This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft File: TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft (raw, json) Hash identifier: /Rg+WjiPwbBlIUT0ZNzaQRvrPBFRHf6uuxsS2QMtGbw= Subject key identifier: E3:83:69:84:FA:DF:4E:C1:6A:40:BD:B4:A2:B8:E9:0B:F4:B1:5E:7E Authority key identifier: 4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30 Certificate issuer: /CN=4cbfd3e72d4a0396f95347336b42678f68c26430 Certificate serial: 019B503C9605480885DAD181BAC804CE076F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft Manifest number: 17A1 Signing time: Wed 24 Dec 2025 12:01:46 +0000 Manifest this update: Wed 24 Dec 2025 12:01:46 +0000 Manifest next update: Thu 25 Dec 2025 12:01:46 +0000 Files and hashes: 1: IF7POYmH2s6_XyYc1YSgmRclBfU.roa (hash: vkWkPszh+VD/raa/NYL5vb45rCVCasfYYp1M1TBPCxY=) 2: JEYd_tTpdWRz3pFCNxB3FFwgT6Y.roa (hash: Cf4mCXc4k2uDXgbB44mtC61vJtEhAxi4CrnAuvkGzGk=) 3: TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl (hash: OkenMtDtb5mpwAlNq+8/+pqKUXnAFMtNa5pOSPf9GmU=) 4: aC7DUlOCYd4ZrOlGrZ-OMdQYyBE.roa (hash: gIed90T8oX8NcIFpqOYwduIUaAgChpM53a4QzPH0Bg8=) 5: e0P4zqHajvo1XtAyySozyOucDY0.roa (hash: uBYNOSzSg+Z80PXiuAGXfKeocd8WYWEry+iBGwq/1mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 12:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3c:96:05:48:08:85:da:d1:81:ba:c8:04:ce:07:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cbfd3e72d4a0396f95347336b42678f68c26430 Validity Not Before: Dec 24 12:01:46 2025 GMT Not After : Dec 25 12:01:46 2025 GMT Subject: CN=e3836984fadf4ec16a40bdb4a2b8e90bf4b15e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:81:89:d3:66:27:dd:ea:64:0e:5f:6b:2c:bc: a4:ed:71:92:59:da:89:bc:b5:cf:6c:4b:bf:97:07: 41:dc:ed:87:6f:cd:53:b8:6d:a3:57:0e:db:33:49: 7d:1f:28:1f:f0:09:99:13:dd:43:56:68:f4:63:c0: 33:d5:32:00:9d:cc:51:d1:e4:f0:72:cc:10:0d:e8: 6c:63:62:70:d2:91:2c:76:36:a6:7b:d7:74:0d:62: d9:d7:aa:2c:dc:d1:5c:7b:2a:bf:0b:31:c4:42:b4: 9a:6d:d0:6c:fd:fe:e4:70:ab:cd:49:13:ab:c6:73: 64:b6:f3:13:1a:65:fe:c8:7d:01:95:0f:1e:46:6f: 94:e2:f6:1d:08:72:6e:cb:cb:24:f8:cb:19:9f:41: b4:13:95:c1:7f:a5:6d:07:0c:fc:ac:c6:37:fe:c0: 0b:58:64:aa:ff:16:5b:e9:df:51:0a:d0:25:9f:f7: a0:e6:ff:cb:64:a8:18:38:64:4e:f5:cc:e6:32:05: 94:e4:39:6a:fd:c1:f6:e0:2f:85:fe:3c:b3:89:24: 41:20:f2:a7:56:67:03:aa:16:3c:d7:a0:2d:4a:a6: 08:08:d6:18:c2:8a:40:fc:83:fc:2f:6a:e3:89:85: 7e:8d:a9:6c:ac:e2:6c:14:20:62:1c:2e:03:9b:fe: d9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:83:69:84:FA:DF:4E:C1:6A:40:BD:B4:A2:B8:E9:0B:F4:B1:5E:7E X509v3 