This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft File: TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft (raw, json) Hash identifier: 7V+fUpSckrE1+SED22DJeaqGXDNUZ+AVO0aeaEV7ve8= Subject key identifier: 37:75:C6:EB:75:09:99:AA:66:37:92:9E:C2:11:0C:B1:1F:65:4E:35 Authority key identifier: 4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30 Certificate issuer: /CN=4cbfd3e72d4a0396f95347336b42678f68c26430 Certificate serial: 019AF19ADD6D6E30BC0162B4FC0F48D421C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft Manifest number: 1770 Signing time: Sat 06 Dec 2025 03:00:49 +0000 Manifest this update: Sat 06 Dec 2025 03:00:49 +0000 Manifest next update: Sun 07 Dec 2025 03:00:49 +0000 Files and hashes: 1: IF7POYmH2s6_XyYc1YSgmRclBfU.roa (hash: vkWkPszh+VD/raa/NYL5vb45rCVCasfYYp1M1TBPCxY=) 2: JEYd_tTpdWRz3pFCNxB3FFwgT6Y.roa (hash: Cf4mCXc4k2uDXgbB44mtC61vJtEhAxi4CrnAuvkGzGk=) 3: TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl (hash: 5fvSt/ylW/jMQJCLHrdrwlHTNpUJ5F/Pf5QZt3OxVAA=) 4: aC7DUlOCYd4ZrOlGrZ-OMdQYyBE.roa (hash: gIed90T8oX8NcIFpqOYwduIUaAgChpM53a4QzPH0Bg8=) 5: e0P4zqHajvo1XtAyySozyOucDY0.roa (hash: uBYNOSzSg+Z80PXiuAGXfKeocd8WYWEry+iBGwq/1mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:dd:6d:6e:30:bc:01:62:b4:fc:0f:48:d4:21:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cbfd3e72d4a0396f95347336b42678f68c26430 Validity Not Before: Dec 6 03:00:49 2025 GMT Not After : Dec 7 03:00:49 2025 GMT Subject: CN=3775c6eb750999aa6637929ec2110cb11f654e35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0c:8e:80:52:90:13:37:6b:fb:b3:6a:c7:84: c9:4a:e3:93:41:57:80:a1:1b:1a:8a:c3:5b:fe:cf: f3:c2:c2:67:26:63:4a:45:4d:9a:50:85:e8:cf:09: e1:34:e3:c7:75:f9:3f:e4:54:c2:8e:67:73:c7:c9: 8d:5a:f7:68:67:e0:c5:53:93:7a:0c:22:cd:c2:ab: 29:94:9e:60:40:aa:b1:dd:b4:bd:0d:71:9e:eb:f4: 0d:dd:ea:6e:30:5b:6f:46:76:c6:06:bc:79:04:eb: 19:2b:5e:27:eb:45:9e:fc:9c:d0:95:2f:1c:4a:1e: f6:ed:a1:e7:fa:cb:cd:0a:ba:9b:da:be:81:6b:ab: 26:5c:24:26:ab:61:eb:87:6b:63:7c:9e:36:6c:46: c3:1c:a3:45:a7:de:f2:37:5f:cb:83:6e:4e:5a:5e: df:6f:03:01:77:af:1b:a1:f4:ce:31:17:f3:92:e1: f3:73:d0:82:71:ca:5c:52:14:b2:93:32:28:90:e3: fa:5c:9c:94:e3:ba:06:60:3a:f2:da:3c:83:9d:2c: a3:02:37:76:49:c9:13:7c:72:ea:27:da:9e:e0:80: 0d:91:2d:60:04:4a:ea:89:b9:e5:f0:2f:ac:51:af: 96:59:17:b3:e8:4c:73:4c:c7:db:9a:9d:bc:2d:66: 13:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:75:C6:EB:75:09:99:AA:66:37:92:9E:C2:11:0C:B1:1F:65:4E:35 X509v3 Authority Key Identifier: