This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft File: i-tlpxrwKVknKswA1cTBlYOF3pQ.mft (raw, json) Hash identifier: D1ABryJ91wt+v6QBvJmHhZ5mt2cad+29NIf4Wuu68Jw= Subject key identifier: 7A:5D:4D:47:3A:F9:7D:6B:9C:07:3A:11:2E:6E:ED:12:B5:F9:7C:17 Authority key identifier: 8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94 Certificate issuer: /CN=8beb65a71af02959272acc00d5c4c1958385de94 Certificate serial: 019AF163F45F8BA83A364EB621E646859338 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 02:00:50 +0000 Manifest this update: Sat 06 Dec 2025 02:00:50 +0000 Manifest next update: Sun 07 Dec 2025 02:00:50 +0000 Files and hashes: 1: 8U8kKdz2fVZxTqZwqIjaA_g2nWA.roa (hash: VPZpp0pYKoi2I1Ak52XiESxXc7FZdh4MhOiiuF6UR+U=) 2: i-tlpxrwKVknKswA1cTBlYOF3pQ.crl (hash: vl6GExPgf/uI4UD60qeFHKEGV+jkXmpGVU2ypsu+V1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f4:5f:8b:a8:3a:36:4e:b6:21:e6:46:85:93:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8beb65a71af02959272acc00d5c4c1958385de94 Validity Not Before: Dec 6 02:00:50 2025 GMT Not After : Dec 7 02:00:50 2025 GMT Subject: CN=7a5d4d473af97d6b9c073a112e6eed12b5f97c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c5:3b:e8:32:19:d5:5b:68:f2:72:e5:42:23: ba:8f:22:07:16:40:ef:99:9d:79:dd:4e:e2:96:54: 48:bc:ce:b7:89:b4:33:2c:76:0b:7f:47:ff:0f:c0: 33:f0:9a:68:b1:0a:9d:69:1f:7b:e6:a6:33:a3:b2: e4:7f:31:1a:d9:34:3e:08:8a:77:f5:dd:f3:4e:cc: 5c:58:08:8f:17:ef:c8:49:15:91:74:32:4f:07:5b: b7:ed:b1:29:70:53:85:35:0d:1e:3f:e1:bc:af:29: c3:6c:25:ef:6e:1d:6e:6d:f9:ee:2e:08:2f:f4:11: 74:18:16:a4:01:65:51:1b:b9:e3:3c:ff:7d:86:46: 6d:6e:17:02:07:88:be:a3:b9:32:ab:e3:4b:9a:27: a5:09:24:fd:8f:2d:1b:71:0e:17:0a:59:25:8e:47: 6a:d1:a1:61:40:88:38:ee:2d:34:dd:06:50:3e:02: 1b:b5:85:3c:83:a3:f5:ca:4b:73:63:fb:91:72:16: 3b:9b:96:76:53:8c:1c:1a:08:c8:66:b5:f8:a8:72: 75:0f:d2:c2:d5:ac:96:46:37:2a:8f:b4:64:a1:25: f5:26:56:0d:55:69:e6:3a:02:a3:95:44:d3:34:d4: b7:7b:a6:74:7c:c5:f2:62:8b:0f:9e:41:dd:6f:39: 30:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5D:4D:47:3A:F9:7D:6B:9C:07:3A:11:2E:6E:ED:12:B5:F9:7C:17 X509v3 Authority Key Identifier: keyid:8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:c2:ff:a3:e6:a0:7b:74:85:f3:0f:88:83:13:3e:95:19:b4: 88:3d:ed:5e:d6:4a:be:d2:c0:1e:41:38:3d:db:89:cb:5b:a6: 12:a0:88:c1:cf:5c:8b:e3:26:91:80:97:a9:ae:70:d1:9b:d2: b3:d8:7e:5a:52:20:de:d0:a7:c4:af:a3:74:f0:25:bd:d2:14: ce:35:2b:17:70:78:05:bf:66:b5:ea:44:48:60:5b:a5:f9:65: 64:dd:d1:75:db:99:87:ae:f9:e5:e5:88:84:33:4c:de:2b:b6: 35:43:b3:9e:0a:51:e3:f4:d6:f5:85:cd:a2:9a:b3:92:10:e5: 2a:17:68:df:2d:f7:c7:31:5e:b3:c5:86:01:4f:0b:a1:02:c6: 80:82:39:51:03:99:2d:d8:f1:0e:a6:76:0c:73:90:c5:85:70: 64:4f:e8:53:66:e0:85:19:a6:4f:7e:b6:09:c5:71:1c:6b:5c: 6f:b9:32:8c:03:54:0b:1c:c7:93:1e:e6:bb:64:9e:c2:c3:75: 54:f1:ed:17:b9:89:e2:e1:ab:bd:8c:72:44:0b:fe:3e:04:c1: 5d:78:37:2a:4e:b1:a9:f1:ea:a5:55:86:aa:e5:1e:8f:ca:5f: 04:c5:01:4a:be:80:8b:01:a5:ec:59:d6:a5:f0:2a:54:2b:cd: 95:99:ff:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/Rfi6g6Nk62IeZGhZM4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZWI2NWE3MWFmMDI5NTkyNzJhY2MwMGQ1YzRjMTk1ODM4 NWRlOTQwHhcNMjUxMjA2MDIwMDUwWhcNMjUxMjA3MDIwMDUwWjAzMTEwLwYDVQQD Eyg3YTVkNGQ0NzNhZjk3ZDZiOWMwNzNhMTEyZTZlZWQxMmI1Zjk3YzE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcU76DIZ1Vto8nLlQiO6jyIHFkDv mZ153U7illRIvM63ibQzLHYLf0f/D8Az8JposQqdaR975qYzo7LkfzEa2TQ+CIp3 9d3zTsxcWAiPF+/ISRWRdDJPB1u37bEpcFOFNQ0eP+G8rynDbCXvbh1ubfnuLggv 9BF0GBakAWVRG7njPP99hkZtbhcCB4i+o7kyq+NLmielCST9jy0bcQ4XClkljkdq 0aFhQIg47i003QZQPgIbtYU8g6P1yktzY/uRchY7m5Z2U4wcGgjIZrX4qHJ1D9LC 1ayWRjcqj7RkoSX1JlYNVWnmOgKjlUTTNNS3e6Z0fMXyYosPnkHdbzkwpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpdTUc6+X1rnAc6ES5u7RK1+XwXMB8GA1UdIwQY MBaAFIvrZaca8ClZJyrMANXEwZWDhd6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kZTk5NTctYzdjYy00OTk3LWEyMmIt MTY1YTg0NmQ0ODFkLzEvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kZTk5NTctYzdjYy00OTk3LWEyMmItMTY1YTg0NmQ0ODFk LzEvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb8L/o+ag e3SF8w+IgxM+lRm0iD3tXtZKvtLAHkE4PduJy1umEqCIwc9ci+MmkYCXqa5w0ZvS s9h+WlIg3tCnxK+jdPAlvdIUzjUrF3B4Bb9mtepESGBbpfllZN3RdduZh6755eWI hDNM3iu2NUOzngpR4/TW9YXNopqzkhDlKhdo3y33xzFes8WGAU8LoQLGgII5UQOZ LdjxDqZ2DHOQxYVwZE/oU2bghRmmT362CcVxHGtcb7kyjANUCxzHkx7mu2SewsN1 VPHtF7mJ4uGrvYxyRAv+PgTBXXg3Kk6xqfHqpVWGquUej8pfBMUBSr6AiwGl7FnW pfAqVCvNlZn/1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:48 2025 by rpki-client