Authority Key Identifier: keyid:4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:83:b2:aa:56:17:ef:95:1e:d9:fb:d9:cf:fa:8d:d4:02:20: 3b:d2:32:5b:24:59:75:b5:4d:50:84:7b:0d:37:dd:9e:62:43: 43:0f:e3:bd:f9:fd:ba:74:04:08:09:78:8e:12:4a:65:30:b1: c8:7e:d5:6f:a9:27:29:1e:0f:7e:8e:ad:12:4f:36:6b:ba:00: 37:fc:e9:6a:9e:88:10:57:b2:5a:6b:b1:34:83:db:5b:24:e0: c6:51:0d:c2:f6:42:f1:3f:f8:d9:6d:b3:f4:58:60:b7:99:28: 21:41:60:37:a5:0c:8d:a5:80:d5:04:97:14:66:55:07:a4:10: 15:7d:e0:5a:ae:c3:79:1c:85:c8:65:46:91:67:19:a2:f8:3b: 45:3b:9b:73:eb:19:fd:b5:b6:7f:06:a7:17:3d:2d:18:cc:75: 31:37:87:82:5d:9d:ba:10:35:25:63:49:9a:2f:d3:47:63:ed: 65:95:aa:ed:00:4f:84:c5:e6:f5:ad:b2:44:2f:57:f3:cf:a2: fc:cb:6c:44:a9:d8:9e:a5:5d:0e:bf:9a:a5:f4:58:b8:95:f5: dd:6b:ca:92:3a:41:4b:b3:ea:e4:aa:b7:c4:a9:ee:1a:f6:a8: 68:a5:dd:b6:de:dd:03:62:a5:80:62:07:54:f5:44:b6:39:f1: c7:b0:01:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQPJYFSAiF2tGBusgEzgdvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYmZkM2U3MmQ0YTAzOTZmOTUzNDczMzZiNDI2NzhmNjhj MjY0MzAwHhcNMjUxMjI0MTIwMTQ2WhcNMjUxMjI1MTIwMTQ2WjAzMTEwLwYDVQQD EyhlMzgzNjk4NGZhZGY0ZWMxNmE0MGJkYjRhMmI4ZTkwYmY0YjE1ZTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYGJ02Yn3epkDl9rLLyk7XGSWdqJ vLXPbEu/lwdB3O2Hb81TuG2jVw7bM0l9Hygf8AmZE91DVmj0Y8Az1TIAncxR0eTw cswQDehsY2Jw0pEsdjame9d0DWLZ16os3NFceyq/CzHEQrSabdBs/f7kcKvNSROr xnNktvMTGmX+yH0BlQ8eRm+U4vYdCHJuy8sk+MsZn0G0E5XBf6VtBwz8rMY3/sAL WGSq/xZb6d9RCtAln/eg5v/LZKgYOGRO9czmMgWU5Dlq/cH24C+F/jyziSRBIPKn VmcDqhY816AtSqYICNYYwopA/IP8L2rjiYV+jalsrOJsFCBiHC4Dm/7ZZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOODaYT6307BakC9tKK46Qv0sV5+MB8GA1UdIwQY MBaAFEy/0+ctSgOW+VNHM2tCZ49owmQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVExfVDV5MUtBNWI1VTBjemEwSm5qMmpDWkRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iNTczM2ItMzg5MS00NDliLTk5NTAt ZmY2MGUyMThlZDQxLzEvVExfVDV5MUtBNWI1VTBjemEwSm5qMmpDWkRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iNTczM2ItMzg5MS00NDliLTk5NTAtZmY2MGUyMThlZDQx LzEvVExfVDV5MUtBNWI1VTBjemEwSm5qMmpDWkRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIOyqlYX 75Ue2fvZz/qN1AIgO9IyWyRZdbVNUIR7DTfdnmJDQw/jvfn9unQECAl4jhJKZTCx yH7Vb6knKR4Pfo6tEk82a7oAN/zpap6IEFeyWmuxNIPbWyTgxlENwvZC8T/42W2z 9Fhgt5koIUFgN6UMjaWA1QSXFGZVB6QQFX3gWq7DeRyFyGVGkWcZovg7RTubc+sZ /bW2fwanFz0tGMx1MTeHgl2duhA1JWNJmi/TR2PtZZWq7QBPhMXm9a2yRC9X88+i /MtsRKnYnqVdDr+apfRYuJX13WvKkjpBS7Pq5Kq3xKnuGvaoaKXdtt7dA2KlgGIH VPVEtjnxx7ABoA== -----END CERTIFICATE-----Generated at Wed Dec 24 22:05:27 2025 by rpki-client