This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft File: TlyvXlSV9UsDnx0PJHERJGfJeRw.mft (raw, json) Hash identifier: VkfmgwDdIL5kXwO92tm0b+4p8gzxWlALFy8YkdFC+Qw= Subject key identifier: 3F:81:DC:0D:4E:E5:71:41:9D:AF:1A:25:B6:FE:4E:32:3B:CC:18:62 Authority key identifier: 4E:5C:AF:5E:54:95:F5:4B:03:9F:1D:0F:24:71:11:24:67:C9:79:1C Certificate issuer: /CN=4e5caf5e5495f54b039f1d0f2471112467c9791c Certificate serial: 019AF0BF3221CC342C0E90BE26F22C45597B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft Manifest number: 1763 Signing time: Fri 05 Dec 2025 23:00:53 +0000 Manifest this update: Fri 05 Dec 2025 23:00:53 +0000 Manifest next update: Sat 06 Dec 2025 23:00:53 +0000 Files and hashes: 1: Sjk-hMVz5Yq15653m82LHzN2q2c.roa (hash: v2IafRkq9Sg922Tj4NY8dbGZtPOD35/xpm6wAYKPODI=) 2: TlyvXlSV9UsDnx0PJHERJGfJeRw.crl (hash: fcIUbTccB+GlyuXZ24KJKg2ew/GO/oxBqQ/4svH3/7c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.crl rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:32:21:cc:34:2c:0e:90:be:26:f2:2c:45:59:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e5caf5e5495f54b039f1d0f2471112467c9791c Validity Not Before: Dec 5 23:00:53 2025 GMT Not After : Dec 6 23:00:53 2025 GMT Subject: CN=3f81dc0d4ee571419daf1a25b6fe4e323bcc1862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:10:00:45:97:de:0a:bc:dd:83:46:1f:11:28: 9d:6f:ff:22:16:94:2c:db:e5:c2:52:fe:0d:e0:92: f8:66:e3:55:19:8e:83:3b:a8:8b:91:b0:08:df:6f: b0:a3:15:ab:ca:07:6b:cd:59:01:69:25:39:a7:d6: 3e:c4:63:4d:ca:c9:2f:47:dc:aa:6c:e7:03:ad:b0: db:bc:1d:60:67:c6:f6:9d:b6:68:8d:50:be:a9:31: bb:ab:d4:d8:50:35:07:f4:db:9e:2d:91:3c:28:83: 4c:88:14:c8:79:3d:1c:66:ab:78:bd:b0:32:1b:b5: 5d:bc:4b:2b:f2:80:a6:ee:01:66:c1:6f:2f:6f:a5: 35:3a:d6:ec:44:51:0f:8d:aa:e1:b0:bd:e8:26:21: e1:bc:16:cd:a4:21:50:1f:9a:3e:3e:3b:7b:1f:02: 44:c7:b9:08:2c:1a:74:72:a5:d5:fd:39:c9:fc:b2: 4e:ca:1d:2a:81:9c:f1:92:63:a5:e0:a5:f6:b4:3f: d0:01:b7:e5:77:09:ac:6a:8c:ba:1f:5e:00:7a:4a: 9a:22:90:64:e9:b2:72:40:0f:c6:fb:3d:8a:f1:3a: d6:ad:36:f7:16:ff:0d:ba:6c:68:2d:99:f6:a9:88: f1:e9:0a:58:b0:05:4d:09:4d:75:77:d4:a1:25:85: 4b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:81:DC:0D:4E:E5:71:41:9D:AF:1A:25:B6:FE:4E:32:3B:CC:18:62 X509v3 Authority Key Identifier: keyid:4E:5C:AF:5E:54:95:F5:4B:03:9F:1D:0F:24:71:11:24:67:C9:79:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:91:0d:f8:19:cb:2c:12:b5:0e:23:4f:1b:e5:f3:b2:ac:82: