This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft File: TLIktT7JyLF_MYlbFqjUVx8OaXA.mft (raw, json) Hash identifier: h7Ngty1f0hTwPGJlalEcbFRpSKex1kUI7FBSy2jqlhk= Subject key identifier: 14:2A:C0:85:BC:C9:F5:B1:33:9C:4E:CD:AD:42:E8:31:4A:FE:8E:0F Authority key identifier: 4C:B2:24:B5:3E:C9:C8:B1:7F:31:89:5B:16:A8:D4:57:1F:0E:69:70 Certificate issuer: /CN=4cb224b53ec9c8b17f31895b16a8d4571f0e6970 Certificate serial: 019AF12CDDEC4521D681D88DAC1CB34CB120 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft Manifest number: 04FB Signing time: Sat 06 Dec 2025 01:00:40 +0000 Manifest this update: Sat 06 Dec 2025 01:00:40 +0000 Manifest next update: Sun 07 Dec 2025 01:00:40 +0000 Files and hashes: 1: M1M7HuPtGiosGSo4FBz1zc0zdo4.roa (hash: NcnqoCTtbPhCjxo06sSrzfv3k+hjFXX2MJeaGNHx2bI=) 2: TLIktT7JyLF_MYlbFqjUVx8OaXA.crl (hash: sQ5f0Ghe1Bf57GwoH0hR4U9KskjnJpUR+yyVBZ2fqGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:dd:ec:45:21:d6:81:d8:8d:ac:1c:b3:4c:b1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cb224b53ec9c8b17f31895b16a8d4571f0e6970 Validity Not Before: Dec 6 01:00:40 2025 GMT Not After : Dec 7 01:00:40 2025 GMT Subject: CN=142ac085bcc9f5b1339c4ecdad42e8314afe8e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cf:10:84:7b:3a:8d:68:d3:d9:24:66:f6:3d: 77:ca:83:af:ad:ed:80:55:ce:5a:26:f4:39:d1:65: da:14:0d:e6:c7:66:7a:32:92:cb:dc:b8:d7:cf:38: e4:9a:1e:ec:82:d0:46:03:9d:e3:6e:64:f3:e8:2b: 35:c0:8e:b7:76:dc:4b:c8:4b:d8:8b:23:b1:8c:fa: c0:0a:19:0d:07:72:5c:ed:78:a9:a0:40:d9:d5:96: 29:fb:f7:f0:ca:bd:32:2a:f2:a2:6f:00:a0:40:4b: 12:b3:a7:90:63:30:2a:a1:e8:f2:35:6b:66:90:8b: 2c:b2:d3:c1:d6:0e:6c:c1:4d:1d:f6:23:ee:ef:4b: 6c:cb:48:60:ea:db:5d:29:50:6f:a9:01:bc:49:92: 75:fe:1b:f4:9b:d6:b6:97:76:73:d0:ce:c5:d3:01: 0b:25:d9:2f:c8:a5:50:1a:08:93:6f:bb:07:31:e2: ac:e8:af:d6:c4:2a:80:e4:7b:83:f7:f0:9b:16:28: ed:c2:d4:28:05:7f:be:2d:6f:a8:a9:89:21:96:e1: 7a:b3:4e:a0:47:89:81:3b:c3:36:ff:e0:2f:66:1c: 52:71:7e:12:6e:10:53:19:f1:e2:60:0a:4d:af:5b: 1d:d0:09:16:7a:44:9b:c6:e4:3c:e6:4d:7d:3d:37: c6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2A:C0:85:BC:C9:F5:B1:33:9C:4E:CD:AD:42:E8:31:4A:FE:8E:0F X509v3 Authority Key Identifier: keyid:4C:B2:24:B5:3E:C9:C8:B1:7F:31:89:5B:16:A8:D4:57:1F:0E:69:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:25:17:53:c6:be:30:3a:c4:d4:a0:be:09:57:da:8a:6d:3f: