This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft File: tlkY8l1WAA-IHamN4yPZGgZOAIc.mft (raw, json) Hash identifier: tYeKH7BRBSAAwlMrgC4i2//vYQMcL0H5WPqEwmZ34mo= Subject key identifier: 21:54:12:BA:83:ED:7C:75:05:EE:47:48:44:E9:E4:B9:6C:9D:18:76 Authority key identifier: B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87 Certificate issuer: /CN=b65918f25d56000f881da98de323d91a064e0087 Certificate serial: 019AF12D9712023032894A22DA7CD64E072C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 01:01:27 +0000 Manifest this update: Sat 06 Dec 2025 01:01:27 +0000 Manifest next update: Sun 07 Dec 2025 01:01:27 +0000 Files and hashes: 1: 3H05rdAgVKWjnmulxpd_QVny7EM.roa (hash: XNOX3ZfUh5A8jT1DxzFm+Aa/cbH+g3ioLrsV3E7LshQ=) 2: _TL6mTZXcLYAPXlu1htfIyUl8rc.roa (hash: auu5lQMtJmBXhYLmFNZ2Cdy4mHQJ8c7v+J19cT4Wc3U=) 3: tlkY8l1WAA-IHamN4yPZGgZOAIc.crl (hash: bmavcaCO5JAQQN+sRe8i3TdzajkoYdSoEb04iH+RM9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:97:12:02:30:32:89:4a:22:da:7c:d6:4e:07:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b65918f25d56000f881da98de323d91a064e0087 Validity Not Before: Dec 6 01:01:27 2025 GMT Not After : Dec 7 01:01:27 2025 GMT Subject: CN=215412ba83ed7c7505ee474844e9e4b96c9d1876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:aa:ad:6a:70:34:e3:bc:25:cd:de:8c:be:aa: 1a:ee:9f:a0:ee:10:e6:b6:d6:1b:ef:ba:af:b1:46: 2d:e5:c8:35:6e:e7:94:14:15:2a:43:b1:37:ad:3f: 84:7f:fc:10:c6:fd:0d:d4:ff:06:e6:77:ee:31:d1: ef:46:06:6b:90:f3:fc:ca:56:43:b1:01:04:d9:c4: 05:b7:b0:f5:10:78:9e:cf:f8:be:7a:fd:e8:51:e1: 11:a1:bd:7f:56:bf:94:8c:5f:a8:d7:6f:dc:37:06: 1b:5b:53:66:a2:47:1c:e9:d4:eb:a3:2f:fa:f6:63: 54:3b:9e:8b:9e:4e:10:55:aa:e3:5f:c7:37:31:54: 46:dc:bd:24:24:16:09:32:74:19:81:78:55:1e:65: 11:cc:85:00:10:a4:a2:5d:2a:7c:b9:50:34:d1:3c: c0:17:bf:33:6c:dd:27:9c:db:7a:10:72:e7:f4:41: b3:4f:34:24:59:be:cb:31:c6:b0:3d:89:43:4f:69: 1f:b8:68:b3:24:de:25:0a:90:ee:38:d8:ad:39:e9: fc:b1:98:9c:bf:1a:a0:c1:2f:e2:15:47:e9:5d:98: af:82:17:6f:bf:4f:9e:26:84:69:b6:ce:73:0a:79: a6:d1:69:18:26:4d:85:68:66:f0:5e:a1:72:c0:34: 08:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:54:12:BA:83:ED:7C:75:05:EE:47:48:44:E9:E4:B9:6C:9D:18:76 X509v3 Authority Key Identifier: keyid:B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:68:bb:3e:34:fc:72:48:48:ca:e9:91:a2:6a:e0:e1:9a:ed: 37:37:fe:9d:31:63:85:43:52:ce:01:8e:b1:dd:a0:a5:9d:af: 