ea:f3:63:2e:a4:72:59:10:76:dc:61:a5:ef:2d:52:40:5b:4e: f3:77:1c:e9:27:87:00:a4:47:4f:18:13:86:56:7a:7f:fd:51: 91:40:b4:29:cc:da:7e:21:0a:8d:a6:96:7a:39:92:27:f1:6a: fe:04:89:c9:64:c7:5c:89:ef:16:aa:46:a5:d7:88:6b:73:92: f8:38:fb:6d:e8:96:97:10:95:43:38:3c:a9:78:61:93:15:31: dc:f3:0b:ee:64:65:40:e5:84:21:30:32:e6:a5:3f:02:e1:64: 95:85:75:8b:e3:01:d8:38:fc:57:63:e3:bc:47:09:8b:2d:0c: a8:3e:b2:23:f3:3c:e3:3e:f7:56:bf:2a:fb:02:f2:aa:28:a4: 8c:65:b6:48:36:26:bc:67:2b:a0:aa:23:d7:e3:14:a9:07:8b: 20:88:d6:16:e4:76:a8:ee:8b:f0:27:fd:0b:2e:9f:ba:26:48: 4d:88:f0:57:eb:ea:82:b3:a0:de:6f:fc:12:bc:aa:55:09:d9: f3:d9:3a:29:7c:70:a9:c7:c5:d4:c9:9e:d6:fe:e9:5c:41:b9: ae:fa:03:6a:e1:bb:d0:ab:a6:4b:2a:17:47:87:90:c4:9f:2e: e3:49:4c:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvzIhzDQsDpC+JvIsRVl7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNWNhZjVlNTQ5NWY1NGIwMzlmMWQwZjI0NzExMTI0Njdj OTc5MWMwHhcNMjUxMjA1MjMwMDUzWhcNMjUxMjA2MjMwMDUzWjAzMTEwLwYDVQQD EygzZjgxZGMwZDRlZTU3MTQxOWRhZjFhMjViNmZlNGUzMjNiY2MxODYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohAARZfeCrzdg0YfESidb/8iFpQs 2+XCUv4N4JL4ZuNVGY6DO6iLkbAI32+woxWrygdrzVkBaSU5p9Y+xGNNyskvR9yq bOcDrbDbvB1gZ8b2nbZojVC+qTG7q9TYUDUH9NueLZE8KINMiBTIeT0cZqt4vbAy G7VdvEsr8oCm7gFmwW8vb6U1OtbsRFEPjarhsL3oJiHhvBbNpCFQH5o+Pjt7HwJE x7kILBp0cqXV/TnJ/LJOyh0qgZzxkmOl4KX2tD/QAbfldwmsaoy6H14AekqaIpBk 6bJyQA/G+z2K8TrWrTb3Fv8NumxoLZn2qYjx6QpYsAVNCU11d9ShJYVLxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+B3A1O5XFBna8aJbb+TjI7zBhiMB8GA1UdIwQY MBaAFE5cr15UlfVLA58dDyRxESRnyXkcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGx5dlhsU1Y5VXNEbngwUEpIRVJKR2ZKZVJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9mODk2ODUtMTE3NC00NWQ1LWE1ZGMt MDlkYjU3NDY5YmI4LzEvVGx5dlhsU1Y5VXNEbngwUEpIRVJKR2ZKZVJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9mODk2ODUtMTE3NC00NWQ1LWE1ZGMtMDlkYjU3NDY5YmI4 LzEvVGx5dlhsU1Y5VXNEbngwUEpIRVJKR2ZKZVJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUpEN+BnL LBK1DiNPG+XzsqyC6vNjLqRyWRB23GGl7y1SQFtO83cc6SeHAKRHTxgThlZ6f/1R kUC0KczafiEKjaaWejmSJ/Fq/gSJyWTHXInvFqpGpdeIa3OS+Dj7beiWlxCVQzg8 qXhhkxUx3PML7mRlQOWEITAy5qU/AuFklYV1i+MB2Dj8V2PjvEcJiy0MqD6yI/M8 4z73Vr8q+wLyqiikjGW2SDYmvGcroKoj1+MUqQeLIIjWFuR2qO6L8Cf9Cy6fuiZI TYjwV+vqgrOg3m/8EryqVQnZ89k6KXxwqcfF1Mme1v7pXEG5rvoDauG70KumSyoX R4eQxJ8u40lMAg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:26 2025 by rpki-client