This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft File: tel_vmfZXfbkqAZeJnXgQNboDvw.mft (raw, json) Hash identifier: NlETQYJ0uKG7A0XT3V0D3yH77PrWXd7/m0+a7OaX7Ac= Subject key identifier: 4C:A8:C6:D3:CE:29:CD:E1:BE:48:C0:0F:2C:DD:D2:C4:8D:DD:04:18 Authority key identifier: B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC Certificate issuer: /CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc Certificate serial: 019B41366CF7CD1D42F7D5265F8E036B66CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft Manifest number: 078E Signing time: Sun 21 Dec 2025 14:00:44 +0000 Manifest this update: Sun 21 Dec 2025 14:00:44 +0000 Manifest next update: Mon 22 Dec 2025 14:00:44 +0000 Files and hashes: 1: jq_DhvsvzcmCaUw_lDmYlqXK-R4.roa (hash: KOvHH56ipvWyjeOuOBdWhq6OhJFqmAAlbbCXs8yab8k=) 2: tel_vmfZXfbkqAZeJnXgQNboDvw.crl (hash: 1ANjmlQbVgdoOXsb326vgBlHRQy6j9DNF8J1Rclfb+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.crl rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:6c:f7:cd:1d:42:f7:d5:26:5f:8e:03:6b:66:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5e97fbe67d95df6e4a8065e2675e040d6e80efc Validity Not Before: Dec 21 14:00:44 2025 GMT Not After : Dec 22 14:00:44 2025 GMT Subject: CN=4ca8c6d3ce29cde1be48c00f2cddd2c48ddd0418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3a:d6:26:1c:02:2c:e7:49:bc:45:69:25:96: 4d:32:56:c8:29:43:b5:d8:1c:52:6f:71:60:a1:98: 35:c9:53:69:db:cd:ef:14:50:6b:42:e3:99:e9:b3: 71:6f:99:0d:82:38:a3:12:73:a2:9a:e9:69:53:0f: 01:90:5c:87:be:bd:3c:7e:88:e2:ca:61:1b:3b:36: 7e:35:48:45:b5:ba:2f:02:e1:e5:c2:b7:55:a6:62: cd:e8:e0:cd:83:14:f9:68:b9:c6:c0:f9:8b:8f:78: 37:3c:cc:65:57:62:5e:aa:80:15:ca:41:0c:27:e0: bd:4f:ec:83:df:ea:f5:cc:62:1e:6d:6a:2b:c2:79: 6c:59:87:07:64:7d:91:76:8c:19:26:d4:17:71:6a: 3c:02:f3:d6:01:cd:25:3d:9a:f1:8c:c0:ba:5e:f7: 93:22:8a:7d:a6:40:0c:f6:bc:99:e9:e3:17:b2:4f: c0:5c:5a:d8:a5:26:5a:e3:1a:f9:cc:b3:d0:19:f1: b5:38:7c:7e:c4:fc:59:f8:33:7c:c6:2b:8f:6e:68: 08:de:f3:03:d5:c9:ed:93:b7:a3:11:08:2e:2c:ab: aa:86:99:1d:d1:60:bc:3e:38:7f:e0:cc:04:bb:79: c0:77:5c:6d:9b:19:fe:9e:ff:cb:e2:73:8f:30:84: 49:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A8:C6:D3:CE:29:CD:E1:BE:48:C0:0F:2C:DD:D2:C4:8D:DD:04:18 X509v3 Authority Key Identifier: keyid:B5:E9:7F:BE:67:D9:5D:F6:E4:A8:06:5E:26:75:E0:40:D6:E8:0E:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tel_vmfZXfbkqAZeJnXgQNboDvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/5872c2-d53e-48aa-b581-bb44a828cea7/1/tel_vmfZXfbkqAZeJnXgQNboDvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:95:d5:45:f9:2c:24:48:45:fc:d0:3a:5e:06:55:37:90:33: