This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft File: TlqjjuoyTivXq2Qn51lqn6QdsOM.mft (raw, json) Hash identifier: QZB4xr7kHch1xVeTDYs+Myd64gfdFD7dJwa63mheIR8= Subject key identifier: C2:58:43:79:2E:16:B6:E9:21:21:24:07:3B:96:D8:E6:A9:D0:E8:D6 Authority key identifier: 4E:5A:A3:8E:EA:32:4E:2B:D7:AB:64:27:E7:59:6A:9F:A4:1D:B0:E3 Certificate issuer: /CN=4e5aa38eea324e2bd7ab6427e7596a9fa41db0e3 Certificate serial: 019AF12E587856505FD0324EF63AFFD7A54A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 01:02:17 +0000 Manifest this update: Sat 06 Dec 2025 01:02:17 +0000 Manifest next update: Sun 07 Dec 2025 01:02:17 +0000 Files and hashes: 1: GE0QPlemROw8Sbhr36vqfxvh7PA.roa (hash: +MZLj56FBFDLK0DCRu2QzT8kaBrzw0Ux8MFgsr68gZ8=) 2: TlqjjuoyTivXq2Qn51lqn6QdsOM.crl (hash: 7/dKxcZpa8/q77yml1bmP79c2Ks5ztQw2YIlh/eXoyg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.crl rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft rsync://rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:58:78:56:50:5f:d0:32:4e:f6:3a:ff:d7:a5:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e5aa38eea324e2bd7ab6427e7596a9fa41db0e3 Validity Not Before: Dec 6 01:02:17 2025 GMT Not After : Dec 7 01:02:17 2025 GMT Subject: CN=c25843792e16b6e9212124073b96d8e6a9d0e8d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6f:51:6b:64:bb:4b:c7:f2:48:17:4f:fc:2a: 37:1f:f4:f5:9a:9f:8e:69:d3:40:e7:a2:d3:e3:b4: e0:92:25:ca:8a:8e:8c:9c:f8:bf:bf:ac:fd:d0:35: 11:c5:5a:3a:be:70:9e:29:4b:58:ba:98:c6:58:6a: 93:62:83:06:9d:62:5d:26:a6:a4:01:3a:08:1c:5e: 87:be:d2:1c:9c:bf:e8:7e:e6:cd:15:d3:ed:a7:1d: b9:a8:ab:21:8f:d4:2a:84:28:fb:26:cd:af:6c:cb: d8:de:8c:c1:48:92:ec:a6:10:4b:ba:ac:f4:83:0c: 20:be:98:ac:83:5a:f5:29:fd:5a:a6:d8:4d:c2:35: 00:5a:f4:8e:87:9e:50:0d:cc:79:e9:f8:08:e2:bd: d6:3c:57:05:1d:16:2f:e4:80:26:89:2a:3b:b1:4c: 4a:2d:72:7d:4f:8f:29:45:19:c2:64:cc:62:c2:23: 10:f7:05:b5:e5:d0:8f:2e:52:7a:1e:d9:1a:3e:ab: 9c:16:ee:7a:3e:79:b2:00:d5:03:d2:80:36:42:1d: a1:40:23:62:20:ee:af:9e:85:73:3a:cf:60:13:71: 06:66:fc:28:93:ab:d7:cf:d9:4c:bd:5a:e4:bf:4d: b5:a3:80:a0:9c:9c:ec:c6:dc:ee:fc:b6:8e:ce:a7: 43:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:58:43:79:2E:16:B6:E9:21:21:24:07:3B:96:D8:E6:A9:D0:E8:D6 X509v3 Authority Key Identifier: keyid:4E:5A:A3:8E:EA:32:4E:2B:D7:AB:64:27:E7:59:6A:9F:A4:1D:B0:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlqjjuoyTivXq2Qn51lqn6QdsOM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/767119-28aa-4339-b741-4eeed8a4308b/1/TlqjjuoyTivXq2Qn51lqn6QdsOM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:7c:a0:26:9c:91:52:ac:a9:6f:cc:1d:19:40:44:1d:7b:85: 