8a:8f:80:58:0f:2c:5f:4c:40:dd:cf:9e:e2:fe:d8:6f:5f:30: ec:e5:f7:f0:70:c8:50:03:a5:3f:da:5c:2e:89:43:03:0b:98: 1f:ac:32:1c:67:b4:74:82:a4:e9:47:05:21:43:c0:c3:bb:c7: 84:8c:21:3c:06:2e:cb:d7:16:ec:69:89:80:8a:be:16:2e:f8: ba:5c:07:16:67:7c:18:20:c7:18:8f:2a:c9:8f:c2:f6:5f:59: d2:c9:51:65:90:68:ca:c4:0e:97:22:07:1b:a8:54:02:5d:50: f8:be:ec:a9:52:72:e4:20:f6:9e:57:58:45:bf:de:15:61:21: 3d:b2:a4:e9:79:44:91:9d:9c:2c:ad:c6:ff:d5:f0:77:ca:8b: de:5d:aa:43:ed:0b:bd:fb:30:fb:10:b9:cd:98:b5:e0:88:49: 23:19:59:40:8b:7e:71:a0:a0:89:37:9f:8b:8d:81:3e:7c:f7: 2b:0a:40:36:f4:ed:94:1d:13:5f:13:22:4c:d7:ed:36:38:74: 67:50:b1:55:a7:07:04:2f:7b:cd:a1:ae:94:db:2e:1a:2e:f1: d0:45:30:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZcSAjAyiUoi2nzWTgcsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2NTkxOGYyNWQ1NjAwMGY4ODFkYTk4ZGUzMjNkOTFhMDY0 ZTAwODcwHhcNMjUxMjA2MDEwMTI3WhcNMjUxMjA3MDEwMTI3WjAzMTEwLwYDVQQD EygyMTU0MTJiYTgzZWQ3Yzc1MDVlZTQ3NDg0NGU5ZTRiOTZjOWQxODc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaqtanA047wlzd6Mvqoa7p+g7hDm ttYb77qvsUYt5cg1bueUFBUqQ7E3rT+Ef/wQxv0N1P8G5nfuMdHvRgZrkPP8ylZD sQEE2cQFt7D1EHiez/i+ev3oUeERob1/Vr+UjF+o12/cNwYbW1Nmokcc6dTroy/6 9mNUO56Lnk4QVarjX8c3MVRG3L0kJBYJMnQZgXhVHmURzIUAEKSiXSp8uVA00TzA F78zbN0nnNt6EHLn9EGzTzQkWb7LMcawPYlDT2kfuGizJN4lCpDuONitOen8sZic vxqgwS/iFUfpXZivghdvv0+eJoRpts5zCnmm0WkYJk2FaGbwXqFywDQIDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFUErqD7Xx1Be5HSETp5LlsnRh2MB8GA1UdIwQY MBaAFLZZGPJdVgAPiB2pjeMj2RoGTgCHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGxrWThsMVdBQS1JSGFtTjR5UFpHZ1pPQUljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC81NTA2ZGUtMGIxYS00N2VlLTk5ZDEt YTUyMGQ0MzQ2NTRhLzEvdGxrWThsMVdBQS1JSGFtTjR5UFpHZ1pPQUljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC81NTA2ZGUtMGIxYS00N2VlLTk5ZDEtYTUyMGQ0MzQ2NTRh LzEvdGxrWThsMVdBQS1JSGFtTjR5UFpHZ1pPQUljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW2i7PjT8 ckhIyumRomrg4ZrtNzf+nTFjhUNSzgGOsd2gpZ2vio+AWA8sX0xA3c+e4v7Yb18w 7OX38HDIUAOlP9pcLolDAwuYH6wyHGe0dIKk6UcFIUPAw7vHhIwhPAYuy9cW7GmJ gIq+Fi74ulwHFmd8GCDHGI8qyY/C9l9Z0slRZZBoysQOlyIHG6hUAl1Q+L7sqVJy 5CD2nldYRb/eFWEhPbKk6XlEkZ2cLK3G/9Xwd8qL3l2qQ+0Lvfsw+xC5zZi14IhJ IxlZQIt+caCgiTefi42BPnz3KwpANvTtlB0TXxMiTNftNjh0Z1CxVacHBC97zaGu lNsuGi7x0EUwUA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:45:45 2025 by rpki-client