This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft File: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft (raw, json) Hash identifier: p2B3DDSK9X5Ymmu3pTbWT34z2J7ZN4+JyYuDGD5oi+s= Subject key identifier: 0E:FF:89:21:62:CC:A3:0D:B2:EC:A0:EA:BE:DD:A8:51:BB:DB:4A:71 Authority key identifier: 4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4 Certificate issuer: /CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4 Certificate serial: 019B2F66ED4740566A87111445D5ECACCB7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 03:00:32 +0000 Manifest this update: Thu 18 Dec 2025 03:00:32 +0000 Manifest next update: Fri 19 Dec 2025 03:00:32 +0000 Files and hashes: 1: 88NNjHCiX9_36_Ap90bLZBoJu2g.roa (hash: ZT80OMK3BXF8ZC1FoGfNRJbcIwwVIXvLAOficLJgVoc=) 2: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl (hash: +gkPrmauJpC/fIExSFsAUFi8rZ6wgY3RkFNeOOSY0tw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:66:ed:47:40:56:6a:87:11:14:45:d5:ec:ac:cb:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4 Validity Not Before: Dec 18 03:00:32 2025 GMT Not After : Dec 19 03:00:32 2025 GMT Subject: CN=0eff892162cca30db2eca0eabedda851bbdb4a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c3:c9:ec:c6:8a:33:46:24:bf:bb:6f:da:0f: 60:2f:c8:ea:af:92:3e:03:99:f1:91:47:a7:a8:1d: 41:a7:d7:34:91:17:86:74:f4:e4:c6:bb:3e:c5:a2: 2c:8b:b3:5c:cc:9c:0e:95:4e:5a:30:a0:98:c4:9c: 4a:2c:f7:30:fb:17:20:f7:cf:bc:38:9a:82:53:e3: 43:b3:80:dd:a3:1c:4c:ec:16:c4:d0:e2:5f:14:e9: 3f:ad:e2:6d:19:5d:28:c1:aa:46:b6:8b:00:11:ad: fb:24:f9:8a:dd:eb:79:d8:20:1a:4b:a4:ba:ef:17: 80:f9:59:a1:65:03:17:a3:06:d5:33:0a:67:c6:a8: 10:f6:1e:da:55:e2:a9:c4:35:47:1e:3c:9a:1b:01: 93:6f:2c:2f:96:1d:97:35:5f:4f:03:c9:a7:89:31: ce:a5:b1:da:5c:cc:9b:ca:12:6f:c4:4f:15:fb:2a: 63:0f:5d:a7:d7:07:3c:23:b8:6f:fa:79:67:1e:28: 72:02:d5:b0:29:55:5c:c9:22:de:8a:6d:3a:f8:7c: b0:15:60:df:d4:8c:1e:97:dc:5b:df:ef:e8:ee:0c: e1:73:71:68:74:b7:1a:fb:fd:1b:cf:29:46:41:18: 2d:8b:99:55:20:e0:68:00:b0:fe:cd:6d:88:83:c3: 94:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:FF:89:21:62:CC:A3:0D:B2:EC:A0:EA:BE:DD:A8:51:BB:DB:4A:71 X509v3 Authority Key Identifier: keyid:4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:e4:c4:d8:bc:7e:3f:9c:ab:45:e9:5d:e0:3f:1e:82:f5:29: 38:3f:0c:f9:4a:49:14:c0:2d:07:74:1d:f8:9d:a7:c9:b3:26: f4:13:fe:ad:77:8b:9c:54:2e:77:6b:04:3c:2f:d5:1b:dc:8f: 8b:fc:5e:f6:81:21:9b:3c:3c:81:9d:42:bb:9c:b7:df:8e:42: e8:12:d1:21:c9:10:6b:50:0e:a5:a0:69:85:21:66:ef:7a:ef: 57:80:4b:1a:ea:10:9c:77:25:71:6c:7e:20:ec:d7:fa:46:2a: a8:52:95:0e:79:b2:b5:4b:a4:e5:cb:b0:53:1c:88:61:d2:e6: 22:bf:2d:c0:95:e9:a5:54:85:9e:f9:51:6f:b6:5b:6f:ad:ab: 78:9f:91:5f:d7:8d:b2:97:70:06:b3:28:a2:17:41:67:86:9c: 72:b9:ad:31:34:bd:ab:37:7c:fb:8e:b1:9d:0a:19:24:cb:aa: de:16:19:49:7f:dc:55:86:3b:78:7d:9a:55:b3:a0:7a:51:bd: 2f:5b:7c:f2:ad:33:5b:7a:b8:19:32:0a:70:43:4b:8d:86:1c: 6d:db:a7:51:b1:8e:d1:f3:83:24:51:59:85:99:f0:76:d0:f9: d5:4e:df:26:38:c1:53:b9:67:65:7a:e3:04:1d:85:49:57:e9: 33:a4:7f:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZu1HQFZqhxEURdXsrMt+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNWVjZmVjOWY1NGU0ZWMzOWMyMDA1ZWY0ZTYzZTcwYjUx ZmFlZDQwHhcNMjUxMjE4MDMwMDMyWhcNMjUxMjE5MDMwMDMyWjAzMTEwLwYDVQQD EygwZWZmODkyMTYyY2NhMzBkYjJlY2EwZWFiZWRkYTg1MWJiZGI0YTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMPJ7MaKM0Ykv7tv2g9gL8jqr5I+ A5nxkUenqB1Bp9c0kReGdPTkxrs+xaIsi7NczJwOlU5aMKCYxJxKLPcw+xcg98+8 OJqCU+NDs4DdoxxM7BbE0OJfFOk/reJtGV0owapGtosAEa37JPmK3et52CAaS6S6 7xeA+VmhZQMXowbVMwpnxqgQ9h7aVeKpxDVHHjyaGwGTbywvlh2XNV9PA8mniTHO pbHaXMybyhJvxE8V+ypjD12n1wc8I7hv+nlnHihyAtWwKVVcySLeim06+HywFWDf 1Iwel9xb3+/o7gzhc3FodLca+/0bzylGQRgti5lVIOBoALD+zW2Ig8OUTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7/iSFizKMNsuyg6r7dqFG720pxMB8GA1UdIwQY MBaAFE5ez+yfVOTsOcIAXvTmPnC1H67UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGw3UDdKOVU1T3c1d2dCZTlPWS1jTFVmcnRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZjJhMWMtMThhZi00YmE1LWE0OWYt ZWNhZDNiNzE0OTM4LzEvVGw3UDdKOVU1T3c1d2dCZTlPWS1jTFVmcnRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZjJhMWMtMThhZi00YmE1LWE0OWYtZWNhZDNiNzE0OTM4 LzEvVGw3UDdKOVU1T3c1d2dCZTlPWS1jTFVmcnRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQOTE2Lx+ P5yrReld4D8egvUpOD8M+UpJFMAtB3Qd+J2nybMm9BP+rXeLnFQud2sEPC/VG9yP i/xe9oEhmzw8gZ1Cu5y3345C6BLRIckQa1AOpaBphSFm73rvV4BLGuoQnHclcWx+ IOzX+kYqqFKVDnmytUuk5cuwUxyIYdLmIr8twJXppVSFnvlRb7Zbb62reJ+RX9eN spdwBrMoohdBZ4accrmtMTS9qzd8+46xnQoZJMuq3hYZSX/cVYY7eH2aVbOgelG9 L1t88q0zW3q4GTIKcENLjYYcbdunUbGO0fODJFFZhZnwdtD51U7fJjjBU7lnZXrj BB2FSVfpM6R/Tw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:48:09 2025 by rpki-client