29:cf:8b:3b:1e:c9:f2:e3:cd:d4:84:71:5b:6f:d8:9f:a3:1f: 32:ac:c8:f0:15:f5:04:22:cd:55:c7:6e:26:5a:fb:7f:09:24: 43:25:7a:71:5d:6e:fe:38:3a:3b:b1:4a:b5:88:85:69:fd:de: f1:ee:8e:a8:8a:cd:6f:99:f7:ab:40:1f:03:db:c1:a8:54:cc: 40:a6:62:91:03:32:f8:c3:12:b4:53:d9:4f:c6:f3:32:de:78: a6:19:4e:b5:24:b6:59:a1:3b:49:9b:50:48:b6:1a:9e:07:28: 98:30:85:f3:9d:58:e6:7a:cf:4e:3e:b6:19:d3:06:99:4a:af: 97:72:e3:60:52:65:1d:c2:05:90:49:d2:49:46:de:34:be:09: 20:e6:3d:42:3b:1a:11:ea:d4:b9:40:55:f4:a8:2c:d7:ec:bc: 5f:6f:29:40:ff:15:63:2b:97:fc:f6:01:c6:79:58:53:7f:4f: 6c:e4:97:81:2a:ed:b9:be:f7:13:d6:b9:4d:7a:1e:bd:b4:19: 59:b9:cd:a8:8a:f2:45:34:2d:b6:9e:dc:ea:fa:9b:d3:25:31: c2:35:95:87:76:f7:3e:b7:f7:48:06:56:8d:2e:32:38:e9:a0: 24:a2:b6:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLlh4VlBf0DJO9jr/16VKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNWFhMzhlZWEzMjRlMmJkN2FiNjQyN2U3NTk2YTlmYTQx ZGIwZTMwHhcNMjUxMjA2MDEwMjE3WhcNMjUxMjA3MDEwMjE3WjAzMTEwLwYDVQQD EyhjMjU4NDM3OTJlMTZiNmU5MjEyMTI0MDczYjk2ZDhlNmE5ZDBlOGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA029Ra2S7S8fySBdP/Co3H/T1mp+O adNA56LT47TgkiXKio6MnPi/v6z90DURxVo6vnCeKUtYupjGWGqTYoMGnWJdJqak AToIHF6HvtIcnL/ofubNFdPtpx25qKshj9QqhCj7Js2vbMvY3ozBSJLsphBLuqz0 gwwgvpisg1r1Kf1apthNwjUAWvSOh55QDcx56fgI4r3WPFcFHRYv5IAmiSo7sUxK LXJ9T48pRRnCZMxiwiMQ9wW15dCPLlJ6HtkaPqucFu56PnmyANUD0oA2Qh2hQCNi IO6vnoVzOs9gE3EGZvwok6vXz9lMvVrkv021o4CgnJzsxtzu/LaOzqdDGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJYQ3kuFrbpISEkBzuW2Oap0OjWMB8GA1UdIwQY MBaAFE5ao47qMk4r16tkJ+dZap+kHbDjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGxxamp1b3lUaXZYcTJRbjUxbHFuNlFkc09NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83NjcxMTktMjhhYS00MzM5LWI3NDEt NGVlZWQ4YTQzMDhiLzEvVGxxamp1b3lUaXZYcTJRbjUxbHFuNlFkc09NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC83NjcxMTktMjhhYS00MzM5LWI3NDEtNGVlZWQ4YTQzMDhi LzEvVGxxamp1b3lUaXZYcTJRbjUxbHFuNlFkc09NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf3ygJpyR Uqypb8wdGUBEHXuFKc+LOx7J8uPN1IRxW2/Yn6MfMqzI8BX1BCLNVcduJlr7fwkk QyV6cV1u/jg6O7FKtYiFaf3e8e6OqIrNb5n3q0AfA9vBqFTMQKZikQMy+MMStFPZ T8bzMt54phlOtSS2WaE7SZtQSLYangcomDCF851Y5nrPTj62GdMGmUqvl3LjYFJl HcIFkEnSSUbeNL4JIOY9QjsaEerUuUBV9Kgs1+y8X28pQP8VYyuX/PYBxnlYU39P bOSXgSrtub73E9a5TXoevbQZWbnNqIryRTQttp7c6vqb0yUxwjWVh3b3Prf3SAZW jS4yOOmgJKK26w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:36:03 2025 by rpki-client