzg7Sne i5QoJzNQSaeRc6kk846AFbtB34dW3VqRPQBOkAeiJMVErvLARgJvnoLdk2GkK26q Z6P2bfl8TzpBlAvt6yWppyLkCXoEbD4gM5x5/PVA4a+CYapBJJPPsswHpCzlqO/x mD1MbYwcpkDNgzz5k/znP17eZH6bsrWf0vTSDylNx962uFxZiksepnI1O9WhtW9c jBxyVOFV5R0ic16rPJ/oNrE+KB5WIyH64DuvqE3MFd3TO9qVCq9QivuP+FkHEc0q eUKAGLtgpb5N4YXqN7zqhuz06VZZYUMmncKbhX3NqFWoUVcchxGG1inFKVX+y27g NHNmetrknRCAAQ== -----END CERTIFICATE-----Generated at Thu Dec 18 07:42:08 2025 by rpki-client