keyid:4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:3c:2a:a8:20:cb:8a:79:5c:d6:87:08:87:29:fd:69:4a:60: ce:a5:e2:5f:b2:d7:0a:51:3d:71:aa:99:f3:fc:c7:96:8d:c8: d9:6c:dd:79:11:af:ab:08:08:59:7d:61:97:b1:18:4f:0a:6d: 60:01:d5:a6:6d:5c:5a:ad:5a:63:1d:fb:ee:1c:5e:f1:d9:5a: 88:5f:3a:9e:b2:e9:b2:51:be:52:80:f8:34:ad:61:de:7d:d2: 0a:13:c7:1c:cd:3d:6a:64:47:01:26:20:7d:cf:2c:b4:95:7f: 97:57:18:a7:26:4d:a1:df:a1:f8:a5:ee:cd:56:1e:2b:86:05: fc:d0:36:ed:47:89:58:3e:78:29:74:0f:5d:6a:ce:3d:c3:18: 3b:18:c0:09:d7:d0:24:cb:ff:27:29:de:7b:67:9e:8f:23:0f: 5b:f1:0d:ca:e5:23:b4:b8:79:a9:ca:0e:6a:6c:14:5b:df:9c: d2:57:24:73:3a:bb:04:7e:39:22:2d:83:6d:5f:d3:36:24:81: af:7e:63:0f:50:08:5f:ac:d7:81:80:8c:f0:13:e4:41:28:31: ec:b7:a1:3c:93:64:1a:51:62:fa:da:c9:81:9b:3e:34:b8:ed: f7:4f:61:75:8d:33:dc:22:da:27:92:14:51:25:1a:56:29:fc: 39:c6:8c:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmt1tbjC8AWK0/A9I1CHBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYmZkM2U3MmQ0YTAzOTZmOTUzNDczMzZiNDI2NzhmNjhj MjY0MzAwHhcNMjUxMjA2MDMwMDQ5WhcNMjUxMjA3MDMwMDQ5WjAzMTEwLwYDVQQD EygzNzc1YzZlYjc1MDk5OWFhNjYzNzkyOWVjMjExMGNiMTFmNjU0ZTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQyOgFKQEzdr+7Nqx4TJSuOTQVeA oRsaisNb/s/zwsJnJmNKRU2aUIXozwnhNOPHdfk/5FTCjmdzx8mNWvdoZ+DFU5N6 DCLNwqsplJ5gQKqx3bS9DXGe6/QN3epuMFtvRnbGBrx5BOsZK14n60We/JzQlS8c Sh727aHn+svNCrqb2r6Ba6smXCQmq2Hrh2tjfJ42bEbDHKNFp97yN1/Lg25OWl7f bwMBd68bofTOMRfzkuHzc9CCccpcUhSykzIokOP6XJyU47oGYDry2jyDnSyjAjd2 SckTfHLqJ9qe4IANkS1gBErqibnl8C+sUa+WWRez6ExzTMfbmp28LWYTnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDd1xut1CZmqZjeSnsIRDLEfZU41MB8GA1UdIwQY MBaAFEy/0+ctSgOW+VNHM2tCZ49owmQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVExfVDV5MUtBNWI1VTBjemEwSm5qMmpDWkRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iNTczM2ItMzg5MS00NDliLTk5NTAt ZmY2MGUyMThlZDQxLzEvVExfVDV5MUtBNWI1VTBjemEwSm5qMmpDWkRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iNTczM2ItMzg5MS00NDliLTk5NTAtZmY2MGUyMThlZDQx LzEvVExfVDV5MUtBNWI1VTBjemEwSm5qMmpDWkRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjwqqCDL inlc1ocIhyn9aUpgzqXiX7LXClE9caqZ8/zHlo3I2WzdeRGvqwgIWX1hl7EYTwpt YAHVpm1cWq1aYx377hxe8dlaiF86nrLpslG+UoD4NK1h3n3SChPHHM09amRHASYg fc8stJV/l1cYpyZNod+h+KXuzVYeK4YF/NA27UeJWD54KXQPXWrOPcMYOxjACdfQ JMv/Jynee2eejyMPW/ENyuUjtLh5qcoOamwUW9+c0lckczq7BH45Ii2DbV/TNiSB r35jD1AIX6zXgYCM8BPkQSgx7LehPJNkGlFi+trJgZs+NLjt909hdY0z3CLaJ5IU USUaVin8OcaMnA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:43 2025 by rpki-client