fb:d5:8c:7c:a5:ac:ac:ac:43:0d:f5:32:82:d0:95:27:df:d9: 2e:6e:9d:c7:7f:99:bd:a9:1b:28:e4:ec:3a:9f:0c:60:76:18: ce:2a:56:30:f7:fb:67:99:84:a8:8f:4e:3f:47:af:49:f9:1a: 2c:31:26:53:98:25:2e:9b:93:54:70:5e:67:92:ea:ee:2b:6e: e4:11:95:7f:02:9a:de:92:bc:eb:3e:ef:e5:42:78:b7:e7:31: 59:97:eb:84:30:25:38:03:46:31:56:01:97:31:ea:e1:e9:99: 8e:1a:00:a1:67:84:c1:19:de:7f:01:b2:49:e2:ac:24:b2:0c: 51:e4:90:7f:18:d9:ea:45:38:da:0f:4f:4a:85:68:28:b9:63: f5:97:51:bd:63:45:d3:03:32:be:7c:12:a3:53:e6:66:9e:51: 36:50:c5:c4:a1:3b:37:1a:2a:de:fe:f5:af:a8:04:3b:66:9c: e1:ac:b7:07:78:b4:3b:21:0c:09:dc:0b:54:d3:16:7a:e3:1d: b0:f0:ba:3d:c6:9b:25:e3:92:9d:87:5f:17:06:c2:fb:f3:86: 18:fe:1b:a1:10:7d:a9:9a:7a:40:4a:6a:aa:c6:65:95:6e:b5: c9:50:3b:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLN3sRSHWgdiNrByzTLEgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYjIyNGI1M2VjOWM4YjE3ZjMxODk1YjE2YThkNDU3MWYw ZTY5NzAwHhcNMjUxMjA2MDEwMDQwWhcNMjUxMjA3MDEwMDQwWjAzMTEwLwYDVQQD EygxNDJhYzA4NWJjYzlmNWIxMzM5YzRlY2RhZDQyZTgzMTRhZmU4ZTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc8QhHs6jWjT2SRm9j13yoOvre2A Vc5aJvQ50WXaFA3mx2Z6MpLL3LjXzzjkmh7sgtBGA53jbmTz6Cs1wI63dtxLyEvY iyOxjPrAChkNB3Jc7XipoEDZ1ZYp+/fwyr0yKvKibwCgQEsSs6eQYzAqoejyNWtm kIssstPB1g5swU0d9iPu70tsy0hg6ttdKVBvqQG8SZJ1/hv0m9a2l3Zz0M7F0wEL JdkvyKVQGgiTb7sHMeKs6K/WxCqA5HuD9/CbFijtwtQoBX++LW+oqYkhluF6s06g R4mBO8M2/+AvZhxScX4SbhBTGfHiYApNr1sd0AkWekSbxuQ85k19PTfG6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQqwIW8yfWxM5xOza1C6DFK/o4PMB8GA1UdIwQY MBaAFEyyJLU+ycixfzGJWxao1FcfDmlwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVExJa3RUN0p5TEZfTVlsYkZxalVWeDhPYVhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9lMmFhYzUtYzA0ZC00YWUwLThiZjMt OWUzZDg5ZDllNjE3LzEvVExJa3RUN0p5TEZfTVlsYkZxalVWeDhPYVhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9lMmFhYzUtYzA0ZC00YWUwLThiZjMtOWUzZDg5ZDllNjE3 LzEvVExJa3RUN0p5TEZfTVlsYkZxalVWeDhPYVhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSUXU8a+ MDrE1KC+CVfaim0/+9WMfKWsrKxDDfUygtCVJ9/ZLm6dx3+ZvakbKOTsOp8MYHYY zipWMPf7Z5mEqI9OP0evSfkaLDEmU5glLpuTVHBeZ5Lq7itu5BGVfwKa3pK86z7v 5UJ4t+cxWZfrhDAlOANGMVYBlzHq4emZjhoAoWeEwRnefwGySeKsJLIMUeSQfxjZ 6kU42g9PSoVoKLlj9ZdRvWNF0wMyvnwSo1PmZp5RNlDFxKE7Nxoq3v71r6gEO2ac 4ay3B3i0OyEMCdwLVNMWeuMdsPC6PcabJeOSnYdfFwbC+/OGGP4boRB9qZp6QEpq qsZllW61yVA7rw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:34 2025 by rpki-client