e8:92:e8:9a:25:9e:b3:f1:69:f3:0d:36:42:71:99:06:79:26: 65:78:05:ec:98:75:27:cd:7c:bd:b2:25:60:86:bf:5c:f9:48: d0:7b:8a:fe:50:ad:4a:39:72:69:8a:db:cb:f2:6d:b8:f9:b5: 53:9f:c3:b6:a1:68:ea:96:3c:6f:f6:1d:0e:ef:81:f7:d5:8b: 4a:e3:e1:86:6e:3c:02:33:3d:14:f5:ce:e5:51:a3:5c:99:04: 83:1c:75:b8:05:c0:c4:26:6b:29:65:7f:7f:09:85:ad:aa:b3: 61:e8:a2:e0:fa:01:e6:fe:78:80:50:b4:cb:bc:90:ef:3a:96: 90:9e:d4:a8:2b:55:20:40:7d:65:e3:5b:b2:95:9b:f0:61:2a: 8f:d3:b0:d5:d4:54:23:39:7d:3b:9b:b2:b6:ee:ad:15:8d:0b: f2:7b:a4:35:88:1a:f7:86:fb:45:97:a3:53:6f:e9:6e:65:dc: a1:31:a9:49:2b:64:c9:ad:dd:d3:67:92:7c:c3:bb:77:47:fe: 05:05:d5:b0:02:e3:bc:72:ce:25:99:72:b7:04:87:9e:38:c2: 0f:72:fa:a6:44:eb:2b:bb:27:08:ea:1a:3f:ad:c0:d6:af:03: d8:39:48:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNmz3zR1C99UmX44Da2bNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ZTk3ZmJlNjdkOTVkZjZlNGE4MDY1ZTI2NzVlMDQwZDZl ODBlZmMwHhcNMjUxMjIxMTQwMDQ0WhcNMjUxMjIyMTQwMDQ0WjAzMTEwLwYDVQQD Eyg0Y2E4YzZkM2NlMjljZGUxYmU0OGMwMGYyY2RkZDJjNDhkZGQwNDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjrWJhwCLOdJvEVpJZZNMlbIKUO1 2BxSb3FgoZg1yVNp283vFFBrQuOZ6bNxb5kNgjijEnOimulpUw8BkFyHvr08foji ymEbOzZ+NUhFtbovAuHlwrdVpmLN6ODNgxT5aLnGwPmLj3g3PMxlV2JeqoAVykEM J+C9T+yD3+r1zGIebWorwnlsWYcHZH2RdowZJtQXcWo8AvPWAc0lPZrxjMC6XveT Iop9pkAM9ryZ6eMXsk/AXFrYpSZa4xr5zLPQGfG1OHx+xPxZ+DN8xiuPbmgI3vMD 1cntk7ejEQguLKuqhpkd0WC8Pjh/4MwEu3nAd1xtmxn+nv/L4nOPMIRJ1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyoxtPOKc3hvkjADyzd0sSN3QQYMB8GA1UdIwQY MBaAFLXpf75n2V325KgGXiZ14EDW6A78MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGVsX3ZtZlpYZmJrcUFaZUpuWGdRTmJvRHZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81ODcyYzItZDUzZS00OGFhLWI1ODEt YmI0NGE4MjhjZWE3LzEvdGVsX3ZtZlpYZmJrcUFaZUpuWGdRTmJvRHZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS81ODcyYzItZDUzZS00OGFhLWI1ODEtYmI0NGE4MjhjZWE3 LzEvdGVsX3ZtZlpYZmJrcUFaZUpuWGdRTmJvRHZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfpXVRfks JEhF/NA6XgZVN5Az6JLomiWes/Fp8w02QnGZBnkmZXgF7Jh1J818vbIlYIa/XPlI 0HuK/lCtSjlyaYrby/JtuPm1U5/DtqFo6pY8b/YdDu+B99WLSuPhhm48AjM9FPXO 5VGjXJkEgxx1uAXAxCZrKWV/fwmFraqzYeii4PoB5v54gFC0y7yQ7zqWkJ7UqCtV IEB9ZeNbspWb8GEqj9Ow1dRUIzl9O5uytu6tFY0L8nukNYga94b7RZejU2/pbmXc oTGpSStkya3d02eSfMO7d0f+BQXVsALjvHLOJZlytwSHnjjCD3L6pkTrK7snCOoa P63A1q8D2DlIXw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:04:56 2025 by rpki-client